View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 281

Which OSI layer is responsible for reliable end-to-end delivery using TCP?

1. Network
2. Transport
3. Session
4. Physical

Correct Answer: 2

Explanation

The Transport layer, Layer 4 of the OSI model, provides end-to-end communication between applications. TCP operates at this layer and provides reliable delivery through sequencing, acknowledgments, retransmissions, and flow control. The Network layer handles logical addressing and routing, the Session layer manages communication sessions, and the Physical layer transmits raw bits across the medium. Understanding the Transport layer is important when troubleshooting TCP connections, application ports, segmentation, retransmissions, and other end-to-end communication behavior.

Question 282

Which device forwards traffic based primarily on destination MAC addresses?

1. Router
2. Firewall
3. Switch
4. Proxy

Correct Answer: 3

Explanation

A Layer 2 switch forwards Ethernet frames primarily by examining destination MAC addresses. The switch maintains a MAC address table that associates learned MAC addresses with specific interfaces. When a destination is known, the switch forwards the frame through the appropriate port rather than flooding it across all ports. Routers make forwarding decisions using Layer 3 addresses, firewalls enforce security policies, and proxies act as intermediaries for application traffic. Switches are therefore fundamental devices for Ethernet LAN connectivity.

Question 283

Which IPv4 address is reserved for loopback testing?

1. 10.0.0.1
2. 169.254.1.1
3. 192.168.1.1
4. 127.0.0.1

Correct Answer: 4

Explanation

The IPv4 loopback range is 127.0.0.0/8, with 127.0.0.1 being the commonly used loopback address. Traffic sent to a loopback address remains within the local host rather than being transmitted onto the physical network. Administrators can use loopback testing to verify that the local TCP/IP stack is functioning correctly. Private addresses such as 10.0.0.1 and 192.168.1.1 are used for internal networks, while 169.254.1.1 belongs to the APIPA range.

Question 284

Which wireless frequency generally provides greater range but is more susceptible to interference from common household devices?

1. 2.4 GHz
2. 5 GHz
3. 6 GHz
4. 60 GHz

Correct Answer: 1

Explanation

The 2.4 GHz wireless band generally provides better propagation and coverage through obstacles than higher-frequency Wi-Fi bands. However, it is also heavily used by devices such as Bluetooth equipment, cordless devices, and some household appliances, creating potential interference. The 5 GHz and 6 GHz bands typically provide more available channels and less congestion but generally have shorter effective range. Choosing a wireless band requires considering coverage, interference, channel availability, device compatibility, and performance requirements.

Question 285

What is the primary purpose of a firewall?

1. Assign IP addresses
2. Synchronize time
3. Filter network traffic according to rules
4. Resolve DNS names

Correct Answer: 3

Explanation

A firewall controls network traffic according to configured security policies. It can permit or deny traffic based on factors such as source and destination addresses, ports, protocols, applications, and connection state, depending on the firewall type. Firewalls can be deployed between networks, on individual hosts, or in cloud environments. DHCP assigns network configuration, NTP synchronizes time, and DNS resolves names. By enforcing traffic-control rules, a firewall helps restrict unauthorized communication and protect network resources.

Question 286

Which protocol maps an IPv4 address to a MAC address on a local network?

1. ARP
2. DNS
3. DHCP
4. ICMP

Correct Answer: 1

Explanation

Address Resolution Protocol, or ARP, maps an IPv4 address to the corresponding MAC address of a device on the local network. When a host needs to communicate with another local IPv4 device, it can send an ARP request asking which device owns a particular IP address. The appropriate device responds with its MAC address, allowing the sender to construct an Ethernet frame. DNS resolves names, DHCP assigns configuration, and ICMP provides network control and diagnostic messaging.

Question 287

Which routing protocol uses a link-state approach?

1. BGP
2. OSPF
3. RIP
4. ARP

Correct Answer: 2

Explanation

Open Shortest Path First, or OSPF, is a link-state interior gateway protocol. Routers running OSPF exchange information about network links and build a topology database from which they calculate shortest paths. OSPF can support hierarchical designs using areas and is widely used within enterprise networks. RIP uses a distance-vector approach, BGP is a path-vector protocol designed primarily for inter-domain routing, and ARP is not a routing protocol. OSPF is therefore associated with link-state routing.

