Font size
WorksheetsCompTIA N+ N10 009 Additional Questions
Total questions: 115
Worksheet time: 59mins
An administrator enables DNS filtering on the firewall to block users from visiting malicious websites. Which of the following should the administrator also do? (Choose two.)
Disable DoH in users’ internet browsers.
Update NS record to point to DNS filter servers.
Block port 443 to the malicious websites
Block port 53 to servers on the internet.
Disable TLS v1.3 in users’ internet browsers.
A company's office has publicly accessible meeting rooms equipped with network ports. A recent audit revealed that visitors were able to access the corporate network by plugging personal laptops into open network ports. Which of the following should the company implement to prevent this in the future?
URL filters
VPN
ACLs
NAC
A network administrator is conducting an assessment and found network devices that do not meet standards. Which of the following configurations is considered a set of rules that devices should adhere to?
Production
Backup
Candidate
Golden
A network administrator is concerned with on-path attacks and wants to provide encryption of fully qualified domain names in outbound communications. Which of the following best describes the protocol that provides the proper security layer for internet communication?
SSL
DoH
TLS
DNSSEC
A network technician notices a device is at EOL. For which of the following should the technician plan?
Retrofitting
Decommissioning
Restarting
Upgrading
Which of the following facilities is the best example of a warm site in the event of information system disruption?
A combination of public and private loud services to restore data
A partial infrastructure, software, and data on site
A full electrical infrastructure in place, but no customer devices on site
A full infrastructure in place, but no current data on site
Which of the following protocols allows automatic routing failover for an active-passive firewall pair?
EIGRP
OSPF
VRRP
BGP
Which of the following can help prevent unauthorized modifications to hardware when designing an MDF closet?
Lockable cabinets
Uninterruptable power supply
Port security
Microsegmentation
After installing a new 6E wireless router in a small office, a technician notices that some wireless devices are not able to achieve the rated speeds. Which of the following should the technician check to troubleshoot the issue? (Choose two.)
Client device compatibility
Back-end cabling
Weather phenomena
Voltage source requirements
Interference levels
Which of the following best represents north-south traffic?
A connection between a computer and a public web server
Data moving between a data center and a DR site
Traffic between a production server and a backup server
Routing updates between OSPF routers
The network engineering team needs to implement a wireless network within two separate buildings. Once the network is set up, users will need to authenticate using RADIUS in order to access internal resources. Which of the following wireless technologies should the team implement?
Mesh
Enterprise
Ad hoc
Point to point
Which of the following are benefits of implementing MFA and SSO in an enterprise environment? (Choose two.)
Eliminating the number of password resets
Centralizing user account management activities
Adding an extra layer of security against compromised credentials
Reducing the overhead of security tokens
Enforcing conditional access policies
Users report connectivity issues after a network switch is replaced. There are three separate subnets for users, voice, and servers. The users cannot reach the resources in the server subnet. Upon investigation, a separate voice switch has thousands of discarded packets, but no users report issues making or receiving calls. Which of the following is most likely the issue?
Incorrect cable
Port administratively disabled
VLAN misconfiguration
Duplex setting
A junior network administrator gets a text message from a number posing as the domain registrar of the firm. The administrator is tricked into providing global administrator credentials. Which of the following attacks is taking place?
DNS poisoning
ARP spoofing
Vishing
Smishing
A tourist attempts to access an online banking site on a mobile device while in a public place. Which of the following is the tourist most likely to experience?
Vishing
Tailgating
Shoulder surfing
Peripheral attack
A network administrator needs to disable all inbound and outbound telnet traffic in the network. Which of the following ports should the administrator disable?
23
53
123
443
Several users report poor performance when accessing shared drives on a file server named Filed. While troubleshooting the issue, the network administrator swaps the Ethernet connections between File01 and another server named File02. Shortly thereafter, users report issues with File02, but Filed is no longer an issue. Which of the following is most likely impacting performance?
Port security
Speed/duplex mismatch
PoE power budget reduction
Keep-alive beacon failure
A data center administrator is evaluating the use of jumbo frames within a storage environment. Which of the following describes the best reason to use jumbo frames in the storage environment?
