wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

CompTIA N+ N10 009 (Exam Set 2025)

Total questions: 80

Worksheet time: 42mins

Name
Class
Date
1.

A client wants to increase overall security after a recent breach. Which of the following would be

best to implement? (Select two.)

a)

Least privilege network access

b)

Dynamic inventeries

c)

Central policy management

d)

Zero-touch provisioning

e)

Configuration drift prevention

2.

Which of the following allows for the interception of traffic between the source and destination?

a)

Self-signed certificate

b)

VLAN hopping

c)

On-path attack

d)

Phishing

3.

A network administrator is planning to implement device monitoring to enhance network visibility.

The security that the solution provides authentication and encryption. Which of the following meets

these requirements?

a)

SIEM

b)

Syslog

c)

NetFlow

d)

SNMPv3

4.

Which of the following allows a remote user to connect to the network?

a)

Command-line interface

b)

API gateway

c)

Client-to-site VPN

d)

Jump box

5.

Which of the following could provide a lightweight and private connection to a remote box?

a)

Site-to-site VPN

b)

Telnet

c)

Console

d)

Secure Shell

6.

Which of the following network devices converts wireless signals to electronic signals?

a)

Router

b)

Firewall

c)

Access point

d)

Load balancer

7.

Which of the following fiber connector types is the most likely to be used on a network interface

card?

a)

LC

b)

SC

c)

ST

d)

MPO

8.

Which of the following attacks can cause users who are attempting to access a company website to

be directed to an entirely different website?

a)

DNS poisoning

b)

Denial-of-service

c)

Social engineering

d)

ARP spoofing

9.

A network administrator is connecting two Layer 2 switches in a network. These switches must

transfer data in multiple networks. Which of the following would fulfill this requirement?

a)

Jumbo frames

b)

802.1Q tagging

c)

Native VLAN

d)

Link aggregation

10.

Which of the following most likely requires the use of subinterfaces?

a)

A router with only one available LAN port

b)

A firewall performing deep packet inspection

c)

A hub utilizing jumbo frames

d)

A switch using Spanning Tree Protocol

11.

A support agent receives a report that a remote user’s wired devices are constantly disconnecting

and have slow speeds. Upon inspection, the support agent sees that the user’s coaxial modern has a

signal power of -97dB.

a)

Removing any spliters connecte to the line

b)

Switching the devices to wireless

c)

Moving the devices closer to the modern

d)

Lowering the network speed

12.

A network manager wants to implement a SIEM system to correlate system events. Which of the

following protocols should the network manager verify?

a)

NTP

b)

DNS

c)

LDAPS

d)

DHCP

13.

A network administrator's device is experiencing severe Wi-Fi interference within the corporate

headquarters causing the device to constantly drop off the network. Which of the following is most

likely the cause of the issue?

a)

Too much wireless reflection

b)

Too much wireless absorption

c)

Too many wireless repeaters

d)

Too many client connections

14.

A company's marketing team created a new application and would like to create a DNS record for

newapplication.comptia.org that always resolves to the same address as www.comptia.org. Which of

the following records should the administrator use?

a)

SOA

b)

MX

c)

CNAME

d)

NS

15.

Which of the following would be violated if an employee accidentally deleted a customer's data?

a)

Integrity

b)

Confidentiality

c)

Vulnerability

d)

Availability

16.

Which of the following are the best device-hardening techniques for network security? (Select two).

a)

Disabling unused ports

b)

Performing regular scanning of unauthorized devices

c)

Monitoring system logs for irregularities

d)

Enabling logical security such as SSO

e)

Changing default passwords

17.

A company's network is experiencing high latency and packet loss during peak hours. Network

monitoring tools show increased traffic on a switch. Which of the following should a network

technician implement to reduce the network congestion and improve performance?

a)

Load balancing

b)

Port mirroring

c)

Quality of Service

d)

Spanning Tree Protocol

18.

