CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 581:

  Users are connected to a switch on an Ethernet interface of a campus router. The service provider is connected to the serial 1 interface on the router. The output of the interfaces is:

  E1/0: 192.168.8.1/24

  S1: 192.168.7.252/30

  After router and device configurations are applied, internet access is not possible.

  Which of the following is the most likely cause?

  A. The Ethernet interface was configured with an incorrect IP address.
  B. The router was configured with an incorrect loopback address.
  C. The router was configured with an incorrect default gateway.
  D. The serial interface was configured with the incorrect subnet mask.
  D. The serial interface was configured with the incorrect subnet mask.

• Question 582:

  A security analyst found the following vulnerability on the company's website:

  <INPUT TYPE="IMAGE" SRC="javascript : alert ('test') ; ">

  Which of the following should be implemented to prevent this type of attack in the future?

  A. Input sanitization
  B. Output encoding
  C. Code obfuscation
  D. Prepared statements
  A. Input sanitization

  ---

  Explanation

  Input sanitization is the process of validating and filtering the user input to prevent malicious code or commands from being executed on the web server or the web browser. Input sanitization can prevent this type of attack, which is called cross-site scripting (XSS), by removing or escaping any special characters or scripts that are not expected or allowed in the input field. Input sanitization can be implemented on the server-side or the client-side, or both, to enhance the security of the web application.

• Question 583:

  Which of the following does a hash provide?

  A. Non-repudiation
  B. Integrity
  C. Confidentiality
  D. Availability
  B. Integrity

  ---

  Explanation

  The correct answer is Integrity because a hashing algorithm ensures that data has not been altered. According to CompTIA Network+ (N10-009) security objectives, hashing is a cryptographic process that takes input data of any size and produces a fixed-length output known as a hash value or digest. If even a single bit of the original data changes, the resulting hash value will be significantly different.

  Hashing is commonly used to verify file integrity, validate message authenticity, and securely store passwords. For example, when downloading software, the vendor may publish a hash value so users can calculate the hash of the downloaded file and confirm it matches, ensuring the file was not tampered with.

  Non-repudiation (Option A) typically requires digital signatures that combine hashing with asymmetric encryption to verify the sender's identity.

  Confidentiality (Option C) is achieved through encryption, which protects data from unauthorized access.

  Availability (Option D) refers to ensuring systems and data are accessible when needed and is not related to hashing functions.

  Therefore, hashing primarily provides data integrity verification.

• Question 584:

  A technician is troubleshooting a computer issue for a user who works in a new annex of an office building. The user is reporting slow speeds and intermittent connectivity. The computer is connected via a Cat 6 cable to a distribution switch that is 492ft (150m) away.

  Which of the following should the technician implement to correct the issue?

  A. Increase the bandwidth allocation to the computer.
  B. Install an access switch in the annex and run fiber to the distribution switch.
  C. Run a Cat 7 cable from the computer to the distribution switch.
  D. Enable the computer to support jumbo frames.
  B. Install an access switch in the annex and run fiber to the distribution switch.

  ---

  Explanation

  The maximum recommended length for Ethernet cable runs is 100 meters (328 feet). At 150 meters, the Cat 6 cable is too long, causing signal degradation and connectivity issues. Running fiber from the distribution switch to an access switch in the annex will allow for reliable connectivity over longer distances, as fiber can cover greater distances without signal loss. (Reference: CompTIA Network+ Study Guide, Chapter on Network Cable Standards)

• Question 585:

  A guest wireless network must allow internet access but prevent devices from communicating with each other.

  Which feature should be enabled?

  A. Port security
  B. DHCP snooping
  C. Wireless client isolation
  D. VLAN trunking
  C. Wireless client isolation

• Question 586:

  A network technician is troubleshooting the connection to the company website. The traceroute command produces the following output:

  Traceroute towww.mysite.com(8.8.8.8) over a maximum of 30 hops

  10.1.1.1 <1 ms 2. * <1 ms <1 ms

  k k

  k kTraceroute complete

  Which of the following should the technician do to identify the path to the server?

  A. Review the router's ACL.
  B. Execute netstat.
  C. Perform an nslookup.
  D. Enable LLDP.
  C. Perform an nslookup.

• Question 587:

  Which of the following impacts the availability of a web-based customer portal?

