View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 381

Which protocol is commonly used to securely access a remote network through a virtual private connection?

1. FTP
2. Telnet
3. SNMP
4. IPsec

Correct Answer: 4

Explanation

IPsec is a suite of protocols used to secure IP communications by providing encryption, authentication, integrity, and protection against replay attacks. It is commonly used with VPN technologies to create secure tunnels between remote networks or between remote users and organizational networks. FTP transfers files, Telnet provides unencrypted remote access, and SNMP is primarily used for network monitoring and management. IPsec can protect network-layer traffic across untrusted networks such as the public internet.

Question 382

Which OSI layer is responsible for end-to-end communication and reliability between applications?

1. Transport
2. Network
3. Session
4. Physical

Correct Answer: 1

Explanation

The Transport layer is responsible for end-to-end communication between applications running on different hosts. It can provide functions such as segmentation, reassembly, flow control, error recovery, and reliable delivery. TCP is a major Transport-layer protocol that provides reliable, connection-oriented communication, while UDP provides faster connectionless delivery without TCP’s reliability mechanisms. The Network layer handles logical addressing and routing, the Session layer manages communication sessions, and the Physical layer transmits signals across the medium.

Question 383

Which IPv6 address type is designed for communication with the nearest member of a group using routing information?

1. Multicast
2. Anycast
3. Link-local
4. Unique local

Correct Answer: 2

Explanation

IPv6 anycast allows the same address to be assigned to multiple interfaces, with traffic routed toward the nearest or most appropriate interface according to routing information. Anycast can be useful for services that need geographically or topologically distributed endpoints. Multicast sends traffic to multiple members of a defined group, link-local addresses are used for communication within a local link, and unique local addresses are intended for private IPv6 networks. Anycast is therefore specifically associated with reaching an appropriate member of a group.

Question 384

Which device is designed to inspect traffic and enforce security rules between networks?

1. Repeater
2. Patch panel
3. Firewall
4. Media converter

Correct Answer: 3

Explanation

A firewall monitors network traffic and applies configured security rules to determine whether connections should be allowed, denied, or otherwise handled. Firewalls can operate at different layers and may inspect IP addresses, ports, protocols, applications, and connection states depending on their capabilities. A repeater regenerates signals, a patch panel provides physical cable organization, and a media converter changes between different physical media types. Firewalls are therefore a primary control for restricting unwanted network communication.

Question 385

Which DNS record is used to map a hostname to an IPv6 address?

1. AAAA
2. A
3. MX
4. PTR

Correct Answer: 1

Explanation

An AAAA record maps a hostname to an IPv6 address. It performs a role similar to an A record, which maps a hostname to an IPv4 address. DNS clients can query AAAA records when they need an IPv6 address for a destination. MX records identify mail servers, while PTR records are used for reverse DNS lookups. Using the correct DNS record type is important when configuring services that need to support IPv6 connectivity and dual-stack network environments.

Question 386

What is the primary purpose of VLAN trunking?

1. To encrypt VLAN traffic
2. To carry multiple VLANs across a link
3. To assign public IP addresses
4. To block all broadcast traffic

Correct Answer: 2

Explanation

VLAN trunking allows a single physical or logical link to carry traffic belonging to multiple VLANs. A trunk is commonly used between switches, or between a switch and another VLAN-aware network device. VLAN tags identify the VLAN associated with each frame so the receiving device can maintain logical segmentation. Trunking does not inherently encrypt traffic or assign public IP addresses. It also does not eliminate broadcasts, because each VLAN can maintain its own broadcast domain. Trunking efficiently extends VLANs across network infrastructure.

Question 387

Which technology provides power and data over the same Ethernet cable?

1. PoE
2. STP
3. NAT
4. MPLS

Correct Answer: 1

Explanation

Power over Ethernet, or PoE, allows compatible Ethernet cabling to carry both network data and electrical power. It is commonly used for devices such as wireless access points, IP cameras, VoIP phones, and certain IoT equipment. PoE can simplify installations by reducing the need for separate electrical outlets near network devices. STP prevents switching loops, NAT translates addresses, and MPLS is a WAN forwarding technology. PoE is therefore particularly useful when network devices need power at locations where electrical infrastructure is limited.

