Font size
WorksheetsCompTIA N+ N10 009 (Exam Set 2025)
Total questions: 80
Worksheet time: 42mins
A client wants to increase overall security after a recent breach. Which of the following would be
best to implement? (Select two.)
Least privilege network access
Dynamic inventeries
Central policy management
Zero-touch provisioning
Configuration drift prevention
Which of the following allows for the interception of traffic between the source and destination?
Self-signed certificate
VLAN hopping
On-path attack
Phishing
A network administrator is planning to implement device monitoring to enhance network visibility.
The security that the solution provides authentication and encryption. Which of the following meets
these requirements?
SIEM
Syslog
NetFlow
SNMPv3
Which of the following allows a remote user to connect to the network?
Command-line interface
API gateway
Client-to-site VPN
Jump box
Which of the following could provide a lightweight and private connection to a remote box?
Site-to-site VPN
Telnet
Console
Secure Shell
Which of the following network devices converts wireless signals to electronic signals?
Router
Firewall
Access point
Load balancer
Which of the following fiber connector types is the most likely to be used on a network interface
card?
LC
SC
ST
MPO
Which of the following attacks can cause users who are attempting to access a company website to
be directed to an entirely different website?
DNS poisoning
Denial-of-service
Social engineering
ARP spoofing
A network administrator is connecting two Layer 2 switches in a network. These switches must
transfer data in multiple networks. Which of the following would fulfill this requirement?
Jumbo frames
802.1Q tagging
Native VLAN
Link aggregation
Which of the following most likely requires the use of subinterfaces?
A router with only one available LAN port
A firewall performing deep packet inspection
A hub utilizing jumbo frames
A switch using Spanning Tree Protocol
A support agent receives a report that a remote user’s wired devices are constantly disconnecting
and have slow speeds. Upon inspection, the support agent sees that the user’s coaxial modern has a
signal power of -97dB.
Removing any spliters connecte to the line
Switching the devices to wireless
Moving the devices closer to the modern
Lowering the network speed
A network manager wants to implement a SIEM system to correlate system events. Which of the
following protocols should the network manager verify?
NTP
DNS
LDAPS
DHCP
A network administrator's device is experiencing severe Wi-Fi interference within the corporate
headquarters causing the device to constantly drop off the network. Which of the following is most
likely the cause of the issue?
Too much wireless reflection
Too much wireless absorption
Too many wireless repeaters
Too many client connections
A company's marketing team created a new application and would like to create a DNS record for
newapplication.comptia.org that always resolves to the same address as www.comptia.org. Which of
the following records should the administrator use?
SOA
MX
CNAME
NS
Which of the following would be violated if an employee accidentally deleted a customer's data?
Integrity
Confidentiality
Vulnerability
Availability
Which of the following are the best device-hardening techniques for network security? (Select two).
Disabling unused ports
Performing regular scanning of unauthorized devices
Monitoring system logs for irregularities
Enabling logical security such as SSO
Changing default passwords
A company's network is experiencing high latency and packet loss during peak hours. Network
monitoring tools show increased traffic on a switch. Which of the following should a network
technician implement to reduce the network congestion and improve performance?
Load balancing
Port mirroring
Quality of Service
Spanning Tree Protocol
An organization requires the ability to send encrypted email messages to a partner from an email
server that is hosted on premises. The organization prefers to use the standard default ports when
creating firewall rules. Which of the following ports should be open to satisfy the requirements?
110
143
587
636
Which of the following is the MOST appropriate solution to extend the network to a building located
across the street from the main facility?
Multimode fiber
802.11ac wireless bridge
Cat 6 copper
Loopback adapter
To reduce costs and increase mobility, a Chief Technology Officer (CTO) wants to adopt cloud services
for the organization and its affiliates. To reduce the impact for users, the CTO wants key services to
run from the on-site data center and enterprise services to run in the cloud. Which of the following
deployment models is the best choice for the organization?
Public
Hybrid
SaaS
Private
After running a Cat 8 cable using passthrough plugs, an electrician notices that connected cables are
experiencing a lot of cross talk. Which of the following troubleshooting steps should the electrician
take first?
