CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 41:

  A company recently converted most of the office laptops to connect wirelessly to the corporate network. After a high-traffic malware attack, narrowing the event to a specific user was difficult because of the wireless configuration.

  Which of the following actions should the company take?

  A. Restrict users to the 5GHz frequency.
  B. Upgrade to a mesh network.
  C. Migrate from PSK to Enterprise.
  D. Implement WPA2 encryption.
  C. Migrate from PSK to Enterprise.

  ---

  Explanation

  Using Pre-Shared Key (PSK) authentication means that all users share the same Wi-Fi password, making it difficult to identify individual users when security incidents occur. Migrating to WPA2-Enterprise (or WPA3-Enterprise ) replaces PSK authentication with individual user credentials using 802.1X authentication and a RADIUS server. This allows the organization to: Track and log specific user activity Enforce per-user authentication policies Improve network security

  Breakdown of Options:

  Option

  A. Restrict users to the 5GHz frequency Improves performance but does not enhance user tracking or security Option

  B. Upgrade to a mesh network A mesh network improves coverage not security tracking Option

  C. Migrate from PSK to Enterprise Correct answer. WPA2-Enterprise or WPA3-Enterprise uses individual user authentication allowing per-user tracking Option

  D. Implement WPA2 encryption WPA2 is already widely used ; it does not resolve the tracking issue

• Question 42:

  A network administrator is configuring a new switch and wants to connect two ports to the core switch to ensure redundancy.

  Which of the following configurations would meet this requirement?

  A. Full duplex
  B. 802.1Q tagging
  C. Native VLAN
  D. Link aggregation
  D. Link aggregation

  ---

  Explanation

  Link aggregation combines multiple physical interfaces into a single logical interface to increase bandwidth, provide redundancy, and enable load balancing.

  It can be configured using dynamic negotiation protocols such as LACP or by using static configuration.

  LACP requires both sides to participate in negotiation to form a port-channel. If there is a configuration mismatch, the link aggregation will not form correctly.

• Question 43:

  Which of the following devices can operate in multiple layers of the OSI model?

  A. Hub
  B. Switch
  C. Transceiver
  D. Modem
  B. Switch

• Question 44:

  SIMULATION

  A network administrator has been tasked with configuring a network for a new corporate office. The office consists of two buildings, separated by 50 feet with no physical connectivity. The configuration must meet the following requirements:

  Devices in both buildings should be able to access the Internet.

  Security insists that all Internet traffic be inspected before entering the network.

  Desktops should not see traffic destined for other devices.

  INSTRUCTIONS

  Select the appropriate network device for each location. If applicable, click on the magnifying glass next to any device which may require configuration updates and make any necessary changes.

  Not all devices will be used, but all locations should be filled.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  A. See the solution below in Explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in Explanation.

  ---

  Explanation

  See the step by step complete solution below. Devices in both buildings should be able to access the Internet. Security insists that all Internet traffic be inspected before entering the network. Desktops should not see traffic destined for other devices.

  Here is the corrected layout with explanation

  Building A:

  Building B:

  Between Buildings:

  Connection to the Internet:

  Firewall: The firewall should be placed between the router and the internal network to inspect all traffic before it enters the network.

  Corrected Setup:

  Top-left (Building A): Switch

  Bottom-left (Building A): Firewall (inspect traffic before it enters the network) Top-middle (Internet connection): Router

  Bottom-middle (between buildings): Wireless Range Extender Top-right (Building B): Wireless Access Point (WAP) In this corrected setup, the WAP in Building B will connect wirelessly to the Wireless Range Extender, which is connected to the Router. The Router is connected to the Firewall to ensure all traffic is inspected before it enters the network.

  Configuration for Wireless Range Extender:

  SSID: CORP

  Security Settings: WPA2 or WPA2 - Enterprise

  Key or Passphrase: [Enter a strong passphrase]

  Mode: [Set based on your network plan]

  Channel: [Set based on your network plan]

  Speed: Auto

  Duplex: Auto

  With these settings, both buildings will have secure access to the Internet, and all traffic will be inspected by the firewall before entering the network. Desktops and other devices will not see traffic intended for others, maintaining the required security and privacy.

  To configure the wireless range extender for security, follow these steps:

  SSID (Service Set Identifier):

  Security Settings:

  Key or Passphrase:

  Wireless Mode and Channel:

  Wired Speed and Duplex:

  Save Configuration:

  Here is how the configuration should look after adjustments:

  SSID: CORP

  Security Settings: WPA2 or WPA2 - Enterprise

  Key or Passphrase: [Enter a strong passphrase]

  Mode: [Set based on your network plan]

  Channel: [Set based on your network plan]

  Speed: Auto

  Duplex: Auto

  Once these settings are configured, your wireless range extender will provide secure connectivity for devices in both buildings.

  Firewall setting to to ensure complete compliance with the requirements and best security practices, consider the following adjustments and additions:

  DNS Rule: This rule allows DNS traffic from the internal network to any destination, which is fine.

  HTTPS Outbound: This rule allows HTTPS traffic from the internal network (assuming 192.169.0.1/24 is a typo and should be 192.168.0.1/24) to any destination, which is also good for secure web browsing. Management: This rule allows SSH access to the firewall for management purposes, which is necessary for administrative tasks. HTTPS Inbound: This rule denies inbound HTTPS traffic to the internal network, which is good unless you have a web server that needs to be accessible from the internet.

