N10-009 Practice Test 2

A network administrator is connecting two Layer 2 switches in a network. These switches must transfer data in multiple networks. Which of the following would fulfill this requirement?. Jumbo frames. 802.1Q tagging. Native VLAN. Link aggregation.

A network administrator wants users to be able to authenticate to the corporate network using a port-based authentication framework when accessing both wired and wireless devices. Which of the following is the best security feature to accomplish this task?. 802.1X. Access control list. Port security. MAC filtering.

Which of the following is most closely associated with a dedicated link to a cloud environment and may not include encryption?. Direct Connect. Internet gateway. Captive portal. VPN.

A systems administrator is investigating why users cannot reach a Linux web server with a browser but can ping the server IP. The server is online, the web server process is running, and the link to the switch is up. Which of the following commands should the administrator run on the server first?. traceroute. netstat. tcpdump. arp.

Which of the following devices can operate in multiple layers of the OSI model?. Hub. Switch. Transceiver. Modem.

Before using a guest network, an administrator requires users to accept the terms of use. Which of the following is the best way to accomplish this goal?. Pre-shared key. Autonomous access point. Captive portal. WPA2 encryption.

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?. SNMP trap. Port mirroring. Syslog collection. API integration.

A company receives a cease-and-desist order from its ISP regarding prohibited torrent activity. Which of the following should be implemented to comply with the cease-and-desist order?. MAC security. Content filtering. Screened subnet. Perimeter network.

Which of the following most likely requires the use of subinterfaces?. A router with only one available LAN port. A firewall performing deep packet inspection. A hub utilizing jumbo frames. A switch using Spanning Tree Protocol.

Which of the following requires network devices to be managed using a different set of IP addresses?. Console. Split tunnel. Jump box. Out of band.

A network administrator wants to configure a backup route in case the primary route fails. A dynamic routing protocol is not installed on the router. Which of the following routing features should the administrator choose to accomplish this task?. Neighbor adjacency. Link state flooding. Administrative distance. Hop count.

Which of the following steps of the troubleshooting methodology should a technician take to confirm a theory?. Duplicate the problem. Identify the symptoms. Gather information. Determine any changes.

A network administrator is deploying a new switch and wants to make sure that the default priority value was set for a spanning tree. Which of the following values would the network administrator expect to see?. 4096. 8192. 32768. 36684.

A network administrator is configuring a wireless network with an ESSID. Which of the following is a user benefit of ESSID compared to SSID?. Stronger wireless connection. Roaming between access points. Advanced security. Increased throughput.

A network administrator needs to connect two routers in a point-to-point configuration and conserve IP space. Which of the following subnets should the administrator use?. /24. /26. /28. /30.

An attacker follows an employee through a badge-secured door before the door closes. Which of the following types of attacks is occurring?. Shoulder surfing. Tailgating. Phishing. On-path.

A research facility is expecting to see an exponential increase in global network traffic in the near future. The offices are equipped with 2.5Gbps fiber connections from the ISP, but the facility is currently only utilizing 1Gbps connections. Which of the following would need to be configured in order to use the ISP's connection speed?. 802.1Q tagging. Network address translation. Port duplex. Link aggregation.

A VoIP phone is plugged in to a port but cannot receive calls. Which of the following needs to be done on the port to address the issue?. Trunk all VLANs on the port. Configure the native VLAN. Tag the traffic to voice VLAN. Disable VLANs.

Which of the following can support a jumbo frame?. Access point. Bridge. Hub. Switch.

A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?. NTP. DNS. LDAP. DHCP.

A network engineer is designing a secure communication link between two sites. The entire data stream needs to remain confidential. Which of the following will achieve this goal?. GRE. IKE. ESP. AH.

Which of the following protocols has a default administrative distance value of 90?. RIP. EIGRP. OSPF. BGP.

An office is experiencing intermittent connection issues. A network engineer identifies that the issue occurs whenever someone uses the fax machine that is connected to a switch. Which of the following should the engineer do first to resolve the issue?. Run a new Cat 5 line. Enable 802.1Q tagging. Change the MTU. Configure a VLAN.

