View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 201

Which protocol is used to securely manage network devices through a command-line interface?

1. Telnet
2. FTP
3. SSH
4. TFTP

Correct Answer: 3

Explanation

Secure Shell, or SSH, provides encrypted command-line access to remote network devices and servers. It protects usernames, passwords, commands, and other management traffic from being transmitted in clear text. SSH commonly uses TCP port 22 and is widely used to administer routers, switches, firewalls, Linux servers, and other infrastructure. Telnet also provides remote command-line access but lacks modern encryption. FTP and TFTP are primarily file-transfer protocols. SSH is therefore the preferred protocol for secure remote device management.

Question 202

Which subnet mask corresponds to a /27 prefix?

1. 255.255.255.224
2. 255.255.255.192
3. 255.255.255.240
4. 255.255.255.128

Correct Answer: 1

Explanation

A /27 prefix uses 27 network bits and leaves 5 bits for hosts. The corresponding IPv4 subnet mask is 255.255.255.224. Each /27 subnet contains 32 total addresses, with 30 normally available for hosts after reserving the network and broadcast addresses. A /26 uses 255.255.255.192, /28 uses 255.255.255.240, and /25 uses 255.255.255.128. Knowing prefix-to-mask conversions is important when calculating subnet sizes and designing IPv4 networks efficiently.

Question 203

Which protocol is commonly used to synchronize clocks with a time server?

1. LDAP
2. NTP
3. SNMP
4. SMTP

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, synchronizes system clocks with configured time sources. Accurate time is important for event logs, authentication systems, certificates, troubleshooting, and security investigations. Devices can synchronize with internal or external NTP servers depending on the network design. LDAP is used for directory services, SNMP is used for network monitoring, and SMTP handles email transmission. Maintaining synchronized clocks helps administrators correlate events from multiple systems and ensures that timestamps remain useful when analyzing network activity.

Question 204

Which technology allows multiple virtual networks to operate over shared physical infrastructure?

1. Network virtualization
2. Static routing
3. Port security
4. Cable shielding

Correct Answer: 1

Explanation

Network virtualization abstracts network functions and resources from the underlying physical infrastructure, allowing multiple logical networks to operate over shared hardware. Virtual switches, virtual routers, virtual network interfaces, and software-defined network components are examples of this approach. Network virtualization can improve resource utilization, flexibility, and scalability in data centers and cloud environments. Static routing defines fixed paths, port security controls switch access, and cable shielding reduces electromagnetic interference. Virtualized networking is particularly important in modern cloud and virtual machine environments.

Question 205

Which protocol is used by IPv6 hosts to discover neighboring devices and routers?

1. ARP
2. NDP
3. FTP
4. DHCP

Correct Answer: 2

Explanation

IPv6 Neighbor Discovery Protocol, or NDP, provides several functions that were traditionally handled by ARP and related mechanisms in IPv4. NDP uses ICMPv6 messages to discover neighboring devices, determine link-layer addresses, discover routers, and support address configuration. IPv6 does not use ARP for address resolution. FTP is used for file transfers, while DHCP provides configuration services. Understanding NDP is important when troubleshooting IPv6 connectivity because it plays a central role in local network communication and router discovery.

Question 206

Which cable type uses twisted copper pairs without additional shielding?

1. STP
2. Coaxial
3. UTP
4. Fiber

Correct Answer: 3

Explanation

Unshielded Twisted Pair, or UTP, cable consists of twisted copper wire pairs without an additional metallic shield around the pairs or cable. The twisting helps reduce electromagnetic interference and crosstalk between conductors. UTP is widely used for Ethernet networks because it is relatively inexpensive, flexible, and easy to install. STP includes additional shielding, coaxial cable uses a central conductor with shielding, and fiber transmits data using light. UTP remains a common medium for structured copper Ethernet installations.

Question 207

Which device separates broadcast domains?

1. Hub
2. Router
3. Repeater
4. Patch panel

Correct Answer: 2

Explanation

A router separates broadcast domains because broadcasts received on one routed interface are not normally forwarded to another interface. This allows different IP networks to operate as separate logical broadcast domains. VLANs can also create separate Layer 2 broadcast domains, with a Layer 3 device required for communication between them. Hubs and repeaters operate at lower layers and do not provide broadcast-domain separation. A patch panel is a passive physical component. Routers therefore play an important role in controlling broadcast boundaries.

