View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 301

Which protocol is commonly used to send log messages from network devices to a centralized server?

1. SNMP
2. Syslog
3. LDAP
4. DHCP

Correct Answer: 2

Explanation

Syslog is commonly used to collect and transport event and log messages from network devices and systems to a centralized logging server. Centralized logging helps administrators monitor events, investigate incidents, identify configuration problems, and correlate activity across multiple devices. Network equipment such as routers, switches, firewalls, and servers can generate syslog messages with different severity levels. SNMP is primarily used for monitoring and management data, LDAP provides directory services, and DHCP assigns network configuration.

Question 302

Which subnet mask provides 30 usable IPv4 host addresses?

1. 255.255.255.224
2. 255.255.255.240
3. 255.255.255.192
4. 255.255.255.248

Correct Answer: 1

Explanation

A subnet supporting 30 usable IPv4 host addresses requires 32 total addresses, because the network and broadcast addresses are normally reserved. A block of 32 addresses corresponds to a /27 prefix, which uses the subnet mask 255.255.255.224. A /28 provides 14 usable hosts, a /26 provides 62 usable hosts, and a /29 provides 6 usable hosts. Understanding host requirements and subnet sizes is essential when allocating IPv4 address space efficiently across network segments.

Question 303

Which protocol is commonly used to retrieve files from a remote server without providing encryption?

1. FTP
2. SSH
3. HTTPS
4. SFTP

Correct Answer: 1

Explanation

File Transfer Protocol, or FTP, is used to transfer files between clients and servers. Traditional FTP does not encrypt credentials or file contents by default, making it unsuitable for transmitting sensitive information across untrusted networks unless additional protections are implemented. SFTP provides secure file transfer through SSH, while HTTPS encrypts web traffic using TLS. SSH is primarily a secure remote administration protocol. FTP remains useful in controlled environments, but administrators should consider secure alternatives when confidentiality is required.

Question 304

Which routing protocol is classified as a path-vector protocol?

1. OSPF
2. RIP
3. BGP
4. STP

Correct Answer: 3

Explanation

Border Gateway Protocol, or BGP, is classified as a path-vector routing protocol. It exchanges routing information between autonomous systems and uses path attributes to make routing decisions based on configured policies and other factors. OSPF is a link-state protocol, RIP is a distance-vector protocol, and STP is a Layer 2 loop-prevention technology rather than an IP routing protocol. BGP is especially important for inter-domain routing because it enables networks operated by different organizations to exchange reachability information.

Question 305

Which connector is commonly used for single-fiber or duplex fiber connections in high-density installations?

1. RJ45
2. BNC
3. LC
4. F-type

Correct Answer: 3

Explanation

The LC connector is a small-form-factor fiber-optic connector commonly used in high-density network installations. Its compact design allows many fiber connections to fit within a limited rack or patch-panel space. LC connectors are widely used with both single-mode and multimode fiber depending on the specific transceiver and application. RJ45 is commonly associated with twisted-pair copper Ethernet, BNC with coaxial connections, and F-type connectors with coaxial television or broadband applications. Identifying fiber connectors is important when installing and troubleshooting optical links.

Question 306

What is the primary purpose of network segmentation?

1. Increase cable length
2. Reduce unnecessary access between network areas
3. Replace routing protocols
4. Eliminate all broadcast traffic

Correct Answer: 2

Explanation

Network segmentation divides a network into separate logical or physical areas to control communication between them. Segmentation can limit unauthorized access, reduce the spread of security incidents, control broadcast domains, and improve network organization. VLANs, subnets, firewalls, ACLs, and microsegmentation are common techniques used to implement segmentation. Segmentation does not eliminate all broadcast traffic or replace routing protocols. Its purpose is to create controlled boundaries that restrict unnecessary communication while allowing required traffic.

Question 307

Which wireless feature allows an access point to use multiple antennas to serve several clients more efficiently?

1. MU-MIMO
2. NAT
3. PAT
4. STP

Correct Answer: 1

Explanation

Multi-User Multiple Input Multiple Output, or MU-MIMO, allows compatible wireless access points to communicate with multiple clients using multiple spatial streams. Instead of serving every client sequentially in the same manner, MU-MIMO can improve efficiency by allowing simultaneous transmissions under suitable conditions. NAT and PAT perform address translation, while STP prevents Layer 2 switching loops. MU-MIMO is especially useful in environments with many compatible wireless devices because it can improve network capacity and resource utilization.

