CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 501:

  Which of the following can be used when a server at a remote site is physically unreachable?

  A. OOB management
  B. Crash cart
  C. Jump box
  D. Console
  A. OOB management

• Question 502:

  Which of the following is the most secure way to provide site-to-site connectivity?

  A. VXLAN
  B. IKE
  C. GRE
  D. IPsec
  D. IPsec

  ---

  Explanation

  IPsec (Internet Protocol Security) is the most secure way to provide site-to-site connectivity. It provides robust security services, such as data integrity, authentication, and encryption, ensuring that data sent across the network is protected from interception and tampering. Unlike other options, IPsec operates at the network layer and can secure all traffic that crosses the IP network, making it the most comprehensive and secure choice for site-to-site VPNs.

  References:

  CompTIA Network+ study materials and NIST Special Publication 800-77.

• Question 503:

  A customer migrates its phone system from analog to a new hosted VoIP/software application solution with integrated video.

  After installation, some users notice issues with dropped calls, broken video, and slow internet access.

  The issues start in the mid-morning and continue into the afternoon.

  However, remote users do not report the same issues.

  Which of the following is the most likely cause of the issues?

  A. Roaming misconfiguration
  B. Signal degradation
  C. Insufficient bandwidth
  D. Miswired cable
  C. Insufficient bandwidth

  ---

  Explanation

  The best answer is C. Insufficient bandwidth. The pattern in the question matters more than anything else. The company moved to a hosted VoIP and video solution, which means voice and video traffic now depend heavily on the site's internet connection. The problems begin mid-morning and continue into the afternoon, which strongly suggests the link becomes congested during the busiest usage period of the day.

  That also explains why users see dropped calls, broken video, and slow internet access all at the same time. Real-time applications like VoIP and video are very sensitive to delay, jitter, and packet loss. When bandwidth is limited or saturated, those services are usually the first to show noticeable symptoms.

  The fact that remote users do not report the same issue is another major clue. If the application platform itself were failing, remote users would likely be affected too. Since the issue seems limited to the main site, the bottleneck is most likely the local office's WAN or internet connection rather than the hosted service.

  The other options are weaker. Roaming misconfiguration is more of a wireless mobility issue, signal degradation is too vague for this traffic pattern, and a miswired cable would not usually appear only during peak business hours. This points to insufficient bandwidth.

• Question 504:

  An administrator wants to host services on the internet using an internal server. The server is configured with an RFC1918 address, and the administrator wants to make the services that are hosted on the server available on one of the company's public IP addresses.

  Which of the following should the administrator configure to allow this access?

  A. IPv6 tunneling
  B. Virtual IP
  C. Dual stack
  D. EUI-64
  B. Virtual IP

  ---

  Explanation

  References

  What is a Virtual IP Address (VIP)? - Definition from Techopedia IPv6 Tunneling - an overview | ScienceDirect Topics Dual Stack Definition [EUI-64 - an overview | ScienceDirect Topics]

• Question 505:

  Which of the following provides an opportunity for an on-path attack?

  A. Phishing
  B. Dumpster diving
  C. Evil twin
  D. Tailgating
  C. Evil twin

  ---

  Explanation

  An evil twin is a rogue Wi-Fi access point that mimics a legitimate network. Attackers use it to intercept and manipulate traffic, making it an on-path (formerly MITM) attack opportunity.

  Breakdown of Options:

  Option A. Phishing-Tries to steal credentials through fake emails/websites but does not intercept network traffic.

  Option B. Dumpster diving-Involves physical security breaches not network interception.

  Option C. Evil twin-Correct answer. A rogue Wi-Fi AP impersonates a real network, allowing traffic interception.

  Option D. Tailgating-Involves physical access security not network interception.

• Question 506:

  A network administrator deploys several new desk phones and workstation cubicles. Each cubicle has one assigned switchport. The administrator runs the following commands:

  nginx

  CopyEdit

  switchport mode access

  switchport voice vlan 69

  With which of the following VLANs will the workstation traffic be tagged?

  A. Private VLAN
  B. Voice VLAN
  C. Native VLAN
  D. Data VLAN
  D. Data VLAN

• Question 507:

  Which of the following allows a remote user to connect to the network?

  A. Command-line interface
  B. API gateway
  C. Client-to-site VPN
  D. Jump box
  C. Client-to-site VPN

  ---

  Explanation

  A Client-to-Site VPN allows a remote user to securely connect to a company's internal network, providing access as if they were physically on-site.

• Question 508:

  Which of the following will allow secure, remote access to internal applications?

  A. VPN
  B. CDN
  C. SAN
  D. IDS
  A. VPN

  ---

  Explanation

  A Virtual Private Network (VPN) creates an encrypted connection between a remote user and an internal network, ensuring secure access to internal applications.

  1. VPNs use encryption protocols like IPSec and SSL/TLS to protect data during transmission.

  2. They are widely used for secure remote work, accessing company resources, and bypassing geographic restrictions.

  3. Option B (CDN - Content Delivery Network): Used for speeding up website content delivery, not for remote access security.

  4. Option C (SAN - Storage Area Network): Used for high-speed storage, unrelated to remote access.

  5. Option D (IDS - Intrusion Detection System): Monitors for malicious activities but does not provide secure access to applications.

  References:

  CompTIA Network+ (N10-009) Official Study Guide Section: Secure Remote Access Technologies

• Question 509:

  After a recent security awareness phishing campaign, the cybersecurity team discovers that additional security measures need to be set up when users access potentially malicious websites.

  Which of the following security measures will best address this concern?

  A. Implement DNS filtering.
  B. Update ACLs to only allow HTTPS.
  C. Configure new IPS hardware.
  D. Deploy 802.1X security features.
  A. Implement DNS filtering.

• Question 510:

  A network administrator needs to monitor network traffic without affecting performance.

  Which of the following should be used?

  A. Port mirroring
  B. NAT
  C. VLAN
  D. DHCP
  A. Port mirroring

  ---

  Explanation

  Port mirroring, also known as SPAN, allows a switch to copy network traffic from one or more ports to another port where a monitoring device is connected. This enables analysis of traffic without interrupting or degrading network performance. NAT translates addresses, VLANs segment networks, and DHCP assigns IP addresses. Port mirroring is commonly used with intrusion detection systems and protocol analyzers.