An organization requires the ability to send encrypted email messages to a partner from an email

server that is hosted on premises. The organization prefers to use the standard default ports when

creating firewall rules. Which of the following ports should be open to satisfy the requirements?

a)

110

b)

143

c)

587

d)

636

19.

Which of the following is the MOST appropriate solution to extend the network to a building located

across the street from the main facility?

a)

Multimode fiber

b)

802.11ac wireless bridge

c)

Cat 6 copper

d)

Loopback adapter

20.

To reduce costs and increase mobility, a Chief Technology Officer (CTO) wants to adopt cloud services

for the organization and its affiliates. To reduce the impact for users, the CTO wants key services to

run from the on-site data center and enterprise services to run in the cloud. Which of the following

deployment models is the best choice for the organization?

a)

Public

b)

Hybrid

c)

SaaS

d)

Private

21.

After running a Cat 8 cable using passthrough plugs, an electrician notices that connected cables are

experiencing a lot of cross talk. Which of the following troubleshooting steps should the electrician

take first?

a)

Inspect the connectors for any wires that are touching or exposed

b)

Restore default settings on the connected devices.

c)

Terminate the connections again.

d)

Check for radio frequency interference in the area.

22.

A network administrator is configuring a new switch and wants to ensure that only assigned devices

can connect to the switch. Which of the following should the administrator do?

a)

Configure ACLs.

b)

Implement a captive portal.

c)

Enable port security.

d)

Disable unnecessaryservices

23.

A company discovers on video surveillance recordings that an unauthorized person installed a rogue

access point in its secure facility. Which of the following allowed the unauthorized person to do this?

a)

Evil twin

b)

Honeytrap

c)

Wardriving

d)

Tailgating

24.

A systems administrator is configuring a new device to be added to the network. The administrator is

planning to perform device hardening prior to connecting the device. Which of the following should

the administrator do first?

a)

Update the network ACLs.

b)

Place the device in a screened subnet.

c)

Enable content filtering

d)

Change the default admin passwords

25.

Which of the following allows a user to connect to an isolated device on a stand-alone network?

a)

Jump box

b)

API gateway

c)

Secure Shell (SSH)

d)

Clientless VPN

26.

Which of the following explains what happens if a packet is lost in transit when using UDP?

a)

The data link layer will recognize the error and resend the packet

b)

IP uses the TTL field to track packet hops and will resend the packet if necessary

c)

If the sender does not receive a UDP acknowledgement, the packet will be resent

d)

Some applications will recognize the loss and initiate a resend of the packet if necessary.

27.

An investment bank is seeking a DR backup solution. Which of the following provides the most costeffective

backup site?

a)

Hot

b)

Cold

c)

Cluster

d)

Warm

28.

A company has observed increased user traffic to gambling websites and wants to limit this behavior

on work computers. Which of the following should the company most likely implement?

a)

ACLs

b)

Content filter

c)

Port security

d)

Screened subnet

29.

A company is hosting a secure that requires all connections to the server to be encrypted. A junior

administrator needs to harded the web server. The following ports on the web server. The following

ports on the web server are open:

a)

22

b)

80

c)

443

d)

587

30.

Which of the following ports creates a secure connection to a directory service?

a)

22

b)

389

c)

445

d)

636

31.

Which of the following dynamic routing protocols is used on the internet?

a)

EIGRP

b)

BGP

c)

RIP

d)

OSPF

32.

A storage network requires reduced overhead and increased efficiency for the amout of data being

sent. Which of the following should an engineer likely configure to meet these requirements

a)

Link speed

b)

Jumbo frames

c)

QoS

d)

802.1q tagging

33.

A network technician is troubleshooting a faulty NIC and tests the theory. Which of the following

should the technician do next?

a)

Develop a theory.

b)

Establish a plan of action

c)

Implement the solution

d)

Document the findings

34.

