CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 311:

  A technician needs to identify who is accessing a secured server room where equipment is being moved.

  Which of the following solutions is BEST?

  A. Motion detection
  B. Cameras
  C. Tamper detection
  D. Security guard
  B. Cameras

• Question 312:

  A network manager connects two switches together and uses two connecting links.

  Which of the following configurations will prevent Layer 2 loops?

  A. 802.1Q tagging
  B. Full duplex
  C. Link aggregation
  D. QoS
  C. Link aggregation

• Question 313:

  Which of the following can support a jumbo frame?

  A. Access point
  B. Bridge
  C. Hub
  D. Switch
  D. Switch

• Question 314:

  Two companies successfully merged. Following the merger, a network administrator identified a connection bottleneck. The newly formed company plans to acquire a high-end 40GB switch and redesign the network from a three-tier model to a collapsed core.

  Which of the following should the administrator do until the new devices are acquired?

  A. Implement the FHRP.
  B. Configure a route selection metric change.
  C. Install a load balancer.
  D. Enable link aggregation.
  D. Enable link aggregation.

  ---

  Explanation

  The issue described is a network bottleneck due to increased traffic after a merger.

  A collapsed core architecture consolidates the core and distribution layers into a single layer to improve efficiency and reduce latency. Until the 40GB switch is acquired, Link Aggregation (LAG) (IEEE 802.3ad / LACP) can be used to combine multiple physical links into a single logical link, increasing bandwidth and reducing bottlenecks.

  FHRP (First Hop Redundancy Protocol) (A) is used for gateway redundancy, not link aggregation.

  Route selection metric changes (B) help with routing decisions but don't address physical link congestion.

  Load balancers (C) distribute traffic for applications, not network links.

  References:

  CompTIA Network+ N10-009 Official Documentation Network Architecture and Performance Optimization.

• Question 315:

  A fiber link connecting two campus networks is broken.

  Which tool detects the exact break location?

  A. OTDR
  B. Tone generator
  C. Fusion splicer
  D. Cable tester
  A. OTDR

• Question 316:

  A network technician needs to connect a new user to the company's Wi-Fi network called SSID: business. When attempting to connect, two networks are listed as possible choices: SSID: business and SSID: myaccess.

  Which of the following attacks is occurring?

  A. On-path
  B. Rogue AP
  C. Evil twin
  D. Tailgating
  C. Evil twin

  ---

  Explanation

  An evil twin attack occurs when an attacker creates a fraudulent AP with an SSID very similar (or identical) to the legitimate one. Users may accidentally connect, allowing the attacker to capture traffic and credentials.

  Option A: On-path is the consequence of connecting to the evil twin, not the initial attack itself.

  Option B: Rogue AP is any unauthorized access point, but the key here is the malicious mimicry of a legitimate SSID - specifically an evil twin.

  Option D: Tailgating is a physical social engineering attack, unrelated to Wi-Fi.

  References:

  Domain: Network Security - Wireless threats (rogue APs, evil twins).

• Question 317:

  An organization has a security requirement that all network connections can be traced back to a user. A network administrator needs to identify a solution to implement on the wireless network.

  Which of the following is the best solution?

  A. Implementingenterprise authentication
  B. Requiring theuse of PSKs
  C. Configuring acaptive portal for users
  D. Enforcing wired equivalent protection
  A. Implementingenterprise authentication

  ---

  Explanation

  Enterprise authentication (such as WPA2-Enterprise) utilizes unique credentials for each user, typically integrating with an authentication server like RADIUS. This allows for tracking and logging user activity, ensuring that all connections can be traced back to individual users. PSKs (Pre-Shared Keys) are shared among users and do not provide individual accountability. Captive portals can identify users but are less secure than enterprise authentication, and Wired Equivalent Privacy (WEP) is outdated and not recommended for security purposes.

  References:

  CompTIA Network+ materials highlight enterprise authentication methods as the preferred solution for secure and accountable wireless network access.

• Question 318:

  A network administrator wants to ensure secure remote access for employees over the internet.

  Which of the following should be implemented?

  A. VLAN
  B. VPN
  C. NAT
  D. DNS
  B. VPN

  ---

  Explanation

  A Virtual Private Network (VPN) establishes a secure, encrypted tunnel between a remote user and the internal network over the public internet. This ensures that sensitive data is protected from interception or eavesdropping. VPNs commonly use protocols such as IPsec or SSL/TLS to provide confidentiality, integrity, and authentication. VLANs are used for segmentation, NAT translates IP addresses, and DNS resolves hostnames. Only VPNs provide secure remote connectivity suitable for protecting data in transit across untrusted networks.

• Question 319:

  Which of the following would most likely be utilized to implement encryption in transit when using HTTPS?

  A. SSH
  B. TLS
  C. SCADA
  D. RADIUS
  B. TLS

  ---

  Explanation

  TLS (Transport Layer Security)is the protocol that provides encryption in transit for HTTPS. It ensures data is encrypted between the client (browser) and the web server, protecting it from interception or tampering.

  Option A. SSHis used for secure terminal access, not HTTPS.

  Option C. SCADArefers to control systems, not encryption protocols.

  Option D. RADIUSis an authentication protocol, not for encrypting HTTPS traffic.

  References:

  CompTIA Network+ N10-009 Official Objectives: 4.2?Identify common security threats and vulnerabilities.

  CompTIA Network+ N10-009 Official Objectives: 4.6?Explain authentication and access controls.

• Question 320:

  A company wants to implement data loss prevention by restricting user access to social media platforms and personal cloud storage on workstations.

  Which of the following types of filtering should the company deploy to achieve these goals?

  A. Port
  B. DNS
  C. MAC
  D. Content
  D. Content

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Network Security section.