CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 331:

  A network administrator is unable to ping a remote server from a newly connected workstation that has been added to the network. Ping to 127.0.0.1 on the workstation is failing.

  Which of the following should the administrator perform to diagnose the problem?

  A. Verify the NIC interface status.
  B. Verify the network is not congested.
  C. Verify the router is not dropping packets.
  D. Verify that DNS is resolving correctly.
  A. Verify the NIC interface status.

• Question 332:

  A network administrator is configuring a wireless network with an ESSID.

  Which of the following is a user benefit of ESSID compared to SSID?

  A. Stronger wireless connection
  B. Roaming between access points
  C. Advanced security
  D. Increased throughput
  B. Roaming between access points

  ---

  Explanation

  An Extended Service Set Identifier (ESSID) allows multiple access points to share the same SSID, enabling seamless roaming for users. This means that users can move between different access points within the same ESSID without losing connection or having to reauthenticate. This provides a better user experience, especially in large environments such as office buildings or campuses.

  References:

  CompTIA Network+ study materials.

• Question 333:

  Which of the following is a characteristic of the application layer?

  A. It relies upon other layers for packet delivery.
  B. It checks independently for packet loss.
  C. It encrypts data in transit.
  D. It performs address translation.
  A. It relies upon other layers for packet delivery.

• Question 334:

  Which of the following is the best way to reduce the likelihood of electrostatic discharge?

  A. Uninterruptible power supply
  B. Surge protector
  C. Power distribution units
  D. Temperature and humidity control
  D. Temperature and humidity control

• Question 335:

  During a recent security assessment, an assessor attempts to obtain user credentials by pretending to be from the organization's help desk.

  Which of the following attacks is the assessor using?

  A. Social engineering
  B. Tailgating
  C. Shoulder surfing
  D. Smishing
  E. Evil twin
  A. Social engineering

  ---

  Explanation

  This is a classic example of social engineering, where an attacker manipulates individuals into giving up confidential information, such as credentials, by pretending to be someone trustworthy (like help desk staff).

  Option B. Tailgatinginvolves physical access without authentication.

  Option C. Shoulder surfingis spying over someone's shoulder to steal info.

  Option D. Smishingis phishing via SMS.

  Option E. Evil twininvolves a rogue Wi-Fi access point impersonating a legitimate one.

  References:

  CompTIA Network+ N10-009 Official Objectives: 4.2?Identify common security threats and vulnerabilities.

• Question 336:

  A network engineer wants to implement a new IDS between the switch and a router connected to the LAN.

  The engineer does not want to introduce any latency by placing the IDS in line with the gateway. The engineer does want to ensure that the IDS sees all packets without any loss.

  Which of the following is the best way for the engineer to implement the IDS?

  A. Use a network tap.
  B. Use Nmap software.
  C. Use a protocol analyzer.
  D. Use a port mirror.
  D. Use a port mirror.

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Network Security section.

• Question 337:

  A network engineer needs to determine the exact location of a break in a long-distance fiber optic cable between two buildings.

  Which of the following tools should be used?

  A. Cable tester
  B. OTDR
  C. Tone generator
  D. Multimeter
  B. OTDR

• Question 338:

  Which of the following is the most accurate NTP time source that is capable of being accessed across a network connection?

  A. Stratum 0 device
  B. Stratum 1 device
  C. Stratum 7 device
  D. Stratum 16 device
  B. Stratum 1 device

  ---

  Explanation

  NTP (Network Time Protocol) is used to synchronize the clocks of network devices with a reference time source.

  NTP operates using a hierarchical structure called strata:

  Stratum 0 devices are highly accurate reference clocks such as atomic clocks or GPS clocks and are not directly connected to the network.

  Stratum 1 devices connect directly to stratum 0 sources and act as primary time servers.

  Stratum 2 devices synchronize with stratum 1 servers, and this hierarchy continues.

  Higher stratum numbers indicate lower accuracy.

  A stratum 16 device is considered unsynchronized.

• Question 339:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic.

  Which of the following should the administrator use?

  A. SNMP trap
  B. Port mirroring
  C. Syslog collection
  D. API integration
  B. Port mirroring

  ---

  Explanation

  Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring.

  References:

  CompTIA Network+ study materials.

• Question 340:

  A group of users cannot connect to network resources. The technician runs ipconfig from one user's device and is able to ping the gateway shown from the command.

  Which of the following is most likely preventing the users from accessing network resources?

  A. VLAN hopping
  B. Rogue DHCP
  C. Distributed DoS
  D. Evil twin
  B. Rogue DHCP

  ---

  Explanation

  A rogue DHCP server occurs when an unauthorized or misconfigured DHCP server assigns incorrect IP addresses, default gateways, or DNS settings to clients.

  In this scenario:

  1. The user can ping the gateway, meaning local network communication is working.

  2. However, they cannot access network resources, which suggests incorrect IP configuration (likely due to a rogue DHCP server assigning the wrong gateway or DNS).

  3. Why not the other options?

  4. VLAN hopping (A): This is an attack that exploits VLAN configurations to gain access to unauthorized VLANs. It would not typically cause multiple users to lose network access.

  5. Distributed DoS (C): A DDoS attack floods a network or service with traffic, but this issue is more likely misconfigured IP settings than an actual attack.

  6. Evil twin (D): This refers to a fraudulent Wi-Fi network mimicking a legitimate one. Since the users are on a wired network (ipconfig output checked), this is not applicable.