Question 388

Which IPv4 mechanism automatically assigns a link-local address when DHCP is unavailable?

1. NAT
2. CIDR
3. APIPA
4. PAT

Correct Answer: 3

Explanation

Automatic Private IP Addressing, or APIPA, allows many IPv4 hosts to automatically configure an address from the 169.254.0.0/16 range when a DHCP server cannot be reached. APIPA addresses are intended for local-link communication and are generally not routable across networks. NAT translates addresses, CIDR represents IP networks using prefix notation, and PAT translates multiple private addresses through port numbers. APIPA can help devices communicate locally during DHCP failures, but it does not provide normal routed network connectivity.

Question 389

Which wireless security standard uses Simultaneous Authentication of Equals?

1. WPA2-Enterprise
2. WPA3-Personal
3. WEP
4. WPA

Correct Answer: 2

Explanation

WPA3-Personal uses Simultaneous Authentication of Equals, or SAE, to provide stronger authentication than the pre-shared key mechanism traditionally associated with WPA2-Personal. SAE helps improve resistance against certain offline password-guessing attacks and provides stronger session establishment. WPA2-Enterprise commonly uses 802.1X and an authentication server, while WEP and original WPA are older wireless security technologies. WPA3-Personal is therefore the standard most directly associated with SAE-based personal wireless authentication.

Question 390

Which routing protocol is designed primarily for exchanging routes between autonomous systems?

1. OSPF
2. RIP
3. BGP
4. EIGRP

Correct Answer: 3

Explanation

Border Gateway Protocol, or BGP, is the primary routing protocol used to exchange routing information between autonomous systems. It is considered an exterior gateway protocol and plays a major role in internet routing. BGP uses path attributes and policy-based decisions to select routes rather than relying solely on a simple shortest-path calculation. OSPF and RIP are primarily interior routing protocols, while EIGRP is also commonly used within an organization. BGP is therefore closely associated with inter-domain routing.

Question 391

Which command is commonly used to test DNS name resolution from a command line?

1. nslookup
2. netstat
3. arp
4. route

Correct Answer: 1

Explanation

The nslookup command is commonly used to query DNS servers and troubleshoot hostname resolution. Administrators can use it to determine whether a hostname resolves to an expected address and can often specify a particular DNS server for testing. Netstat displays connections and listening ports, arp shows address-resolution information, and route displays or modifies routing information. Nslookup is therefore a practical first-line troubleshooting tool when users report problems reaching services by hostname but connectivity by IP address may still work.

Question 392

Which network topology provides a dedicated connection between every pair of devices?

1. Star
2. Bus
3. Ring
4. Full mesh

Correct Answer: 4

Explanation

A full mesh topology provides a dedicated connection between every pair of devices in the network. This design offers multiple possible paths and can provide strong redundancy because the failure of one connection does not necessarily isolate a device. However, the number of required connections increases rapidly as more devices are added, making full mesh designs expensive and complex at large scale. Star topology uses a central device, bus uses a shared backbone, and ring connects devices in a circular arrangement.

Question 393

Which protocol provides reliable, connection-oriented transport?

1. UDP
2. TCP
3. ICMP
4. ARP

Correct Answer: 2

Explanation

Transmission Control Protocol, or TCP, provides reliable, connection-oriented communication between applications. It establishes a connection before transferring application data and uses sequence numbers, acknowledgments, retransmissions, and flow control to support reliable delivery. UDP is connectionless and does not provide TCP’s built-in reliability mechanisms. ICMP is used for network control and diagnostic messages, while ARP resolves IPv4 addresses to MAC addresses. TCP is therefore commonly selected when applications require ordered and reliable delivery of data.

Question 394

Which cloud model combines resources from public and private cloud environments?

