CompTIA Network+ N10-009 Practice Test Questions and Exam Dumps Part2 Q21-40

View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 21

Which protocol is used to securely transfer files over an SSH connection?

  1. FTP
  2. SFTP
  3. TFTP
  4. SNMP

Correct Answer: 2

Explanation

SFTP, or SSH File Transfer Protocol, provides secure file transfer using an SSH connection. It encrypts authentication credentials and file data during transmission, making it suitable for transferring sensitive information across untrusted networks. FTP does not provide encryption by itself, while TFTP is a lightweight protocol without built-in authentication or encryption. SNMP is primarily used for network monitoring and management. SFTP is therefore a practical choice when administrators need secure file transfers while maintaining confidentiality and integrity.

Question 22

Which device connects wireless clients to a wired Ethernet network?

  1. Access point
  2. Router
  3. Firewall
  4. Modem

Correct Answer: 1

Explanation

A wireless access point provides connectivity between wireless clients and a wired network infrastructure. It allows devices such as laptops, smartphones, and tablets to connect using Wi-Fi while forwarding their traffic toward the wired LAN. Although many home routers include built-in wireless access point functionality, the specific function of providing wireless network access is performed by the access point. A modem provides connectivity to a service provider, a firewall controls traffic, and a router forwards traffic between networks.

Question 23

Which IPv4 address belongs to the private address range 192.168.0.0/16?

  1. 172.32.10.5
  2. 192.169.1.10
  3. 192.168.50.25
  4. 11.20.30.40

Correct Answer: 3

Explanation

The IPv4 range 192.168.0.0/16 is reserved for private networks and includes addresses from 192.168.0.0 through 192.168.255.255. These addresses are commonly used inside homes, offices, and enterprise LANs and are not directly routable across the public internet. The address 192.168.50.25 falls within this private range. Private addressing is frequently combined with NAT or PAT when internal devices need to communicate with public internet destinations.

Question 24

Which protocol is commonly used to securely resolve domain names through an encrypted HTTPS connection?

  1. DNSSEC
  2. DoH
  3. ARP
  4. ICMP

Correct Answer: 2

Explanation

DNS over HTTPS, or DoH, sends DNS queries through HTTPS, providing encryption between the client and the DNS resolver. This can help protect DNS requests from being easily observed or modified while they travel across a network. DNSSEC provides authenticity and integrity validation for DNS data but does not itself encrypt ordinary DNS queries. ARP maps IPv4 addresses to MAC addresses on local networks, while ICMP supports network diagnostics and control messaging. DoH is therefore the technology specifically associated with encrypted DNS resolution over HTTPS.

Question 25

Which port is commonly used by HTTPS?

  1. 21
  2. 22
  3. 80
  4. 443

Correct Answer: 4

Explanation

HTTPS commonly uses TCP port 443 for secure web communication. HTTPS combines HTTP with TLS encryption to protect information exchanged between clients and web servers. Port 80 is traditionally associated with unencrypted HTTP, port 22 is commonly used by SSH, and port 21 is associated with FTP control traffic. Although services can be configured to use alternative ports, TCP 443 remains the standard port commonly expected for HTTPS traffic on modern networks.

Question 26

What does a default gateway provide to a host?

  1. A path to remote networks
  2. A MAC address table
  3. A DNS zone
  4. A wireless channel

Correct Answer: 1

Explanation

A default gateway provides a host with a next-hop device for traffic destined for networks outside its local subnet. In most IPv4 LANs, the default gateway is the IP address of a router or Layer 3 switch interface connected to the local network. When a destination is not part of the host’s local subnet, the host forwards the traffic to the default gateway. DNS handles name resolution, switches maintain forwarding information, and wireless channels are used for radio communication.

Question 27

Which cable type is most resistant to electromagnetic interference?

  1. UTP
  2. Coaxial
  3. Fiber-optic
  4. Twinaxial

Correct Answer: 3

Explanation

Fiber-optic cabling transmits information using light rather than electrical signals, making it highly resistant to electromagnetic interference and radio-frequency interference. This characteristic makes fiber particularly useful in environments containing substantial electrical equipment or where long-distance communication is required. UTP uses copper conductors and can be affected by interference if installed improperly. Coaxial and twinaxial cables can provide shielding, but they still rely on electrical signaling. Fiber also offers high bandwidth and is commonly used for backbone and high-speed network connections.

