View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 41

Which protocol is used to automatically discover network devices and their capabilities on a local network?

1. LLDP
2. SMTP
3. FTP
4. LDAP

Correct Answer: 1

Explanation

Link Layer Discovery Protocol, or LLDP, allows network devices to advertise information about themselves to directly connected neighbors. This information can include device identity, port details, system capabilities, and management information. Administrators can use LLDP to understand physical network connections and troubleshoot cabling or configuration issues. LLDP operates at the data link layer and is vendor-neutral. Unlike SMTP and FTP, it is not designed for application data transfer, while LDAP is primarily associated with directory services and identity information.

Question 42

Which network device separates broadcast domains?

1. Hub
2. Router
3. Repeater
4. Bridge

Correct Answer: 2

Explanation

A router separates broadcast domains because routers do not normally forward Layer 2 broadcast traffic between their interfaces. Each routed interface or Layer 3 segment represents a separate broadcast domain. Switches can also create separate broadcast domains when VLANs are configured, but a basic switch does not separate broadcasts between ports within the same VLAN. Hubs and repeaters simply extend or repeat signals. Routers therefore provide an important boundary between IP networks and their associated broadcast domains.

Question 43

Which protocol is commonly used for centralized authentication, authorization, and accounting?

1. DNS
2. RADIUS
3. NTP
4. TFTP

Correct Answer: 2

Explanation

RADIUS, or Remote Authentication Dial-In User Service, provides centralized authentication, authorization, and accounting services. It is commonly used for network access, including wireless authentication, VPN access, and other systems requiring centralized user verification. A RADIUS server can validate credentials and return authorization information to the requesting network device. DNS resolves names, NTP synchronizes time, and TFTP provides lightweight file transfers. RADIUS is especially useful when an organization wants authentication policies managed centrally rather than separately on every network device.

Question 44

Which IPv4 address is the loopback address?

1. 169.254.1.1
2. 10.0.0.1
3. 127.0.0.1
4. 224.0.0.1

Correct Answer: 3

Explanation

The IPv4 loopback address 127.0.0.1 allows a computer to communicate with itself through the local TCP/IP stack. It is commonly used to test local networking functionality or applications without requiring communication through a physical network interface. Addresses in the 169.254.0.0/16 range are commonly used for link-local addressing, 10.0.0.0/8 is a private range, and 224.0.0.0/4 is used for multicast. The loopback range is useful when troubleshooting whether the local protocol stack is functioning correctly.

Question 45

Which technology allows a switch port to carry traffic for multiple VLANs?

1. Access mode
2. Trunking
3. Port mirroring
4. Port security

Correct Answer: 2

Explanation

A trunk link allows a network connection to carry traffic belonging to multiple VLANs across the same physical link. VLAN tagging is commonly used to identify which VLAN each frame belongs to as it crosses the trunk. Trunking is frequently used between switches, between switches and routers, or between switches and virtualization hosts. An access port normally carries traffic for a single VLAN. Port mirroring copies traffic for analysis, while port security controls which devices can use a switch port.

Question 46

Which TCP feature allows a receiver to control how much data a sender can transmit before receiving acknowledgments?

1. Window size
2. Port number
3. Sequence timeout
4. DNS cache

Correct Answer: 1

Explanation

TCP uses a receive window to implement flow control between communicating devices. The receiver advertises how much data it can accept without requiring additional acknowledgment, allowing the sender to regulate transmission accordingly. This helps prevent a fast sender from overwhelming a slower receiver. TCP sequence numbers provide ordering and tracking of transmitted data, while port numbers identify applications. DNS caching is unrelated to TCP flow control. Window management is therefore a fundamental mechanism for reliable TCP communication.

Question 47

Which protocol is commonly used to transfer email from a mail client to a mail server?

1. IMAP
2. POP3
3. SMTP
4. SNMP

Correct Answer: 3

Explanation

SMTP, or Simple Mail Transfer Protocol, is primarily used to send email and relay messages between mail systems. When a user sends a message, an email client commonly submits it to a mail server using SMTP. IMAP and POP3 are primarily used by clients to retrieve email from a mail server, although their operating models differ. SNMP is used for network management. SMTP commonly uses port 25 for server-to-server relay and ports such as 587 for authenticated message submission.