A network consultant needs to decide between running an ethernet uplink or using the built-in

5GHz-to-point functionality on a WAP. Which of the following documents provides the best

information to assist the consultant with this decision?

a)

Site survey results

b)

Physical diagram

c)

Service-level agreement

d)

Logical diagram

35.

Users cannot connect to an internal website with an IP address 10.249.3.76. A network administrator

runs a command and receives the following output:

1 3ms 2ms 3ms 192.168.25.234

2 2ms 3ms 1ms 192.168.3.100

3 4ms 5ms 2ms 10.249.3.1

4 *

5 ’

6 *

7 •

Which of the following command-line tools is the network administrator using?

a)

tracert

b)

tcpdump

c)

nmap

d)

ping

36.

Which of the following best describes the transmission format that occurs at the transport layer over

connectionless communication?

a)

Datagram

b)

Segment

c)

Frames

d)

Packets

37.

Which of the following typically uses compromised systems that become part of a bot network?

a)

Evil twin attack

b)

DDoS attack

c)

XML injection

d)

Brute-force password attack

38.

Which of the following connectors allows a singular QSFP transceiver to have several physical

connections?

a)

RJ45

b)

ST

c)

LC

d)

MPO

39.

Which of the following ports is used for secure email?

a)

25

b)

110

c)

143

d)

587

40.

A network technician receives a new ticket while working on another issue. The new ticket is critical

to business operations. Which of the following documents should the technician reference to

determine which ticket to complete first?

a)

NDA

b)

AUP

c)

SLA

d)

MOU

41.

A network administrator is in the process of installing 35 PoE security cameras. After the

administrator installed and tested the new cables, the administrator installed the cameras. However,

a small number of the cameras do not work. Which of the following is the most reason?

a)

Incorrect wiring standard

b)

Power budget exceeded

c)

Signal attenuation

d)

Signal attenuation

42.

A network engineer is setting up a new VoIP network for a customer. The current network is

segmented only for computers and servers. No additional switch ports can be used in the new

network. Which of the following does the engineer need to do to configure the network correctly?

(Select TWO).

a)

Change network translation definitions

b)

Enable 802.1Q

c)

Implement a routing protocol

d)

Set up voice VLANs

e)

Reconfigure the DNS

43.

A network administrator wants to configure a backup route in case the primary route fails. A dynamic

routing protocol is not installed on the router. Which of the following routing features should the

administrator choose to accomplish this task?

a)

Neighbor adjacency

b)

Link state flooding

c)

Administrative distance

d)

Hop count

44.

Which of the following services runs on port 636?

a)

SMTP

b)

Syslog

c)

TFTP

d)

LDAPS

45.

In an environment with one router, which of the following will allow a network engineer to

communicate between VLANs without purchasing additional hardware?

a)

Subinterfaces

b)

VXLAN

c)

Layer 3 switch

d)

VIR

46.

Which of the following would most likely be utilized to implement encryption in transit when using

HTTPS?

a)

SSH

b)

TLS

c)

SCADA

d)

RADIUS

47.

A customer calls the help desk to report issues connection to the internet. The customer can reach a

local database server. A technician goes to the site and examines the configuration:

Which of the following is causing the user's issue?

a)

Incorrect DNS

b)

Unreachable gateway

c)

Failed root bridge

d)

Poor upstream routing

48.

Which of the following is most commonly associated with many systems sharing one IP address in

the public IP-addressing space?

a)

PAT

b)

NAT

c)

VIP

d)

NAT64

49.

A company receives a cease-and-desist order from its ISP regarding prohibited torrent activity. Which

of the following should be implemented to comply with the cease-and-desist order?

a)

MAC security

b)

Content filtering

c)

Screened subnet

d)

Perimeter network

50.

A network administrator is configuring access points for installation in a dense environment where

coverage is often overlapping. Which of the following channel widths should the administrator

choose to help minimize interference in the 2.4GHz spectrum?

a)

11MHz

b)

20MHz

c)

40MHz

d)

80MHz

e)

80MHz

51.