Question 28

Which protocol dynamically discovers the MAC address associated with an IPv4 address on a local network?

  1. DNS
  2. ARP
  3. DHCP
  4. NTP

Correct Answer: 2

Explanation

Address Resolution Protocol, or ARP, is used on IPv4 networks to determine the MAC address associated with a known local IPv4 address. When a host needs to communicate with another local device, it can send an ARP request asking which device owns a particular IP address. The appropriate device responds with its MAC address, allowing Ethernet communication to occur. DNS resolves names to IP addresses, DHCP provides network configuration, and NTP synchronizes clocks. ARP specifically connects IPv4 addressing with Ethernet hardware addressing.

Question 29

A network administrator wants to prioritize voice traffic over ordinary data. Which technology should be used?

  1. NAT
  2. QoS
  3. DNS
  4. ARP

Correct Answer: 2

Explanation

Quality of Service, or QoS, allows network administrators to classify and prioritize traffic according to business or application requirements. Voice and video traffic are often sensitive to latency, jitter, and packet loss, so QoS can assign them higher priority than less time-sensitive traffic. NAT translates addresses, DNS performs name resolution, and ARP resolves IPv4 addresses to MAC addresses. QoS does not create additional bandwidth, but it can improve how available bandwidth and network resources are handled during congestion.

Question 30

Which IPv6 address is used for loopback testing?

  1. ::1
  2. FE80::1
  3. FF02::1
  4. 2001:db8::1

Correct Answer: 1

Explanation

The IPv6 loopback address is ::1. It serves a purpose similar to 127.0.0.1 in IPv4 and allows a host to send traffic to itself for testing or local application communication. FE80::/10 addresses are link-local addresses, while FF00::/8 is used for multicast. The 2001:db8::/32 range is reserved for documentation examples. Loopback testing can help determine whether the local TCP/IP stack is functioning independently of physical network connectivity.

Question 31

Which protocol is commonly used to monitor and manage network devices?

  1. SMTP
  2. SNMP
  3. SMB
  4. SIP

Correct Answer: 2

Explanation

Simple Network Management Protocol, or SNMP, is widely used to monitor and manage network devices such as switches, routers, servers, and access points. Network management systems can collect information such as interface status, bandwidth utilization, errors, and device health. SNMP can also support certain configuration or control operations depending on the implementation and security version used. SMTP handles email transmission, SMB supports file and resource sharing, and SIP is commonly associated with voice and multimedia session signaling.

Question 32

Which wireless frequency generally provides better range through walls but is more susceptible to congestion from common household devices?

  1. 6 GHz
  2. 5 GHz
  3. 2.4 GHz
  4. 60 GHz

Correct Answer: 3

Explanation

The 2.4 GHz wireless band generally provides better range and penetration through obstacles than higher-frequency Wi-Fi bands. However, it is also more susceptible to interference and congestion because many consumer devices use this frequency range. Bluetooth devices, older wireless equipment, and some household appliances can contribute to interference. The 5 GHz and 6 GHz bands generally provide additional channels and higher performance under suitable conditions but have shorter effective range through obstacles. Network administrators should consider both coverage and interference when selecting wireless bands.

Question 33

Which network service translates private IP addresses into a public IP address?

  1. NAT
  2. DNS
  3. NTP
  4. LDAP

Correct Answer: 1

Explanation

Network Address Translation, or NAT, translates IP addresses between different addressing domains. A common implementation allows private IPv4 addresses used inside a LAN to communicate with public internet addresses. NAT can conserve public IPv4 addresses and provide a degree of address separation between internal and external networks. DNS translates names into IP addresses, NTP synchronizes system clocks, and LDAP provides directory-related services. NAT does not replace a firewall, but it is frequently implemented on routers and security appliances that also perform firewall functions.

Question 34

Which routing protocol is classified as a link-state protocol?