Inspect the connectors for any wires that are touching or exposed
Restore default settings on the connected devices.
Terminate the connections again.
Check for radio frequency interference in the area.
A network administrator is configuring a new switch and wants to ensure that only assigned devices
can connect to the switch. Which of the following should the administrator do?
Configure ACLs.
Implement a captive portal.
Enable port security.
Disable unnecessaryservices
A company discovers on video surveillance recordings that an unauthorized person installed a rogue
access point in its secure facility. Which of the following allowed the unauthorized person to do this?
Evil twin
Honeytrap
Wardriving
Tailgating
A systems administrator is configuring a new device to be added to the network. The administrator is
planning to perform device hardening prior to connecting the device. Which of the following should
the administrator do first?
Update the network ACLs.
Place the device in a screened subnet.
Enable content filtering
Change the default admin passwords
Which of the following allows a user to connect to an isolated device on a stand-alone network?
Jump box
API gateway
Secure Shell (SSH)
Clientless VPN
Which of the following explains what happens if a packet is lost in transit when using UDP?
The data link layer will recognize the error and resend the packet
IP uses the TTL field to track packet hops and will resend the packet if necessary
If the sender does not receive a UDP acknowledgement, the packet will be resent
Some applications will recognize the loss and initiate a resend of the packet if necessary.
An investment bank is seeking a DR backup solution. Which of the following provides the most costeffective
backup site?
Hot
Cold
Cluster
Warm
A company has observed increased user traffic to gambling websites and wants to limit this behavior
on work computers. Which of the following should the company most likely implement?
ACLs
Content filter
Port security
Screened subnet
A company is hosting a secure that requires all connections to the server to be encrypted. A junior
administrator needs to harded the web server. The following ports on the web server. The following
ports on the web server are open:
22
80
443
587
Which of the following ports creates a secure connection to a directory service?
22
389
445
636
Which of the following dynamic routing protocols is used on the internet?
EIGRP
BGP
RIP
OSPF
A storage network requires reduced overhead and increased efficiency for the amout of data being
sent. Which of the following should an engineer likely configure to meet these requirements
Link speed
Jumbo frames
QoS
802.1q tagging
A network technician is troubleshooting a faulty NIC and tests the theory. Which of the following
should the technician do next?
Develop a theory.
Establish a plan of action
Implement the solution
Document the findings
A network consultant needs to decide between running an ethernet uplink or using the built-in
5GHz-to-point functionality on a WAP. Which of the following documents provides the best
information to assist the consultant with this decision?
Site survey results
Physical diagram
Service-level agreement
Logical diagram
Users cannot connect to an internal website with an IP address 10.249.3.76. A network administrator
runs a command and receives the following output:
1 3ms 2ms 3ms 192.168.25.234
2 2ms 3ms 1ms 192.168.3.100
3 4ms 5ms 2ms 10.249.3.1
4 *
5 ’
6 *
7 •
Which of the following command-line tools is the network administrator using?
tracert
tcpdump
nmap
ping
Which of the following best describes the transmission format that occurs at the transport layer over
connectionless communication?
Datagram
Segment
Frames
Packets
Which of the following typically uses compromised systems that become part of a bot network?
Evil twin attack
DDoS attack
XML injection
Brute-force password attack
Which of the following connectors allows a singular QSFP transceiver to have several physical
connections?
RJ45
ST
LC
MPO
Which of the following ports is used for secure email?
25
110
143
587
A network technician receives a new ticket while working on another issue. The new ticket is critical
to business operations. Which of the following documents should the technician reference to
determine which ticket to complete first?
NDA
AUP
SLA
MOU
A network administrator is in the process of installing 35 PoE security cameras. After the
administrator installed and tested the new cables, the administrator installed the cameras. However,
a small number of the cameras do not work. Which of the following is the most reason?
Incorrect wiring standard
Power budget exceeded
Signal attenuation
Signal attenuation
A network engineer is setting up a new VoIP network for a customer. The current network is
segmented only for computers and servers. No additional switch ports can be used in the new
network. Which of the following does the engineer need to do to configure the network correctly?
(Select TWO).