Question 48

What is the main advantage of using a mesh topology?

1. Low hardware cost
2. High redundancy
3. Simple cabling
4. Single communication path

Correct Answer: 2

Explanation

A mesh topology provides multiple communication paths between network devices, creating redundancy and improving resilience. If one link fails, traffic may be able to use another available path. Full mesh designs can provide extensive redundancy but require many physical connections, increasing cost and complexity. Partial mesh designs provide redundancy where it is most important without connecting every device to every other device. The main benefit is therefore improved fault tolerance rather than reduced cabling or lower equipment costs.

Question 49

Which protocol uses TCP port 22 by default?

1. SSH
2. DNS
3. HTTP
4. DHCP

Correct Answer: 1

Explanation

SSH, or Secure Shell, commonly uses TCP port 22 for encrypted remote administration and other secure services. SSH can provide secure command-line access, tunneling, and secure file-transfer functionality through related protocols. DNS commonly uses port 53, HTTP commonly uses port 80, and DHCP uses UDP ports 67 and 68 for server and client communication. Although administrators can configure services to use different ports, TCP 22 is the standard port associated with SSH and is frequently referenced during firewall configuration and troubleshooting.

Question 50

Which address is automatically assigned when a device cannot obtain an IPv4 address from DHCP on many operating systems?

1. 127.0.0.1
2. 169.254.x.x
3. 224.0.0.x
4. 10.x.x.x

Correct Answer: 2

Explanation

An address in the 169.254.0.0/16 range is commonly assigned automatically as a link-local address when a host cannot obtain an IPv4 address from DHCP. This allows limited communication with other devices on the same local network segment but generally does not provide normal routed network or internet connectivity. The 127.0.0.0/8 range is used for loopback, 224.0.0.0/4 is used for multicast, and 10.0.0.0/8 is a private address range that is normally assigned through manual configuration or DHCP.

Question 51

Which security principle gives users only the permissions necessary to perform their assigned tasks?

1. Separation of duties
2. Least privilege
3. High availability
4. Load balancing

Correct Answer: 2

Explanation

The principle of least privilege means users, applications, and systems should receive only the permissions required to perform their legitimate functions. Limiting privileges reduces the potential impact of compromised accounts, malware, or accidental actions. Separation of duties is a related security concept that divides sensitive responsibilities among multiple individuals or roles. High availability focuses on maintaining service availability, while load balancing distributes workloads across resources. Least privilege is therefore the principle directly associated with minimizing unnecessary access rights.

Question 52

Which wireless security standard provides stronger protection than WPA2 by using the newer SAE authentication method for personal networks?

1. WPA
2. WEP
3. WPA3
4. Open authentication

Correct Answer: 3

Explanation

WPA3-Personal uses Simultaneous Authentication of Equals, or SAE, instead of the traditional pre-shared key authentication approach used by WPA2-Personal. SAE improves resistance to certain offline password-guessing attacks and provides stronger modern wireless security. WEP is an obsolete and insecure wireless security mechanism, while WPA is an older generation of Wi-Fi security. Open authentication provides no meaningful wireless encryption by itself. WPA3 is therefore the standard associated with SAE for modern personal Wi-Fi networks.

Question 53

Which protocol is commonly used to synchronize directory information between systems?

1. LDAP
2. NTP
3. ICMP
4. ARP

Correct Answer: 1

Explanation

LDAP, or Lightweight Directory Access Protocol, is used to access and manage directory information, including users, groups, devices, and organizational resources. Directory services can use LDAP-based communication to query or modify directory entries according to permissions. LDAP is frequently associated with centralized identity management environments. NTP handles time synchronization, ICMP supports network control and diagnostic messaging, and ARP resolves IPv4 addresses to MAC addresses on local networks. LDAP is therefore the appropriate protocol when directory information must be accessed or managed.

Question 54

Which WAN technology uses a carrier-provided virtual connection between customer locations?

