CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 231:

  An international company is transferring wireless devices to another country.

  Which of the following should be researched FIRST?

  A. WPA2 cipher
  B. Regulatory impacts
  C. CDMA configuration
  D. 802.11 standards
  B. Regulatory impacts

• Question 232:

  A network engineer is designing an internal network that needs to support both IPv4 and IPv6 routing.

  Which of the following routing protocols is capable of supporting both IPv4 and IPv6?

  A. OSPFv3
  B. RIPv2
  C. BGP
  D. EIGRP
  D. EIGRP

• Question 233:

  A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email.

  Which of the following should the engineer have done to prevent the issue from occurring?

  A. Change the email client configuration to match the MX record.
  B. Reduce the TTL record prior to the MX record change.
  C. Perform a DNS zone transfer prior to the MX record change.
  D. Update the NS record to reflect the IP address change.
  B. Reduce the TTL record prior to the MX record change.

  ---

  Explanation

  TTL (Time To Live): TTL is a value in a DNS record that determines the amount of time it can be cached by DNS resolvers and other devices on the internet. When making changes to DNS records, reducing the TTL beforehand helps minimize the time it takes for the changes to propagate throughout the internet.

  MX Record Change: Changing the MX (Mail Exchange) record directs email traffic to the specified mail server. However, DNS changes take time to propagate across the internet due to caching. If the TTL is set too high, old records may be cached for an extended period, leading to email delivery issues.

• Question 234:

  A network administrator needs to implement a solution to filter access to the internet.

  Which of the following should the administrator most likely implement?

  A. Router
  B. Cloud gateway
  C. Proxy
  D. Intrusion detection system
  C. Proxy

  ---

  Explanation

  A proxy server can filter internet access by controlling which websites or services users can reach. It enforces content policies and can provide caching and monitoring.

  Option A: A router directs traffic but doesn't filter internet sites by itself.

  Option B: A cloud gateway could also filter, but the most direct answer is proxy.

  Option D: An IDS detects suspicious activity but doesn't filter browsing access.

  References:

  Domain: Network Security -- Proxy servers, filtering, access control.

• Question 235:

  Which of the following does a router prioritize first in the route selection process?

  A. Prefix length
  B. Metric
  C. Administrative distance
  D. Default route
  A. Prefix length

  ---

  Explanation

  In the router route selection process, the first priority is the longest prefix match, also known as prefix length. According to CompTIA Network+ (N10-009) routing concepts, routers examine the destination IP address in the packet and compare it to entries in the routing table. When multiple routes exist, the router selects the route with the most specific match, meaning the route with the longest subnet mask (largest number of matching bits). For example, a /30 route is preferred over a /24, and a /24 is preferred over a /16 if all match the destination.

  Only after the longest prefix match is determined do other factors come into play. Administrative distance (AD) is used to determine which routing source is more trustworthy when the same network is learned from different routing protocols (e.g., OSPF vs. RIP). Metric is then used within the same routing protocol to determine the best path (e.g., hop count, cost, bandwidth). A default route (0.0.0.0/0) is used only when no more specific match exists.

  Therefore, prefix length is always evaluated first in route selection.

• Question 236:

  Which of the following panels would be best to facilitate a central termination point for all network cables on the floor of a company building?

  A. Patch
  B. UPS
  C. MDF
  D. Rack
  A. Patch

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Network Installation section.

• Question 237:

  Which of the following attacks forces a switch to send all traffic out of all ports?

  A. ARP poisoning
  B. Evil twin
  C. MAC flooding
  D. DNS spoofing
  C. MAC flooding

  ---

  Explanation

  MAC flooding overwhelms a switch's CAM (Content Addressable Memory) table by sending a flood of frames with spoofed MAC addresses. Once the CAM table overflows, the switch cannot learn legitimate MAC addresses and defaults to flooding all frames out all ports, effectively turning it into a hub. This allows an attacker to capture traffic not originally destined for their port.

  Option A: ARP poisoning corrupts ARP tables to redirect traffic but does not overflow the CAM table.

  Option B: Evil twin is a wireless rogue AP attack, unrelated to switch behavior.

  Option D: DNS spoofing redirects domain queries, not Layer 2 switching.

  References:

  Domain: Network Security -- Switch security, CAM table attacks, MAC flooding.

• Question 238:

  A technician is working on a solution to isolate traffic between specific types of devices, servers, and users on the internal firewall.

  Which of the following traffic flows should be isolated?

  A. East-west
  B. Access/edge
  C. Core/distribution
  D. North-south
  A. East-west

• Question 239:

  Which of the following is used to stage copies of a website closer to geographically dispersed users?

  A. VPN
  B. CDN
  C. SAN
  D. SDN
  B. CDN

• Question 240:

  A network technician is troubleshooting an issue that involves connecting to a server via SSH. The server has one network interface that does not support subinterfaces. The technician runs a command on the server and receives the following output:

  

  On the host, the technician runs another command and receives the following:

  

  Which of the following best explains the issue?

  A. A firewall is blocking access to the server.
  B. The server is plugged into a trunk port.
  C. The host does not have a route to the server.
  D. The server is not running the SSH daemon.
  C. The host does not have a route to the server.