1. Public cloud
2. Private cloud
3. Hybrid cloud
4. Community cloud

Correct Answer: 3

Explanation

A hybrid cloud combines public and private cloud environments and allows workloads or services to operate across both environments when appropriately integrated. Organizations may use private infrastructure for certain workloads while using public cloud resources for scalability or additional services. A public cloud is operated by a cloud provider for multiple customers, while a private cloud is dedicated to a particular organization. Hybrid architecture can provide flexibility but requires careful planning for connectivity, identity, security, and data movement.

Question 395

Which protocol is commonly used to provide secure web communication?

1. HTTP
2. HTTPS
3. FTP
4. Telnet

Correct Answer: 2

Explanation

HTTPS provides secure web communication by using HTTP over a TLS-protected connection. TLS helps provide confidentiality, integrity, and server authentication for web traffic. This protects sensitive information such as login credentials and session data while it travels between clients and servers. Plain HTTP does not provide the same encryption, FTP is designed for file transfer, and Telnet provides unencrypted remote terminal access. HTTPS is therefore the standard choice for protecting modern web-based communication.

Question 396

What does RPO define in disaster recovery planning?

1. Maximum acceptable data loss measured in time
2. Maximum acceptable service downtime
3. Maximum network bandwidth
4. Maximum number of backup servers

Correct Answer: 1

Explanation

Recovery Point Objective, or RPO, defines the maximum acceptable amount of data loss measured in time following an incident. For example, an organization with an RPO of 15 minutes aims to ensure that no more than approximately 15 minutes of data would be lost after a major failure, depending on its backup and replication systems. Recovery Time Objective, or RTO, instead focuses on how quickly a service should be restored. RPO therefore primarily concerns data-loss tolerance.

Question 397

Which attack manipulates ARP information to associate an attacker’s MAC address with another device’s IP address?

1. DNS poisoning
2. DHCP starvation
3. ARP spoofing
4. DDoS

Correct Answer: 3

Explanation

ARP spoofing occurs when an attacker sends forged ARP messages to associate their MAC address with another host’s IP address, often the address of a gateway. This can cause traffic intended for another device to be redirected through the attacker’s system. The attack may support on-path interception or disruption of local network communication. DNS poisoning targets DNS information, DHCP starvation consumes available DHCP addresses, and DDoS overwhelms services with traffic. Dynamic ARP inspection and related switch protections can help mitigate ARP spoofing.

Question 398

Which technology allows a network to use software-based control to manage forwarding behavior centrally?

1. SDN
2. NAT
3. STP
4. DHCP

Correct Answer: 1

Explanation

Software-Defined Networking, or SDN, separates network control functions from traditional device-by-device forwarding configuration and can provide centralized or logically centralized control through an SDN controller. This approach allows administrators or applications to manage network behavior programmatically and consistently. SDN can support automation, centralized policy management, and dynamic configuration. NAT performs address translation, STP prevents Layer 2 loops, and DHCP provides host configuration. SDN is therefore closely associated with programmable and centrally managed network infrastructure.

Question 399

Which metric measures variation in packet arrival times?

1. Bandwidth
2. Throughput
3. Jitter
4. Utilization

Correct Answer: 3

Explanation

Jitter measures variation in the arrival timing of packets. It is particularly important for real-time applications such as voice and video, where inconsistent packet timing can cause interruptions, distortion, or other quality problems. Bandwidth represents the capacity of a connection, throughput measures actual successful data transfer, and utilization indicates how much of a resource’s available capacity is being used. High jitter can occur because of congestion, routing changes, queuing, or inconsistent network conditions and may require QoS or traffic-management measures.

Question 400

Which protocol is commonly used to automatically obtain an IP address, subnet mask, gateway, and DNS information?

1. DNS
2. DHCP
3. LDAP
4. SNMP

Correct Answer: 2

Explanation

Dynamic Host Configuration Protocol, or DHCP, automatically provides clients with network configuration information such as an IP address, subnet mask, default gateway, and DNS server addresses. DHCP reduces the need for manual configuration and helps administrators centrally manage address allocation. DNS resolves names, LDAP provides directory services, and SNMP supports device monitoring and management. DHCP typically follows a lease-based process in which clients obtain configuration for a defined period before renewing or replacing the lease.