Question 288

Which connector is commonly used with twisted-pair Ethernet cables?

1. SC
2. LC
3. RJ45
4. BNC

Correct Answer: 3

Explanation

RJ45 connectors are commonly used with twisted-pair Ethernet cabling such as Cat5e, Cat6, and Cat6A. They provide the physical connection between copper Ethernet cables and network interfaces, patch panels, switches, and other equipment. SC and LC connectors are commonly associated with fiber-optic cabling, while BNC has been used with coaxial cable and various RF applications. Proper termination and connector quality are important because damaged or incorrectly wired copper connectors can cause connectivity problems and performance issues.

Question 289

Which technology allows an organization to prioritize voice traffic over less time-sensitive traffic?

1. QoS
2. NAT
3. DNS
4. VLAN

Correct Answer: 1

Explanation

Quality of Service, or QoS, allows network administrators to classify and prioritize traffic according to application requirements. Voice and video traffic can be given higher priority than applications such as bulk file transfers because real-time applications are sensitive to latency, jitter, and packet loss. QoS mechanisms can include classification, marking, queuing, shaping, and policing. NAT performs address translation, DNS resolves names, and VLANs provide logical segmentation. QoS helps maintain predictable performance for delay-sensitive applications.

Question 290

Which protocol is used to securely transfer files using SSH?

1. FTP
2. TFTP
3. HTTP
4. SFTP

Correct Answer: 4

Explanation

SFTP, or SSH File Transfer Protocol, provides secure file transfer functionality through an SSH connection. It protects authentication information and transferred data using SSH encryption and commonly uses TCP port 22. Traditional FTP does not provide encryption by default, while TFTP is a lightweight file-transfer protocol with limited features and security. HTTP is primarily used for web communication. SFTP is commonly used for securely transferring configuration files, backups, logs, documents, and other sensitive information across networks.

Question 291

Which IPv6 address type is used to communicate with multiple subscribed devices?

1. Multicast
2. Anycast
3. Unicast
4. Loopback

Correct Answer: 1

Explanation

IPv6 multicast allows a sender to deliver traffic to multiple devices that belong to a particular multicast group. Unlike broadcast, which is not used in IPv6 in the traditional IPv4 sense, multicast targets devices that have joined a specific group. IPv6 relies heavily on multicast for functions such as Neighbor Discovery. Unicast identifies one interface, anycast identifies multiple possible interfaces with delivery toward an appropriate destination, and loopback refers to the local host. Multicast is therefore essential for many IPv6 operations.

Question 292

Which command is commonly used on Windows to display detailed IP configuration information?

1. route
2. arp
3. ipconfig /all
4. tracert

Correct Answer: 3

Explanation

The ipconfig /all command on Windows displays detailed network configuration information for installed interfaces. The output can include IPv4 and IPv6 addresses, subnet masks, default gateways, DNS servers, DHCP status, and physical addresses. This makes the command useful when diagnosing addressing or configuration problems. The route command displays routing information, arp displays ARP cache information, and tracert traces a packet path. ipconfig /all is therefore a common first step when investigating Windows network configuration.

Question 293

What is the main function of a proxy server?

1. Provide an intermediary between clients and destination services
2. Assign MAC addresses
3. Prevent all broadcasts
4. Replace the physical network

Correct Answer: 1

Explanation

A proxy server acts as an intermediary between clients and destination services. Depending on its configuration, a proxy can filter requests, enforce access policies, cache content, hide client addresses from external services, or inspect application traffic. Proxies can operate in forward or reverse configurations. They do not assign MAC addresses or replace the physical network. A proxy can also improve performance in some environments through caching. Its exact capabilities depend on the protocol and implementation being used.

Question 294

Which protocol is commonly used to synchronize time with a network time server?