Question 208

Which wireless security method uses a pre-shared key for authentication?

1. WPA2-Personal
2. WPA2-Enterprise
3. 802.1X
4. RADIUS

Correct Answer: 1

Explanation

WPA2-Personal commonly uses a pre-shared key, or PSK, to authenticate clients to a wireless network. Users typically enter a shared wireless password when connecting. WPA2-Enterprise generally uses 802.1X authentication with a centralized authentication server such as RADIUS, allowing individual credentials or other enterprise authentication methods. RADIUS is an authentication service rather than a wireless encryption mode by itself. WPA2-Personal is therefore the option associated with the traditional shared wireless password model.

Question 209

Which routing protocol is commonly associated with path-vector routing?

1. OSPF
2. RIP
3. BGP
4. STP

Correct Answer: 3

Explanation

Border Gateway Protocol, or BGP, is a path-vector routing protocol used primarily for exchanging routing information between autonomous systems. Rather than simply calculating a shortest path based on link costs, BGP uses attributes and routing policies to influence path selection. OSPF is a link-state protocol, RIP is a distance-vector protocol, and STP is a Layer 2 loop-prevention protocol rather than a routing protocol. BGP’s policy-based operation makes it particularly important for internet-scale routing and service-provider networks.

Question 210

Which service allows clients to automatically obtain a default gateway address?

1. DHCP
2. DNS
3. NTP
4. SNMP

Correct Answer: 1

Explanation

DHCP can automatically provide clients with a default gateway along with other network configuration information. During DHCP configuration, the server can supply an IP address, subnet mask, default gateway, DNS server addresses, lease duration, and additional options. This eliminates the need for administrators to manually configure every client. DNS resolves names, NTP synchronizes time, and SNMP provides monitoring and management functions. DHCP is therefore a key service for centrally distributing consistent network configuration across client devices.

Question 211

Which protocol provides reliable, connection-oriented transport?

1. UDP
2. TCP
3. ICMP
4. ARP

Correct Answer: 2

Explanation

Transmission Control Protocol, or TCP, provides reliable, connection-oriented transport between applications. It establishes a connection, uses sequence numbers and acknowledgments, manages retransmissions, and provides flow and congestion control. These features help ensure that data arrives in order and without missing segments. UDP is connectionless and does not provide the same built-in reliability, while ICMP supports network control and diagnostic functions. ARP resolves IPv4 addresses to MAC addresses on local networks. TCP is therefore the protocol associated with reliable transport.

Question 212

Which technology allows organizations to connect remote users securely to internal resources over the internet?

1. Remote-access VPN
2. VLAN
3. STP
4. Port mirroring

Correct Answer: 1

Explanation

A remote-access VPN allows individual users or devices to establish a secure connection to an organization’s network through an untrusted network such as the internet. After authentication, the VPN can provide protected access to permitted internal resources according to organizational policies. VLANs provide local network segmentation, STP prevents switching loops, and port mirroring copies traffic for monitoring. Remote-access VPNs are commonly used by employees who need secure access to internal applications, servers, or services while working outside the organization’s physical network.

Question 213

Which DNS record maps a hostname to an IPv4 address?

1. MX
2. PTR
3. A
4. AAAA

Correct Answer: 3

Explanation

An A record maps a hostname to an IPv4 address. For example, a web server hostname can have an A record pointing to its IPv4 address so clients can locate the server through DNS. An AAAA record performs the equivalent function for IPv6 addresses. MX records identify mail servers, while PTR records are used for reverse DNS lookups. Understanding common DNS records helps administrators troubleshoot name-resolution issues and verify that network services are correctly represented in DNS.

Question 214

Which protocol is commonly used to monitor network devices using management information and counters?

