CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 441:

  Which of the following allows a user to authenticate to multiple resources without requiring additional passwords?

  A. SSO
  B. MFA
  C. SAML
  D. RADIUS
  A. SSO

  ---

  Explanation

  The correct answer is SSO (Single Sign-On) because it enables a user to authenticate once and gain access to multiple systems or resources without being prompted to log in again. According to CompTIA Network+ (N10-009) security objectives, SSO improves usability and productivity while maintaining centralized authentication control. After the initial authentication, a trust relationship between systems allows the user to access additional applications seamlessly.

  MFA (Multi-Factor Authentication) enhances security by requiring two or more authentication factors (something you know, have, or are), but it does not inherently provide access to multiple systems without repeated authentication events.

  SAML (Security Assertion Markup Language) is an authentication and authorization protocol commonly used to implement SSO in web-based environments. While SAML supports SSO functionality, it is the underlying protocol rather than the access method itself.

  RADIUS is a centralized authentication, authorization, and accounting (AAA) protocol used for network access control but does not specifically provide seamless multi-resource authentication without additional logins.

  Therefore, SSO best describes authentication to multiple resources without requiring additional passwords.

• Question 442:

  A user reports having intermittent connectivity issues to the company network. The network configuration for the user reveals the following:

  IP address: 192.168.1.10

  Subnet mask: 255.255.255.0

  Default gateway: 192.168.1.254

  The network switch shows the following ARP table:

  

  Which of the following is the most likely cause of the user's connection issues?

  A. A port with incorrect VLAN assigned
  B. A switch with spanning tree conflict
  C. Another PC with manually configured IP
  D. A router with overlapping route tables
  C. Another PC with manually configured IP

• Question 443:

  A company upgrades its network and PCs to gigabit speeds. After the upgrade, users are not getting the expected performance. Technicians discover that the speeds of the endpoint NICs are inconsistent.

  Which of the following should be checked first to troubleshoot the issue?

  A. Speed mismatches
  B. Load balancer settings
  C. Flow control settings
  D. Infrastructure cabling grade
  A. Speed mismatches

  ---

  Explanation

  Speed Mismatches: If NICs are set to different speeds (e.g., 100 Mbps on one side and 1 Gbps on the other), performance will degrade. Ensuring consistent speed settings between devices is crucial for optimal performance.

  Load balancer settings (B): Applies to server load distribution, not endpoint speed.

  Flow control settings (C): Can affect performance but is secondary to speed mismatches.

  Infrastructure cabling grade (D): Relevant if the cables are unsuitable for gigabit speeds, but speed settings should be checked first.

• Question 444:

  A network administrator needs to ensure that users accept internet usage rules.

  Which of the following will help the administrator accomplish this task?

  A. Captive portal
  B. Acceptable use policy
  C. Network access control
  D. DNS filtering
  A. Captive portal

  ---

  Explanation

  A captive portal is designed to present terms, conditions, or usage rules to users and require them to acknowledge/accept those rules before granting network or internet access. In Network+ (N10-009) security and access control concepts, captive portals are commonly associated with guest wireless or public access scenarios, where users are redirected to a web page that displays acceptable-use language and requires a click-through acceptance (and sometimes authentication). This provides a technical enforcement point: users must actively accept the rules to proceed, which supports organizational policy compliance and creates a recordable control in many implementations.

  An Acceptable Use Policy (AUP) is the document that defines the rules, but by itself it does not technically force a user to acknowledge them at the time of access. NAC controls who/what can connect and can enforce posture and segmentation, but it does not inherently ensure users "accept" usage rules unless paired with a portal workflow. DNS filtering blocks or allows domain access categories (malware, adult content, etc.), which enforces browsing restrictions but does not guarantee user acceptance of rules.

  Therefore, the best answer to ensure users accept the rules is captive portal.

• Question 445:

  Three new employees report that they are unable to access company resources, but they can connect to each other's devices.

  Which of the following would most likely need to be modified to resolve the issue?

  A. The routing table on the gateway
  B. The DNS configuration on the router
  C. The pool on the DHCP server
  D. The firewall on the workstation
  C. The pool on the DHCP server

  ---

  Explanation

  If the three new employees can communicate with each other's devices, that strongly suggests their local Layer 2/Layer 3 connectivity is working (same VLAN/subnet, switching is fine, and they have IP addressing that allows local communication). The fact that they cannot access company resources (often on other subnets, servers, or the internet via internal routing) points to a problem with how these new endpoints are being addressed or routed beyond their local segment.

