View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 321

Which protocol is commonly used for secure remote desktop access to a Windows system?

1. FTP
2. SNMP
3. Telnet
4. RDP

Correct Answer: 4

Explanation

Remote Desktop Protocol, or RDP, provides graphical remote access to Windows computers and servers. It allows an authorized user to interact with a remote system as though they were using it locally. RDP can transmit the display, keyboard input, mouse activity, and other session information between the client and server. Secure deployments should use appropriate authentication, encryption, access controls, and network restrictions. FTP transfers files, SNMP monitors devices, and Telnet provides basic unencrypted terminal access.

Question 322

What does a VLAN primarily provide on a switch?

1. Physical cable termination
2. Internet encryption
3. Logical network segmentation
4. DNS resolution

Correct Answer: 3

Explanation

A Virtual Local Area Network, or VLAN, creates a logical Layer 2 network segment within a switched infrastructure. VLANs allow administrators to separate groups of devices even when they share the same physical switching equipment. For example, employee systems, guest devices, and servers can be placed into different VLANs and controlled through routing and security policies. VLANs do not encrypt internet traffic, resolve DNS names, or terminate cables. Logical segmentation can improve organization, security, and traffic management.

Question 323

Which IPv6 address range is used for unique local addresses?

1. FE80::/10
2. FC00::/7
3. FF00::/8
4. 2000::/3

Correct Answer: 2

Explanation

IPv6 unique local addresses use the FC00::/7 range. These addresses are intended for internal communication and are generally not routed across the public internet. They serve a similar organizational purpose to private IPv4 addressing, although the addressing architecture is different. FE80::/10 is used for link-local addresses, FF00::/8 is used for multicast, and 2000::/3 contains global unicast addresses. Unique local addressing can be useful when organizations need internal IPv6 addressing without using globally routable addresses.

Question 324

Which device typically connects a local network to an internet service provider?

1. Router
2. Patch panel
3. Access point
4. Hub

Correct Answer: 1

Explanation

A router commonly connects an internal network to an external network such as an internet service provider. It can route traffic between different IP networks and may also provide functions such as NAT, DHCP, firewalling, and VPN support depending on the device. A patch panel organizes physical cabling, an access point provides wireless connectivity, and a hub repeats Ethernet traffic to multiple ports. The router serves as a Layer 3 gateway between the local network and external networks.

Question 325

Which protocol is commonly used to authenticate users through centralized AAA services?

1. TFTP
2. ICMP
3. ARP
4. TACACS+

Correct Answer: 4

Explanation

TACACS+ is a centralized AAA protocol commonly used for authenticating and authorizing administrators accessing network devices. AAA stands for Authentication, Authorization, and Accounting. TACACS+ separates authentication and authorization functions and encrypts the entire body of the authentication packet, making it useful for secure administrative access. TFTP provides simple file transfers, ICMP supports network control messages, and ARP resolves IPv4 addresses to MAC addresses. TACACS+ is particularly common in environments requiring centralized control over device administration.

Question 326

Which Ethernet feature allows a switch to automatically determine the required transmission speed and duplex mode?

1. Port mirroring
2. VLAN tagging
3. Auto-negotiation
4. MAC filtering

Correct Answer: 3

Explanation

Ethernet auto-negotiation allows compatible network interfaces to exchange information and determine supported speed and duplex settings. This helps devices establish an appropriate operating mode without requiring manual configuration in many environments. For example, a switch port and network adapter may negotiate a supported speed and full-duplex operation. Port mirroring copies traffic for analysis, VLAN tagging identifies logical VLAN membership, and MAC filtering controls device access. Auto-negotiation is therefore an important Ethernet configuration and compatibility feature.

Question 327

Which protocol is commonly used to transfer small configuration files between network devices?

1. HTTPS
2. TFTP
3. RDP
4. IMAP

Correct Answer: 2

Explanation

Trivial File Transfer Protocol, or TFTP, provides simple file-transfer functionality and is commonly used in network environments for tasks such as transferring configuration files, firmware images, or boot files. TFTP uses UDP and provides very limited security and authentication features, so it should generally be used only in controlled environments. HTTPS provides secure web communication, RDP enables remote desktop access, and IMAP retrieves email. TFTP is particularly common in network booting and device configuration workflows.