Change network translation definitions
Enable 802.1Q
Implement a routing protocol
Set up voice VLANs
Reconfigure the DNS
A network administrator wants to configure a backup route in case the primary route fails. A dynamic
routing protocol is not installed on the router. Which of the following routing features should the
administrator choose to accomplish this task?
Neighbor adjacency
Link state flooding
Administrative distance
Hop count
Which of the following services runs on port 636?
SMTP
Syslog
TFTP
LDAPS
In an environment with one router, which of the following will allow a network engineer to
communicate between VLANs without purchasing additional hardware?
Subinterfaces
VXLAN
Layer 3 switch
VIR
Which of the following would most likely be utilized to implement encryption in transit when using
HTTPS?
SSH
TLS
SCADA
RADIUS
A customer calls the help desk to report issues connection to the internet. The customer can reach a
local database server. A technician goes to the site and examines the configuration:
Which of the following is causing the user's issue?
Incorrect DNS
Unreachable gateway
Failed root bridge
Poor upstream routing
Which of the following is most commonly associated with many systems sharing one IP address in
the public IP-addressing space?
PAT
NAT
VIP
NAT64
A company receives a cease-and-desist order from its ISP regarding prohibited torrent activity. Which
of the following should be implemented to comply with the cease-and-desist order?
MAC security
Content filtering
Screened subnet
Perimeter network
A network administrator is configuring access points for installation in a dense environment where
coverage is often overlapping. Which of the following channel widths should the administrator
choose to help minimize interference in the 2.4GHz spectrum?
11MHz
20MHz
40MHz
80MHz
80MHz
A network administrator notices interference with industrial equipment in the 2.4GHz range. Which
of the following technologies would most likely mitigate this issue? (Select two).
Mesh network
5GHz frequency
Omnidirectional antenna
Non-overlapping channel
Captive portal
A network administrator installed a new VLAN to the network after a company added an additional
floor to the office. Users are unable to obtain an IP address on the new VLAN, but ports on existing
VLANs are working properly. Which of the following configurations should the administrator update?
Scope size
Address reservations
Lease time
IP helper
A user's VoIP phone and workstation are connected through an inline cable. The user reports that the
VoIP phone intermittently reboots, but the workstation is not having any network-related issues
Which of the following is the most likely cause?
The PoE power budget is exceeded
Port security is violated.The signal is degraded
The signal is degraded
The Ethernet cable is not working
Which of the following technologies is the best choice to listen for requests and distribute user traffic
across web servers?
Router
Switch
Firewall
Load balancer
Which of the following can be implemented to add an additional layer of security between a
corporate network and network management interfaces?
Jump box
Console server
API interface
In-band management
Which of the following is used to stage copies of a website closer to geographically dispersed users?
VPN
CDN
SAN
SDN
Which of the following requires network devices to be managed using a different set of IP addresses?
Console
Split tunnel
Jump box
Out of band
A network engineer is now in charge of all SNMP management in the organization. The engineer
must use a SNMP version that does not utilize plaintext dat
a. Which of the following is the minimum version of SNMP that supports this requirement?
v1
v2c
v2u
v3
A network administrator needs to create a way to redirect a network resource that has been on the
local network but is now hosted as a SaaS solution. Which of the following records should be used to
accomplish the task?
TXT
AAAA
PTR
CNAME
A critical infrastructure switch is identified as end-of-support. Which of the following is the best next
step to ensure security?
Apply the latest patches and bug fixes
Decommission and replace the switch.
Ensure the current firmware has no issues.
Isolate the switch from the network
Which of the following must be implemented to securely connect a company's headquarters with a
branch location?
Split-tunnel VPN
Clientless VPN
Full-tunnel VPN
Site-to-site VPN
A medical clinic recently configured a guest wireless network on the existing router. Since then,
guests have been changing the music on the speaker system. Which of the following actions should
the clinic take to prevent unauthorized access? (Select two).
Isolate smart devices to their own network segment
Configure IPS to prevent guests from making changes
Install a new AP on the network
Set up a syslog server to log who is making changes
Change the default credentials.
