CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 631:

  A company has been added to an unapproved list because of spam. The network administrator confirmed that a workstation was infected by malware.

  Which of the following processes did the administrator use to identify the root cause?

  A. Traffic analysis
  B. Availability monitoring
  C. Baseline metrics
  D. Network discovery
  A. Traffic analysis

  ---

  Explanation

  Traffic analysis involves monitoring and inspecting network traffic flows to detect unusual patterns, such as a workstation sending large volumes of outbound SMTP (spam). This process enables identification of malware as the root cause.

  Option B: Availability monitoring checks uptime but doesn't diagnose spam traffic.

  Option C: Baseline metrics show normal usage but don't pinpoint infected hosts.

  Option D: Network discovery identifies devices, not malicious traffic flows.

  References:

  Domain: Network Security -- Traffic analysis, malware detection, identifying compromised hosts.

• Question 632:

  Which of the following protocols is used to synchronize time across network devices?

  A. SNMP
  B. NTP
  C. FTP
  D. TFTP
  B. NTP

  ---

  Explanation

  Network Time Protocol (NTP) is used to synchronize the clocks of network devices to a reliable time source. Accurate timekeeping is critical for logging, authentication, and event correlation across systems. SNMP is used for monitoring, while FTP and TFTP are file transfer protocols. NTP operates in a hierarchical system of time sources, ensuring consistent and precise time across all devices in the network.

• Question 633:

  A network administrator wants an automatic alert to be sent when a switch ' s link status changes, administered through SNMP.

  Which of the following SNMP technologies will allow for this alert?

  A. Trap
  B. Object identifier
  C. String
  D. MIB
  A. Trap

  ---

  Explanation

  The right answer is A. Trap. In SNMP, a trap is an unsolicited notification sent from a managed device to the management system when a significant event happens. A switch detecting that an interface has gone up or down is a textbook example of the kind of event that can trigger this kind of message.

  That is different from normal SNMP polling, where the monitoring server asks the device for status information on a schedule. With a trap, the device does not wait to be asked. It sends the alert immediately, which makes it useful for link failures, threshold violations, and other time-sensitive conditions. The other choices are related to SNMP, but not in the same way. An object identifier (OID) points to a specific managed value. A string is commonly associated with SNMP community information in older versions. A MIB is the structured database of manageable objects. None of those are the actual alerting mechanism.

  Because the question asks for an automatic alert when link status changes, the feature being described is clearly an SNMP trap.

• Question 634:

  Which of the following could provide a lightweight and private connection to a remote box?

  A. Site-to-site VPN
  B. Telnet
  C. Console
  D. Secure Shell
  D. Secure Shell

  ---

  Explanation

  Secure Shell (SSH)is a protocol used to securely access remote devices over an unsecured network. It provides encrypted command-line access and is a lightweight and secure method of remote administration.

  Option A. Site-to-site VPNconnects entire networks, not just a single host.

  Option B. Telnetis not secure; it transmits data (including credentials) in plaintext.

  Option C. Consoleaccess is direct via serial cable, not remote.

  References:

  CompTIA Network+ N10-009 Official Objectives: 2.6?Configure and troubleshoot remote access.

• Question 635:

  A technician just validated a theory that resolved a network outage. The technician then verified that all users could access resources.

  Which of the following is the next step the technician should take in the network troubleshooting methodology?

  A. Verify the services are restored.
  B. Test a new theory.
  C. Write the lessons learned.
  D. Identify where the network outage is occurring.
  C. Write the lessons learned.

