CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 731:

  Which of the following can centrally manage credentials for administrative access?

  A. SSO
  B. TACACS+
  C. Zero Trust
  D. Separation of duties
  E. MFA
  B. TACACS+

• Question 732:

  Which of the following is used most often when implementing a secure VPN?

  A. IPSec
  B. GRE
  C. BGP
  D. SSH
  A. IPSec

  ---

  Explanation

  The most common protocol for secure VPNs is IPsec (Internet Protocol Security). IPsec provides confidentiality, integrity, and authentication for VPN traffic, typically using ESP (Encapsulating Security Payload). It is used in both site-to-site and remote access VPNs.

  Option B: GRE encapsulates traffic but does not provide encryption.

  Option C: BGP is a routing protocol, not a VPN technology.

  Option D: SSH can be used for secure tunneling but is not the standard for VPN deployment.

  IPsec is the industry standard because it operates at Layer 3, securing IP traffic regardless of the application, making it highly versatile.

  References:

  Domain: Network Security -- VPN protocols, IPsec, ESP.

• Question 733:

  A company is purchasing a 40Gbps broadband connection service from an ISP.

  Which of the following should most likely be configured on the 10G switch to take advantage of the new service?

  A. 802.1Q tagging
  B. Jumbo frames
  C. Half duplex
  D. Link aggregation
  D. Link aggregation

  ---

  Explanation

  Since the switch supports only 10Gbps per port, achieving 40Gbps throughput requires link aggregation (LACP), which combines multiple 10Gbps links into one logical interface for higher bandwidth.

  Breakdown of Options:

  Option A. 802.1Q tagging-VLAN tagging helps segment traffic but does not increase throughput.

  Option B. Jumbo frames-Jumbo frames reduce overhead but do not increase bandwidth.

  Option C. Half duplex-Half duplex restricts communication reducing, performance instead of improving it.

  Option D. Link aggregation-Correct answer. LACP combines multiple 10Gbps links to provide a 40Gbps connection.

• Question 734:

  A network administrator is configuring a new switch and wants to ensure that only assigned devices can connect to the switch.

  Which of the following should the administrator do?

  A. Configure ACLs.
  B. Implement a captive portal.
  C. Enable port security.
  D. Disable unnecessary services.
  C. Enable port security.

  ---

  Explanation

  References:

  CompTIA Network+ Certification Exam Objectives - Network Security section.

• Question 735:

  A network consultant is installing a new wireless network with the following specifications:

  1. 5GHz

  2. 1,300Mbps

  3. 20/40/80MHZ

  Which of the following standards should the network consultant use?

  A. 802.11a
  B. 802.11ac
  C. 802.11b
  D. 802.11n
  B. 802.11ac

• Question 736:

  A network engineer queries a hostname using dig, and a valid IP address is returned. However, when the engineer queries that same IP address using dig, no hostname is returned.

  Which of the following DNS records is missing?

  A. MX
  B. CNAME
  C. AAAA
  D. PTR
  D. PTR

  ---

  Explanation

  This scenario describes a successful forward DNS lookup (hostname # IP address) but a failed reverse DNS lookup (IP address # hostname). Reverse lookups rely on a PTR (Pointer) record, which is stored in a reverse lookup zone (in- addr.arpa for IPv4, ip6.arpa for IPv6). If the engineer can resolve the hostname to an IP, that indicates an A record (or possibly AAAA for IPv6) exists and is functioning. But when querying the IP directly and receiving no hostname, the most likely issue is that the reverse mapping is not configured-meaning the PTR record is missing.

  An MX record is used for mail exchange routing, not hostname resolution. A CNAME provides an alias from one hostname to another and does not create reverse mappings. An AAAA record maps a hostname to an IPv6 address; it is not used for reverse lookups of an IP to a name. Network+ objectives emphasize understanding common DNS record types and the difference between forward and reverse resolution, making PTR the correct missing record here.

• Question 737:

  A public library wants to implement a solution in which users need to connect to the wireless network and then authenticate via HTTPS with provided credentials.

  Which of the following technologies fulfills this requirement?

  A. WPA3
  B. Captive portal
  C. Single sign-on
  D. SAML
  B. Captive portal

  ---

  Explanation

  The correct choice is B. Captive portal. This is the common setup used in places like libraries, hotels, airports, and cafes. A user first joins the wireless network, opens a browser, and is redirected to a web page where they must log in, accept terms, or enter provided credentials. Since the question specifically mentions authentication through HTTPS, that matches the behavior of a captive portal very closely.

  The other options do not line up with the scenario. WPA3 is a wireless encryption and authentication standard, but it is not the same as a browser-based login page after connection. Single sign-on and SAML are identity and federation technologies used to simplify authentication across applications or services, not to provide the typical guest Wi-Fi web login experience. The important clue is the sequence described in the question: first connect to Wi-Fi, then authenticate through a web page. That is exactly how a captive portal works. In many public-access wireless environments, the portal sits between the client and normal internet access until the user successfully authenticates or accepts the usage policy.

  For Network+ exam purposes, browser-based guest wireless authentication is most directly associated with a captive portal.

• Question 738:

  An organizatin is struggling to get effective coverage using the wireless network. The organization wants to implement a solution that will allow for continous connectivity anywhere in the facility.

  Which of the following should the network administ rator suggest to ensure the best coverage?

  A. Implementing additional ad hoc access points
  B. Providing more Ethernet drops for user connections
  C. Deploying a mesh network in the building
  D. Changing the current frequency of the Wi-Fi
  C. Deploying a mesh network in the building

• Question 739:

  A network technician is troubleshooting a faulty NIC and tests the theory.

  Which of the following should the technician do next?

  A. Develop a theory.
  B. Establish a plan of action.
  C. Implement the solution.
  D. Document the findings.
  B. Establish a plan of action.

  ---

  Explanation

  CompTIA Troubleshooting Methodology Steps:

  1. Identify the problem 2. Establish a theory of probable cause

  3. Test the theory - already done in the scenario 4. Establish a plan of action - next step

  5. Implement the solution

  6. Verify full system functionality

  7. Document findings Once the theory has been tested and confirmed, the next step is to create a plan to resolve the issue safely and efficiently.

• Question 740:

  A technician configures a switch port to carry traffic for multiple VLANs between switches.

  Which of the following port types is being used?

  A. Access port
  B. Routed port
  C. Trunk port
  D. Loopback port
  C. Trunk port

  ---

  Explanation

  A trunk port is used to transmit traffic for multiple VLANs across a single physical link. This is achieved through VLAN tagging, typically using IEEE 802.1Q, which adds a tag to Ethernet frames to identify the VLAN to which the traffic belongs.

  Access ports, in contrast, carry traffic for only a single VLAN and are typically used for end devices. Routed ports operate at Layer 3 and do not carry VLAN tags. Loopback ports are virtual interfaces used for testing. Therefore, when multiple VLANs need to traverse between switches, trunk ports are required to maintain VLAN segmentation across the network.