CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 411:

  A network administrator is setting up a firewall to protect the organization's network from external threats.

  Which of the following should the administrator consider first when configuring the firewall?

  A. Required ports, protocols, and services
  B. Inclusion of a deny all rule
  C. VPN access
  D. Outbound access originating from customer-facing servers
  A. Required ports, protocols, and services

  ---

  Explanation

  When configuring a firewall, the first step is identifying which ports, protocols, and services are required for normal business operations. This ensures only legitimate traffic is allowed. After establishing the required rules, a default deny rule is added for security.

  Option B: Deny all rule is important, but it should come after defining required rules.

  Option C: VPN access is a service to configure, but only after determining baseline needs.

  Option D: Outbound traffic policies are part of refinement, not the first consideration.

  References:

  Domain: Network Security -- Firewall configuration, rule order, least privilege.

• Question 412:

  Which of the following is a major difference between an IPS and IDS?

  A. An IPS needs to be installed in line with traffic and an IDS does not.
  B. An IPS is signature-based and an IDS is not.
  C. An IPS is less susceptible to false positives than an IDS.
  D. An IPS requires less administrative overhead than an IDS.
  A. An IPS needs to be installed in line with traffic and an IDS does not.

  ---

  Explanation

  The key difference is that an Intrusion Prevention System (IPS) installed in line is with network traffic, allowing it to actively block threats. In contrast, an Intrusion Detection System (IDS) only monitors and alerts without actively blocking traffic.

  Breakdown of Options:

  Option A. An IPS needs to be installed in line with traffic and an IDS does not.# Correct answer. IPS actively prevents threats, while IDS only detects them.

  Option B. An IPS is signature-based and an IDS is not.?False, both can use signature-based detection.

  Option

  C. An IPS is less susceptible to false positives than an IDS.?False, both can produce false positives, depending on configurations. Option

  D. An IPS requires less administrative overhead than an IDS.?False, IPS requires more administrative effort due to real-time blocking decisions.

• Question 413:

  Which of the following is an example of a split-tunnel VPN?

  A. Only public resources are accessed through the user's internet connection.
  B. Encrypted resources are accessed through separate tunnels.
  C. All corporate and public resources are accessed through routing to on-site servers.
  D. ACLs are used to balance network traffic through different connections.
  A. Only public resources are accessed through the user's internet connection.

  ---

  Explanation

  In a split-tunnel VPN, only corporate traffic is sent through the VPN tunnel, while public internet traffic goes directly through the user's local ISP. This reduces bandwidth use on the corporate VPN concentrator and improves performance for non-work traffic.

  Option B: Separate tunnels for encrypted traffic describes multi-tunnel VPNs, not split tunneling.

  Option C: All traffic routed through on-site servers is a full-tunnel VPN, not split-tunnel.

  Option D: ACLs balancing traffic relates to routing or load balancing, not VPN split tunneling.

  References:

  Domain: Networking Concepts -- VPN types, split vs. full tunnel, remote access.

• Question 414:

  A technician replaces a workstation, but the new device cannot connect to the network.

  Which feature is MOST likely causing this issue?

  A. Port mirroring
  B. Port aggregation
  C. Port security
  D. VLAN tagging
  C. Port security

• Question 415:

  A network technician is requesting a fiber patch cord with a connector that is round and twists to install.

  Which of the following is the proper name of this connector type?

  A. ST
  B. BNC
  C. SC
  D. LC
  A. ST

  ---

  Explanation

  The ST (Straight Tip) fiber connector is round with a bayonet twist-lock mechanism. It is older but still used in some fiber installations.

  Option B: BNC is a coaxial connector.

  Option C: SC (Subscriber Connector) is a square push-pull fiber connector.

  Option D: LC (Lucent Connector) is a small form-factor fiber connector.

  References:

  Domain: Networking Concepts -- Fiber connectors (ST, SC, LC).

• Question 416:

  A wireless survey shows:

  AP1 Channel 6

  AP2 Channel 6

  Strong overlapping signal

  Users report poor performance.

  What should be done FIRST?

  A. Increase transmit power
  B. Change channel assignments
  C. Replace antennas
  D. Disable encryption
  B. Change channel assignments

• Question 417:

  A newly opened retail shop uses a combination of new tablets, PCs, printers, and legacy card readers.

  Which of the following wireless encryption types is the most secure and compatible?

