CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 381:

  A network engineer discovers network traffic that is sending confidential information to an unauthorized and unknown destination.

  Which of the following best describes the cause of this network traffic?

  A. Adware
  B. Ransomware
  C. Darkware
  D. Malware
  D. Malware

  ---

  Explanation

  Malwarerefers to any malicious software that can exfiltrate confidential data, including spyware, trojans, and rootkits. This fits the scenario where unauthorized data transfer is occurring.

  Breakdown of Options:

  Option

  A. Adware - Displays ads, does not typically steal data Option

  B. Ransomware - Encrypts files but does not exfiltrate data Option

  C. Darkware - Not a real cybersecurity term Option

  D. Malware - Correct answer.Malicious software is responsible for unauthorized data exfiltration

• Question 382:

  A help desk technician receives a report that users cannot access internet URLs. The technician performs ping tests and finds that sites fail when a URL is used but succeed when an IP is used.

  Which of the following tools should the technician utilize next?

  A. tcpdump
  B. tracert
  C. nmap
  D. dig
  D. dig

  ---

  Explanation

  The issue is clearly related to DNS resolution, as IP-based connections succeed but domain name-based ones fail.

  Option D. dig(Domain Information Groper) is a DNS lookup tool used to troubleshoot DNS problems by querying name servers directly.

  Other tools are less relevant here: Option A. tcpdumpis a packet analyzer and is more advanced for deeper traffic analysis.

  Option B. tracertis used to trace the route to a destination, not ideal for DNS issues.

  Option C. nmapis a port scanner and network mapper, not for resolving DNS problems.

  References:

  CompTIA Network+ N10-009 Official Objectives: 5.1 - Given a scenario, use the appropriate network troubleshooting tools.

• Question 383:

  Users at an organization report that the wireless network is not working in some areas of the building. Users report that other wireless network SSIDs are visible when searching for the network, but the organization's network is not displayed.

  Which of the following is the most likely cause?

  A. Interference or channel overlap
  B. Insufficient wireless coverage
  C. Roaming misconfiguration
  D. Client disassociation issues
  B. Insufficient wireless coverage

  ---

  Explanation

  If the company's SSID is not visible in some areas while other networks are still visible, the most likely cause is insufficient wireless coverage. The wireless signal does not reach those areas, meaning additional access points or signal boosters may be required.

  Breakdown of Options:

  Option A. Interference or channel overlap?Would cause slow or unstable connections, but the SSID should still be visible.

  Option B. Insufficient wireless coverage? Correct answer.If the SSID is not appearing, the signal is too weak in that area.

  Option C. Roaming misconfiguration?Would cause devices to stay on weaker APs instead of switching, but the SSID should still be visible.

  Option D. Client disassociation issues?This would disconnect users, but they should still see the network.

• Question 384:

  A university is implementing a new campus wireless network. A network administrator needs to configure the network to support a large number of devices and high-bandwidth demands from students.

  Which of the following wireless technologies should the administrator consider for this scenario?

  A. Bluetooth
  B. Wi-Fi 6E
  C. 5G
  D. LTE
  B. Wi-Fi 6E

  ---

  Explanation

  Wi-Fi 6E is designed for high-density environments and supports a large number of connected devices.

  It uses the 6GHz band to reduce congestion and supports technologies such as OFDMA to improve efficiency and performance.

  Bluetooth is intended for short-range, low-power connections. 5G and LTE are cellular technologies and are not used for local wireless network infrastructure.

  Therefore, Wi-Fi 6E is the correct answer.

• Question 385:

  A company is upgrading its wireless network. Currently, each AP broadcasts a wireless LAN name depending on the location in the building.

  Which of the following configurations allows a single wireless LAN name to be broadcast across the entire building?

  A. ESSID
  B. Wireless mesh
  C. Band steering
  D. WPA3
  A. ESSID

  ---

  Explanation

  The correct answer is A. ESSID. An ESSID (Extended Service Set Identifier) is used when multiple wireless access points are configured to present the same wireless network name (SSID) across a larger coverage area, such as an entire building or campus floor. This allows users to move from one location to another while remaining connected to what appears to be a single wireless network. In practice, this supports seamless roaming between APs when they are properly configured with the same SSID, compatible security settings, and coordinated channel planning.