A network engineer receives a vendor alert regarding a vulnerability in a router CPU. Which of the following should the engineer do to resolve the issue?. Update the firmware. Replace the system board. Patch the OS. Isolate the system.

Which of the following fiber connector types is the most likely to be used on a network interface card?. LC. SC. ST. MPO.

Which of the following connectors provides console access to a switch?. ST. RJ45. BNC. SFP.

A network administrator notices interference with industrial equipment in the 2.4GHz range. Which of the following technologies would most likely mitigate this issue? (Choose two.). Mesh network. 5GHz frequency. Omnidirectional antenna. Non-overlapping channel. Captive portal. Ad hoc network.

Which of the following network topologies contains a direct connection between every node in the network?. Mesh. Hub-and-spoke. Star. Point-to-point.

A network architect needs to create a wireless field network to provide reliable service to public safety vehicles. Which of the following types of networks is the best solution?. Mesh. Ad hoc. Point-to-point. Infrastructure.

A manager is evaluating the environmental design of a data center. Which of the following setups should the manager implement if the maximum thermal dissipation is the highest concern?. A blue-green. A hot-cold. An east-west. An active-passive.

A network administrator configured a router interface as 10.0.0.95 255.255.255.240. The administrator discovers that the router is not routing packets to a web server with IP 10.0.0.81/28. Which of the following is the best explanation?. The web server is in a different subnet. The router interface is a broadcast address. The IP address space is a class A network. The subnet is in a private address space.

A network administrator is notified that a user cannot access resources on the network. The network administrator checks the physical connections to the workstation labeled User 3 and sees the Ethernet is properly connected. However, the network interface’s indicator lights are not blinking on either the computer or the switch. Which of the following is the most likely cause?. The switch failed. The default gateway is wrong. The port is shut down. The VLAN assignment is incorrect.

Which of the following internal routing protocols is best characterized as having fast convergence and being loop-free?. BGP. STP. OSPF. RIP.

An administrator is setting up an SNMP server for use in the enterprise network and needs to create device IDs within a MIB. Which of the following describes the function of a MIB?. DHCP relay device. Policy enforcement point. Definition file for event translation. Network access controller.

A critical infrastructure switch is identified as end-of-support. Which of the following is the best next step to ensure security?. Apply the latest patches and bug fixes. Decommission and replace the switch. Ensure the current firmware has no issues. Isolate the switch from the network.

A company's marketing team created a new application and would like to create a DNS record for newapplication.comptia.org that always resolves to the same address as wwww.comptia.org. Which of the following records should the administrator use?. SOA. MX. CNAME. NS.

A network administrator wants to implement security zones in the corporate network to control access to only individuals inside of the corporation. Which of the following security zones is the best solution?. Extranet. Trusted. VPN. Public.

Which of the following network devices converts wireless signals to electronic signals?. Router. Firewall. Access point. Load balancer.

A network administrator deployed wireless networking in the office area. When users visit the outdoor patio and try to download emails with large attachments or stream training videos, they notice buffering issues. Which of the following is the most likely cause?. Network congestion. Wireless interference. Signal degradation. Client disassociation.

Which of the following activities would have groups from different departments evaluate the disaster recovery process?. Validation test. SLA alignment. Tabletop exercises. Active-active approach.

Which of the following routing protocols uses an autonomous system number?. IS-IS. OSPF. BGP. EIGRP.

Which of the following is a characteristic of the application layer?. It relies upon other layers for packet delivery. It checks independently for packet loss. It encrypts data in transit. It performs address translation.

Which of the following IP transmission types encrypts all of the transmitted data?. ESP. AH. GRE. UDP. TCP.

Which of the following should be configured so users can authenticate to a wireless network using company credentials?. SSO. SAML. MFA. RADIUS.

A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?. Change the email client configuration to match the MX record. Reduce the TTL record prior to the MX record change. Perform a DNS zone transfer prior to the MX record change. Update the NS record to reflect the IP address change.