  1. RIP
  2. OSPF
  3. BGP
  4. EIGRP

Correct Answer: 2

Explanation

OSPF, or Open Shortest Path First, is a link-state interior gateway protocol. Routers running OSPF exchange information about network topology and use that information to calculate efficient paths through the network. OSPF commonly uses the Shortest Path First algorithm to determine routes. RIP is a distance-vector protocol, while BGP is primarily a path-vector protocol used for interdomain routing. EIGRP is commonly classified as an advanced distance-vector protocol. OSPF is therefore the link-state protocol among the listed options.

Question 35

Which connector is commonly used with single-mode and multimode fiber cabling?

  1. RJ45
  2. F-type
  3. LC
  4. RJ11

Correct Answer: 3

Explanation

LC is a common fiber-optic connector used with both single-mode and multimode fiber installations. It has a small form factor, making it useful in environments where port density is important. RJ45 is primarily associated with twisted-pair Ethernet, RJ11 is commonly used for telephone connections, and F-type connectors are commonly associated with coaxial cable. Fiber connectors must be matched with compatible transceivers, patch panels, and cabling. LC connectors are widely encountered in modern enterprise fiber installations.

Question 36

What is the primary purpose of a firewall?

  1. Assign IP addresses
  2. Resolve hostnames
  3. Filter network traffic
  4. Synchronize system clocks

Correct Answer: 3

Explanation

A firewall controls network traffic according to configured security rules. It can allow, deny, or otherwise inspect traffic based on characteristics such as source and destination addresses, ports, protocols, applications, or connection states. Firewalls help enforce security boundaries between networks and systems. DHCP assigns IP configurations, DNS resolves hostnames, and NTP synchronizes system clocks. Depending on its capabilities, a modern firewall may also provide services such as intrusion prevention, VPN connectivity, application control, and content filtering.

Question 37

Which type of network is designed to cover a very small personal area around a user?

  1. PAN
  2. MAN
  3. WAN
  4. CAN

Correct Answer: 1

Explanation

A Personal Area Network, or PAN, covers a small area surrounding an individual and commonly connects personal devices such as smartphones, smartwatches, keyboards, and wireless headsets. Bluetooth is a common technology used for PAN connections. A LAN generally covers a home, office, or building, while a MAN can span a larger metropolitan area. A WAN connects networks across large geographic distances. PANs are therefore designed for short-range communication among devices associated with an individual user.

Question 38

A user can reach websites by IP address but cannot access them by hostname. Which service should be investigated first?

  1. DHCP
  2. DNS
  3. NTP
  4. SNMP

Correct Answer: 2

Explanation

If a user can reach a destination by its IP address but cannot access it using a hostname, DNS should be investigated first. DNS is responsible for resolving human-readable hostnames into IP addresses. Possible issues include an incorrect DNS server configuration, unreachable DNS servers, invalid records, or local resolver problems. DHCP may provide DNS server information, but the symptom directly points toward name resolution. NTP and SNMP are unrelated to ordinary hostname resolution and would not normally cause this specific behavior.

Question 39

Which technology provides redundant paths between switches while preventing Layer 2 loops?

  1. NAT
  2. STP
  3. DHCP
  4. DNS

Correct Answer: 2

Explanation

Spanning Tree Protocol provides a mechanism for maintaining redundant Layer 2 paths while preventing those paths from creating switching loops. STP identifies redundant links and places selected interfaces into a blocking state while keeping them available as alternatives. If an active path fails, STP can recalculate the topology and activate an appropriate redundant path. Without a loop-prevention mechanism, redundant Ethernet connections can cause broadcast storms and MAC-table instability. NAT, DHCP, and DNS do not perform this Layer 2 loop-prevention function.

Question 40

Which cloud networking model provides computing resources through a shared public provider infrastructure?

  1. Private cloud
  2. Community cloud
  3. Public cloud
  4. Hybrid cloud

Correct Answer: 3

Explanation

A public cloud provides computing, networking, storage, and other services through infrastructure operated by a cloud service provider and shared among multiple customers. Resources are logically isolated even though the underlying provider infrastructure may be shared. A private cloud is dedicated to a single organization, while a hybrid cloud combines private and public environments. A community cloud is designed for organizations with shared requirements. Public cloud services can provide flexible resource scaling without requiring an organization to own and maintain all underlying infrastructure.