Question 308

Which command can be used to determine the route packets take toward a destination?

1. nslookup
2. tracert
3. ipconfig
4. arp

Correct Answer: 2

Explanation

The tracert command on Windows is used to identify the path packets take toward a destination. It displays intermediate routing devices, commonly called hops, between the source and destination. This makes it useful for locating routing problems, unexpected paths, or points where packets stop receiving responses. nslookup is used for DNS queries, ipconfig displays local network configuration, and arp displays or manages the local ARP cache. Traceroute is the commonly used equivalent on many other operating systems.

Question 309

Which IPv4 range is reserved for private Class B-style addressing?

1. 10.0.0.0/8
2. 172.16.0.0/12
3. 192.168.0.0/16
4. 169.254.0.0/16

Correct Answer: 2

Explanation

The private IPv4 range 172.16.0.0/12 covers addresses from 172.16.0.0 through 172.31.255.255. These addresses are intended for internal networks and are not directly routable across the public internet. The other major private ranges are 10.0.0.0/8 and 192.168.0.0/16. The 169.254.0.0/16 range is reserved for APIPA. Private addressing allows organizations to use internal IP addresses without consuming globally routable IPv4 address space.

Question 310

Which technology allows two network devices to share a virtual default gateway address for redundancy?

1. FHRP
2. FTP
3. DHCP
4. DNS

Correct Answer: 1

Explanation

First Hop Redundancy Protocols, or FHRPs, allow multiple routers or Layer 3 devices to provide a shared virtual default gateway for network clients. If the active gateway becomes unavailable, another participating device can assume the forwarding role, helping maintain connectivity. Examples include technologies such as HSRP and VRRP. FTP provides file transfers, DHCP assigns network configuration, and DNS resolves hostnames. FHRPs are therefore commonly used to improve default-gateway availability in enterprise networks.

Question 311

Which DNS record is used for reverse IPv4 address resolution?

1. PTR
2. MX
3. TXT
4. SRV

Correct Answer: 1

Explanation

A PTR record is used for reverse DNS resolution, allowing an IP address to be associated with a hostname. Reverse DNS can be useful for troubleshooting, logging, security systems, and services that perform hostname checks. MX records identify mail servers, TXT records store text-based information such as verification data, and SRV records identify services and their associated hosts and ports. PTR records are stored within the reverse DNS namespace and provide the opposite direction of a typical hostname-to-IP lookup.

Question 312

Which technology allows a company to combine multiple internet connections into a centrally managed WAN architecture?

1. SD-WAN
2. VLAN
3. STP
4. PoE

Correct Answer: 1

Explanation

Software-Defined Wide Area Networking, or SD-WAN, provides centralized management and policy-based control over WAN connections. Organizations can use multiple transport types, such as broadband, MPLS, or cellular connectivity, and apply policies to select appropriate paths for applications. SD-WAN can improve flexibility and provide additional resiliency by avoiding dependence on a single WAN circuit. VLANs provide local segmentation, STP prevents switching loops, and PoE supplies electrical power over Ethernet. SD-WAN is specifically designed for modern WAN management.

Question 313

Which protocol is used by SIP-based systems to carry real-time audio or video streams?

1. RTP
2. SMTP
3. LDAP
4. SNMP

Correct Answer: 1

Explanation

Real-time Transport Protocol, or RTP, carries real-time media such as voice and video streams. In many communication systems, SIP is used to establish, modify, and terminate sessions, while RTP transports the actual audio or video media. RTP includes sequence information and timestamps that help receivers process real-time streams correctly. SMTP handles email, LDAP provides directory access, and SNMP supports network monitoring. RTP is therefore an important protocol in VoIP, video conferencing, and other real-time communication applications.

Question 314

Which security technology can prevent unauthorized devices from connecting to a corporate network based on identity or device compliance?

