CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 21:

  A new SQL server is identified as allowing FTP access to all users.

  Which of the following would a systems administrator most likely do to ensure only the required services are allowed?

  A. Disable unused ports on the server.
  B. Change default passwords on all servers.
  C. Delete the NGFW rules that allow all FTP traffic.
  D. Configure server ACLs on the switches that the SQL traffic traverses.
  A. Disable unused ports on the server.

  ---

  Explanation

  If a SQL server is allowing FTP access to all users, the most direct and best practice action is to disable unused services/ports on the server itself. Network+ (N10-009) security objectives emphasize host hardening and the principle of least functionality: only required services should be running and listening. If FTP is not required for the SQL server's role, stopping and disabling the FTP service (and closing the associated ports on the host firewall) reduces the attack surface regardless of network firewall rules. This approach ensures the server cannot be reached via FTP even if it is placed on a different network segment or if upstream controls are misconfigured later.

  Changing default passwords is important, but it does not address the unnecessary exposure of an unneeded service. Deleting NGFW rules that allow all FTP traffic could help at the perimeter, but it may unintentionally break legitimate FTP usage elsewhere and still doesn't guarantee the server isn't reachable from internal networks. Switch ACLs along SQL traffic paths are indirect and easy to misapply; they also add operational complexity and may not cover all access paths.

  The best "only required services are allowed" control is to disable the unused service/ports on the server.

• Question 22:

  Which of the following steps in the troubleshooting methodology includes checking logs for recent changes?

  A. Identify the problem.
  B. Document the findings and outcomes.
  C. Test the theory to determine cause.
  D. Establish a plan of action.
  A. Identify the problem.

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Troubleshooting section.

• Question 23:

  A technician needs to remotely install software on a Windows server.

  Which protocol should be used?

  A. SSH
  B. FTP
  C. RDP
  D. DNS
  C. RDP

• Question 24:

  A network engineer added more APs to improve wireless coverage. However, users now report that the connectivity disconnects and reconnects repeatedly.

  Which of the following is causing the issue?

  A. Throughput capacity
  B. Roaming misconfiguration
  C. Channel overlap
  D. Packet loss
  C. Channel overlap

  ---

  Explanation

  Adding more access points can improve coverage, but it also increases the risk of co-channel interference if APs are configured on the same or overlapping channels. Channel overlap causes contention and interference, leading to retries, unstable performance, and symptoms that feel like frequent disconnect /reconnect events-especially in dense deployments. Network+ (N10-009) wireless troubleshooting objectives highlight proper channel planning (non-overlapping channels, appropriate channel width) as critical when increasing AP density. If adjacent APs are competing on the same channel (or overlapping channels in 2.4 GHz), clients may experience poor signal-to-noise ratios and repeated reassociations as they struggle to maintain a stable link.

  Roaming misconfiguration can cause sticky clients or poor handoffs, but the classic problem introduced immediately after "adding more APs" is interference from bad channel design. Throughput capacity is about available bandwidth and airtime efficiency; it can make things slow, but it doesn't inherently cause repeated disconnect/reconnect loops like interference does. Packet loss is a symptom that may occur due to interference, but the root cause in the options that best fits the scenario is channel overlap.

• Question 25:

  Which protocol ensures secure file transfer with encryption?

  A. FTP
  B. TFTP
  C. SMTP
  D. SFTP
  D. SFTP

• Question 26:

  A network administrator wants users to be able to authenticate to the corporate network using a port-based authentication framework when accessing both wired and wireless devices.

  Which of the following is the best security feature to accomplish this task?

  A. 802.1X
  B. Access control list
  C. Port security
  D. MAC filtering
  A. 802.1X

  ---

  Explanation

  802.1X is a port-based network access control (PNAC) protocol that provides an authentication mechanism to devices wishing to connect to a LAN or WLAN. It is widely used for secure network access, ensuring that only authenticated devices can access the network, whether they are connecting via wired or wireless means. 802.1X works in conjunction with an authentication server, such as RADIUS, to validate the credentials of devices trying to connect.

  References:

  CompTIA Network+ study materials.

• Question 27:

  Which of the following connection methods allows a network engineer to automate the configuration deployment for network devices across the environment?

  A. RDP
  B. Telnet
  C. GUI
  D. API
  D. API

  ---

  Explanation

  APIs (Application Programming Interfaces) allow automation tools and scripts to push configurations to network devices programmatically. Modern network automation platforms rely on APIs to ensure consistency and scalability.

  Option A: RDP is remote desktop for Windows systems, not automation.

  Option B: Telnet is insecure and manual.

  Option C: GUI requires manual configuration, not automation.

  References:

  Domain: Network Operations -- Automation, orchestration, APIs in network management.

• Question 28:

  A VoIP phone is plugged in to a port but cannot receive calls.

  Which of the following needs to be done on the port to address the issue?

  A. Trunk all VLANs on the port.
  B. Configure the native VLAN.
  C. Tag the traffic to voice VLAN.
  D. Disable VLANs.
  C. Tag the traffic to voice VLAN.

• Question 29:

  After running a Cat 8 cable using passthrough plugs, an electrician notices that connected cables are experiencing a lot of cross talk.

  Which of the following troubleshooting steps should the electrician take first?

  A. Inspect the connectors for any wires that are touching or exposed.
  B. Restore default settings on the connected devices.
  C. Terminate the connections again.
  D. Check for radio frequency interference in the area.
  A. Inspect the connectors for any wires that are touching or exposed.

  ---

  Explanation

  Cross talk can often be caused by improper termination of cables. The first step in troubleshooting should be to inspect the connectors for any wires that might be touching or exposed. Ensuring that all wires are correctly seated and that no conductors are exposed can help reduce or eliminate cross talk. This step should be taken before attempting to re-terminate the connections or check for other sources of interference.

  References:

  CompTIA Network+ study materials.

• Question 30:

  After a security incident, a technician reveals that company data was stolen. During the investigation, it is discovered that a host disguised itself as a switch.

  Which of the following best describes the attack that occurred?

  A. VLAN hopping
  B. Evil twin
  C. DNS poisoning
  D. ARP spoofing
  A. VLAN hopping

  ---

  Explanation

  VLAN hopping occurs when an attacker tricks a switch into believing the host is another switch by generating tagged frames or exploiting trunk negotiation (DTP). This allows the attacker to access traffic from multiple VLANs, potentially stealing sensitive data.

  Option B: Evil twin is a rogue wireless AP attack, unrelated to switch impersonation.

  Option C: DNS poisoning corrupts name resolution, not VLAN access.

  Option D: ARP spoofing is a Layer 2 on-path attack, not masquerading as a switch.

  References:

  Domain: Network Security -- VLAN hopping attacks, switch spoofing techniques.