To reduce device overhead
To report on the current root switch in the STP
To improve routing convergence
To increase drive throughput
Which of the following cloud deployment models is most commonly associated with multitenancy and is generally offered by a service provider?
Private
Community
Public
Hybrid
A network administrator needs to efficiently deploy 200 systems using RFC1918 addresses. Which of the following networks should the administrator use?
10.10.10.0/8
150.200.1.0/24
192.168.1.0/24
254.169.0.0/24
While conducting a network audit, an administrator notices the spanning tree root in VLAN 300 does not match the configuration baseline, which could cause network outages due to spanning tree update failures. Which of the following should the administrator do to restore consistency?
Change the designated port on the misconfigured switch to a root port.
Change the root port to a listening port on the misconfigured switch.
Change the blocked port of the misconfigured switch to a learning port.
Increase the bridge ID/priority on the misconfigured switch.
Which of the following architecture types is most commonly associated with east-west traffic?
Colocated VMs
Hybrid cloud
Client-server
Hub and spoke
Which of the following actions happen during the first step of the troubleshooting methodology? (Choose two.)
Question the obvious.
Divide and conquer.
Identify symptoms.
Establish a theory.
Question users.
A network administrator determines that some switch ports have more errors present than expected. The administrator traces the cabling associated with these ports. Which of the following would most likely be causing the errors?
Shielded conduit
Plenum spaces
Voltage transformers
Hydraulic lifts
Which of the following will most likely allow a network administrator to work with current data after a disaster?
Review backup tapes.
Recover from cloud storage.
Fail over to a hot site.
Restore from a snapshot.
A network technician is attempting to map networking devices. When logged in to the local switch, the technician uses LLDP and discovers only those devices that are connected directly to the switch. Which of the following should the technician perform to discover all the networking devices?
Reconfigure the management IP addresses of the networking devices on the same subnet.
Enable Spanning Tree Protocol to allow the switches on the network to be discovered.
Log in to each of the connected networking devices and perform the process again.
Upgrade the OS on the networking devices to the current version of LLDP.
Which of the following is a location where a plenum cable is recommended?
Frequently traveled areas
Outdoor environments
Inside conduits
Airspaces above a ceiling
A network administrator is performing a refresh of a wireless environment. As the APs are being placed, they overlap a little bit with each other. Which of the following 2.4GHz channels should be selected to ensure that they do not conflict?
1, 3, 5
1, 6, 11
2, 6, 10
3, 6, 9
Application software systems can no longer receive updates and security patches, and continuing to use the application software might expose the system to attacks. Which of the following best describes this scenario?
SLA
Licensing
SIEM
EOL
Which of the following technologies uses a VIP to provide gateway redundancy between two routers?
LACP
PAT
FHRP
BGP
A network administrator is setting up a firewall to protect the organization's network from external threats. Which of the following should the administrator consider first when configuring the firewall?
Required ports, protocols, and services
Inclusion of a deny all rule
VPN access
Outbound access originating from customer-facing servers
A VoIP phone powers up, but it is unable to receive or place calls. After connecting to another switchport, the issue is resolved. Which of the following was most likely the issue with the previous port?
The port had a half-duplex configuration.
The port was in an error-disabled state.
The port had an incorrect VLAN assignment.
The port exceeded its PoE budget.
Which of the following technologies is most appropriate for a business that requires high-speed access to frequently used web content, such as images and videos?
CDN
SAN
Firewall
Switch
Which of the following should be included in an SLA?
Patches and bug fixes
Licensing
Inventory management
Stakeholders
A network administrator thinks a change was made to mail servers at comptia.org. Which of the following should the administrator execute to verify the change?
A network administrator installs new cabling to connect new computers and access points. After deploying the equipment, the administrator notices a few of the devices are not connecting properly. The administrator moves the devices to a different port, but it does not resolve the issue. Which of the following should the administrator verify next?
Power budget
Device requirements
Port status
Cable termination
A server administrator deploys a new web server with an IP address of 192.168.16.100. The security policy dictates that all non-secure connection methods should be blocked. Which of the following security rules will satisfy the request without prohibiting other traffic?