1. Ethernet crossover
2. Frame Relay
3. USB
4. Bluetooth

Correct Answer: 2

Explanation

Frame Relay is a legacy WAN technology that uses virtual circuits to connect geographically separated customer sites through a service-provider network. It was historically used to provide efficient packet-switched connectivity between branch offices and central locations. Modern networks often use technologies such as MPLS, Ethernet-based services, SD-WAN, or VPNs instead. Ethernet crossover cables provide direct local connections, USB is a peripheral interface, and Bluetooth is designed for short-range wireless communication. Frame Relay therefore represents the WAN virtual-circuit technology listed.

Question 55

What does a subnet mask determine in an IPv4 address?

1. The DNS server
2. The network and host portions
3. The default application
4. The physical cable type

Correct Answer: 2

Explanation

An IPv4 subnet mask identifies which bits of an IP address represent the network portion and which bits represent the host portion. This information allows a device to determine whether a destination is located on the local subnet or must be reached through a router. For example, a /24 mask identifies the first 24 bits as the network portion. The subnet mask does not specify a DNS server, application, or cable type. Correct subnetting is essential for efficient addressing and routing.

Question 56

Which protocol provides connectionless transport with lower overhead than TCP?

1. UDP
2. SSH
3. HTTPS
4. FTP

Correct Answer: 1

Explanation

UDP, or User Datagram Protocol, is a connectionless transport protocol that provides lower overhead than TCP. It does not establish a connection or provide TCP-style delivery guarantees, sequencing, and retransmission. This makes UDP useful for applications where low latency is more important than guaranteed delivery, including DNS queries, streaming, and many real-time communications. TCP provides reliable, connection-oriented transport. SSH, HTTPS, and FTP are application-level protocols that rely on transport protocols such as TCP for their communication.

Question 57

Which network function distributes incoming application traffic across multiple servers?

1. Proxy
2. Firewall
3. Load balancer
4. DNS resolver

Correct Answer: 3

Explanation

A load balancer distributes incoming traffic across multiple backend servers to improve availability, scalability, and resource utilization. Depending on its design, a load balancer may operate at Layer 4 using transport information or at higher layers using application-level information. A proxy can act as an intermediary, a firewall primarily controls traffic according to security policies, and a DNS resolver performs name resolution. Load balancing is particularly useful for web applications and other services that need to support many simultaneous connections.

Question 58

Which IPv6 address range is used for link-local addresses?

1. FC00::/7
2. FE80::/10
3. FF00::/8
4. 2000::/3

Correct Answer: 2

Explanation

IPv6 link-local addresses use the FE80::/10 range. These addresses are automatically available on IPv6-enabled interfaces and are used for communication within the local network segment. Link-local addresses are important for functions such as neighbor discovery and routing-protocol communication. FC00::/7 is associated with unique local addresses, FF00::/8 is the multicast range, and 2000::/3 represents globally routable unicast space. Link-local traffic is not normally routed beyond the local network segment.

Question 59

Which technology allows a network administrator to inspect a copy of traffic from a switch port?

1. Port mirroring
2. NAT
3. DHCP relay
4. DNS forwarding

Correct Answer: 1

Explanation

Port mirroring, also known as SPAN on some switches, copies network traffic from selected interfaces or VLANs to a designated monitoring port. A security appliance, packet analyzer, or troubleshooting workstation can then inspect the copied traffic without interrupting the original communication. NAT changes address information, DHCP relay forwards DHCP messages between network segments, and DNS forwarding passes DNS queries to another resolver. Port mirroring is therefore a useful technique for network monitoring, troubleshooting, and security analysis.

Question 60

Which protocol is commonly used to securely retrieve email while keeping messages stored on the mail server?

1. FTP
2. POP3
3. IMAPS
4. TFTP

Correct Answer: 3

Explanation

IMAPS is IMAP secured with TLS encryption and commonly uses TCP port 993. IMAP allows users to access and manage messages while keeping the mailbox primarily stored on the mail server, making it suitable for users who access email from multiple devices. POP3 can retrieve messages but traditionally focuses more on downloading mail to a client. FTP and TFTP are file-transfer protocols rather than email retrieval protocols. IMAPS combines the mailbox-management capabilities of IMAP with encrypted communication.