CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 391:

  A customer purchases a new UTM device and wants the development team to integrate some of the device's data-reporting capabilities into the company's custom internal support software.

  Which of the following features should the development team use to obtain the device's data?

  A. API
  B. SNMPv2c
  C. SIEM
  D. MIB
  A. API

  ---

  Explanation

  An API (Application Programming Interface) is the best choice when a development team needs to integrate a device's reporting data directly into custom software. In Network+ (N10-009) objectives, network operations commonly include device management, monitoring, and automation, and APIs are a key method for programmatic access to operational data (often via REST/HTTPS with structured formats like JSON). This enables the internal support application to pull dashboards, health metrics, events, configuration details, and reporting outputs in a controlled, developer-friendly way.

  SNMPv2c is primarily used for network monitoring and polling counters/alerts, but it is less secure (community strings) and is not as flexible for modern application integration as an API. A MIB is not a data-access "feature" by itself; it's the schema/definitions SNMP uses to describe managed objects. A SIEM is a separate security analytics platform that collects and correlates logs/events-useful for security operations, but not the direct interface a custom support tool would typically call to retrieve device reporting data.

• Question 392:

  Which of the following allows for the interception of traffic between the source and destination?

  A. Self-signed certificate
  B. VLAN hopping
  C. On-path attack
  D. Phishing
  C. On-path attack

  ---

  Explanation

  An on-path attack (formerly known as a man-in-the-middle (MITM) attack ) involves intercepting and potentially altering communications between two parties without their knowledge. This can be done via techniques like ARP poisoning, rogue access points, or SSL stripping.

  Breakdown of Options:

  Option A. Self-signed certificate - These are untrusted SSL certificates but do not intercept traffic.

  Option B. VLAN hopping - VLAN hopping exploits VLAN misconfigurations but does not necessarily intercept communications.

  Option C. On-path attack - Correct answer. This intercepts and modifies traffic between two endpoints.

  Option D. Phishing - Phishing tricks users into revealing credentials rather than intercepting network traffic.

• Question 393:

  Which protocol allows secure remote configuration of network devices? (Select TWO)

  A. SNMPv3
  B. SSH
  C. Telnet
  D. Syslog
  A. SNMPv3
  B. SSH

• Question 394:

  A company upgrades its wireless infrastructure with a 1Gbps backbone, new APs, and new tablets for all employees.

  However, the IT department notes that speeds are not improved from the previous tablets.

  Given the following network information, which of the following is the most likely cause of the performance issues?

  A. AP 4 has no devices connected.
  B. Too many devices are causing congestion.
  C. APs do not have the correct VLAN assignment.
  D. Switch bandwidth is creating a bottleneck.
  D. Switch bandwidth is creating a bottleneck.

  ---

  Explanation

  The most likely answer is D. Switch bandwidth is creating a bottleneck. Even though the company upgraded the wireless environment with newer access points and new tablets, wireless performance still depends on the capacity of the wired network that the APs connect back to. If multiple APs are sending traffic through a shared switch uplink or limited switch bandwidth, that wired segment can become the choke point, preventing users from seeing the benefit of the newer wireless equipment.

  This kind of issue shows up often when organizations focus on upgrading the wireless edge but do not account for the aggregate traffic load feeding into the switching infrastructure. Faster wireless standards can increase the amount of traffic that reaches the switch, but if the switching path cannot handle that volume efficiently, end-user throughput will still feel unchanged.

  The other options are less convincing. One AP having no connected devices does not explain why speeds on active clients are not improved. VLAN assignment problems would more likely cause access or segmentation issues rather than a general performance ceiling. Device congestion can hurt performance, but the information given points more strongly to the wired backhaul as the limiting factor.

  In this scenario, the wireless upgrade is being held back by the switching side of the network, making switch bandwidth bottleneck the best answer.

• Question 395:

  SIMULATION

  After a recent power outage, users are reporting performance issues accessing the application servers. Wireless users are also reporting intermittent Internet issues.