Deny any 192.168.16.0 255.255.255.0 80
Deny 192.168.16.100 255.255.255.255 any
Deny any 192.168.16.100 255.255.255.255 80
Permit any 192.168.16.100 255.255.255.255 80
Permit 192.168.16.100 255.255.255.255 any
A newly opened retail shop uses a combination of new tablets, PCs, printers, and legacy card readers. Which of the following wireless encryption types is the most secure and compatible?
WPA3
WPA2
WPA2 / WPA3 mixed mode
WPA / WPA2 mixed mode
A technician is troubleshooting wireless connectivity near a break room. Whenever a user turns on the microwave, connectivity to the user's laptop is lost. Which of the following frequency bands is the laptop most likely using?
2.4GHz
5GHz
6GHz
900MHz
Which of the following would allow a network administrator to remotely access a secure subnet from a shared, secure workstation?
Enable SSH through the firewall.
Dial into an in-band modem.
Connect through a jump host.
Configure a site-to-site VPN.
A network administrator is creating a subnet that will include 45 separate hosts on a small private network within a large network architecture. Which of the following options is the most efficient use of network addresses when assigning this network?
10.0.50.128/25
10.7.142.128/27
10.152.4.192/26
10.192.1.64/28
Which of the following protocols is commonly associated with TCP port 443?
Telnet
SMTP
HTTPS
SNMP
After a networking intern plugged in a switch, a significant number of the users in a building lost connectivity. Which of the following is the most likely root cause?
VTP update
Port security issue
LLDP misconfiguration
Native VLAN mismatch
A technician wants to experiment with NAC in a wireless environment. Which of the following NAC techniques should be implemented for wireless networking if ease of implementation is the most important factor?
Port security
EAPoL
802.1X
MAC filtering
A network administrator received complaints of intermittent network connectivity issues. The administrator investigates and finds that the network design contains potential loop scenarios. Which of the following should the administrator do?
Enable spanning tree.
Configure port security.
Change switch port speed limits.
Enforce 802.1Q tagging.
A network administrator wants to update a geofencing policy to limit access to the corporate network based on location. Which of the following will the administrator most likely leverage?
MAC filtering
Administrative distance
Bluetooth beacon signals
IP address blocks
An organization is concerned about rogue devices connecting to the network and wants the network team to implement a solution. Which of the following types of filtering should the network team use to address this concern?
MAC
Content
URL
IP
A network administrator is redesigning a wireless network in which corporate and guest users share a single SSID that is configured with WPA2 PSK. Which of the following capabilities should be configured in order to improve security? (Choose two.)
Wi-Fi Protected Access
New SSID for contractors
Password authentication
Wired Equivalent Privacy
Captive portal
Which of the following will resolve the issue?
Set up link aggregation between Switch A and Switch B on Gi0/9 and Gi0/10.
Configure spanning tree on Switch A and Switch B.
Establish a trunk connection between Switch A and Switch B.
Put Computer A and Computer B in the same /24 subnet.
Which of the following most directly secures sensitive information on a network?
Data-in-transit encryption
Principle of least privilege
Role-based access controls
Multifactor authentication
A user is unable to reach a website and wants to verify its IP information. Which of the following tools is used to resolve the authoritative server to its FQDN?
ipconfig
arp
nslookup
ping
Which of the following routing technologies uses a successor and a feasible successor?
IS-IS
OSPF
BGP
EIGRP
Users in one building on the campus network report very slow network access. A network technician logs in to the router to see if there are any errors associated with traffic to and from that particular building. Which of the following commands will the technician most likely run?
show arp
show config
show route
show interface
Which of the following actions should be taken as part of the first step of the troubleshooting methodology?
Conduct tests to verify ideas
Handle multiple problems individually.
Create a theory about the possible root cause.
Use a top-down approach.
After extremely high temperatures cause a power outage, the servers automatically shut down, even though the UPSs for the servers still have hours of battery life. Which of the following should a technician recommend?
Include backup power for air-conditioning units.
Configure door locks to automatically lock during power outages.
Increase UPS battery size.
Add an IoT-enabled thermostat.
While deploying a new fleet of computers on a DHCP network, a network administrator notices that new computers cannot connect to the internet. Which of the following is most likely the problem?
