View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 261

Which protocol is used to automatically discover neighboring network devices and their capabilities?

1. LLDP
2. SMTP
3. FTP
4. RDP

Correct Answer: 1

Explanation

Link Layer Discovery Protocol, or LLDP, allows network devices to advertise information about themselves to directly connected neighbors. Devices can provide details such as system name, port identification, capabilities, and management information. Administrators can use LLDP to identify how switches, routers, access points, and other devices are physically connected. SMTP is used for email, FTP transfers files, and RDP provides remote desktop access. LLDP is especially useful when documenting network topology and troubleshooting unknown physical connections.

Question 262

What is the primary function of a default gateway?

1. Assign IP addresses
2. Forward traffic destined for other networks
3. Resolve hostnames
4. Encrypt application traffic

Correct Answer: 2

Explanation

A default gateway is the local router or Layer 3 device that forwards traffic when the destination is outside the host’s local subnet. A device compares the destination address with its own subnet information. If the destination is local, the device communicates directly; otherwise, it sends the packet to the configured default gateway. DHCP can assign addresses, DNS resolves names, and encryption protects data. The default gateway is therefore essential for communication between different IP networks.

Question 263

Which DNS record identifies the mail server responsible for receiving email for a domain?

1. A
2. CNAME
3. MX
4. PTR

Correct Answer: 3

Explanation

A Mail Exchange, or MX, record identifies the mail servers responsible for accepting email for a domain. When a sending mail server needs to deliver a message, it can query the recipient domain’s MX records to determine the appropriate mail server. A records map names to IPv4 addresses, CNAME records create aliases, and PTR records support reverse DNS lookups. MX records can also include priority values, allowing administrators to specify preferred and backup mail servers.

Question 264

A switch has multiple redundant Layer 2 paths between switches. Which technology helps prevent switching loops?

1. NAT
2. STP
3. DHCP
4. DNS

Correct Answer: 2

Explanation

Spanning Tree Protocol, or STP, prevents Layer 2 switching loops by logically blocking redundant paths while keeping them available as potential backup paths. Without loop prevention, redundant Ethernet connections can create broadcast storms, duplicate frames, and unstable MAC address tables. STP calculates a loop-free logical topology and can unblock alternate paths when the active path fails. NAT translates addresses, DHCP provides network configuration, and DNS resolves names. STP is therefore essential in redundant switched networks.

Question 265

Which network type is designed for a small office or home environment?

1. WAN
2. SAN
3. SOHO
4. MAN

Correct Answer: 3

Explanation

SOHO stands for Small Office/Home Office and describes network environments designed for small organizations, remote workers, or residential users. SOHO networks commonly use integrated routers, wireless access points, switches, firewalls, and internet gateways in relatively compact deployments. WANs connect geographically separated networks, SANs provide specialized storage connectivity, and MANs generally cover a metropolitan area. SOHO networking emphasizes simplicity, affordability, and centralized functionality suitable for environments with relatively few users and devices.

Question 266

Which routing concept selects the route with the most specific matching prefix?

1. Round-robin selection
2. Longest prefix match
3. Load balancing
4. Default forwarding

Correct Answer: 2

Explanation

Longest prefix match is the routing process used to select the most specific matching route for a destination IP address. For example, if a routing table contains both a broad /16 route and a more specific /24 route that match the destination, the /24 route is preferred because it provides a longer network prefix. This allows routers to make precise forwarding decisions. Default routes are used only when no more specific matching route is available.

Question 267

Which connector is commonly associated with coaxial Ethernet cabling?

1. BNC
2. LC
3. RJ45
4. MPO

Correct Answer: 1

Explanation

BNC, or Bayonet Neill-Concelman, is a connector historically associated with coaxial networking and other RF applications. Older Ethernet technologies such as 10BASE2 used coaxial cabling with BNC connectors. LC is a small fiber-optic connector, RJ45 is commonly used with twisted-pair Ethernet, and MPO is a multi-fiber connector used in higher-density fiber installations. Although coaxial Ethernet is largely legacy technology today, recognizing its connectors remains useful when working with older infrastructure.

