View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 361

Which protocol allows a network administrator to securely transfer files between systems using SSH?

1. FTP
2. TFTP
3. SFTP
4. SMTP

Correct Answer: 4

Explanation

Secure File Transfer Protocol, or SFTP, provides encrypted file transfers through an SSH connection. It protects authentication credentials and file contents while they travel across the network. SFTP is commonly used when administrators need to securely move configuration files, backups, logs, or other sensitive data. FTP does not encrypt traffic by default, TFTP provides simple unauthenticated transfers, and SMTP is designed for email delivery. SFTP is therefore an appropriate choice when secure file-transfer capabilities are required.

Question 362

Which device primarily operates at Layer 3 of the OSI model?

1. Router
2. Patch panel
3. Hub
4. Access point

Correct Answer: 1

Explanation

A router primarily operates at Layer 3, the Network layer, where it makes forwarding decisions based on logical addresses such as IPv4 and IPv6 addresses. Routers connect different IP networks and use routing tables to determine where packets should be sent. A hub operates at the Physical layer, while a patch panel is a passive physical infrastructure component. An access point mainly bridges wireless and wired networks, although modern APs can perform additional functions. Routing is fundamentally associated with Layer 3 operation.

Question 363

What does DHCP reservation provide?

1. A permanent DNS record
2. A specific IP address for a particular client
3. Encryption for DHCP traffic
4. Automatic VLAN creation

Correct Answer: 2

Explanation

A DHCP reservation assigns a specific IP address to a particular client based on an identifier such as its MAC address. This allows the device to continue receiving the same address while still obtaining its configuration dynamically from the DHCP server. Reservations are useful for printers, servers, cameras, and other devices that benefit from predictable addressing. A reservation does not create DNS records, encrypt DHCP traffic, or automatically create VLANs. It combines centralized DHCP management with consistent client addressing.

Question 364

Which wireless frequency band generally provides the greatest number of available channels and supports newer Wi-Fi standards?

1. 2.4 GHz
2. 5 GHz
3. 6 GHz
4. 900 MHz

Correct Answer: 3

Explanation

The 6 GHz band provides a large amount of additional spectrum for compatible Wi-Fi technologies, particularly Wi-Fi 6E and newer generations. Its expanded spectrum allows more channels and can reduce congestion compared with heavily used lower bands. The 2.4 GHz band offers greater range but has fewer channels and more interference. The 5 GHz band provides more channels than 2.4 GHz but has less available spectrum than 6 GHz in supported deployments. Device and regulatory support determine actual availability.

Question 365

Which routing concept selects the most specific matching route?

1. Administrative distance
2. Route poisoning
3. Longest prefix match
4. Split horizon

Correct Answer: 4

Explanation

Longest prefix match is the routing principle used to select the most specific route that matches a destination address. A route with a larger prefix length represents a smaller, more specific network and is preferred over a broader matching route. For example, a /24 route is more specific than a /16 route when both match the destination. Administrative distance helps select between routing sources, while route poisoning and split horizon are techniques associated with preventing routing loops. Longest prefix match directly determines route specificity.

Question 366

Which connector is commonly used with single-mode or multimode fiber and uses a small form factor?

1. RJ45
2. BNC
3. LC
4. F-type

Correct Answer: 3

Explanation

The LC connector is a small-form-factor fiber connector commonly used with both single-mode and multimode fiber. Its compact design allows higher connector density in patch panels, switches, and other network equipment. RJ45 is commonly associated with twisted-pair Ethernet, BNC is commonly associated with coaxial connections, and F-type connectors are widely used for coaxial cable television and broadband connections. LC connectors are especially common in modern fiber infrastructure because their small size makes them practical for high-density installations.

Question 367

Which technology allows multiple physical network links to operate as one logical connection?

1. LACP
2. STP
3. ARP
4. DHCP

Correct Answer: 1

Explanation

Link Aggregation Control Protocol, or LACP, allows multiple physical Ethernet links to be combined into a logical link. This can increase available bandwidth and provide redundancy if one member link fails. The resulting logical connection is often called a link aggregation group or EtherChannel, depending on the vendor. STP prevents switching loops, ARP resolves IPv4 addresses to MAC addresses, and DHCP provides network configuration. LACP is therefore useful when an organization needs both higher aggregate capacity and improved link availability.