Incorrect default gateway
Address pool exhaustion
Duplicate IP address
Incorrect subnet mask
A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10Gb connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?
Port mirroring
Log aggregation
Flow data
Packet capture
A technician is alarmed after noticing more than 5,000 CRCs on a switchport. Which of the following should the technician do next?
Move to a different switchport.
Check for errdisable,
Swap out the patch cable.
Enable class-of-service.
A network administrator needs to deploy a new wireless solution at a customer site. All external users must provide credentials before being granted access to the wireless solution. Which of the following would best meet the requirements of this installation?
Adjust the bands to be non-overlapping.
Set up lightweight access points.
Enable enterprise authentication.
Add a captive portal for the guest network.
Which of the following best describes what an organization would use port address translation for?
VLANs on the perimeter
Public address on the perimeter router
Non-routable address on the perimeter router
Servers on the perimeter
A systems administrator installs multiple web servers and intends to use the First Hop Redundancy Protocol to control routing to the servers. Which of the following types of IP addresses should the administrator use to support this routing approach?
Virtual
Gateway
Static
Dynamic
Which of the following should a junior security administrator recommend implementing to mitigate malicious network activity?
IPS
Honeypot
SIEM
VPN
A company uses a solution to rotate the password that engineers use to connect to critical systems. Which of the following best describes this solution?
Network access control
TACACS+
Key management
Multifactor authentication
After installing a new wireless access point, an engineer tests the device and sees that it is not performing at the rated speeds. Which of the following should the engineer do to troubleshoot the issue? (Choose two.)
Ensure a bottleneck is not coming from other devices on the network.
Install the latest firmware for the device.
Create a new VLAN for the access point.
Make sure the SSID is not longer than 16 characters.
Configure the AP in autonomous mode.
A network administrator needs to securely connect to an Ubuntu server for management purposes. Which of the following protocols will most likely address this requirement?
HTTPS
SFTP
RDP
SSH
Which of the following cable types provides the highest possible transmission speed?
Plenum
Ethernet
Fiber-optic
DAC
Which of the following describes a malicious application that takes advantage of a software flaw?
Risk
Vulnerability
Exploit
Threat
Which of the following describes the capability of a cloud service to adjust resources on demand?
Elasticity
Multitenancy
Containers
Scalability
A company’s Chief Information Security Officer requires that servers and firewalls have accurate time stamps when creating log files so that security analysts can correlate events during incident investigations. Which of the following should be implemented?
Syslog server
SMTP
NTP
SNMP
A new backup system takes too long to copy files to the new SAN each night. A network administrator makes a simple change to the network and the devices to decrease backup times. Which of the following does the network administrator change?
QoS
SDN
MTU
VXLAN
TTL
Which of the following layers of the OSI model is responsible for end-to-end encryption?
Presentation
Application
Session
Transport
Users are experiencing significant lag while connecting to a cloud-based application during peak hours. An examination of the network reveals that the bandwidth is being heavily utilized. Further analysis shows that only a few users are using the application at any given time. Which of the following is the most cost-effective solution for this issue?
Limit the number of users who can access the application.
Lease a Direct Connect connection to the cloud service provider.
Implement QoS to prioritize application traffic.
Use a CDN to service the application.
Users in a company report that after walking from one room to another, wireless connectivity is lost. The SSID is available, but the users have to manually reconnect every time they change rooms. Which of the following is most likely the cause of this issue?
Each room has wireless interference.
There is poor wireless coverage.
MAC filtering is applied in the WLAN.
Roaming configuration is disabled.
A network security administrator needs to monitor the contents of data sent between a secure network and the rest of the company. Which of the following monitoring methods will accomplish this task?
Port mirroring
Flow data
Syslog entries
SNMP traps
Which of the following does a full-tunnel VPN provide?
Lower bandwidth requirements
The ability to reset local computer passwords
Corporate inspection of all network traffic
Access to blocked sites
Which of the following does a hash provide?
Non-repudiation
Integrity
Confidentiality
Availability
Which of the following routing technologies uses unequal cost load balancing and port 88?
EIGRP
BGP
RIP
OSPF
Which of the following network topologies involves sending all traffic through a single point?
