View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 341

Which protocol is used to securely resolve DNS queries through TLS?

1. DNSSEC
2. DoH
3. DoT
4. SNMPv3

Correct Answer: 3

Explanation

DNS over TLS, or DoT, protects DNS queries by sending them through an encrypted TLS connection. This helps prevent unauthorized parties on the network from easily viewing or modifying DNS requests and responses. DoT commonly uses TCP port 853. DNS over HTTPS, or DoH, also encrypts DNS traffic but transports DNS requests through HTTPS. DNSSEC provides authentication and integrity for DNS data rather than encrypting the entire DNS communication channel. DoT is therefore specifically associated with encrypted DNS over TLS.

Question 342

What is the main purpose of a network baseline?

1. To provide a normal performance reference
2. To assign IP addresses
3. To encrypt network traffic
4. To replace monitoring tools

Correct Answer: 1

Explanation

A network baseline documents normal network performance and behavior under typical operating conditions. Measurements can include bandwidth utilization, latency, CPU usage, memory usage, interface errors, and traffic patterns. When a problem occurs, administrators can compare current measurements with the baseline to identify unusual behavior or performance degradation. A baseline does not assign addresses or encrypt traffic. Instead, it provides a reference point that helps with troubleshooting, capacity planning, and identifying changes that may require investigation.

Question 343

Which IPv6 feature replaces the traditional IPv4 broadcast mechanism?

1. Anycast
2. Multicast
3. Unicast
4. NAT

Correct Answer: 2

Explanation

IPv6 does not use traditional broadcast addressing. Instead, multicast is used for many functions that would have relied on broadcast in IPv4. For example, Neighbor Discovery uses multicast groups to communicate with relevant IPv6 devices. Anycast delivers traffic toward an appropriate member of a group of interfaces, while unicast identifies a specific interface. NAT is an address-translation technology and is not a replacement for IPv4 broadcast. IPv6 multicast helps reduce unnecessary traffic by targeting specific groups of devices.

Question 344

Which physical device is used to regenerate or amplify a network signal to extend its distance?

1. Router
2. Firewall
3. Repeater
4. Load balancer

Correct Answer: 3

Explanation

A repeater regenerates or retransmits a network signal so that communication can travel farther than it could over a single physical segment. Repeaters primarily operate at the Physical layer and do not make routing or application-level decisions. Routers forward packets between networks, firewalls enforce traffic policies, and load balancers distribute application traffic among servers. Although modern networks often use switches and fiber infrastructure instead of standalone repeaters, understanding their function remains important when studying physical-layer connectivity and legacy network designs.

Question 345

Which protocol is commonly used to monitor and manage network devices using a management information base?

1. SNMP
2. SMTP
3. SMB
4. SIP

Correct Answer: 1

Explanation

Simple Network Management Protocol, or SNMP, is commonly used to monitor and manage network devices. SNMP-enabled devices expose management information through objects organized in a Management Information Base, or MIB. Monitoring systems can collect information such as interface counters, device status, CPU utilization, and memory usage. SNMP can also generate notifications when specific events occur. SMTP is used for email, SMB supports file sharing, and SIP manages communication sessions. SNMP is therefore widely associated with centralized network monitoring and management.

Question 346

Which IPv4 address represents the default route?

1. 127.0.0.1
2. 255.255.255.255
3. 0.0.0.0/0
4. 169.254.0.0/16

Correct Answer: 3

Explanation

The IPv4 default route is represented as 0.0.0.0/0. It matches any IPv4 destination that does not have a more specific route in the routing table. Routers commonly use a default route to forward unknown destinations toward an upstream router or internet gateway. The address 127.0.0.1 is a loopback address, 255.255.255.255 is the limited broadcast address, and 169.254.0.0/16 is the APIPA range. The default route is therefore the broadest possible IPv4 route.

Question 347

Which technology provides wireless access to a wired LAN?

1. Access point
2. Router
3. Patch panel
4. Modem

Correct Answer: 1

Explanation

A wireless access point provides wireless connectivity to devices while connecting them to a wired network infrastructure. The access point bridges wireless clients to the appropriate wired network and can support features such as multiple SSIDs, VLAN integration, roaming, and wireless security. A router forwards traffic between IP networks, a patch panel organizes physical cables, and a modem provides access to certain service-provider connections. Access points are therefore the primary infrastructure devices used to provide Wi-Fi connectivity within a LAN.