1. NAT
2. NAC
3. NTP
4. DNS

Correct Answer: 2

Explanation

Network Access Control, or NAC, controls access to a network based on policies such as user identity, device identity, security posture, or authentication status. NAC can require devices to meet specific requirements before granting access, such as having approved security software or appropriate configuration. Depending on the implementation, noncompliant devices may be blocked or placed into a restricted network. NAT translates addresses, NTP synchronizes time, and DNS resolves names. NAC is therefore primarily associated with controlling network admission.

Question 315

Which wireless identifier uniquely identifies an individual access point radio?

1. SSID
2. BSSID
3. VLAN ID
4. MAC pool

Correct Answer: 2

Explanation

The Basic Service Set Identifier, or BSSID, identifies a specific wireless access point radio and is typically represented by a MAC address. An SSID is the human-readable network name that clients see when selecting a wireless network. Multiple access points can advertise the same SSID while having different BSSIDs, allowing clients to roam between them. VLAN IDs identify logical network segments rather than wireless radios. Understanding SSID and BSSID differences is useful when troubleshooting wireless connectivity and roaming.

Question 316

Which protocol is commonly used to provide secure web communication?

1. HTTP
2. FTP
3. HTTPS
4. Telnet

Correct Answer: 3

Explanation

HTTPS is the secure version of HTTP and protects web communication using Transport Layer Security, or TLS. TLS provides encryption, integrity protection, and server authentication through digital certificates. HTTPS is widely used for websites, APIs, management interfaces, and other web-based applications where data protection is required. Traditional HTTP does not encrypt traffic, FTP is primarily a file-transfer protocol, and Telnet provides unencrypted remote terminal access. HTTPS commonly uses TCP port 443 for secure web communication.

Question 317

Which physical-layer tool can help locate a break or fault in copper cable by measuring signal reflections?

1. TDR
2. SNMP
3. Syslog
4. RADIUS

Correct Answer: 1

Explanation

A Time Domain Reflectometer, or TDR, sends a signal through a copper cable and analyzes reflections to help identify faults. Depending on the device, a TDR can estimate the distance to problems such as cable breaks, shorts, or impedance changes. This makes it useful for troubleshooting structured copper cabling. SNMP is used for network monitoring, syslog collects event messages, and RADIUS provides centralized authentication. TDR testing can help technicians locate physical cable problems without replacing the entire cable run unnecessarily.

Question 318

Which network architecture uses a centralized controller to manage network infrastructure?

1. Peer-to-peer
2. Controller-based
3. Bus
4. Ring

Correct Answer: 2

Explanation

A controller-based network architecture uses a centralized software controller to manage and coordinate network devices. The controller can provide centralized configuration, policy enforcement, monitoring, automation, and sometimes topology information. This approach is common in software-defined networking and modern wireless deployments. Peer-to-peer networks distribute control among participating systems, while bus and ring describe physical or logical network topologies rather than centralized management architectures. Controller-based designs can simplify large-scale configuration and improve consistency across network infrastructure.

Question 319

Which attack manipulates DNS responses to redirect users to an incorrect destination?

1. DNS poisoning
2. DHCP reservation
3. Port mirroring
4. MAC learning

Correct Answer: 1

Explanation

DNS poisoning is an attack in which false or manipulated DNS information causes users or systems to resolve a legitimate hostname to an incorrect IP address. This can redirect traffic toward malicious or unauthorized destinations. Attackers may attempt to poison DNS caches or otherwise interfere with DNS responses. DHCP reservations provide predictable address assignments, port mirroring copies traffic for monitoring, and MAC learning is a normal switch function. DNS security measures, validation, and trusted resolvers can help reduce poisoning risks.

Question 320

Which recovery metric defines the maximum acceptable amount of data loss measured in time?

1. RTO
2. MTTR
3. RPO
4. SLA

Correct Answer: 3

Explanation

Recovery Point Objective, or RPO, defines the maximum acceptable amount of data loss expressed as a period of time. For example, an organization with an RPO of one hour aims to ensure that no more than approximately one hour of data is lost following a disruptive event. Recovery Time Objective, or RTO, defines how quickly a service should be restored. MTTR measures repair or recovery time, while an SLA defines agreed service expectations. RPO is therefore focused on acceptable data loss.