CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 461:

  Developers want to create a mobile application that requires a runtime environment, developer tools, and databases. The developers will not be responsible for security patches and updates.

  Which of the following models meets these requirements?

  A. Container as a service
  B. Infrastructure as a service
  C. Platform as a service
  D. Software as a service
  C. Platform as a service

  ---

  Explanation

  The correct answer is Platform as a Service (PaaS). PaaS provides developers with a ready-to-use platform that includes runtime environments, developer tools, middleware, and database services. Developers can focus on writing code while the provider handles security patches, updates, and infrastructure management.

  Option A: CaaS (Containers as a Service) focuses on deploying and managing containerized applications, not providing full developer platforms.

  Option B: IaaS delivers virtual machines, storage, and networking, but administrators must install and maintain the OS, middleware, and updates.

  Option D: SaaS provides end-user applications (e.g., email, CRM), not platforms for development.

  By using PaaS, the developers can build applications quickly and cost-effectively without worrying about underlying infrastructure or system maintenance.

  References:

  Domain: Networking Concepts -- Cloud service models (IaaS, PaaS, SaaS, CaaS).

• Question 462:

  Which of the following best describes a group of devices that is used to lure unsuspecting attackers and to study the attackers' activities?

  A. Geofencing
  B. Honeynet
  C. Jumpbox
  D. Screened subnet
  B. Honeynet

  ---

  Explanation

  A honeynet is a network of honeypots designed to attract and study attackers. Honeypots are decoy systems set up to lure cyber attackers and analyze their activities. A honeynet, being a collection of these systems, provides a broader view of attack methods and patterns, helping organizations improve their security measures.

  References:

  CompTIA Network+ Exam Objectives and official study guides.

• Question 463:

  Users report that the network is slower than usual when accessing on-premises email.

  Which of the following should a network technician do to confirm the issue?

  A. Review the logging levels of network devices.
  B. Check the audit logs to see if users are accessing email
  C. Compare the network baselines to the current network status.
  D. Verify that users who are trying to access email have LDAP accounts
  C. Compare the network baselines to the current network status.

• Question 464:

  Which of the following protocols has a default administrative distance value of 90?

  A. RIP
  B. EIGRP
  C. OSPF
  D. BGP
  B. EIGRP

  ---

  Explanation

  EIGRP (Enhanced Interior Gateway Routing Protocol) has a default administrative distance (AD) value of 90 for internal routes. The administrative distance is used to rate the trustworthiness of routing information received from different routing protocols. EIGRP, developed by Cisco, has an AD of 90, which is lower than that of RIP (120) and OSPF (110), making it more preferred if multiple protocols provide a route to the same destination.

  References:

  CompTIA Network+ study materials.

• Question 465:

  A network engineer adds a tunnel for a new branch network.

  Which of the following ensures that all data is encrypted inside the tunnel?

  A. ESP
  B. SSH
  C. GRE
  D. IKE
  A. ESP

  ---

  Explanation

  ESP (Encapsulating Security Payload) is an IPsec protocol that provides encryption, integrity, and authentication for data inside a VPN tunnel. It ensures that all tunneled traffic is encrypted.

  Option B: SSH secures remote terminal sessions, not site-to-site VPN tunnels.

  Option C: GRE (Generic Routing Encapsulation) provides encapsulation but does not encrypt data.

  Option D: IKE (Internet Key Exchange) negotiates keys and establishes the IPsec tunnel but does not encrypt the payload itself.

  References:

  Domain: Network Security -- VPN protocols, IPsec (AH vs. ESP), encryption in transit.

• Question 466:

  Which of the following connectors allows a singular QSFP transceiver to have several physical connections?

  A. RJ45
  B. ST
  C. LC
  D. MPO
  D. MPO

  ---

  Explanation

  The MPO (Multi-fiber Push On) connector is designed to handle multiple fiber strands in a single connector, and it is commonly used with high-density transceivers like QSFP (Quad Small Form-factor Pluggable). QSFPcan support up to four channels (hence "quad"), and MPO connectors can interface multiple fibers (e.g., 8, 12, 24), making them ideal for 40Gbps or 100Gbps deployments.

  RJ45 (A) is used for Ethernet over copper.

  ST (B) and LC (C) are single-fiber connectors -- they don't support the multi-fiber needs of QSFP setups.

  Therefore, MPO is the correct connector type for this use case.

• Question 467:

  A network engineer is now in charge of all SNMP management in the organization. The engineer must use a SNMP version that does not utilize plaintext data.

  Which of the following is the minimum version of SNMP that supports this requirement?

  A. v1
  B. v2c
  C. v2u
  D. v3
  D. v3

  ---

  Explanation

  SNMPv3 is the version of the Simple Network Management Protocol that introduces security enhancements, including message integrity, authentication, and encryption. Unlike previous versions (v1 and v2c), SNMPv3 supports encrypted communication, ensuring that data is not transmitted in plaintext. This provides confidentiality and protects against eavesdropping and unauthorized access.

  References:

  CompTIA Network+ study materials.

• Question 468:

  Which of the following security concepts is related to ensuring that encrypted data is not edited while in transit?

  A. Zero trust
  B. Integrity
  C. Availability
  D. Confidentiality
  B. Integrity

• Question 469:

  Which of the following is enforced through legislation?

  A. AUP
  B. GDPR
  C. Code of conduct
  D. EULA
  B. GDPR

• Question 470:

  Which of the following ports is a secure protocol?

  A. 20
  B. 23
  C. 443
  D. 445
  C. 443