A network administrator notices interference with industrial equipment in the 2.4GHz range. Which

of the following technologies would most likely mitigate this issue? (Select two).

a)

Mesh network

b)

5GHz frequency

c)

Omnidirectional antenna

d)

Non-overlapping channel

e)

Captive portal

52.

A network administrator installed a new VLAN to the network after a company added an additional

floor to the office. Users are unable to obtain an IP address on the new VLAN, but ports on existing

VLANs are working properly. Which of the following configurations should the administrator update?

a)

Scope size

b)

Address reservations

c)

Lease time

d)

IP helper

53.

A user's VoIP phone and workstation are connected through an inline cable. The user reports that the

VoIP phone intermittently reboots, but the workstation is not having any network-related issues

Which of the following is the most likely cause?

a)

The PoE power budget is exceeded

b)

Port security is violated.The signal is degraded

c)

The signal is degraded

d)

The Ethernet cable is not working

54.

Which of the following technologies is the best choice to listen for requests and distribute user traffic

across web servers?

a)

Router

b)

Switch

c)

Firewall

d)

Load balancer

55.

Which of the following can be implemented to add an additional layer of security between a

corporate network and network management interfaces?

a)

Jump box

b)

Console server

c)

API interface

d)

In-band management

56.

Which of the following is used to stage copies of a website closer to geographically dispersed users?

a)

VPN

b)

CDN

c)

SAN

d)

SDN

57.

Which of the following requires network devices to be managed using a different set of IP addresses?

a)

Console

b)

Split tunnel

c)

Jump box

d)

Out of band

58.

A network engineer is now in charge of all SNMP management in the organization. The engineer

must use a SNMP version that does not utilize plaintext dat

a. Which of the following is the minimum version of SNMP that supports this requirement?

a)

v1

b)

v2c

c)

v2u

d)

v3

59.

A network administrator needs to create a way to redirect a network resource that has been on the

local network but is now hosted as a SaaS solution. Which of the following records should be used to

accomplish the task?

a)

TXT

b)

AAAA

c)

PTR

d)

CNAME

60.

A critical infrastructure switch is identified as end-of-support. Which of the following is the best next

step to ensure security?

a)

Apply the latest patches and bug fixes

b)

Decommission and replace the switch.

c)

Ensure the current firmware has no issues.

d)

Isolate the switch from the network

61.

Which of the following must be implemented to securely connect a company's headquarters with a

branch location?

a)

Split-tunnel VPN

b)

Clientless VPN

c)

Full-tunnel VPN

d)

Site-to-site VPN

62.

A medical clinic recently configured a guest wireless network on the existing router. Since then,

guests have been changing the music on the speaker system. Which of the following actions should

the clinic take to prevent unauthorized access? (Select two).

a)

Isolate smart devices to their own network segment

b)

Configure IPS to prevent guests from making changes

c)

Install a new AP on the network

d)

Set up a syslog server to log who is making changes

e)

Change the default credentials.

63.

An ISP provided a company with a pre-configured modem and five public static IP addresses. Which

of the following does the company's firewall require to access the internet? (Select TWO).

a)

NTP server

b)

Default gateway

c)

The modem's IP address

d)

One static IP address

e)

DNS servers

64.

Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?

a)

To encrypt sensitive data in transit

b)

To secure the endpoint

c)

To maintain contractual agreements

d)

To comply with data retentin requirements

65.

Which of the following connector types would most likely be used to connect to an external

antenna?

a)

BNC

b)

ST

c)

LC

d)

MPO

66.

A network administrator has been monitoring the company's servers to ensure that they are

available. Which of the following should the administrator use for this task?

a)

Packet capture

b)

Data usage reports

c)

SNMP traps

d)

Configuration monitoring

67.

A user is unable to navigate to a website because the provided URL is not resolving to the correct IP

address. Other users are able to navigate to the intended website without issue. Which of the

following is most likely causing this issue?

a)

Hosts file

b)

Self-signed certificate

c)

Nameserver record

d)

IP helperANS

68.