Question 368

Which IPv6 mechanism can automatically configure a host address using router advertisements?

1. NAT
2. SLAAC
3. PAT
4. APIPA

Correct Answer: 2

Explanation

Stateless Address Autoconfiguration, or SLAAC, allows IPv6 hosts to automatically configure addresses using information provided through Router Advertisement messages. A router advertises an IPv6 prefix, and the host can generate an interface identifier to form an address. SLAAC reduces the need for manual configuration and can operate without a traditional DHCP server for basic address assignment. NAT and PAT are primarily associated with IPv4 address translation, while APIPA automatically assigns IPv4 link-local addresses. SLAAC is specifically an IPv6 configuration mechanism.

Question 369

Which DNS record identifies the mail server responsible for a domain?

1. PTR
2. CNAME
3. MX
4. TXT

Correct Answer: 3

Explanation

An MX, or Mail Exchange, record identifies the mail servers responsible for receiving email for a domain. It can include a priority value that determines which mail server should be preferred when multiple servers are listed. PTR records support reverse DNS lookups, CNAME records create aliases for other DNS names, and TXT records can store textual information used for various purposes such as domain verification and email-security policies. MX records are therefore specifically associated with directing email delivery to the appropriate mail servers.

Question 370

Which security technology can prevent unauthorized devices from connecting to a network based on access policies?

1. NAC
2. NTP
3. NAT
4. QoS

Correct Answer: 4

Explanation

Network Access Control, or NAC, evaluates devices and users before or during network access and can enforce organizational access policies. Depending on the implementation, NAC may check device identity, authentication status, security posture, or compliance before allowing connectivity. Noncompliant devices can be restricted, isolated, or denied access. NTP synchronizes clocks, NAT translates addresses, and QoS manages traffic priorities. NAC is therefore specifically designed to control network access according to defined security and authorization requirements.

Question 371

Which wireless identifier uniquely distinguishes an individual access point radio from other radios using the same SSID?

1. BSSID
2. DNS name
3. VLAN ID
4. MAC pool

Correct Answer: 1

Explanation

The Basic Service Set Identifier, or BSSID, identifies a specific wireless access point radio and is typically represented by a MAC address. Multiple access points can advertise the same SSID while having different BSSIDs. This allows wireless clients and administrators to distinguish individual wireless cells within the same WLAN. An SSID identifies the wireless network name presented to users, while a VLAN ID identifies a logical Layer 2 network. The BSSID therefore provides identification for a particular wireless access point radio.

Question 372

What is the primary purpose of a DHCP relay agent?

1. Encrypt DHCP messages
2. Forward DHCP requests between network segments
3. Replace the DHCP server
4. Translate private IP addresses

Correct Answer: 2

Explanation

A DHCP relay agent forwards DHCP client requests between different network segments when the DHCP server is not located on the same local subnet. Because DHCP clients initially use broadcast traffic, routers normally do not forward these broadcasts between subnets. A relay agent receives the request and forwards it toward the DHCP server, allowing centralized DHCP services to support multiple networks. DHCP relay does not encrypt messages, replace the DHCP server, or perform NAT. It primarily enables DHCP communication across routed boundaries.

Question 373

Which protocol is commonly used to send system and network event messages to a centralized logging server?

1. Syslog
2. SNMP
3. LDAP
4. SMB

Correct Answer: 4

Explanation

Syslog is a standard mechanism commonly used to transmit system and network event messages to centralized logging systems. Network devices such as routers, switches, firewalls, and servers can generate logs describing authentication events, interface changes, errors, warnings, and other activities. Centralized logging makes it easier to correlate events and investigate incidents. SNMP is primarily used for monitoring and management, LDAP provides directory services, and SMB supports file and printer sharing. Syslog is therefore closely associated with centralized event logging.

Question 374

Which subnet mask corresponds to a /30 IPv4 network?