  The most likely shared root cause affecting only "new employees" is DHCP scope/pool configuration. If the DHCP pool is exhausted, mis-scoped, or handing out incorrect options (such as an incorrect default gateway, wrong subnet mask, or an address range tied to an isolated VLAN), users could still talk locally but fail to reach resources outside their subnet. Modifying the DHCP server pool (expanding the scope, correcting the scope network, or ensuring the correct options are assigned) would resolve this with minimal changes.

  A gateway routing table issue would typically affect many users, not just three new ones. DNS misconfiguration on the router would more commonly cause name-resolution problems, not block all resource access (and wouldn't be isolated to only new employees). A workstation firewall would not usually prevent access to "company resources" in a way that consistently affects three new devices while still allowing peer connectivity.

• Question 446:

  A network engineer needs to limit bandwidth usage for a specific type of traffic. The application can tolerate delays but is highly sensitive to packet loss.

  Which of the following techniques should the engineer implement?

  A. Traffic policing
  B. Traffic shaping
  C. Traffic classification
  D. Traffic marking
  B. Traffic shaping

• Question 447:

  A network administrator recently updated configurations on a Layer 3 switch. Following the updates, users report being unable to reach a specific file server.

  Which of the following is the most likely cause?

  A. Incorrect ACLs
  B. Switching loop
  C. Duplicate IP addresses
  D. Wrong default route
  A. Incorrect ACLs

  ---

  Explanation

  Since this issue occurred after a configuration change on a Layer 3 switch, the most likely cause is misconfigured ACLs (Access Control Lists).

  ACLs control which traffic is allowed or denied, so an incorrect ACL may be blocking access to the file server.

  Why not the other options?

  Switching loop (B): A switching loop occurs at Layer 2 (not Layer 3) and causes network-wide broadcast storms, not just loss of access to a file server. Duplicate IP addresses (C): This would cause connectivity issues for the devices with the conflict, but not necessarily prevent all users from accessing the file server. Wrong default route (D): The default route is used for traffic leaving the local network. If users are unable to access an internal file server, this is unlikely to be the issue.

• Question 448:

  Which of the following cable types is most resistant to electromagnetic interference?

  A. UTP
  B. STP
  C. Coaxial
  D. Fiber optic
  D. Fiber optic

  ---

  Explanation

  Fiber optic cables transmit data as light signals through glass or plastic fibers, making them completely immune to electromagnetic interference (EMI). In contrast, copper-based cables such as UTP and STP can be affected by EMI, although STP provides some shielding. Coaxial cables also offer some resistance but are not immune. Fiber optics are preferred in environments with high interference or where long-distance, high-speed transmission is required.

• Question 449:

  A customer recently moved into a new office and notices that some wall plates are not working and are not properly labeled

  Which of the following tools would be best to identify the proper wiring in the IDF?

  A. Toner and probe
  B. Cable tester
  C. Visual fault locator
  D. Network tap
  A. Toner and probe

  ---

  Explanation

  A toner and probe tool, also known as a tone generator and probe, is used to trace and identify individual cables within a bundle or to locate the termination points of cables in wiring closets and patch panels. It generates a tone that can be picked up by the probe, helping technicians quickly and accurately identify and label wall plates and wiring. This is the best tool for identifying proper wiring in the Intermediate Distribution Frame (IDF).

  References:

  CompTIA Network+ Exam Objectives and official study guides.

• Question 450:

  A network engineer is setting up a new VoIP network for a customer. The current network is segmented only for computers and servers. No additional switch ports can be used in the new network.

  Which of the following does the engineer need to do to configure the network correctly? (Select TWO).

  A. Change network translation definitions
  B. Enable 802.1Q
  C. Implement a routing protocol
  D. Set up voice VLANs
  E. Reconfigure the DNS
  F. Place devices in the perimeter network
  B. Enable 802.1Q
  D. Set up voice VLANs

  ---

  Explanation

  To support VoIP on the same physical ports used by computers: Option B. Enable 802.1Q: This standard supports VLAN tagging, allowing voice and data traffic to share the same port using separate VLANs.

  Option D. Set up voice VLANs: Separating voice traffic into its own VLAN improves QoS and manageability.

  Other options are not directly related to configuring VoIP over existing ports: Option A. Network translation definitions(NAT) are unrelated to switch-level VLAN configuration.

  Option C. Routing protocolsare not necessary at the switch level for VLAN setup.

  Option E. DNSis not required for the switch or VLAN setup.

  Option F. Perimeter network (DMZ)is used for public-facing servers, not VoIP VLANs.

  References:

  CompTIA Network+ N10-009 Official Objectives: 2.3?Given a scenario, configure and verify VLANs.

  CompTIA Network+ N10-009 Official Objectives: 3.6?Explain the characteristics of network topologies and types.