A network administrator needs to fail over services to an off-site environment. This process will take

four weeks to become fully operational. Which of the following DR (Disaster Recovery) concepts

does this describe?

a)

Hot site

b)

Warm site

c)

Cold site

d)

Active-active approach

69.

Before using a guest network, an administrator requires users to accept the terms of use Which of

the following is the best way to accomplish this goal?

a)

Pre-shared key

b)

Autonomous access point

c)

Captive portal

d)

WPA2 encryption

70.

Which of the following is the most closely associated with segmenting compute resources within a

single cloud account?

a)

Network security group

b)

laaS

c)

VPC

d)

Hybrid cloud

71.

A network administrator needs to connect a multimode fiber cable from the MDF to the server room.

The administrator connects the cable to Switch 2, but there is no link light. The administrator tests

the fiber and finds it does not have any issues. Swapping the connection to Switch 1 in a working port

is successful, but the swapped connection does not work on Switch 2. Which of the following should

the administrator verify next?

a)

Fiber length

b)

Transceiver model

c)

Connector type

d)

Port speed

72.

An employee has a new laptop and reports slow performance when using the wireless network.

Switch firmware was updated the previous night. A network administrator logs in to the switch and

sees the following statistics on the switch interface for that employee:

98469 packets input, 1681937 bytes, 0 no buffer

Received 1548 broadcasts (25285 multicasts)

65335 runts, 0 giants, 0 throttles

11546 input errors, 5 CRC, 0 frame, 0 overrun, 0 ignored

0 input packets with dribble condition detected

22781 packets output, 858040 bytes, 0 underruns

0 output errors, 89920 collisions, 0 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

Which of the following is most likely the cause of the issue?

a)

The patch cord from the wall jack is faulty

b)

The switchport bandwidth needs to be increased.

c)

Multicast is not configured correctly on the switch.The NIC is set to half duplex

d)

The NIC is set to half duplex

73.

Which of the following uses the longest prefix match to determine an exit interface?

a)

ARP table

b)

MAC address table

c)

Routing table

d)

Netstat table

74.

A junior network administrator is auditing the company network and notices incrementing input

errors on a long-range microwave interface. Which of the following is the most likely reason for the

errors?

a)

The parabolic signal is misaligned

b)

The omnidirectional signal is being jammed

c)

The omnidirectional signal is not strong enough to receive properly

d)

The parabolic signal uses improper routing protocols

75.

A network engineer is setting up a new VoIP network for a customer. The current network is

segmented only for computers and servers. No additional switchports can be used in the new

network. Which of the following does the engineer need to do to configure the network correctly?

(Select two).

a)

Change network translation definitions

b)

Enable 802.1Q

c)

Implement a routing protocol

d)

Set up voice VLANs

e)

Reconfigure the DNS

76.

Which of the following is associated with avoidance, acceptance, mitigation, and transfer?

a)

Risk

b)

Exploit

c)

Threat

d)

Vulnerability

77.

Which of the following offers the ability to manage access at the cloud VM instance?

a)

Security group

b)

Internet gateway

c)

Direct Connect

d)

Network ACL

78.

A network engineer needs to deploy an access point at a remote office so that it will not communicate back to the wireless LAN controller. Which of the following deployment methods must

the engineer use to accomplish this task?

a)

Lightweight

b)

Autonomous

c)

Mesh

d)

Ad hoc

79.

A detective is investigating an identity theft case in which the target had an RFID-protected payment

card issued and compromised in the same day. The only place the target claims to have used the card

was at a local convenience store. The detective notices a video camera at the store is placed in such a

way that customers' credentials can be seen when they pay. Which of the following best explains this

social engineering technique?

a)

Shoulder surfing

b)

Impersonation

c)

Vishing

d)

Tailgating

80.

Which of the following refers to a weakness in a mechanism or technical process?

a)

Vulnerability

b)

Risk

c)

Exploit

d)

Threat