  INSTRUCTIONS

  Click on each tab at the top of the screen. Select a widget to view information, then use the drop-down menus to answer the associated questions. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  A. See the answer and solution below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the answer and solution below.

  ---

  Explanation

  Network Health:

  WAN 2 appears to have a lower average latency and loss percentage, which would make it the preferred WAN station for VoIP traffic. VoIP traffic requires low latency and packet loss to ensure good voice quality and reliability. WAN 1 seems to have higher RAM and processor usage, which could also affect the performance of VoIP traffic.

  Here's the summary of the key metrics for WAN 1 and WAN 2 from the image provided:

  WAN 1:

  WAN 2:

  For VoIP traffic, low latency and jitter are particularly important to ensure voice quality. While WAN 1 has higher bandwidth and throughput, it also has higher latency and jitter compared to WAN 2. However, WAN 2 has much lower loss, lower latency, and lower jitter, which are more favorable for VoIP traffic that is sensitive to delays and variation in packet arrival times.

  Given this information, WAN 2 would generally be preferred for VoIP traffic due to its lower latency, lower jitter, and significantly lower loss percentage, despite its lower bandwidth compared to WAN 1. The high bandwidth of WAN 1 may be more suitable for other types of traffic that are less sensitive to latency and jitter, such as bulk data transfers.

  

  Device Monitoring:

  the device that is experiencing connectivity issues is the APP Server or Router 1, which has a status of Down. This means that the server is not responding to network requests or sending any data. You may want to check the physical connection, power supply, and configuration of the APP Server to troubleshoot the problem.

  

• Question 396:

  Which of the following offers the ability to manage access at the cloud VM instance?

  A. Security group
  B. Internet gateway
  C. Direct Connect
  D. Network ACL
  A. Security group

• Question 397:

  Users are reporting issues with connecting to the wireless router. The technician discovers neighboring wireless APs that are not part of the network are on the same 5GHz frequency.

  Which of the following best describes the issue?

  A. Distance limitation
  B. Absorption
  C. Signal-to-noise ratio
  D. Interference
  D. Interference

• Question 398:

  Which of the following is most likely to be implemented to actively mitigate intrusions on a host device?

  A. HIDS
  B. NIDS
  C. HIPS
  D. NIPS
  C. HIPS

  ---

  Explanation

  HIPS is designed to operate on individual host devices (like workstations, servers, etc.) and can actively prevent and mitigate intrusions. It not only detects malicious activities but also has the capability to automatically take action against these threats, such as blocking network traffic or quarantining malware.

• Question 399:

  Which of the following should be configured so users can authenticate to a wireless network using company credentials?

  A. SSO
  B. SAML
  C. MFA
  D. RADIUS
  D. RADIUS

  ---

  Explanation

  RADIUS (Remote Authentication Dial-In User Service) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service. RADIUS is often used to manage access to wireless networks, enabling users to authenticate with their company credentials, ensuring secure access to the network.

  References:

  CompTIA Network+ study materials.

• Question 400:

  Which of the following is the MOST appropriate solution to extend the network to a building located across the street from the main facility?

  A. Multimode fiber
  B. 802.11ac wireless bridge
  C. Cat 6 copper
  D. Loopback adapter
  B. 802.11ac wireless bridge

  ---

  Explanation

  An 802.11ac wireless bridge is the most practical solution to connect two nearby buildings without trenching or laying physical cable. It provides high-speed, point-to-point connectivity using directional antennas.

  Option A. Multimode fiberis effective but expensive and typically limited to 500 meters or less.

  Option C. Cat 6 copperis only rated for up to 100 meters -- not viable for a street-wide distance.

  Option D. Loopback adapteris a troubleshooting tool, not for network extension.

  References:

  CompTIA Network+ N10-009 Official Objectives: 1.3?Compare and contrast various network topologies, types, and technologies.