Which of the following should a network administrator configure when adding OT devices to an organization's architecture?. Honeynet. Data-at-rest encryption. Time-based authentication. Network segmentation.

To reduce costs and increase mobility, a Chief Technology Officer (CTO) wants to adopt cloud services for the organization and its affiliates. To reduce the impact for users, the CTO wants key services to run from the on-site data center and enterprise services to run in the cloud. Which of the following deployment models is the best choice for the organization?. Public. Hybrid. SaaS. Private.

Which of the following is used to describe the average duration of an outage for a specific service?. RPO. MTTR. RTO. MTBF.

A network rack has four servers and four switches with dual power supplies. Only one intelligent PDU is installed in the rack. Which of the following is the reason to add a second PDU?. Power redundancy. Failed PSU monitoring. Surge protection. Electricity conservation.

A network engineer is setting up a new VoIP network for a customer. The current network is segmented only for computers and servers. No additional switch ports can be used in the new network. Which of the following does the engineer need to do to configure the network correctly? (Choose two.). Change network translation definitions. Enable 802.1Q. Implement a routing protocol. Set up voice VLANs. Reconfigure the DNS. Place devices in the perimeter network.

Which of the following allows a user to connect to an isolated device on a stand-alone network?. Jump box. API gateway. Secure Shell. Clientless VPN.

Early in the morning, an administrator installs a new DHCP server. In the afternoon, some users report they are experiencing network outages. Which of the following is the most likely issue?. The administrator did not provision enough IP addresses. The administrator configured an incorrect default gateway. The administrator did not provision enough route. The administrator did not provision enough MAC addresses.

A company is implementing a policy that will not allow employees to bring personal devices to the office and connect to the wireless network. Which of the following is the best way to enforce this policy?. MAC filtering. 802.1X. Port security. ACL.

A network engineer is troubleshooting an issue with a VoIP network. After performing analysis, the engineer found that when users upload large files, voice quality is severely degraded. When no other traffic is on the network, voice quality is fine. Which of the following should the engineer do to most likely resolve the issue?. Enable MAC filtering. Reduce the VLAN database. Configure QoS on the router. Implement ACLs.

Which of the following disaster recovery metrics is used to describe the amount of data that is lost since the last backup?. MTTR. RTO. RPO. MTBF.

A network administrator is troubleshooting issues with a DHCP server at a university. More students have recently arrived on campus, and the users are unable to obtain an IP address. Which of the following should the administrator do to address the issue?. Enable IP helper. Change the subnet mask. Increase the scope size. Add address exclusions.

Which of the following is designed to distribute network traffic among devices based on the quantity of traffic?. Load balancer. Router. Proxy. Switch.

A user recently moved a workstation to a different part of the office. The user is able to access the internet and print but is unable to access server resources. Which of the following is the most likely cause of the issue?. Incorrect default gateway. Wrong VLAN assignment. Error-disabled port. Duplicate IP address.

A technician is planning an equipment installation into a rack in a data center that practices hot aisle/cold aisle ventilation. Which of the following directions should the equipment exhaust face when installed in the rack?. Sides. Top. Front. Rear.

A network administrator needs to add 255 useable IP addresses to the network. A /24 is currently in use. Which of the following prefixes would fulfill this need?. /23. /25. /29. /32.

Which of the following allows an organization to map multiple internal devices to a single external-facing IP address?. NAT. BGP. OSPF. FHRP.

Which of the following steps in the troubleshooting methodology includes checking logs for recent changes?. Identify the problem. Document the findings and outcomes. Test the theory to determine cause. Establish a plan of action.

Which of the following configurations exempts traffic to the internet from traversing a VPN?. Client-to-site. Active-passive. Split-tunnel. Out-of-band.

Which of the following ports creates a secure connection to a directory service?. 22. 389. 445. 636.