  ---

  Explanation

  The network troubleshooting methodology is a systematic process of identifying and resolving network problems. It consists of eight steps:

  1. Identify the problem.

  2. Establish a theory of probable cause.

  3. Test the theory to determine the cause.

  4. Establish a plan of action to resolve the problem and identify potential effects.

  5. Implement the solution or escalate as necessary.

  6. Verify full system functionality and, if applicable, implement preventive measures.

  7. Document findings, actions, and outcomes.

  8. Write the lessons learned.

  The last step, writing the lessons learned, is important for improving the network troubleshooting skills and knowledge. It involves reviewing the entire troubleshooting process, analyzing the root cause of the problem, evaluating the effectiveness of the solution, and identifying any best practices, tips, or tools that can be used for future reference. Writing the lessons learned can also help to update the network documentation, policies, and procedures, and share the experience and feedback with other network professionals

• Question 636:

  A network administrator is configuring access points for installation in a dense environment where coverage is often overlapping.

  Which of the following channel widths should the administrator choose to help minimize interference in the 2.4GHz spectrum?

  A. 11MHz
  B. 20MHz
  C. 40MHz
  D. 80MHz
  E. 160MHz
  B. 20MHz

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Wireless Networks section.

• Question 637:

  During a VoIP call, a user notices inconsistent audio and logs an incident ticket. A network administrator notices inconsistent delays in arrival of the RTP packets.

  Which of the following troubleshooting tools should the network administrator use to determine the issue?

  A. Toner and probe
  B. Protocol analyzer
  C. Cable tester
  D. Spectrum reader
  B. Protocol analyzer

  ---

  Explanation

  Inconsistent arrival of RTP (Real-Time Protocol) packets indicates jitter or latency variation. A protocol analyzer (packet sniffer, e.g., Wireshark) can capture and analyze RTP streams, showing delay, jitter, and packet loss statistics.

  Option A: Toner and probe locates cable runs, not packet analysis.

  Option C: Cable tester checks wiring faults, not packet timing.

  Option D: Spectrum reader is for identifying wireless interference, not analyzing RTP traffic.

  References:

  Domain: Network Troubleshooting -- Protocol analyzers, VoIP troubleshooting, jitter analysis.

• Question 638:

  Which of the following technologies is the best choice listen for requests and distribute user traffic to across web servers?

  A. Router
  B. Switch
  C. Firewall
  D. Load balancer
  D. Load balancer

  ---

  Explanation

  A load balancer is designed to distribute user requests across multiple servers to ensure high availability and performance.

  Breakdown of Options:

  Option A. Router-Directs traffic between networks not between web servers.

  Option B. Switch-Works at Layer 2, does not distribute web traffic.

  Option C. Firewall-Secures network traffic, but does not distribute load.

  Option D. Load balancer-Correct answer.Optimizes web traffic distribution across multiple servers.

• Question 639:

  Which of the following is the most cost-effective way to safely expand outlet capacity in an IDF?

  A. PDU
  B. Surge protector
  C. UPS
  D. Power strip
  A. PDU

• Question 640:

  Users report latency with a SaaS application.

  Which of the following should a technician adjust to fix the issue?

  A. Server hardware specifications
  B. Data-at-rest encryption settings
  C. Network bandwidth and utilization
  D. Virtual machine configurations
  C. Network bandwidth and utilization

  ---

  Explanation

  The correct answer is Network bandwidth and utilization because latency issues with a SaaS (Software as a Service) application are most commonly related to network performance constraints, not local server hardware or virtualization settings. According to CompTIA Network+ (N10-009) troubleshooting objectives, technicians should evaluate bandwidth capacity, throughput, congestion, packet loss, and overall utilization when diagnosing performance issues affecting cloud-based applications.

  Since SaaS applications are hosted externally by a service provider, the organization typically does not control the underlying server hardware or virtual machine configurations (Options A and D). Therefore, adjusting internal server specifications would not resolve user-side latency.

  Option B, data-at-rest encryption, applies to stored data security and does not impact real-time application responsiveness.

  High network utilization, insufficient bandwidth, QoS misconfiguration, or WAN congestion can significantly increase latency. Technicians should review network monitoring tools, check interface statistics, analyze traffic patterns, and verify Quality of Service (QoS) policies to ensure SaaS traffic is prioritized appropriately.

  Thus, optimizing bandwidth and reducing network congestion is the most appropriate corrective action.