CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 271:

  Which of the following does a full-tunnel VPN provide?

  A. Lower bandwidth requirements
  B. The ability to reset local computer passwords
  C. Corporate Inspection of all networktraffic
  D. Access to blocked sites
  C. Corporate Inspection of all networktraffic

  ---

  Explanation

  A full-tunnel VPN routes all of a user's network traffic through the corporate network. This means that the organization can inspect all network traffic for security and compliance purposes, as all data is tunneled through the VPN, allowing for comprehensive monitoring and inspection.

  References:

  CompTIA Network+ study materials.

• Question 272:

  A user connects to a hotel Wi-Fi network while using a VPN. Although the Wi-Fi and VPN both show as connected, the user cannot access any network resources.

  Which of the following is the MOST likely cause?

  A. MAC filtering
  B. Encryption mismatch
  C. Captive portal authentication
  D. Client isolation
  C. Captive portal authentication

• Question 273:

  A network technician is troubleshooting wireless connectivity issues in a congested office environment.

  Which tool should be used to analyze signal interference?

  A. NetFlow analyzer
  B. Protocol analyzer
  C. Wi-Fi analyzer
  D. Port scanner
  C. Wi-Fi analyzer

• Question 274:

  An online gaming company needs a cloud solution that will allow for more virtual resources to be deployed when tournaments are held. The number of users who access the service increases during tournaments. The company also needs the resources to return to baseline levels once the resources are not needed in order to reduce cost.

  Which of the following cloud concepts would provide the best solution?

  A. Scalability
  B. Hybrid
  C. Multitenancy
  D. Elasticity
  D. Elasticity

  ---

  Explanation

  References 1: Understand cloud concepts | Microsoft Press Store 2: What Is Hybrid Cloud? - Cisco 3: Difference between Elasticity and Scalability in Cloud Computing 4: Scalability and Elasticity in Cloud Computing - GeeksforGeeks

• Question 275:

  The cybersecurity department needs to monitor historical IP network traffic on the WAN interface of the outside router without installing network sensors.

  Which of the following would be best to allow the department to complete this task?

  A. Enabling NetFlow on the interface
  B. Enabling SSH on the interface
  C. Enabling SNMP on the interface
  D. Enabling 802.1Q on the interface
  A. Enabling NetFlow on the interface

• Question 276:

  Which of the following is a type of NAC that uses a set of policies to allow or deny access to the network based on the user's identity?

  A. Standard ACL
  B. MAC filtering
  C. 802.1X
  D. SSO
  C. 802.1X

  ---

  Explanation

  The correct answer is 802.1X, which is an identity-based Network Access Control (NAC) framework emphasized in the CompTIA Network+ N10-009 objectives under network security and access control. 802.1 X uses a policy-driven authentication process to determine whether a user or device is allowed network access based on verified credentials, such as usernames, passwords, or digital certificates.

  802.1X operates using three main components: the supplicant (the client requesting access), the authenticator (the network device such as a switch or wireless access point), and the authentication server (typically a RADIUS server). Once the user's identity is authenticated, predefined policies determine the level of access granted-full access, limited access, or denial. This makes 802.1X a cornerstone of zero trust and enterprise-grade NAC implementations. A standard ACL controls traffic based on IP addresses and ports, not user identity. MAC filtering allows or denies access based on device MAC addresses, which can be easily spoofed and does not verify user identity. SSO (Single Sign-On) simplifies authentication across multiple systems but does not control network-layer access.

  Network+ highlights 802.1X as a secure, scalable solution for enforcing identity-based network access policies in both wired and wireless environments.

• Question 277:

  Which of the following fiber connector types is the most likely to be used on a network interface card?

  A. LC
  B. SC
  C. ST
  D. MPO
  A. LC

• Question 278:

  Which of the following steps in the troubleshooting methodology comes after using a top-to-top buttom examination of the OSI model to determine cause?

  A. Test in the theory
  B. Establish a plan of action
  C. Verify full system functionality
  D. Identify the problem
  B. Establish a plan of action

• Question 279:

  Which of the following actions should be taken as part of the first step of the troubleshooting methodology?

  A. Conduct tests to verify ideas
  B. Handle multiple problems individually
  C. Create a theory about the possible root cause
  D. Use a top-down approach
  C. Create a theory about the possible root cause

• Question 280:

  A user cannot connect to the network, although others in the office are unaffected. The network technician sees that the link lights on the NIC are not on. The technician needs to check which switchport the user is connected to, but the cabling is not labeled.

  Which of the following is the best way for the technician to find where the computer is connected?

  A. Look up the computer's IP address in the switch ARP table.
  B. Use a cable tester to trace the cable.
  C. Look up the computer's MAC address in the switch CAM table.
  D. Use a tone generator to trace the cable.
  D. Use a tone generator to trace the cable.