  HTTP Inbound: This rule denies inbound HTTP traffic to the internal network, which is correct for security purposes.

  Suggested Additional Settings:

  Permit General Outbound Traffic: Allow general outbound traffic for web access, email, etc.

  Block All Other Traffic: Ensure that all other traffic is blocked to prevent unauthorized access.

  Firewall Configuration Adjustments:

  Correct the Network Typo:

  Permit General Outbound Traffic:

  Deny All Other Traffic:

  Here is how your updated firewall settings should look:

  Rule Name

  Source

  Destination

  Service

  Action

  DNS Rule

  192.168.0.1/24

  ANY

  DNS

  PERMIT

  HTTPS Outbound

  192.168.0.1/24

  ANY

  HTTPS

  PERMIT

  Management

  ANY

  192.168.0.1/24

  SSH

  PERMIT

  HTTPS Inbound

  ANY

  192.168.0.1/24

  HTTPS

  DENY

  HTTP Inbound

  ANY

  192.168.0.1/24

  HTTP

  DENY

  General Outbound

  192.168.0.1/24

  ANY

  ANY

  PERMIT

  Block All

  ANY

  ANY

  ANY

  DENY

  These settings ensure that:

  Internal devices can access DNS and HTTPS services externally.

  Management access via SSH is permitted.

  Inbound HTTP and HTTPS traffic is denied unless otherwise specified.

  General outbound traffic is allowed.

  All other traffic is blocked by default, ensuring a secure environment. Make sure to save the settings after making these adjustments.

• Question 45:

  Several users in an organization report connectivity issues and lag during a video meeting. The network administrator performs a tcpdump and observes increased retransmissions for other non-video applications on the network.

  Which of the following symptoms describes the users' reported issues?

  A. Latency
  B. Packet loss
  C. Bottlenecking
  D. Jitter
  B. Packet loss

  ---

  Explanation

  Packet loss occurs when network packets fail to reach their destination, leading to disruptions in connectivity and performance issues. In this scenario:

  1. Users report connectivity issues and lag during video meetings.

  2. The administrator detects increased retransmissions in tcpdump, which is a strong indicator of lost packets that must be resent.

  3. Video meetings are particularly sensitive to packet loss, leading to buffering, frozen screens, and dropped calls.

  Latency (Option A) refers to delayed data transmission but does not necessarily cause retransmissions.

  Bottlenecking (Option C) happens when a network component (e.g., router, switch) cannot handle the traffic load, but packet retransmissions are more directly related to packet loss.Jitter (Option D) affects the consistency of packet arrival times, but the symptoms described here are more aligned with packet loss rather than timing variations.

  References:

  CompTIA Network+ (N10-009) Official Study Guide Section: Troubleshooting Connectivity Issues

• Question 46:

  A network engineer wants to establish a site-o-site VPN tunnel using a protocol that allows for both data confidentially and authentication.

  Which of the following is the best choice?

  A. IKE
  B. AH
  C. ESP
  D. IPSec
  C. ESP

• Question 47:

  A network manager wants to implement a SIEM system to correlate system events.

  Which of the following protocols should the network manager verify?

  A. NTP
  B. DNS
  C. LDAP
  D. DHCP
  A. NTP

• Question 48:

  An employee in a corporate office clicks on a link in an email that was forwarded to them. The employee is redirected to a splash page that says the page is restricted.

  Which of the following security solutions is most likely in place?

  A. DLP
  B. Captive portal
  C. Content filtering
  D. DNS sinkholing
  C. Content filtering

  ---

  Explanation

  Content filtering blocks access to restricted or malicious websites. When a user attempts to visit a site that violates company policies, they are redirected to a restriction page.

  1. This is a common security measure to prevent employees from accessing phishing or malware-infected sites.

  2. Content filters work by scanning URLs, keywords, or categories and blocking inappropriate or harmful content.

  3. Option A (DLP - Data Loss Prevention): Focuses on preventing sensitive data leaks rather than blocking web access.

  4. Option B (Captive portal): Used mainly in public Wi-Fi to authenticate users before granting access, not to restrict sites.

  5. Option D (DNS sinkholing): Redirects malicious domain requests to a safe address but is not responsible for policy-based restrictions on general content.

  References:

  CompTIA Network+ (N10-009) Official Study Guide Section: Security Solutions

• Question 49:

  Which of the following would describe a data recovery goal?

  A. MTBF
  B. RPO
  C. BCP
  D. MTTR
  B. RPO

  ---

  Explanation

  RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss measured in time. MTBF measures reliability, MTTR measures recovery time, and BCP is an overall continuity plan rather than a specific metric.

  Therefore, RPO is the correct answer.

• Question 50:

  Which of the following requires network devices to be managed using a different set of IP addresses?

  A. Console
  B. Split tunnel
  C. Jump box
  D. Out of band
  D. Out of band

  ---

  Explanation

  Out-of-band (OOB) management refers to using a dedicated management network that is physically separate from the regular data network. This management network uses a different set of IP addresses to ensure that management traffic is isolated from user data traffic, providing a secure way to manage network devices even if the main network is down or compromised.

  References:

  CompTIA Network+ study materials.