An ISP provided a company with a pre-configured modem and five public static IP addresses. Which
of the following does the company's firewall require to access the internet? (Select TWO).
NTP server
Default gateway
The modem's IP address
One static IP address
DNS servers
Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?
To encrypt sensitive data in transit
To secure the endpoint
To maintain contractual agreements
To comply with data retentin requirements
Which of the following connector types would most likely be used to connect to an external
antenna?
BNC
ST
LC
MPO
A network administrator has been monitoring the company's servers to ensure that they are
available. Which of the following should the administrator use for this task?
Packet capture
Data usage reports
SNMP traps
Configuration monitoring
A user is unable to navigate to a website because the provided URL is not resolving to the correct IP
address. Other users are able to navigate to the intended website without issue. Which of the
following is most likely causing this issue?
Hosts file
Self-signed certificate
Nameserver record
IP helperANS
A network administrator needs to fail over services to an off-site environment. This process will take
four weeks to become fully operational. Which of the following DR (Disaster Recovery) concepts
does this describe?
Hot site
Warm site
Cold site
Active-active approach
Before using a guest network, an administrator requires users to accept the terms of use Which of
the following is the best way to accomplish this goal?
Pre-shared key
Autonomous access point
Captive portal
WPA2 encryption
Which of the following is the most closely associated with segmenting compute resources within a
single cloud account?
Network security group
laaS
VPC
Hybrid cloud
A network administrator needs to connect a multimode fiber cable from the MDF to the server room.
The administrator connects the cable to Switch 2, but there is no link light. The administrator tests
the fiber and finds it does not have any issues. Swapping the connection to Switch 1 in a working port
is successful, but the swapped connection does not work on Switch 2. Which of the following should
the administrator verify next?
Fiber length
Transceiver model
Connector type
Port speed
An employee has a new laptop and reports slow performance when using the wireless network.
Switch firmware was updated the previous night. A network administrator logs in to the switch and
sees the following statistics on the switch interface for that employee:
98469 packets input, 1681937 bytes, 0 no buffer
Received 1548 broadcasts (25285 multicasts)
65335 runts, 0 giants, 0 throttles
11546 input errors, 5 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
22781 packets output, 858040 bytes, 0 underruns
0 output errors, 89920 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Which of the following is most likely the cause of the issue?
The patch cord from the wall jack is faulty
The switchport bandwidth needs to be increased.
Multicast is not configured correctly on the switch.The NIC is set to half duplex
The NIC is set to half duplex
Which of the following uses the longest prefix match to determine an exit interface?
ARP table
MAC address table
Routing table
Netstat table
A junior network administrator is auditing the company network and notices incrementing input
errors on a long-range microwave interface. Which of the following is the most likely reason for the
errors?
The parabolic signal is misaligned
The omnidirectional signal is being jammed
The omnidirectional signal is not strong enough to receive properly
The parabolic signal uses improper routing protocols
A network engineer is setting up a new VoIP network for a customer. The current network is
segmented only for computers and servers. No additional switchports can be used in the new
network. Which of the following does the engineer need to do to configure the network correctly?
(Select two).
Change network translation definitions
Enable 802.1Q
Implement a routing protocol
Set up voice VLANs
Reconfigure the DNS
Which of the following is associated with avoidance, acceptance, mitigation, and transfer?
Risk
Exploit
Threat
Vulnerability
Which of the following offers the ability to manage access at the cloud VM instance?
Security group
Internet gateway
Direct Connect
Network ACL
A network engineer needs to deploy an access point at a remote office so that it will not communicate back to the wireless LAN controller. Which of the following deployment methods must
the engineer use to accomplish this task?
Lightweight
Autonomous
Mesh
Ad hoc
A detective is investigating an identity theft case in which the target had an RFID-protected payment
card issued and compromised in the same day. The only place the target claims to have used the card
was at a local convenience store. The detective notices a video camera at the store is placed in such a
way that customers' credentials can be seen when they pay. Which of the following best explains this
social engineering technique?
Shoulder surfing
Impersonation
Vishing
Tailgating
Which of the following refers to a weakness in a mechanism or technical process?
Vulnerability
Risk
Exploit
Threat