Question 268

Which service translates private internal IP addresses into a public address for internet access?

1. NTP
2. NAT
3. SNMP
4. LDAP

Correct Answer: 2

Explanation

Network Address Translation, or NAT, translates IP addresses as traffic passes between networks. A common use is translating private internal IPv4 addresses into one or more public addresses for internet communication. NAT helps conserve public IPv4 address space and can also provide a degree of address hiding. NTP synchronizes clocks, SNMP provides network monitoring, and LDAP provides directory services. NAT can operate in several forms, including static NAT, dynamic NAT, and port address translation.

Question 269

Which wireless security standard uses SAE for authentication?

1. WPA
2. WPA2
3. WPA3-Personal
4. WEP

Correct Answer: 3

Explanation

WPA3-Personal uses Simultaneous Authentication of Equals, or SAE, as its password-based authentication mechanism. SAE improves protection against certain password-guessing attacks compared with the older WPA2-Personal pre-shared key approach. WEP is an obsolete wireless security standard, while WPA and WPA2 use older authentication mechanisms. WPA3 also introduces other security improvements depending on the deployment. For modern wireless networks, WPA3-Personal is designed to provide stronger protection for personal Wi-Fi authentication.

Question 270

Which metric measures the time required for data to travel from source to destination?

1. Throughput
2. Bandwidth
3. Latency
4. Utilization

Correct Answer: 3

Explanation

Latency measures the time required for data to travel between two points in a network. It is commonly expressed in milliseconds and can be influenced by distance, propagation, processing, queuing, and network congestion. High latency can negatively affect interactive applications such as voice calls, online gaming, remote desktop sessions, and real-time collaboration. Bandwidth represents theoretical capacity, throughput measures actual data transfer, and utilization indicates how much of a resource is being used. Latency is therefore a key performance measurement.

Question 271

Which IPv6 mechanism is used by hosts to discover routers on the local network?

1. NDP
2. FTP
3. NAT
4. STP

Correct Answer: 1

Explanation

IPv6 Neighbor Discovery Protocol, or NDP, enables hosts and routers to discover neighboring devices and exchange important local network information. Router Solicitation and Router Advertisement messages allow hosts to discover available IPv6 routers and obtain network prefix information. NDP also supports functions such as neighbor address resolution and duplicate address detection. FTP transfers files, NAT performs address translation, and STP prevents Layer 2 loops. NDP is therefore an essential part of IPv6 local network operation.

Question 272

What is the main purpose of DHCP reservations?

1. Prevent all DHCP traffic
2. Assign a consistent IP address to a specific device
3. Encrypt DHCP messages
4. Replace DNS

Correct Answer: 2

Explanation

A DHCP reservation allows an administrator to consistently assign a particular IP address to a specific device, usually based on its MAC address or another client identifier. This is useful for devices such as printers, servers, cameras, and network appliances that benefit from predictable addressing while still using DHCP. Reservations differ from static configuration because the DHCP server manages the assignment. DHCP reservations do not encrypt traffic or replace DNS; they simply provide controlled and consistent address allocation.

Question 273

Which technology combines multiple physical network links into one logical connection?

1. LACP
2. APIPA
3. SLAAC
4. ARP

Correct Answer: 1

Explanation

Link Aggregation Control Protocol, or LACP, allows multiple physical Ethernet links to operate together as a logical aggregated connection. Link aggregation can increase available bandwidth and provide redundancy if one physical link fails. The participating devices negotiate and maintain the aggregated link according to configured parameters. APIPA automatically assigns certain IPv4 addresses, SLAAC provides IPv6 address configuration, and ARP resolves IPv4 addresses to MAC addresses. LACP is therefore useful for improving link capacity and availability between compatible network devices.

Question 274

Which tool is most appropriate for checking whether a specific TCP port is reachable on a remote host?