Question 348

Which protocol is used to synchronize clocks with highly accurate time sources?

1. LDAP
2. NTP
3. FTP
4. ARP

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, synchronizes computer and network-device clocks with designated time sources. Accurate time is important for authentication, event logging, security investigations, certificates, scheduled tasks, and troubleshooting. NTP uses a hierarchy of time sources known as strata, allowing systems to synchronize progressively with authoritative sources. LDAP provides directory access, FTP transfers files, and ARP maps IPv4 addresses to MAC addresses. Consistent time across devices allows administrators to correlate events and maintain reliable timestamps throughout the network.

Question 349

Which cable characteristic describes the loss of signal strength over distance?

1. Crosstalk
2. Attenuation
3. Jitter
4. Latency

Correct Answer: 2

Explanation

Attenuation is the reduction in signal strength as a signal travels through a transmission medium. The effect generally becomes more significant as cable distance increases and can contribute to communication errors or degraded performance. Crosstalk occurs when signals from nearby conductors interfere with each other. Jitter describes variation in packet arrival timing, while latency measures communication delay. Technicians can address excessive attenuation by using appropriate cable types, staying within distance specifications, using proper equipment, or deploying signal regeneration where appropriate.

Question 350

Which technology allows network traffic to be copied to a monitoring interface for analysis?

1. LACP
2. NAT
3. Port mirroring
4. DHCP

Correct Answer: 3

Explanation

Port mirroring, also called Switched Port Analyzer or SPAN on some platforms, copies network traffic from selected switch ports or VLANs to a designated monitoring interface. Security and network administrators can connect packet-analysis tools to the monitoring interface to inspect traffic without placing the analyzer directly in the traffic path. LACP combines links, NAT translates addresses, and DHCP provides network configuration. Port mirroring is useful for troubleshooting, performance analysis, and security investigations when packet-level visibility is required.

Question 351

Which IPv6 address is used for local host loopback testing?

1. FE80::1
2. ::1
3. FF02::1
4. 2001:db8::1

Correct Answer: 2

Explanation

The IPv6 loopback address is ::1. It serves the same basic purpose as 127.0.0.1 in IPv4 by allowing a host to send traffic to itself without transmitting it through the physical network. Loopback testing can help verify that the local IPv6 protocol stack is operating correctly. FE80::/10 addresses are link-local, FF00::/8 addresses are multicast, and 2001:db8::/32 is reserved for documentation examples. ::1 is therefore the standard IPv6 loopback address.

Question 352

Which security principle grants users only the access necessary to perform their tasks?

1. Defense in depth
2. Least privilege
3. Open authentication
4. Network neutrality

Correct Answer: 2

Explanation

The principle of least privilege gives users, applications, and devices only the permissions required to perform their authorized tasks. Limiting privileges reduces the potential impact of compromised accounts, accidental changes, and unauthorized activity. For example, a user who only needs to view reports should not automatically receive administrative permissions. Defense in depth uses multiple security controls, while open authentication and network neutrality do not describe this access-control principle. Least privilege is an important component of secure network and system administration.

Question 353

Which technology can provide a backup path when a primary WAN connection fails?

1. Dual WAN
2. VLAN
3. Port mirroring
4. DNS caching

Correct Answer: 1

Explanation

Dual WAN provides two separate wide-area network connections that can be used for redundancy or load distribution. If the primary WAN circuit fails, network equipment can switch traffic to the secondary connection, helping maintain internet or branch connectivity. The two connections may use different service providers or transport technologies to reduce the chance of a shared failure. VLANs provide segmentation, port mirroring supports traffic analysis, and DNS caching stores name-resolution results. Dual WAN is therefore a common network availability strategy.

Question 354

Which protocol is commonly used for encrypted administrative access to a network switch?