1. LDAP
2. NTP
3. SMTP
4. SMB

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, is used to synchronize system clocks across networked devices. Accurate time is important for event logs, authentication systems, security monitoring, certificates, scheduled operations, and troubleshooting. Devices can obtain time from configured NTP servers and periodically adjust their clocks. LDAP provides directory access, SMTP handles email transmission, and SMB supports file and printer sharing. Consistent time across network devices allows administrators to correlate events accurately when investigating network and security incidents.

Question 295

Which technology provides a virtual interface for a physical network adapter inside a virtual machine?

1. Virtual NIC
2. Patch panel
3. Fiber transceiver
4. Media converter

Correct Answer: 1

Explanation

A virtual Network Interface Card, or virtual NIC, provides network connectivity to a virtual machine. The virtual NIC appears to the guest operating system as a network interface, while the hypervisor connects it to a virtual switch or other virtual networking component. This allows virtual machines to communicate with other virtual systems, physical devices, and external networks. A patch panel manages physical cabling, a transceiver handles signal conversion, and a media converter connects different physical media types.

Question 296

Which attack attempts to exhaust the available DHCP address pool?

1. DNS poisoning
2. DHCP starvation
3. ARP inspection
4. VLAN tagging

Correct Answer: 2

Explanation

DHCP starvation is an attack that attempts to consume all available addresses in a DHCP scope by generating numerous DHCP requests, often using spoofed or rapidly changing client identifiers or MAC addresses. If successful, legitimate clients may be unable to obtain valid IP addresses. Security mechanisms such as DHCP snooping, port security, and appropriate switch controls can help reduce this risk. DNS poisoning manipulates name resolution, while VLAN tagging is a normal network segmentation mechanism.

Question 297

Which protocol is commonly associated with Windows file and printer sharing?

1. SMB
2. RTP
3. SIP
4. SNMP

Correct Answer: 1

Explanation

Server Message Block, or SMB, is commonly used for file and printer sharing in Windows-based networks. It allows clients to access shared folders, files, printers, and other network resources. Modern SMB implementations include security and performance improvements compared with older versions. RTP transports real-time media, SIP establishes and manages many types of voice or multimedia sessions, and SNMP is used for network monitoring. SMB remains an important protocol for network resource sharing in many enterprise environments.

Question 298

Which WAN technology uses provider-managed paths and can connect geographically separated sites?

1. MPLS
2. Bluetooth
3. STP
4. PoE

Correct Answer: 1

Explanation

Multiprotocol Label Switching, or MPLS, is a WAN technology commonly used by service providers to connect geographically distributed sites. MPLS networks use labels to help forward traffic through provider infrastructure and can support different service requirements. Organizations may use MPLS for predictable connectivity between branch offices, data centers, and other locations. Bluetooth provides short-range wireless communication, STP prevents Layer 2 loops, and PoE supplies electrical power over Ethernet. MPLS is therefore associated with managed wide-area connectivity.

Question 299

Which network metric represents the percentage of a link’s capacity currently being used?

1. Latency
2. Jitter
3. Utilization
4. Packet loss

Correct Answer: 3

Explanation

Network utilization represents how much of a resource’s available capacity is currently being consumed. For example, a 1 Gbps interface operating at an average of 700 Mbps is using approximately 70 percent of its available bandwidth. High utilization can contribute to congestion, increased latency, packet loss, and reduced application performance. Latency measures delay, jitter measures variation in packet arrival times, and packet loss measures packets that fail to reach their destination. Monitoring utilization helps identify capacity and congestion problems.

Question 300

Which security model assumes that no user or device should be trusted automatically?

1. Perimeter security
2. Open access
3. Zero Trust
4. Shared-key security

Correct Answer: 3

Explanation

Zero Trust is a security model based on the principle that users and devices should not receive automatic trust simply because they are inside a network or have previously authenticated. Access decisions can consider identity, device state, location, application, and other contextual information. Authentication and authorization are continuously enforced according to policy, with access limited to what is necessary. Traditional perimeter security relies more heavily on network boundaries. Zero Trust emphasizes verification, least privilege, segmentation, and ongoing access control.