A network engineer configures a new switch and connects it to an existing switch for expansion and redundancy. Users immediately lose connectivity to the network. The network engineer notes the following spanning tree information from both switches. The port cost should not be equal. The ports should use link aggregation. A root bridge needs to be identified. The switch should be configured for RSTP.

A network administrator is implementing security zones for each department. Which of the following should the administrator use to accomplish this task?. ACLs. Port security. Content filtering. NAC.

Which of the following protocols is used to route traffic on the public internet?. BGP. OSPF. EIGRP. RIP.

Which of the following protocols provides remote access utilizing port 22?. SSH. Telnet. TLS. RDP.

After changes were made to a firewall, users are no longer able to access a web server. A network administrator wants to ensure that ports 80 and 443 on the web server are still accessible from the user IP space. Which of the following commands is best suited to perform this testing?. dig. ifconfig. ping. nmap.

Which of the following attacks would most likely cause duplicate IP addresses in a network?. Rogue DHCP server. DNS poisoning. Social engineering. Denial-of-service.

An organization wants better network visibility. The organization's requirements include: • Multivendor/OS-monitoring capabilities • Real-time collection • Data correlation Which of the following meets these requirements?. SNMP. SIEM. Nmap. Syslog.

An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?. Use version 1 of SNMP and use a community string to serve as a PSK. Use version 3 of SNMP and set up trap messages for critical events on the network. Use version 2c of SNMP and use informs to validate device authentication. Use version 2u of SNMP to authenticate devices for network monitoring.

A company has observed increased user traffic to gambling websites and would like to limit this behavior on work computers. Which of the following should the company most likely implement?. ACLS. Content filter. Port security. Screened subnet.

Following a fire in a data center, the cabling was replaced. Soon after an administrator notices network issues. Which of the following are the most likely causes of the network issues? (Choose two.). The switches are not the correct voltage. The HVAC system was not verified as fully functional after the fire. The VLAN database was not deleted before the equipment was brought back online. The RJ45 cables were replaced with unshielded cables. The wrong transceiver type was used for the new termination. The new RJ45 cables are a higher category than the old ones.

Cloud computing has the capability to meet increased and decreased demands for computing infrastructure for a short period of time. Which of the following best describes this characteristic?. Efficiency. Elasticity. Multitenancy. Scalability.

Which of the following can also provide a security feature when implemented?. NAT. BGP. FHRP. EIGRP.

Which of the following best describes the transmission format that occurs at the transport layer over connectionless communication?. Datagram. Segment. Frames. Packets.

Which of the following is most likely to work with an FC connection and offers more scalability?. DAS. SAN. SSE. NAS.

A company is moving to a hybrid cloud model. As part of this move the mail server will be moved to the cloud. The systems administrator needs to ensure the mail server continues to receive email. Which of the following types of DNS records should the systems administrator update?. NS. PTR. MX. A.

A network engineer is configuring network ports in a public office. To increase security, the engineer wants the ports to allow network connections only after authentication. Which of the following security features should the engineer use?. Port security. 802.1X. MAC filtering. Access control list.

A network administrator is expanding a network and wants to ensure no unauthorized redundant links are present. Which of the following should the administrator use to identify and block redundant links?. SDN. STP. LLDP. OSPF.

A network administrator notices uncommon communication between VMs on ephemeral ports on the same subnet. The administrator is concerned about that traffic moving laterally within the network. Which of the following describes the type of traffic flow the administrator is analyzing?. East-west. Point-to-point. Horizontal-scaling. Hub-and-spoke.

Which of the following would be violated if an employee accidentally deleted a customer's data?. Integrity. Confidentiality. Vulnerability. Availability.

A network engineer is now in charge of all SNMP management in the organization. The engineer must use a SNMP version that does not utilize plaintext data. Which of the following is the minimum version of SNMP that supports this requirement?. v1. v2c. v2u. v3.

A company recently acquired a number of sites and no documentation was provided. A network administrator needs to identify and document all of the digital assets in use. Which of the following is the best method for the administrator to use?. Availability monitoring. Packet capture. Physical inventory. Network discovery.