1. Telnet
2. HTTP
3. SSH
4. FTP

Correct Answer: 3

Explanation

Secure Shell, or SSH, provides encrypted command-line access to network devices such as switches, routers, and firewalls. SSH protects administrative credentials and session data from being transmitted as readable plain text. It commonly uses TCP port 22. Telnet can also provide remote command-line access but does not provide encryption by default. HTTP is used for web communication, while FTP transfers files. SSH is therefore the preferred protocol for secure remote command-line management of network infrastructure.

Question 355

Which IPv4 address range is private?

1. 8.8.8.0/24
2. 172.16.0.0/12
3. 1.1.1.0/24
4. 224.0.0.0/4

Correct Answer: 2

Explanation

The 172.16.0.0/12 range is one of the three private IPv4 address ranges defined for internal networks. It includes addresses from 172.16.0.0 through 172.31.255.255. Private addresses are not directly routable across the public internet and are commonly used behind NAT or within internal routing domains. The 8.8.8.0/24 and 1.1.1.0/24 ranges are associated with publicly reachable services, while 224.0.0.0/4 is reserved for IPv4 multicast traffic.

Question 356

Which technology uses labels to forward traffic through a service-provider network?

1. MPLS
2. DNS
3. DHCP
4. ARP

Correct Answer: 1

Explanation

Multiprotocol Label Switching, or MPLS, forwards traffic through a provider network using labels rather than relying solely on conventional IP routing at every forwarding step. Service providers can use MPLS to deliver predictable connectivity and support different types of services between customer locations. MPLS is commonly used in enterprise WAN architectures connecting branches, offices, and data centers. DNS resolves names, DHCP assigns network configuration, and ARP resolves IPv4 addresses to MAC addresses. MPLS is therefore associated with provider-managed WAN connectivity.

Question 357

Which tool can capture and inspect individual network packets?

1. Cable tester
2. Packet analyzer
3. Tone generator
4. Loopback plug

Correct Answer: 2

Explanation

A packet analyzer captures and examines network traffic at the packet or frame level. Administrators can use packet-analysis tools to inspect protocols, addresses, ports, flags, retransmissions, errors, and application communication. This can help identify problems that are difficult to diagnose using basic connectivity commands. A cable tester checks physical cabling, a tone generator helps trace cables, and a loopback plug tests an interface by returning transmitted signals. Packet analysis is especially valuable for detailed protocol-level troubleshooting.

Question 358

Which routing protocol is commonly used inside an enterprise autonomous system and supports areas?

1. BGP
2. RIP
3. OSPF
4. ARP

Correct Answer: 3

Explanation

Open Shortest Path First, or OSPF, is an interior gateway protocol commonly used within enterprise autonomous systems. It uses a link-state database and supports hierarchical designs through areas, with Area 0 typically serving as the backbone. OSPF can converge efficiently and provides detailed control over route selection. BGP is primarily used for inter-domain routing, RIP is an older distance-vector protocol, and ARP is used for local IPv4 address resolution. OSPF is therefore well suited to structured enterprise routing environments.

Question 359

What is the primary purpose of a certificate in a TLS connection?

1. Identify and authenticate the communicating endpoint
2. Assign a subnet mask
3. Increase Ethernet speed
4. Replace DNS completely

Correct Answer: 1

Explanation

A digital certificate in a TLS connection helps authenticate the identity of a communicating endpoint, such as a web server. Certificates contain information about the subject, public key, issuer, validity period, and other attributes. A trusted certificate authority signs the certificate, allowing clients to validate the chain of trust. TLS then uses cryptographic mechanisms to establish a protected communication session. Certificates do not assign subnet masks, increase Ethernet speed, or replace DNS. They are an important part of secure network communication.

Question 360

Which protocol is commonly used for centralized directory authentication in Microsoft environments?

1. SMB
2. Kerberos
3. RTP
4. TFTP

Correct Answer: 2

Explanation

Kerberos is a network authentication protocol widely used in Microsoft Active Directory environments. It uses tickets and cryptographic mechanisms to authenticate users and services without repeatedly transmitting passwords across the network. Kerberos supports mutual authentication and centralized identity management within compatible domains. SMB is commonly used for file and printer sharing, RTP carries real-time media, and TFTP provides simple file transfers. Kerberos is therefore closely associated with secure centralized authentication in enterprise directory environments.