  A. WPA3
  B. WPA2
  C. WPA2/WPA3 mixed mode
  D. WPA/WPA2 mixed mode
  C. WPA2/WPA3 mixed mode

  ---

  Explanation

  WPA2/WPA3 mixed mode provides compatibility for older devices (that only support WPA2) while allowing newer devices to take advantage of stronger WPA3 encryption. This ensures maximum compatibility and security in a mixed-device environment.

  Option A: WPA3 only is most secure but not compatible with legacy devices.

  Option B: WPA2 only is secure but does not future-proof against WPA3-capable devices.

  Option D: WPA/WPA2 mixed mode is weaker due to WPA (deprecated, insecure).

  References:

  Domain: Network Security -- Wi-Fi encryption standards, WPA2 vs WPA3, mixed-mode compatibility.

• Question 418:

  A network administrator deployed wireless networking in the office area. When users visit the outdoor patio and try to download emails with large attachments or stream training videos, they notice buffering issues.

  Which of the following is the most likely cause?

  A. Network congestion
  B. Wireless interference
  C. Signal degradation
  D. Client disassociation
  C. Signal degradation

  ---

  Explanation

  The most likely cause of buffering issues when moving outdoors is signal degradation. Wireless signals weaken as they travel through obstacles such as walls, glass, and air, leading toweaker connections and reduced data rates.

  Why:

  Option

  A. Network congestion - While congestion can slow down network speeds, it affects all users, not just those moving outdoors. Option

  B. Wireless interference - Interference is possible but ismore likely caused by other wireless signals rather than outdoor movement. Option

  C. Signal degradation - Correct answer. Wireless signals weaken with distance and obstacles such as walls, reducing performance. Option

  D. Client disassociation - Disassociation occurs when clients lose connection to the AP, but the question states that users experience buffering, indicating they are still connected but with a weak signal.

• Question 419:

  A network engineer is implementing a new connection between two core switches. The following configurations are applied: Core-SW01

  vlan 100

  name VLAN100

  interface Ethernet1/1

  channel-group 1 mode active

  interface Ethernet1/2

  channel-group 1 mode active

  interface port-channel1

  switchport mode trunk

  switchport trunk allowed vlan 100

  Core-SW02

  vlan 100

  name VLAN100

  interface Ethernet1/1

  switchport mode trunk

  switchport trunk allowed vlan 100

  interface Ethernet1/2

  switchport mode trunk

  switchport trunk allowed vlan 100

  interface port-channel1

  switchport mode trunk

  switchport trunk allowed vlan 100

  Which of the following is the state of the Core-SW01 port-channel interfaces?

  A. Incrementing CRC errors
  B. Error-disabled
  C. Administratively down
  D. Suspended
  D. Suspended

  ---

  Explanation

  On Core-SW01, the interfaces are configured for LACP using mode active. However, Core-SW02 does not configure the interfaces as part of a port-channel or enable LACP.

  Because LACP requires both sides to participate in the negotiation, the mismatch prevents the EtherChannel from forming. As a result, the member interfaces on Core-SW01 are placed into a suspended state.

  CRC errors indicate physical layer issues, not configuration mismatch.

  Error-disabled occurs due to security or protection mechanisms.

  Administratively down indicates a manual shutdown, which is not present.

  Therefore, the correct state is suspended.

• Question 420:

  A network engineer connects a business to a new ISP. A simple ping test to 8.8.8.8 is successful. However, users complain of extreme slowness to any website and periods of no connectivity.

  Which of the following is the most likely cause?

  A. Incorrect default gateway
  B. VLAN mismatch
  C. Subnet mask configuration
  D. Duplicate ISP IP address
  D. Duplicate ISP IP address

  ---

  Explanation

  If the business shares or duplicates the ISP-assigned public IP address, routing instability and conflicts will occur. Pinging a public IP like 8.8.8.8 may work (since ICMP can bypass certain conflicts), but browsing websites (which requires stable sessions and return traffic) will fail intermittently.

  Option A: If the default gateway were incorrect, no external connectivity would work at all.

  Option B: VLAN mismatch is an internal issue, not affecting ISP routing.

  Option C: Subnet mask misconfiguration would prevent consistent routing but usually blocks ping too.

  References:

  Domain: Network Troubleshooting -- Internet connectivity issues, ISP IP conflicts.