Mesh
Hybrid
Hub-and-spoke
Point-to-point
Which of the following functions is used to prioritize network traffic based on the type of traffic?
QoS
VPN
CDN
TTL
Which of the following does OSPF use to communicate routing updates?
Unicast
Anycast
Multicast
Broadcast
A network administrator logs on to a router and sees an interface with an IP address of 10.61.52.34 255.255.255.252. Which of the following best describes how this interface IP address is being used?
As a point-to-point connection
To connect to the internet
As a virtual address for redundancy
For out-of-band management
A network administrator is troubleshooting an application issue after a firewall change. The administrator has confirmed that the port and protocol are accessible to the user, but the application is still having issues. Which of the following tools allows the administrator to look at traffic on the application layer of the OSI model?
ifconfig
tcpdump
nslookup
traceroute
Which of the following diagrams would most likely include specifications about fiber connector types?
Logical
Physical
Rack
Routing
Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?
To encrypt sensitive data in transit
To secure the endpoints
To maintain contractual agreements
To comply with data retention requirements
A customer lost the connection to the telephone system. The administration console is configured with multiple network interfaces and is connected to multiple switches. The network administrator troubleshoots and verifies the following:
The support team is able to connect remotely to the administration console.
Rebooting the switch shows solid link and activity lights even on unused ports.
Rebooting the telephone system does not bring the system back online.
The console is able to connect directly to individual modules successfully.
Which of the following is the most likely reason the customer lost the connection?
A switch failed.
The console software needs to be reinstalled
The cables to the modules need to be replaced.
A module failed.
A network administrator needs to connect two network closets that are 492ft (150m) away from each other. Which of the following cable types should the administrator install between the closets?
Single-mode fiber
Coaxial
DAC
STP
A technician is troubleshooting a user's laptop that is unable to connect to a corporate server. The technician thinks the issue pertains to routing. Which of the following commands should the technician use to identify the issue?
tcpdump
dig
tracert
arp
A small business is deploying new phones, and some of the phones have full HD videoconferencing features. The Chief Information Officer is concerned that the network might not be able to handle the traffic if the traffic reaches a certain threshold. Which of the following can the network engineer configure to help ease these concerns?
A VLAN with 100Mbps speed limits
An IP helper to direct VoIP traffic
A smaller subnet mask
Full duplex on all user ports
A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?
A separate scope for the file server using a /32 subnet
A reservation for the server based on the MAC address
A static IP address within the DHCP IP range
A SLAAC for the server
An office is experiencing intermittent connection issues. A network engineer identifies that the issue occurs whenever someone uses the fax machine that is connected to a switch. Which of the following should the engineer do first to resolve the issue?
Run a new Cat 5 line.
Enable 802.1Q tagging
Change the MTU.
Configure a VLAN.
A manager is evaluating the environmental design of a data center. Which of the following setups should the manager implement if the maximum thermal dissipation is the highest concern?
A blue-green
A hot-cold
An east-west
An active-passive
A network rack has four servers and four switches with dual power supplies. Only one intelligent PDU is installed in the rack. Which of the following is the reason to add a second PDU?
Power redundancy
Failed PSU monitoring
Surge protection
Electricity conservation
A network engineer is troubleshooting an issue with a VoIP network. After performing analysis, the engineer found that when users upload large files, voice quality is severely degraded. When no other traffic is on the network, voice quality is fine. Which of the following should the engineer do to most likely resolve the issue?
Enable MAC filtering.
Reduce the VLAN database.
Configure QoS on the router.
Implement ACLs.
A network administrator needs to improve network monitoring. Which of the following should the administrator do first?
Establish baseline metrics.
Implement a SIEM.
Perform regular packet captures.
Conduct availability monitoring.
Which of the following configurations exempts traffic to the internet from traversing a VPN?
Client-to-site
Active-passive
Split-tunnel
Out-of-band
An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?
Use version 1 of SNMP and use a community string to serve as a PSK
Use version 3 of SNMP and set up trap messages for critical events on the network
Use version 2c of SNMP and use informs to validate device authentication
Use version 2u of SNMP to authenticate devices for network monitoring
Cloud computing has the capability to meet increased and decreased demands for computing infrastructure for a short period of time. Which of the following best describes this characteristic?