  A. MAC flooding
  B. ARP spoofing
  C. DoS
  D. Rogue devices
  C. DoS

  ---

  Explanation

  A DoS (Denial of Service) attack directly targets availability, one of the core security goals (CIA triad) emphasized in Network+ (N10-009) security objectives. A web-based customer portal depends on reachable services (web servers, load balancers, DNS, upstream bandwidth). In a DoS, an attacker attempts to overwhelm the portal or its supporting infrastructure-consuming bandwidth, exhausting server resources, or saturating state tables-so legitimate users cannot connect or experience severe degradation. This is the most direct and common scenario where "availability" is impacted for a public web service.

  MAC flooding aims to overflow a switch's CAM table and can lead to traffic being broadcast out ports, which is more commonly associated with enabling sniffing or disruption within a local switched network segment-not typically the primary attack described for a web portal's availability. ARP spoofing is a local network man-in-the-middle/redirection technique affecting integrity/confidentiality and potentially availability for local hosts, but it is not the best match for a public portal availability impact. Rogue devices can introduce risk, but the option is broad and indirect; DoS is the clearest availability-focused threat.

• Question 588:

  A company experiences an incident involving a user who connects an unmanaged switch to the network.

  Which of the following technologies should the company implement to help avoid similar incidents without conducting an asset inventory?

  A. Screened subnet
  B. 802.1X
  C. MAC filtering
  D. Port security
  D. Port security

  ---

  Explanation

  Port security is a Layer 2 security feature that restricts the number of devices connecting to a network switch port. It helps prevent unauthorized devices, such as an unmanaged switch, from being connected to the network.

  How Port Security Works:

  Limits the number of MAC addresses that can connect to a port.

  Can shut down or restrict the port if an unauthorized device is detected.

  Prevents users from plugging in unauthorized networking equipment (e.g., unmanaged switches, hubs).

  Incorrect Options:

  Option A:Screened

  Subnet: A screened subnet (DMZ) is used for isolating external-facing servers, not for controlling unauthorized network connections.

  Option B: 802.1X: Provides authentication for devices but requires a RADIUS server, which is a more complex solution than port security.

  Option C:

  MAC Filtering: Controls which MAC addresses can connect but is difficult to manage and can be spoofed.

• Question 589:

  A client wants to increase overall security after a recent breach.

  Which of the following would be best to implement? (Select two.)

  A. Least privilege network access
  B. Dynamic inventeries
  C. Central policy management
  D. Zero-touch provisioning
  E. Configuration drift prevention
  F. Subnet range limits
  A. Least privilege network access
  C. Central policy management

  ---

  Explanation

  To increase overall security after a recent breach, implementing least privilege network access and central policy management are effective strategies.

  Least Privilege Network Access: This principle ensures that users and devices are granted only the access necessary to perform their functions, minimizing the potential for unauthorized access or breaches. By limiting permissions, the risk of an attacker gaining access to critical parts of the network is reduced.

  Central Policy Management: Centralized management of security policies allows for consistent and streamlined implementation of security measures across the entire network. This helps in quickly responding to security incidents, ensuring compliance with security protocols, and reducing the chances of misconfigurations.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Discusses network security principles, including least privilege and policy management. Cisco Networking Academy: Provides training on implementing security policies and access controls.

  Network+ Certification All-in-One Exam Guide: Covers strategies for enhancing network security and managing policies effectively.

• Question 590:

  A network administrator is troubleshooting a connectivity issue between two devices on two different subnets. The administrator verifies that both devices can successfully ping other devices on the same subnet.

  Which of the following is the most likely cause of the connectivity issue?

  A. Incorrect default gateway
  B. Faulty Ethernet cable
  C. Wrong duplex settings
  D. VLAN mismatch
  A. Incorrect default gateway

  ---

  Explanation

  When two devices on different subnets are unable to communicate, but can communicate with other devices on their own subnet, the issue is most often related to routing. Devices on different subnets require a default gateway to route traffic between networks.

  If the default gateway is incorrectly configured, the device won't know how to reach other subnets.

  Faulty cables (Option B) or duplex mismatches (Option C) would likely cause connectivity issues even within the local subnet, which is not the case here. VLAN mismatches (Option D) are typically issues with switch port configurations and would likely cause total loss of connectivity, including within the same subnet.

  So, the most probable and logical cause is an incorrect default gateway.