1. nslookup
2. netstat
3. ping
4. Port scanner

Correct Answer: 4

Explanation

A port scanner can test whether specific TCP or UDP ports on a remote host are accessible or listening. This makes port-scanning tools useful during network troubleshooting and security assessments when authorized. Ping primarily tests IP-level reachability, nslookup performs DNS queries, and netstat displays local network connections and listening ports. When a technician needs to determine whether a particular service port is reachable, an appropriate port-testing or scanning tool provides more useful information than a basic ping test.

Question 275

Which protocol provides secure file transfer through an SSH connection?

1. TFTP
2. SFTP
3. FTP
4. HTTP

Correct Answer: 2

Explanation

SSH File Transfer Protocol, or SFTP, provides secure file transfers through an SSH connection. It protects authentication and transferred data using the security mechanisms provided by SSH. SFTP is different from traditional FTP, which does not encrypt credentials or data by default, and TFTP, which is a simple file-transfer protocol with minimal security features. HTTP is primarily used for web communication. SFTP is commonly used when administrators need to securely move configuration files, backups, logs, or other sensitive data.

Question 276

Which technology allows network devices to authenticate users against a centralized authorization server?

1. RADIUS
2. ARP
3. ICMP
4. RTP

Correct Answer: 1

Explanation

RADIUS provides centralized authentication, authorization, and accounting services for network access. It can be used with wireless networks, VPN gateways, network access control systems, and other services that need centralized user authentication. Instead of maintaining separate user credentials on every device, network equipment can communicate with a RADIUS server to validate users and obtain authorization information. ARP resolves IPv4 addresses to MAC addresses, ICMP supports diagnostic messaging, and RTP transports real-time media.

Question 277

A technician discovers that a switch interface is receiving many CRC errors. What is the most likely area to inspect first?

1. DNS configuration
2. Cabling and physical connectivity
3. Default gateway
4. DHCP scope

Correct Answer: 2

Explanation

Cyclic Redundancy Check, or CRC, errors commonly indicate that frames are arriving corrupted. Physical problems such as damaged cables, poor connectors, electromagnetic interference, faulty transceivers, or problematic network interfaces should therefore be investigated. A technician can inspect and replace cables, check connectors, verify interface statistics, and test the physical link. DNS, DHCP, and default gateway settings do not normally cause CRC errors because CRC validation occurs at the frame level. Physical-layer troubleshooting should be prioritized when CRC errors are observed.

Question 278

Which cloud model combines resources from public and private cloud environments?

1. Public cloud
2. Private cloud
3. Hybrid cloud
4. Community cloud

Correct Answer: 3

Explanation

A hybrid cloud combines private and public cloud environments, allowing an organization to use resources from both models. Workloads or data can remain in a private environment while other services use public cloud infrastructure, depending on requirements. A public cloud is operated by a provider for multiple customers, while a private cloud is dedicated to one organization. Hybrid architectures can provide flexibility when organizations need to integrate existing infrastructure with cloud services.

Question 279

Which protocol is commonly used to securely retrieve email while keeping messages stored on the mail server?

1. IMAPS
2. TFTP
3. SNMP
4. Telnet

Correct Answer: 1

Explanation

IMAPS is the secure version of Internet Message Access Protocol and is commonly used to retrieve and manage email while keeping messages stored on the mail server. This allows users to access synchronized mailboxes from multiple devices. IMAPS typically uses TLS to protect the communication channel. TFTP is a simple file-transfer protocol, SNMP is used for network monitoring, and Telnet provides unencrypted remote terminal access. IMAPS is therefore suitable when secure, server-side email storage and synchronization are required.

Question 280

Which network design principle divides a network into smaller security zones to limit unauthorized access?

1. Segmentation
2. Broadcast
3. Encapsulation
4. Fragmentation

Correct Answer: 1

Explanation

Network segmentation divides a larger network into smaller logical or physical security zones. Techniques such as VLANs, firewalls, ACLs, and dedicated subnets can separate users, servers, guest devices, and sensitive systems. Segmentation can limit unnecessary communication and reduce the potential impact of a compromised device. Broadcast refers to one-to-many network delivery, encapsulation adds protocol information to data, and fragmentation divides packets when necessary. Segmentation is therefore an important network security and architecture principle.