Efficiency
Elasticity
Multitenancy
Scalability
Which of the following is most likely to work with an FC connection and offers more scalability?
DAS
SAN
SSE
NAS
A company is moving to a hybrid cloud model. As part of this move the mail server will be moved to the cloud. The systems administrator needs to ensure the mail server continues to receive email. Which of the following types of DNS records should the systems administrator update?
NS
PTR
MX
A
A network administrator is expanding a network and wants to ensure no unauthorized redundant links are present. Which of the following should the administrator use to identify and block redundant links?
SDN
STP
LLDP
OSPF
A company recently acquired a number of sites and no documentation was provided. A network administrator needs to identify and document all of the digital assets in use. Which of the following is the best method for the administrator to use?
Availability monitoring
Packet capture
Physical inventory
Network discovery
A new server is deployed in a trusted zone and is validated to be online with all appropriate services running. However, users in a perimeter network cannot access the server. Which of the following should a network administrator do to resolve the reported issue?
Create a TXT record on the DNS server for the new server.
Update the firewall ACL to allow access to the new server.
Configure a static route for the user VLAN to the new server.
Insert a static ARP entry for the new server on the Layer 3 switch.
A network engineer wants to implement a solution where all web servers will send event data over port 514. Which of the following services will accomplish this task?
Syslog
SMTP
DNS
DHCP
A security administrator wants to discover zero-day attacks before they can be used on the company’s network. Which of the following can the administrator use to accomplish this task?
Central repository
Honeypot
Next-generation firewall
Evil twin
A network administrator is trying to locate the switch interface a PC is connected to. The administrator accesses the local switch, pings the PC IP address, and then uses the command show arp. Which of the following commands should the administrator use next?
show route
show mac-address-table
show vlan
show interface
Which of the following types of routes will take precedence when building a routing table for a given subnet?
Static
BGP
OSPF
Default
Which of the following would an adversary do while conducting an evil twin attack?
Trick users into using an AP witTrick users into using an AP with an SSID that is identical to a legitimate network.h an SSID that is identical to a legitimate network.
Manipulate address resolution to point devices to a malicious endpoint.
Present an identical MAC to gain unauthorized access to network resources.
Capture data in transit between two legitimate endpoints to steal data.
A network administrator is troubleshooting a connection between two switches that is experiencing intermittent errors. The administrator needs to determine which port on the remote switch the faulty cable is connected to. Which of the following is the best tool to use to identify the error?
tracert
LLDP run
nmap
ping
Which of the following is a difference between EOL and EOS?
EOL discontinues the product but may offer support.
EOS replaces free support with a subscription model.
EOS only applies to physical products.
EOL still guarantees warranty service.
A small coffee shop wants to set up multiple 2.4GHz wireless access points. The access points will support a large number of users, and the network technician wants to mitigate interference as much as possible. Which of the following is the number of 22MHz channels that the equipment can support?
1
2
3
4
Which of the following are the main differences between ESP and AH? (Choose two.)
AH provides confidentiality through the use of encryption.
ESP provides authentication for IP headers and their payloads.
ESP provides confidentiality through the use of encryption.
AH provides authentication for IP headers and their payloads.
AH provides data origin authorization over shared secret.
Which of the following is the most likely function to be decremented when a tool is used to measure the distance between two locations on the internet?
GRE
TTL
VPN
QoS
A network engineer implements a 192.168.100.0/25 subnet for a building without obtaining sizing requirements. It is later determined that the building will house 700 people. Which of the following subnet masks will most efficiently support that number of people?
255.255.252.0
255.255.254.0
255.255.255.0
255.255.255.128
A company is building a new campus that will have wired and wireless devices. The network will be designed to support casual internet usage for guests and break rooms for employees. Which of the following authentication methods is best suited for guests given the requirements of this scenario?
ESP
PSK
WPA
IKE
Following the troubleshooting methodology, a technician implements a solution that resolves the reported issue. Which of the following should the technician do next?
Document the findings.
Create a plan of action.
Establish a theory.
Identify the problem.
