CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 421:

  A company realizes that only half of its employees work in the office, and the employees who work from home no longer need a computer at the office.

  Which of the following security measures should the network administrator implement when removing a computer from a cubicle?

  A. Disable DHCP on the computer being removed.
  B. Place the switch port in a private VLAN.
  C. Apply a firewall rule to block the computer's IP address.
  D. Remove the employee's network access.
  D. Remove the employee's network access.

  ---

  Explanation

  References 1: CompTIA Network+ N10-008 Cert Guide - O'Reilly Media 2: Network+ (Plus) Certification | CompTIA IT Certifications 3: 10 Ways to Secure Office Workstations - Computer Security

• Question 422:

  A network engineer wants to prioritize voice traffic over data traffic.

  Which of the following should be implemented?

  A. NAT
  B. QoS
  C. VLAN
  D. ACL
  B. QoS

  ---

  Explanation

  Quality of Service (QoS) is used to prioritize certain types of traffic, such as voice or video, to ensure they receive sufficient bandwidth and low latency. Voice traffic is sensitive to delay and jitter, so QoS mechanisms classify and prioritize it over less critical traffic like file transfers. NAT translates addresses, VLANs segment networks, and ACLs filter traffic. QoS is essential for maintaining performance in converged networks.

• Question 423:

  A university is implementing a new campus wireless network. A network administrator needs to configure the network to support a large number of devices and high-bandwidth demands from students.

  Which of the following wireless technologies should the administrator consider for this scenario?

  A. Bluetooth
  B. Wi-Fi 6E
  C. 5G
  D. LTE
  B. Wi-Fi 6E

  ---

  Explanation

  Wi-Fi 6Eis the best choice for high-density environments, as it provides higher speeds, more capacity, and lower latency.

• Question 424:

  Which of the following would most likely be used as a replacement for a traditional VPN for remote users?

  A. SD-WAN
  B. SASE
  C. Site-to-site VPN
  D. Reverse proxy
  B. SASE

  ---

  Explanation

  A modern replacement for traditional remote-access VPN for users is SASE (Secure Access Service Edge). Network+ highlights trends in remote connectivity and security where organizations move away from backhauling all user traffic through a VPN concentrator and instead use cloud-delivered security and access controls closer to the user. SASE combines networking and security capabilities-commonly including ZTNA (Zero Trust Network Access), secure web gateway (SWG), CASB, firewall-as-a-service (FWaaS), and centralized policy enforcement-so remote users can securely access applications without relying on a classic "connect to the corporate network first" VPN model.

  SD-WAN primarily optimizes connectivity between sites and to cloud services, often for branch networks; it's not typically the direct replacement for remote user VPN access. Site-to-site VPN connects networks (locations) and is not intended for individual remote users. A reverse proxy can publish specific internal web applications externally and provide some security functions, but it does not replace VPN broadly for remote user access to multiple internal resources the way SASE/Zero Trust access solutions do. Therefore, SASE is the best answer as the likely replacement for traditional remote-access VPN.

• Question 425:

  A network analyst is installing a wireless network in a corporate environment. Employees are required to use their domain identities and credentials to authenticate and connect to the WLAN.

  Which of the following actions should the analyst perform on the AP to fulfill the requirements?

  A. Enable MAC security.
  B. Generate a PSK for each user.
  C. Implement WPS.
  D. Set up WPA3 protocol.
  D. Set up WPA3 protocol.

  ---

  Explanation

  WPA3-Enterprise uses 802.1X authentication with a RADIUS server to provide user-based authentication.

  It supports centralized identity management and eliminates the need for shared passwords, making it suitable for enterprise environments.

  MAC filtering is not secure because MAC addresses can be spoofed.

  Pre-shared keys are used in WPA-Personal and do not scale for enterprise use.

  WPS is not secure and is not appropriate for enterprise environments.

  Therefore, WPA3-Enterprise is the correct answer.

• Question 426:

  A network administrator is switching to IPv6 and wants to be able to use packet-tracing software on the network to monitor traffic. The administrator wants to set up the IP addressing to include the MAC address of each machine that is connected.

  Which of the following should the administrator implement? (Choose two.)

  A. EUI-64
  B. RFC1819
  C. APIPA
  D. DHCPv6
  E. SLAAC
  F. CIDR
  A. EUI-64
  E. SLAAC

• Question 427:

  Users report performance issues on the network. A network administrator notices broadcast storms occurring.

  Which of the following protocols should the administrator configure to mitigate this issue?

  A. Spanning Tree
  B. Enhanced Interior Gateway Routing Protocol (EIGRP)
  C. Cisco Discovery Protocol (CDP)
  D. Link Layer Discovery Protocol (LLDP)
  E. Border Gateway Protocol (BGP)
  A. Spanning Tree

  ---

  Explanation

  Broadcast storms are typically caused by Layer 2 loops. Spanning Tree Protocol (STP) prevents loops by blocking redundant paths while maintaining redundancy. The other options do not address Layer 2 loop prevention. Therefore, STP is correct.

• Question 428:

  A user notifies a network administrator about losing access to a remote file server. The network administrator is able to ping the server and verifies the current firewall rules do not block access to the network fileshare.

  Which of the following tools wold help identify which ports are open on the remote file server?

  A. Dig
  B. Nmap
  C. Tracert
  D. nslookup
  B. Nmap

  ---

  Explanation

  Nmap (Network Mapper) is a powerful network scanning tool used to discover hosts and services on a computer network. It can be used to identify which ports are open on a remote server, which can help diagnose access issues to services like a remote file server.

  Port Scanning: Nmap can perform comprehensive port scans to determine which ports are open and what services are running on those ports.

  Network Discovery: It provides detailed information about the host's operating system, service versions, and network configuration.

  Security Audits: Besides troubleshooting, Nmap is also used for security auditing and identifying potential vulnerabilities.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Covers network scanning tools and their uses.

  Nmap Documentation: Official documentation provides extensive details on how to use Nmap for port scanning and network diagnostics. Network+ Certification All-in-One Exam Guide: Discusses various network utilities, including Nmap, and their applications in network troubleshooting.

• Question 429:

  A network administrator needs to connect a multimode fiber cable from the MDF to the server room. The administrator connects the cable to Switch 2, but there is no link light. The administrator tests the fiber and finds it does not have any issues. Swapping the connection to Switch 1 in a working port is successful, but the swapped connection does not work on Switch 2.

  Which of the following should the administrator verify next?

  A. Fiber length
  B. Transceiver model
  C. Connector type
  D. Port speed
  B. Transceiver model

• Question 430:

  Which of the following devices functions mainly at the data link layer of the OSI model and is used to connect a fiber-optic cable to a network interface?

  A. SC
  B. DAC
  C. SFP transceiver
  D. Twinaxial cable
  C. SFP transceiver

  ---

  Explanation

  An SFP (Small Form-factor Pluggable) transceiver is a modular device that provides the interface between fiber-optic or copper cabling and the networking equipment (e.g., switch or router). It operates primarily at Layer 2 (Data Link), converting optical or electrical signals into frames usable by the network device.

  Option A: SC is a fiber connector type, not the transceiver.

  Option B: DAC (Direct Attach Copper) is a passive copper cable assembly with fixed transceivers, not a general-purpose module.

  Option D: Twinaxial cable is a copper medium, not an interface device.

  References:

  Domain: Networking Concepts -- Transceivers (SFP, GBIC, QSFP), fiber connectivity, OSI model mapping.