  The other options do not fit the requirement. Wireless mesh is a topology that allows APs to connect to one another wirelessly, but it does not by itself describe using one common WLAN name across all APs. Band steering pushes dual-band clients toward the 5 GHz or 6 GHz band for better performance; it is not about creating one building-wide WLAN name. WPA3 is a wireless security standard and relates to encryption and authentication, not SSID design.

  The key phrase in the question is "a single wireless LAN name across the entire building", which points directly to an ESSID deployment.

• Question 386:

  Which of the following network ports is used when a client accesses an SFTP server?

  A. 22
  B. 80
  C. 443
  D. 3389
  A. 22

  ---

  Explanation

  SFTP (Secure File Transfer Protocol)operates over port 22, using SSH (Secure Shell) encryption for secure file transfers.

  Breakdown of Options:

  Option A. 22 - Correct answer. SFTP runs over SSH (port 22) for secure file transfers.

  Option B. 80 - Used for HTTP, not SFTP.

  Option C. 443 - Used for HTTPS (secure web traffic).

  Option D. 3389 - Used for RDP (Remote Desktop Protocol).

• Question 387:

  Multiple network devices show inconsistent timestamps in logs.

  Which protocol should be configured?

  A. DNS
  B. NTP
  C. SNMP
  D. SIP
  B. NTP

• Question 388:

  Which of the following terms describes the capability in a public cloud to add or remove compute resources based on need?

  A. Scalability
  B. Availability
  C. Elasticity
  D. Multitenancy
  C. Elasticity

  ---

  Explanation

  The correct answer is C. Elasticity. In cloud computing, elasticity refers to the ability to increase or decrease resources quickly based on current demand. If workloads rise, more compute resources can be allocated. If demand drops, those resources can be reduced again. That is exactly what the question is describing.

  This is slightly different from scalability. Scalability is the broader idea that a system can grow to handle more workload. Elasticity focuses more on the dynamic, on-demand adjustment of resources as conditions change. In exam questions, wording like "add or remove based on need" usually points straight to elasticity.

  The other answer choices do not fit. Availability is about uptime and service access. Multitenancy refers to multiple customers sharing underlying cloud infrastructure while remaining logically separated. Neither describes rapid expansion and contraction of compute resources.

  From a Network+ study perspective, elasticity is one of the core cloud characteristics to remember because it explains why cloud services are useful for workloads that are unpredictable or variable. Instead of permanently building for peak demand, organizations can consume more or less compute as required.

  That makes elasticity the best answer.

• Question 389:

  Which of the following technologies is the best choice to listen for requests and distribute user traffic across web servers?

  A. Router
  B. Switch
  C. Firewall
  D. Load balancer
  D. Load balancer

  ---

  Explanation

  A load balancer is designed to distribute user requests across multiple servers to ensure high availability and performance.

  Breakdown of Options:

  Option A: Router - Directs traffic between networks, not between web servers.

  Option B: Switch - Works at Layer 2, does not distribute web traffic.

  Option C: Firewall - Secures network traffic, but does not distribute load. D. Load balancer?# Correct answer. Optimizes web traffic distribution across multiple servers.

  References:

  CompTIA Network+ (N10-009) Official Study Guide - Domain 1.5: Explain load balancing and redundancy concepts.

• Question 390:

  Which of the following network access methods is used to securely access resources, such as a corporate cloud or network, as if they were directly connected?

  A. Jump box/host
  B. Secure Shell
  C. Client-to-site VPN
  D. GRE tunnel
  C. Client-to-site VPN

  ---

  Explanation

  A client-to-site VPN (remote-access VPN) is designed to let an individual user securely connect into an organization's network over an untrusted network (like the internet) and access resources as if the user were locally connected. Network+ objectives emphasize VPNs as encrypted tunnels that provide confidentiality and integrity for traffic, commonly using technologies such as IPsec or SSL/TLS-based VPNs. With a client-to-site VPN, the user's device establishes a tunnel to the corporate VPN gateway, receives routes (and sometimes DNS settings), and can reach internal subnets and cloud resources according to policy.

  A jump box/host is a hardened intermediate system used to access sensitive segments, but it does not make the user's device behave as if it is directly on the network; it provides controlled administrative access. SSH is a secure remote management protocol for connecting to a host's command line-useful for administration, not full network access to multiple internal resources. A GRE tunnel provides encapsulation but does not provide encryption by itself, so it is not inherently "securely access" unless combined with additional security (e.g., GRE over IPsec). Therefore, client-to-site VPN is the correct choice.