CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 561:

  Which device extends the range of a wireless network?

  A. Router
  B. Switch
  C. Repeater
  D. Media converter
  C. Repeater

• Question 562:

  Which of the following is an XML-based security concept that works by passing sensitve information about users, such as log-in information and attributes, to providers.

  A. IAM
  B. MFA
  C. RADIUS
  D. SAML
  D. SAML

  ---

  Explanation

  Security Assertion Markup Language (SAML) is an XML-based standard used for exchanging authentication and authorization data between parties, particularly between an identity provider (IdP) and a service provider (SP). SAML is commonly used in Single Sign-On (SSO) solutions to pass sensitive user information, such as login credentials and attributes, securely between the identity provider and the service provider.

  SAML (Security Assertion Markup Language): Facilitates web-based authentication and authorization, allowing users to access multiple services with a single set of credentials.

  XML-based: Uses XML to encode the authentication and authorization data, ensuring secure transmission of user information.

  Identity Federation: Enables secure sharing of identity information across different security domains, making it ideal for enterprise SSO solutions.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Covers authentication protocols, including SAML.

  Cisco Networking Academy: Provides training on identity management and federation technologies.

  Network+ Certification All-in-One Exam Guide: Explains SAML and its role in secure identity management and SSO.

• Question 563:

  A network engineer is installing new PoE wireless APs. The first five APs deploy successfully, but the sixth one fails to start.

  Which of the following should the engineer investigate first?

  A. Signal strength
  B. Duplex mismatch
  C. Power budget
  D. CRC
  C. Power budget

  ---

  Explanation

  When deploying multiple Power over Ethernet (PoE) devices, the switch's power budget can be exhausted. If the available wattage on the switch cannot supply the additional AP, it will fail to power on. This is the most likely cause when previous APs worked fine but a new one does not.

  Option A: Signal strength affects wireless connectivity, not whether the AP powers up.

  Option B: Duplex mismatch causes poor throughput, not power failure.

  Option D. CRC errors point to cabling issues but do not prevent booting if no power is available.

  References:

  Domain: Network Troubleshooting -- PoE power budget considerations, device startup issues.

• Question 564:

  Which of the following protocols is used for secure web browsing?

  A. HTTP
  B. FTP
  C. HTTPS
  D. SMTP
  C. HTTPS

  ---

  Explanation

  HTTPS (Hypertext Transfer Protocol Secure) uses SSL/TLS encryption to secure communication between a client and a web server. It ensures confidentiality, integrity, and authentication of transmitted data. HTTP transmits data in plaintext, FTP is used for file transfer, and SMTP is used for email transmission. HTTPS is essential for protecting sensitive information such as login credentials and financial data during web interactions.

• Question 565:

  Which of the following would an adversary do while conducting an evil twin attack?

  A. Trick users into using an AP with an SSID that is identical to a legitimate network
  B. Manipulate address resolution to point devices to a malicious endpoint
  C. Present an identical MAC to gain unauthorized access to network resources
  D. Capture data in transit between two legitimate endpoints to steal data
  A. Trick users into using an AP with an SSID that is identical to a legitimate network

  ---

  Explanation

  An evil twin attack sets up a rogue AP with the same SSID as a legitimate wireless network, tricking users into connecting. Once connected, the attacker can intercept traffic or harvest credentials.

  Option B: Describes ARP spoofing.

  Option C: Describes MAC spoofing.

  Option D: Describes on-path attacks, which may follow, but the evil twin method begins with SSID impersonation.

  References:

  Domain: Network Security -- Wireless threats, rogue APs, evil twin.

• Question 566:

  After installing a series of Cat 8 keystones, a data center architect notices higher than normal interference during tests.

  Which of the following steps should the architect take to troubleshoot the issue?

  A. Check to see if the end connections were wrapped in copper tape before terminating.
  B. Use passthrough modular crimping plugs instead of traditional crimping plugs.
  C. Connect the RX/TX wires to different pins.
  D. Run a speed test on a device that can only achieve 100Mbps speeds.
  A. Check to see if the end connections were wrapped in copper tape before terminating.

• Question 567:

  A network administrator needs to create an SVI on a Layer 3-capable device to separate voice and data traffic.

  Which of the following best explains this use case?

  A. A physical interface used for trunking logical ports
  B. A physical interface used for management access
  C. A logical interface used for the routing of VLANs
  D. A logical interface used when the number of physical ports is insufficient
  C. A logical interface used for the routing of VLANs

  ---

  Explanation

  An SVI, or switched virtual interface, is a logical interface that is created on a Layer 3- capable device, such as a multilayer switch or a router. An SVI is associated with a VLAN and can be used to route traffic between different VLANs on the same device or across multiple devices. An SVI can also provide management access, security features, and quality of service (QoS) for the VLAN. An SVI is different from a physical interface, which is a port that connects to a physical device or network. A physical interface can be used for trunking, which is a method of carrying multiple VLANs over a single link, or for connecting to a single VLAN. An SVI is also different from a subinterface, which is a logical division of a

  physical interface that can be assigned to different VLANs.

• Question 568:

  A network engineer needs to add a boundary network to isolate and separate the internal network from the public-facing internet.

  Which of the following security defense solutions would best accomplish this task?

  A. Trusted zones
  B. URL filtering
  C. ACLs
  D. Screened subnet
  D. Screened subnet

• Question 569:

  An organization requires the ability to send encrypted email messages to a partner from an email server that is hosted on premises. The organization prefers to use the standard default ports when creating firewall rules.

  Which of the following ports should be open to satisfy the requirements?

  A. 110
  B. 143
  C. 587
  D. 636
  C. 587

  ---

  Explanation

  Port 587 is the standard default port for sending email (SMTP) with TLS encryption, which is used to secure email transmissions between mail servers or between clients and mail servers. Allowing traffic over port 587 enables secure email sending while maintaining standard protocol usage.

• Question 570:

  Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?

  A. To encrypt sensitive data in transit
  B. To secure the endpoint
  C. To maintain contractual agreements
  D. To comply with data retentin requirements
  A. To encrypt sensitive data in transit

  ---

  Explanation

  The most likely reason an insurance brokerage would enforce VPN usage is to encrypt sensitive data in transit. VPNs (Virtual Private Networks) create a secure tunnel between the user's device and the corporate network, ensuring that data is encrypted and protected from interception.

  Encryption: VPNs encrypt data, preventing unauthorized access and ensuring data privacy during transmission over public or unsecured networks.

  Data Protection: Essential for industries handling sensitive information, such as insurance brokerages, to protect customer data and comply with regulatory requirements.

  Security: Enhances overall network security by providing secure remote access for employees.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Discusses the role of VPNs in securing data in transit.

  Cisco Networking Academy: Provides training on VPN technologies and their importance in data security.

  Network+ Certification All-in-One Exam Guide: Explains VPN usage and its benefits in protecting sensitive information.