Question 328

Which command is commonly used to test DNS name resolution from a Windows workstation?

1. nslookup
2. netstat
3. tracert
4. arp

Correct Answer: 1

Explanation

The nslookup command is commonly used to query DNS servers and test hostname resolution. A technician can use it to determine whether a hostname resolves to an expected IP address and identify which DNS server is responding. This makes nslookup useful when diagnosing DNS configuration or resolution problems. Netstat displays network connections, tracert traces network paths, and arp displays ARP information. When users report that websites or internal services cannot be reached by name, nslookup can help isolate DNS-related issues.

Question 329

Which wireless band generally offers the most non-overlapping channels for modern Wi-Fi deployments?

1. 2.4 GHz
2. 5 GHz
3. 6 GHz
4. 900 MHz

Correct Answer: 3

Explanation

The 6 GHz Wi-Fi band provides a large amount of additional spectrum for compatible modern wireless devices. Its expanded channel availability can reduce congestion and provide more options for wider channels compared with older bands. However, 6 GHz signals generally have shorter propagation characteristics and require compatible client devices and infrastructure. The 2.4 GHz band has fewer channels and more sources of interference, while 5 GHz provides more spectrum but less than the expanded 6 GHz range in supported deployments.

Question 330

What is the primary purpose of a DHCP relay agent?

1. Encrypt DHCP traffic
2. Replace the DHCP server
3. Translate private addresses
4. Forward DHCP requests between subnets

Correct Answer: 4

Explanation

A DHCP relay agent forwards DHCP messages between clients and a DHCP server when they are located on different IP subnets. Because DHCP clients initially use broadcasts and routers normally do not forward broadcasts between subnets, a relay agent is needed to pass the requests toward a centralized DHCP server. The relay can receive the client request and forward it as appropriate. DHCP relay does not replace the DHCP server, perform NAT, or encrypt DHCP traffic.

Question 331

Which type of DNS record identifies a service location and port?

1. A
2. SRV
3. PTR
4. MX

Correct Answer: 2

Explanation

An SRV record provides information about the location of a network service, including the hostname and port where the service can be reached. SRV records are used by various applications and protocols that need to discover specific services automatically. A records map hostnames to IPv4 addresses, PTR records support reverse lookups, and MX records identify mail servers. SRV records are especially useful in environments where clients need to locate a particular service without having its server and port information manually configured.

Question 332

Which network device can inspect traffic and block connections based on security rules?

1. Firewall
2. Patch panel
3. Repeater
4. Media converter

Correct Answer: 1

Explanation

A firewall inspects network traffic and applies configured security policies to determine whether connections should be permitted or blocked. Depending on its capabilities, a firewall can evaluate addresses, ports, protocols, connection states, applications, and other characteristics. Firewalls may be deployed between networks, on individual systems, or within cloud environments. Patch panels organize cables, repeaters regenerate signals, and media converters connect different physical media types. Firewalls are therefore central components of network security and traffic control.

Question 333

Which technology is commonly used to create an encrypted tunnel between two fixed networks?

1. Site-to-site VPN
2. DHCP reservation
3. Port mirroring
4. VLAN trunk

Correct Answer: 1

Explanation

A site-to-site VPN creates an encrypted tunnel between two network locations, such as branch offices and headquarters. Instead of requiring each individual user to establish a separate VPN session, network gateways at both locations establish and maintain the tunnel. IPsec is commonly used for secure site-to-site VPN implementations. DHCP reservations provide consistent IP addresses, port mirroring copies traffic for analysis, and VLAN trunks carry multiple VLANs. Site-to-site VPNs are useful for securely connecting geographically separated private networks.

Question 334

Which switching feature allows multiple VLANs to travel across a single link?

