CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 531:

  Which of the following attacks utilizes a network packet that contains multiple network tags?

  A. MAC flooding
  B. VLAN hopping
  C. DNS spoofing
  D. ARP poisoning
  B. VLAN hopping

  ---

  Explanation

  VLAN hopping is an attack where an attacker crafts packets with multiple VLAN tags, allowing them to traverse VLAN boundaries improperly. This can result in gaining unauthorized access to network segments that are supposed to be isolated. The other options do not involve the use of multiple network tags. MAC flooding aims to overwhelm a switch's MAC address table, DNS spoofing involves forging DNS responses, and ARP poisoning involves sending fake ARP messages.

  References:

  According to the CompTIA Network+ course materials, VLAN hopping exploits the tagging mechanism in network packets to gain unauthorized access.

• Question 532:

  A technician is planning an equipement installation into a rack in a data center that practices hot aisle/cold aise ventilation.

  Which of the following directions should the equipement exhaust face when installed in the rack?

  A. Sides
  B. Top
  C. Front
  D. Rear
  D. Rear

  ---

  Explanation

  In a data center that practices hot aisle/cold aisle ventilation, equipment should be installed so that the exhaust faces the rear of the rack. This setup ensures that hot air is expelled into the hot aisle, maintaining proper airflow and cooling efficiency.

  Hot Aisle/Cold Aisle Configuration: Equipment intake should face the cold aisle where cool air is supplied, and exhaust should face the hot aisle where hot air is expelled.

  Cooling Efficiency: Proper orientation of equipment helps maintain an efficient cooling environment by segregating hot and cold air, preventing overheating and improving energy efficiency.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Discusses data center design principles, including hot aisle/cold aisle configurations. Cisco Data Center Design Guide: Provides best practices for data center layout and equipment installation.

  Network+ Certification All-in-One Exam Guide: Covers data center environmental controls and ventilation strategies.

• Question 533:

  A network administrator is creating a subnet that will include 45 separate hosts on a small private network within a large network architecture.

  Which of the following options is the most efficient use of network addresses when assigning this network?

  A. 10.0.50.128/25
  B. 10.7.142.128/27
  C. 10.152.4.192/26
  D. 10.192.1.64/28
  C. 10.152.4.192/26

• Question 534:

  A senior administrator has been directed to incorporate AAA services within a domain environment for regulatory compliance purposes.

  Which of the following standards will enable the use of an AAA server in a domain environment?

  A. 802.1Q
  B. 802.1X
  C. 802.3bt
  D. 802.11h
  B. 802.1X

  ---

  Explanation

  802.1X is a standard that enables the use of an AAA server in a domain environment by providing port-based network access control. 802.1X authenticates users or devices before granting them access to the network resources, and can also authorize them based on their roles or policies. 802.1X can work with different AAA protocols, such as RADIUS or TACACS+, to communicate with the AAA server.

• Question 535:

  Which of the following is the best way to securely access a network appliance from an external location?

  A. RDP
  B. Telnet
  C. FTPS
  D. SSH
  D. SSH

  ---

  Explanation

  SSH (Secure Shell) is the best and most secure method for accessing a network appliance from an external location, according to the CompTIA Network+ N10-009 objectives related to secure management protocols and network security.

  SSH provides encrypted remote command-line access, ensuring that authentication credentials, commands, and session data are protected from interception, eavesdropping, and man-in-the-middle attacks.

  Telnet is an insecure legacy protocol that transmits all data, including usernames and passwords, in cleartext, making it unsuitable for any external or untrusted network access. RDP is primarily used for graphical remote desktop access to Windows systems and is not commonly used for managing network appliances such as routers, switches, firewalls, or load balancers. Additionally, RDP introduces a larger attack surface if exposed externally. FTPS is a secure file transfer protocol and is designed for transferring files, not for interactive device management or configuration.

  The Network+ N10-009 exam emphasizes the use of secure administrative access methods, and SSH is the industry-standard protocol for managing network infrastructure devices. It supports strong encryption, key-based authentication, and secure tunneling, making it ideal for remote administration over untrusted networks such as the internet.

• Question 536:

  Which of the following allows for interactive, secure remote management of a network infrastructure device?

  A. SSH
  B. VNC
  C. RDP
  D. SNMP
  A. SSH

• Question 537:

  An IT administrator is creating an alias to the primary customer's domain.

  Which of the following DNS record types does this represent?

  A. CNAME
  B. MX
  C. A
  D. PTR
  A. CNAME

  ---

  Explanation

  A CNAME (Canonical Name) record is used in the Domain Name System (DNS) to create an alias that points to another domain name, which is often referred to as the canonical domain name. This allows you to have multiple domain names pointing to the same IP address without having to create an A record for each one. It's commonly used to associate new subdomains with an existing domain's DNS records.

• Question 538:

  Which of the following network cables involves bouncing light off of protective cladding?

  A. Twinaxial
  B. Coaxial
  C. Single-mode
  D. Multimode
  D. Multimode

  ---

  Explanation

  Multimode fiber optic cables use multiple paths of light that bounce off the cladding, which is a layer of glass or plastic that surrounds the core of the cable.

  https://www.explainthatstuff.com/fiberoptics.html

• Question 539:

  A customer calls the help desk to report issues connection to the internet. The customer can reach a local database server. A technician goes to the site and examines the configuration:

  IP Address.......192.168.1.223

  Subnet Mask......255.255.255.192

  Default Gateway..192.168.1.190

  DNS 1............192.168.1.196

  DNS 2............8.8.8.8

  Which of the following is causing the user's issue?

  A. Incorrect DNS
  B. Unreachable gateway
  C. Failed root bridge
  D. Poor upstream routing
  B. Unreachable gateway

  ---

  Explanation

  The customer can access local resources (a database server), which means local networking is working. However, the inability to reach the internet suggests an issue with the default gateway. If the default gateway is unreachable, packets will not be routed outside the local network.

  Breakdown of Options:

  Option

  A. Incorrect DNS - DNS issues would cause problems resolving domain names, but the user should still be able to access external resources via IP addresses. Option

  B. Unreachable gateway - Correct answer. If the default gateway is incorrect or unreachable, the device cannot route traffic to the internet. Option

  C. Failed root bridge - STP (Spanning Tree Protocol) failures cause switching issues, but the user can still access local devices, meaning STP is not the problem.

  Option D. Poor upstream routing - Would affect the entire network, not just one user.

• Question 540:

  A fiber link connecting two campus networks is broken.

  Which of the following tools should an engineer use to detect the exact break point?

  A. OTDR
  B. Tone generator
  C. Fusion splicer
  D. Cable tester
  E. PoE injector
  A. OTDR