CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 641:

  Which of the following does a router use to determine the preferred route?

  A. Shortest prefix match
  B. Routes learned from EIGRP
  C. Longest prefix match
  D. Routes learned from OSPF
  C. Longest prefix match

  ---

  Explanation

  Routers determine the best route to a destination using longest prefix match. This means the router chooses the route entry with the most specific matching network prefix for the destination IP address. For example, if a routing table contains 10.1.0.0/16 and 10.1.2.0/24, a packet destined to 10.1.2.50 matches both entries, but the router prefers /24 because it is more specific (longer mask). Network+ (N10-009) routing fundamentals emphasize that route selection begins with

  prefix length specificity before considering other factors within the same prefix length (such as administrative distance and metric, depending on the platform).

  "Shortest prefix match" is the opposite of correct behavior. "Routes learned from EIGRP" and "routes learned from OSPF" describe sources of routes, not the general selection rule routers use when multiple matching routes exist. Even if routes come from different protocols, the router still applies selection logic; the universal rule for matching destination networks is longest prefix match. Hence, option C is correct.

• Question 642:

  A network engineer wants to implement an 802.1X architecture in which BYOD devices must access a trusted wireless network securely.

  Which of the following should the engineer implement?

  A. ACL
  B. MAC filtering
  C. Port security
  D. NAC
  D. NAC

  ---

  Explanation

  For a secure 802.1X design that includes BYOD access to a trusted wireless network, the engineer should implement NAC (Network Access Control). In the Network+ (N10-009) objectives, 802.1X provides authentication (commonly via EAP to a RADIUS server), but NAC expands this by enforcing policy-based access decisions - such as device posture checks, user/device identity validation, and dynamic assignment to the appropriate VLAN/role. With BYOD, the organization often needs to confirm whether devices meet requirements (OS version, encryption, security software) and then grant the correct level of access (full, limited, or quarantine/remediation). NAC is the architecture that ties these controls together in a scalable way for wireless networks.

  An ACL can restrict traffic after a device connects, but it doesn't perform authentication/posture assessment. MAC filtering is weak because MAC addresses can be spoofed and it does not provide strong identity assurance. Port security is mainly a wired switch control (limiting MAC addresses per port) and is not the right control set for secure BYOD wireless access. NAC best matches the requirement of secure, policydriven 802.1X BYOD access.

• Question 643:

  Which of the following typically uses compromised systems that become part of a bot network?

  A. Evil twin attack
  B. DDoS attack
  C. XML injection
  D. Brute-force password attack
  B. DDoS attack

  ---

  Explanation

  A DDoS (Distributed Denial of Service) attack is often launched from botnets -- networks of compromised systems (bots or zombies) under the control of an attacker. These devices flood the target with traffic to disrupt services.

  Option A. Evil twin attackis a wireless spoofing method.

  Option C. XML injectiontargets web applications.

  Option D. Brute-force attacksrepeatedly guess passwords but don't involve a botnet by default.

  References:

  CompTIA Network+ N10-009 Official Objectives: 4.2?Identify common security threats and vulnerabilities.

• Question 644:

  A network administrator is implementing security zones for each department.

  Which of the following should the administrator use to accomplish this task?

  A. ACLs
  B. Port security
  C. Content filtering
  D. NAC
  A. ACLs

• Question 645:

  Which of the following services runs on port 636?

  A. SMTP
  B. Syslog
  C. TFTP
  D. LDAPS
  D. LDAPS

  ---

  Explanation

  LDAP over SSL (LDAPS)uses port 636 to provide secure, encrypted authentication for directory services.

  Breakdown of Options:

  Option A. SMTP (Simple Mail Transfer Protocol)-Uses port 25, not 636.

  Option B. Syslog-Uses port 514 (UDP) not 636.

  Option C. TFTP (Trivial File Transfer Protocol)-Uses port 69 (UDP) not 636.

  Option D. LDAPS (Lightweight Directory Access Protocol Secure)- Correct answer. Uses port 636 for secure directory authentication.

• Question 646:

  Which of the following is created to illustrate the effectiveness of wireless networking coverage in a building?

  A. Logical diagram
  B. Layer 3 network diagram
  C. Service-level agreement
  D. Heat map
  D. Heat map

• Question 647:

  An IT administrator needs to connect older smart-plug devices to the network. The administrator wants to prevent future issues from occurring by using an 802.11 standard that only operates on the 2.4GHz frequency.

  Which of the following standards should the administrator choose?

  A. 802.11a
  B. 802.11ac
  C. 802.11ax
  D. 802.11b
  D. 802.11b

  ---

  Explanation

  802.11b is a wireless networking standard that operates on the 2.4 GHz frequency band. It supports a maximum data rate of 11 Mbps and has a range of about 35 meters indoors and 140 meters outdoors. 802.11b is compatible with older smart-plug devices that use the same frequency band, but it may suffer from interference from other devices that also use the 2.4 GHz band, such as microwave ovens, Bluetooth devices, and cordless phones.

• Question 648:

  Which of the following connectors provides console access to a switch?

  A. ST
  B. RJ45
  C. BNC
  D. SFP
  B. RJ45

• Question 649:

  A network administrator wants to restrict inbound traffic to allow only HTTPS to the company website, denying all other inbound traffic from the internet.

  Which of the following would best accomplish this goal?

  A. ACL on the edge firewall
  B. Port security on an access switch
  C. Content filtering on a web gateway
  D. URL filtering on an outbound proxy
  A. ACL on the edge firewall

• Question 650:

  Which of the following connector types would have the MOST flexibility?

  A. SFP
  B. BNC
  C. LC
  D. RJ45
  D. RJ45