1. 255.255.255.0
2. 255.255.255.128
3. 255.255.255.252
4. 255.255.255.248

Correct Answer: 3

Explanation

A /30 IPv4 network uses the subnet mask 255.255.255.252. This mask leaves two host bits, producing four total addresses in each subnet. Traditionally, two addresses are reserved for the network and broadcast identifiers, leaving two usable host addresses. /30 networks are commonly associated with point-to-point links where only two endpoints need addresses. A /24 provides 256 total addresses, /25 provides 128, and /29 provides eight. Understanding CIDR notation and corresponding masks is important for accurate subnetting and efficient address allocation.

Question 375

Which protocol provides centralized authentication, authorization, and accounting with a focus on device administration?

1. RADIUS
2. TACACS+
3. DNS
4. NTP

Correct Answer: 2

Explanation

TACACS+ is commonly used for centralized authentication, authorization, and accounting of network-device administrative access. It separates authentication and authorization functions and encrypts the entire body of the protocol packet, making it well suited to administrative control of routers, switches, and other infrastructure. RADIUS is also widely used for centralized AAA, particularly for network access such as wireless authentication. DNS resolves names and NTP synchronizes time. TACACS+ is therefore especially associated with controlling administrator access to network devices.

Question 376

Which metric describes the amount of data successfully transferred over a network during a period of time?

1. Throughput
2. Jitter
3. Latency
4. Attenuation

Correct Answer: 1

Explanation

Throughput represents the actual amount of data successfully transferred across a network over a specific period, commonly measured in bits per second. It can be lower than the theoretical bandwidth because of congestion, protocol overhead, packet loss, errors, or device limitations. Latency measures delay, jitter measures variation in packet arrival timing, and attenuation describes signal loss. Monitoring throughput helps administrators determine whether a network connection is delivering the expected performance under real operating conditions.

Question 377

Which attack attempts to overwhelm a network or service with excessive traffic from many sources?

1. ARP spoofing
2. DNS poisoning
3. DDoS
4. VLAN hopping

Correct Answer: 3

Explanation

A Distributed Denial-of-Service, or DDoS, attack attempts to overwhelm a target service, device, or network with large volumes of traffic or requests from multiple sources. The distributed nature can make blocking the attack more difficult because traffic originates from many systems or locations. ARP spoofing manipulates local address-resolution information, DNS poisoning corrupts name-resolution data, and VLAN hopping attempts to access traffic from another VLAN. DDoS mitigation can involve filtering, rate limiting, traffic scrubbing, and upstream provider assistance.

Question 378

Which Ethernet feature automatically determines compatible speed and duplex settings between connected devices?

1. Port mirroring
2. Auto-negotiation
3. Link aggregation
4. Port security

Correct Answer: 2

Explanation

Ethernet auto-negotiation allows connected interfaces to exchange information and select compatible communication parameters such as speed and duplex mode. This helps devices establish a suitable operating configuration without requiring every interface to be manually configured. Auto-negotiation can reduce configuration errors when both connected devices support compatible capabilities. Port mirroring copies traffic for analysis, link aggregation combines multiple links, and port security restricts unauthorized devices. Auto-negotiation is therefore directly related to automatically selecting compatible Ethernet link settings.

Question 379

Which technology creates a logical Layer 2 network segment on a switch?

1. VLAN
2. NAT
3. VPN
4. DNS

Correct Answer: 4

Explanation

A Virtual LAN, or VLAN, creates a logical Layer 2 network segment within a switched infrastructure. VLANs allow administrators to separate groups of devices even when those devices share the same physical switch infrastructure. This can reduce broadcast domains, improve organization, and support security segmentation. NAT translates IP addresses, VPNs create protected logical connections across networks, and DNS resolves names to addresses. VLANs therefore provide logical segmentation at the switching layer and are commonly used throughout enterprise networks.

Question 380

Which troubleshooting command displays active TCP and UDP connections on many operating systems?

1. nslookup
2. arp
3. netstat
4. tracert

Correct Answer: 3

Explanation

The netstat command can display active network connections, listening ports, routing information, and interface statistics, depending on the operating system and command options. It is useful when troubleshooting services that are not reachable, unexpected connections, or applications that are listening on particular ports. Nslookup is primarily used for DNS troubleshooting, arp displays address-resolution information, and tracert identifies the path toward a destination. Netstat provides valuable visibility into the local host’s current network connection and listening-port state.