CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 701:

  A network administrator needs to assign IP addresses automatically to devices.

  Which of the following should be configured?

  A. DNS
  B. DHCP
  C. FTP
  D. SMTP
  B. DHCP

  ---

  Explanation

  Dynamic Host Configuration Protocol (DHCP) automatically assigns IP addresses, subnet masks, default gateways, and other network settings to devices on a network. This eliminates the need for manual configuration and reduces errors.

  DNS is used for name resolution, while FTP and SMTP are application-layer protocols for file transfer and email. DHCP improves scalability and simplifies network administration by centrally managing IP address allocation.

• Question 702:

  A technician is troubleshooting servers with high CPU usage. While trying to connect, the technician needs to open a port for remote access.

  Which of the following ports should the technician open?

  A. 443
  B. 3321
  C. 8080
  D. 5900
  D. 5900

  ---

  Explanation

  Port 5900 is used by VNC (Virtual Network Computing), which provides remote graphical access to a system.

  VNC allows a user to view and control a remote desktop, making it useful for remote troubleshooting and administration.

  Port 443 is used for HTTPS and is not used for remote desktop control.

  Port 8080 is an alternative HTTP port and is typically used for web services.

  Port 3321 is not commonly associated with standard remote access tools.

  Therefore, port 5900 is the correct answer.

• Question 703:

  SIMULATION

  A network technician was recently onboarded to a company. A manager has

  tasked the technician with documenting the network and has provided the technician With partial information from previous documentation.

  Instructions:

  Click on each switch to perform a network discovery by entering commands into the terminal. Fill in the missing information using drop-down menus provided.

  

  

  A. See the for detailed information on this simulation. (Note: Ips will be change on each simulation task, so we have given example answer for the understanding)
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the for detailed information on this simulation. (Note: Ips will be change on each simulation task, so we have given example answer for the understanding)

  ---

  Explanation

  To perform a network discovery by entering commands into the terminal, you can use the following steps:

  Click on each switch to open its terminal window.

  Enter the command show ip interface brief to display the IP addresses and statuses of the switch interfaces.

  Enter the command show vlan brief to display the VLAN configurations and assignments of the switch interfaces.

  Enter the command show cdp neighbors to display the information about the neighboring devices that are connected to the switch. Fill in the missing information in the diagram using the drop-down menus provided. Here is an example of how to fill in the missing information for Core Switch 1:

  The IP address of Core Switch 1 is 192.168.1.1.

  The VLAN configuration of Core Switch 1 is VLAN 1: 192.168.1.0/24, VLAN 2:

  192.168.2.0/24, VLAN 3: 192.168.3.0/24.

  The neighboring devices of Core Switch 1 are Access Switch 1 and Access Switch 2.

  The interfaces that connect Core Switch 1 to Access Switch 1 are GigabitEthernet0/1 and GigabitEthernet0/2.

  The interfaces that connect Core Switch 1 to Access Switch 2 are GigabitEthernet0/3 and GigabitEthernet0/4.

  You can use the same steps to fill in the missing information for Access Switch 1 and Access Switch 2.

• Question 704:

  A network engineer is configuring network ports in a public office. To increase security, the engineer wants the ports to allow network connections only after authentication.

  Which of the following security features should the engineer use?

  A. Port security
  B. 802.1X
  C. MAC filtering
  D. Access control list
  B. 802.1X

  ---

  Explanation

  802.1X provides port-based Network Access Control (NAC). Ports remain in a blocked state until a device authenticates (usually with RADIUS). This is ideal for public or semi-public areas where ports should not be "always on."

  Option A: Port security restricts by MAC addresses but does not authenticate users.

  Option C: MAC filtering is easily spoofed and weaker than 802.1X.

  Option D: ACLs filter traffic but do not enforce port-based authentication.

  References:

  Domain: Network Security -- NAC, 802.1X authentication, port-based security.

• Question 705:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic.

  Which of the following should the administrator use?

  A. SNMP trap
  B. Port mirroring
  C. Syslog collection
  D. API integration
  B. Port mirroring

  ---

  Explanation

  Port mirroring (also known as SPAN - Switched Port Analyzer) is the process of forwarding a copy of network packets from one port on a network switch to another port, where the packets can be analyzed. In this scenario, the network administrator should use port mirroring to send a copy of the network traffic to the passive IDS (Intrusion Detection System) for inspection without interrupting the normal flow of traffic on the network. This allows the IDS to monitor the network traffic and detect any suspicious or malicious activity.

• Question 706:

  A network engineer is deploying switches at a new remote office. The switches have been preconfigured with hostnames and STP priority values. Based on the following table:

  Switch Name

  Priority

  core-sw01

  24576

  access-sw01

  28672

  distribution-sw01

  32768

  access-sw02

  36864

  Which of the following switches will become the root bridge?

  A. core-sw01
  B. access-sw01
  C. distribution-sw01
  D. access-sw02
  A. core-sw01

• Question 707:

  Which of the following disaster recovery metrics is used to describe the amount of data that is lost since the last backup?

  A. MTTR
  B. RTO
  C. RPO
  D. MTBF
  C. RPO

• Question 708:

  Which of the following best describes the amount of time between a disruptive event and the point that affected resources need to be back to fully functional status?

  A. RTO
  B. MTBF
  C. RPO
  D. MTTR
  A. RTO

  ---

  Explanation

  The correct metric is RTO (Recovery Time Objective). RTO defines the maximum acceptable time to restore services after a disruption, ensuring business continuity. For example, if the RTO is 4 hours, systems must be back online within that timeframe after an outage.

  Option B: MTBF (Mean Time Between Failures) measures reliability by calculating the average time between hardware failures.

  Option C: RPO (Recovery Point Objective) defines how much data loss (in terms of time, such as last backup point) is acceptable.

  Option D: MTTR (Mean Time to Repair) measures the average time taken to fix a failure but is not a predefined business requirement like RTO.

  Organizations define RTOs during disaster recovery planning to align IT recovery capabilities with business needs.

  References:

  Domain: Networking Concepts -- Business continuity metrics (RTO, RPO, MTBF, MTTR).

• Question 709:

  Which of the following network devices converts wireless signals to electronic signals?

  A. Router
  B. Firewall
  C. Access point
  D. Load balancer
  C. Access point

• Question 710:

  Which devices typically use PoE? (Select TWO)

  A. VoIP phones
  B. IP cameras
  C. Printers
  D. Laptops
  A. VoIP phones
  B. IP cameras