1. SNMP
2. SMTP
3. SSH
4. SIP

Correct Answer: 1

Explanation

Simple Network Management Protocol, or SNMP, allows network management systems to monitor and manage devices using structured management information. Administrators can retrieve values such as interface traffic counters, error statistics, device uptime, and hardware information. SNMP can also support notifications when configured appropriately. SMTP handles email, SSH provides secure remote administration, and SIP manages communication sessions. SNMP is particularly useful when an organization needs centralized visibility into the health and performance of routers, switches, servers, printers, and other network devices.

Question 215

Which type of NAT creates a fixed one-to-one mapping between a private and public address?

1. PAT
2. Dynamic NAT
3. Static NAT
4. DHCP

Correct Answer: 3

Explanation

Static NAT creates a permanent one-to-one mapping between an internal private IP address and a public IP address. This arrangement is useful when an internal resource needs a consistent public address, such as a server that must be reachable from an external network. Dynamic NAT assigns addresses from a pool as needed, while PAT allows multiple internal hosts to share one public address using different ports. DHCP provides network configuration and is not itself a NAT method. Static NAT provides predictable address translation.

Question 216

Which technology is designed to provide a first-hop gateway address with redundancy?

1. FHRP
2. FTP
3. DNS
4. TFTP

Correct Answer: 1

Explanation

First Hop Redundancy Protocols, or FHRPs, provide gateway redundancy by allowing multiple routers or Layer 3 devices to present a shared virtual gateway address to hosts. If the active gateway becomes unavailable, another participating device can take over forwarding responsibilities. Examples include technologies such as HSRP and VRRP. This improves network availability because hosts do not depend on a single physical gateway device. FTP and TFTP transfer files, while DNS provides name resolution. FHRP is therefore associated with redundant default-gateway services.

Question 217

Which attack creates a fake wireless network that imitates a legitimate SSID?

1. DHCP starvation
2. Evil twin
3. MAC flooding
4. ARP poisoning

Correct Answer: 2

Explanation

An evil twin attack uses a rogue wireless access point that imitates a legitimate wireless network, often using the same or a very similar SSID. Unsuspecting users may connect to the fraudulent network, allowing an attacker to monitor traffic or attempt credential theft. Strong wireless authentication, certificate validation, user awareness, and appropriate network controls can reduce the risk. DHCP starvation consumes address leases, MAC flooding targets switch tables, and ARP poisoning manipulates local address mappings. Evil twin specifically describes fraudulent wireless impersonation.

Question 218

Which protocol is commonly used to establish and manage VoIP communication sessions?

1. SIP
2. SNMP
3. LDAP
4. NTP

Correct Answer: 1

Explanation

Session Initiation Protocol, or SIP, is commonly used to establish, modify, and terminate voice and multimedia communication sessions over IP networks. SIP handles signaling rather than carrying the actual audio or video media. RTP is commonly used to transport real-time media after a session is established. SNMP supports network monitoring, LDAP provides directory services, and NTP synchronizes time. SIP is therefore an important protocol in VoIP environments for managing communication sessions between endpoints and communication systems.

Question 219

Which protocol is commonly used to provide encrypted DNS queries between a client and DNS server?

1. DNS over TLS
2. FTP
3. RDP
4. Telnet

Correct Answer: 1

Explanation

DNS over TLS, or DoT, encrypts DNS queries by transporting them through a TLS-protected connection. This helps prevent other parties on the network from easily inspecting DNS queries in transit. Traditional DNS commonly uses unencrypted UDP or TCP traffic, which can expose query information. DoT provides confidentiality for DNS communication while maintaining the standard DNS resolution process. FTP and RDP serve different purposes, while Telnet provides unencrypted remote terminal access. DoT is therefore useful when encrypted DNS transport is required.

Question 220

Which network device forwards traffic based primarily on destination IP addresses?

1. Switch
2. Hub
3. Router
4. Repeater

Correct Answer: 3

Explanation

A router forwards packets between different networks using Layer 3 information, primarily destination IP addresses. It examines its routing table to determine the appropriate next hop or outgoing interface for each packet. Switches primarily forward Ethernet frames using MAC addresses, while hubs and repeaters operate mainly at the physical layer. Routers can also provide additional functions such as NAT, ACL enforcement, and routing between VLANs. Their ability to connect separate IP networks makes them fundamental components of routed network infrastructure.