1. Port security
2. Trunking
3. Port mirroring
4. MAC filtering

Correct Answer: 2

Explanation

A VLAN trunk allows multiple VLANs to traverse a single physical Ethernet connection between compatible network devices. VLAN tagging is used to identify the VLAN associated with frames crossing the trunk. Trunks are commonly used between switches, between switches and routers, or between switches and virtualization infrastructure. Port security restricts device access, port mirroring copies traffic for analysis, and MAC filtering controls specific addresses. Trunking reduces the need for separate physical links for every VLAN.

Question 335

Which protocol is commonly used for directory authentication and authorization in enterprise environments?

1. FTP
2. RTP
3. LDAP
4. NTP

Correct Answer: 3

Explanation

Lightweight Directory Access Protocol, or LDAP, provides a standardized method for accessing directory services containing information about users, groups, computers, and other resources. Enterprise applications can use LDAP to query directory information and support authentication or authorization workflows. LDAP is often integrated with centralized identity systems. FTP is used for file transfers, RTP transports real-time media, and NTP synchronizes system clocks. LDAP is particularly useful when organizations need centralized access to directory information across multiple applications and services.

Question 336

Which cable type is least affected by electromagnetic interference?

1. Fiber-optic
2. UTP
3. Coaxial
4. STP

Correct Answer: 1

Explanation

Fiber-optic cable transmits data using light rather than electrical signals, making it highly resistant to electromagnetic interference. This characteristic makes fiber especially useful in environments with substantial electrical noise, industrial equipment, or long-distance requirements. UTP uses unshielded copper conductors and can be more susceptible to interference, while STP adds shielding to reduce interference. Coaxial cable also provides some protection through its shielding. Fiber is generally preferred when strong EMI resistance is an important requirement.

Question 337

Which network topology provides a dedicated connection between every pair of devices?

1. Star
2. Mesh
3. Bus
4. Ring

Correct Answer: 2

Explanation

A full mesh topology provides a dedicated point-to-point connection between every pair of devices in the network. This creates multiple redundant paths and can provide high availability because the failure of one connection does not necessarily isolate devices. However, full mesh designs require many physical or logical connections and can become expensive and complex as the number of devices increases. Star topology uses a central device, bus uses a shared backbone, and ring connects devices in a circular arrangement.

Question 338

Which protocol provides encrypted communication for web applications?

1. HTTP
2. FTP
3. HTTPS
4. TFTP

Correct Answer: 3

Explanation

HTTPS provides secure web communication by combining HTTP with Transport Layer Security. TLS encrypts transmitted data, helps protect its integrity, and enables authentication of the server through digital certificates. HTTPS is widely used for websites, web applications, APIs, and administrative interfaces. Standard HTTP sends application data without encryption, FTP is primarily a file-transfer protocol, and TFTP provides basic file transfer without strong security. HTTPS commonly uses TCP port 443 and is a fundamental secure application protocol.

Question 339

Which technology can prevent unauthorized DHCP servers from responding to clients on a switched network?

1. DHCP snooping
2. NAT
3. QoS
4. LACP

Correct Answer: 1

Explanation

DHCP snooping is a switch security feature designed to distinguish trusted DHCP server interfaces from untrusted ports. The switch can block DHCP server responses arriving from unauthorized interfaces, helping prevent rogue DHCP servers from providing incorrect network configuration to clients. DHCP snooping can also build a binding database containing information such as client MAC addresses, IP addresses, VLANs, and switch ports. NAT translates addresses, QoS manages traffic priority, and LACP aggregates links. DHCP snooping helps protect the DHCP process from abuse.

Question 340

Which metric represents the actual rate at which data is successfully transferred across a network?

1. Bandwidth
2. Latency
3. Throughput
4. Jitter

Correct Answer: 3

Explanation

Throughput represents the actual amount of data successfully transferred across a network over a period of time. It can be lower than the theoretical bandwidth because of protocol overhead, congestion, interference, packet loss, device limitations, or other network conditions. Bandwidth describes the theoretical capacity of a link, latency measures delay, and jitter measures variation in packet arrival times. Measuring throughput helps administrators understand how much usable data-transfer performance a network connection is actually delivering.