View Full CompTIA N10-009 Exam Dumps and Practice Test Dumps.

 

Question 61

Which device forwards frames based on MAC addresses?

1. Router
2. Firewall
3. Modem
4. Switch

Correct Answer: 4

Explanation

A switch primarily forwards Ethernet frames based on destination MAC addresses. It learns which MAC addresses are associated with specific ports and uses that information to send frames toward the correct destination instead of unnecessarily transmitting them to every port. A router primarily forwards packets using IP addresses, while a modem provides connectivity between different signaling technologies. A firewall enforces security policies and may inspect traffic at multiple layers. Switches are therefore the standard devices used for Layer 2 frame forwarding.

Question 62

Which protocol provides reliable, connection-oriented transport?

1. TCP
2. UDP
3. ICMP
4. ARP

Correct Answer: 1

Explanation

Transmission Control Protocol, or TCP, provides reliable, connection-oriented communication between applications. Before exchanging data, TCP establishes a connection and uses sequence numbers, acknowledgments, retransmissions, and flow control to support reliable delivery. UDP is connectionless and does not provide the same delivery guarantees. ICMP is primarily used for network control and diagnostic messages, while ARP maps IPv4 addresses to MAC addresses on local networks. TCP is commonly used by applications such as HTTPS, SSH, and FTP where reliable transport is required.

Question 63

Which technology logically groups devices into separate broadcast domains on a switch?

1. NAT
2. VLAN
3. VPN
4. QoS

Correct Answer: 2

Explanation

A Virtual Local Area Network, or VLAN, divides a physical switching infrastructure into separate logical Layer 2 broadcast domains. Devices assigned to different VLANs normally cannot communicate directly at Layer 2 and require Layer 3 routing for communication between those networks. VLANs are useful for separating departments, guest devices, voice systems, servers, and other traffic categories. NAT translates addresses, VPNs provide protected communication paths, and QoS manages traffic priority. VLANs therefore provide logical segmentation within switched networks.

Question 64

Which command displays the route packets take toward a destination?

1. ping
2. ipconfig
3. tracert
4. arp

Correct Answer: 3

Explanation

The tracert command on Windows, commonly called traceroute on other operating systems, identifies the intermediate routing hops between a source and destination. It is useful for troubleshooting routing problems, latency, and unreachable destinations. Each hop generally represents a router that processes the packet on its way to the destination. Ping tests basic reachability and response time, ipconfig displays local interface configuration, and arp shows local address-resolution information. Tracert is therefore the appropriate diagnostic command for examining a packet’s path.

Question 65

Which protocol is commonly used by routers to exchange routing information within an autonomous system?

1. OSPF
2. SMTP
3. IMAP
4. SNMP

Correct Answer: 1

Explanation

OSPF, or Open Shortest Path First, is an interior gateway protocol used to exchange routing information within an autonomous system. It is a link-state protocol that allows routers to build a topology view and calculate paths using the shortest-path algorithm. SMTP and IMAP are email-related protocols, while SNMP is used for network monitoring and management. OSPF is commonly deployed in medium and large enterprise networks because it supports hierarchical design, efficient convergence, and scalable routing.

Question 66

What is the primary function of a DNS A record?

1. Identify a mail server
2. Map a hostname to an IPv4 address
3. Map a hostname to an IPv6 address
4. Identify an authoritative DNS server

Correct Answer: 2

Explanation

A DNS A record maps a hostname or domain name to an IPv4 address. When a client needs to connect to a service using a domain name, the resolver can query the appropriate DNS server and receive the IPv4 address contained in the A record. An AAAA record performs a similar function for IPv6 addresses. MX records identify mail servers, while NS records identify authoritative name servers. A records are therefore fundamental to ordinary IPv4 hostname resolution.

Question 67

Which wireless technology commonly uses short-range communication between personal devices?

1. Bluetooth
2. Wi-Fi 6
3. LTE
4. WiMAX

Correct Answer: 1

Explanation

Bluetooth is designed primarily for short-range wireless communication between personal and peripheral devices. Common examples include wireless headphones, keyboards, mice, smartwatches, and mobile devices. Bluetooth generally consumes relatively little power compared with technologies designed for larger network coverage. Wi-Fi is intended for wireless LAN connectivity, LTE provides cellular network connectivity, and WiMAX was designed for broader wireless broadband access. Bluetooth is therefore the technology most closely associated with short-range personal device connections.

Question 68

Which type of IP address is normally routable across the public internet?

1. Private IPv4 address
2. Public IPv4 address
3. APIPA address
4. Loopback address

Correct Answer: 2

Explanation

A public IPv4 address is globally routable and can be used to identify a network interface or service on the public internet, subject to routing and security controls. Private IPv4 addresses, such as those in the 10.0.0.0/8 and 192.168.0.0/16 ranges, are intended for internal networks and normally require NAT when accessing the internet. APIPA addresses are link-local, while loopback addresses identify the local host itself. Public addressing is therefore used when globally reachable IPv4 communication is required.

Question 69

Which protocol is commonly used to transfer files without establishing a TCP connection?

1. FTP
2. SFTP
3. TFTP
4. SMB

Correct Answer: 3

Explanation

Trivial File Transfer Protocol, or TFTP, uses UDP rather than TCP and provides a very simple file-transfer mechanism. It does not include the authentication and security features commonly associated with FTP or SFTP. TFTP has historically been used for tasks such as transferring network device configuration files, firmware, or boot images in controlled environments. FTP uses TCP and provides more functionality, while SFTP operates over SSH. TFTP is therefore the appropriate choice when a lightweight UDP-based file transfer protocol is required.

Question 70

Which network metric measures the variation in packet arrival times?

1. Latency
2. Throughput
3. Jitter
4. Bandwidth

Correct Answer: 3

Explanation

Jitter measures variation in packet arrival times. It can negatively affect applications that depend on consistent packet delivery, particularly voice and real-time video. High jitter can cause interruptions, distortion, or uneven playback. Latency measures the time required for data to travel between endpoints, throughput measures the amount of data successfully transferred over time, and bandwidth represents the theoretical capacity of a connection. Monitoring jitter is therefore especially important when troubleshooting real-time communications.

Question 71

Which protocol resolves IPv6 addresses to link-layer addresses?

1. ARP
2. NDP
3. DHCP
4. DNS

Correct Answer: 2

Explanation

IPv6 uses Neighbor Discovery Protocol, or NDP, to perform functions that include discovering neighboring devices and resolving IPv6 addresses to link-layer addresses. NDP relies on ICMPv6 messages and replaces the role that ARP performs in IPv4 networks. ARP is specifically associated with IPv4 address resolution. DHCP can provide network configuration, while DNS resolves names to addresses. Understanding NDP is important when troubleshooting IPv6 connectivity, neighbor discovery, router advertisements, and local network communication.

Question 72

Which topology provides a single shared communication medium?

1. Star
2. Mesh
3. Bus
4. Hybrid

Correct Answer: 3

Explanation

A bus topology uses a shared communication medium, traditionally represented by a single backbone cable to which multiple devices connect. Because devices share the same medium, traffic from one device can be visible to other connected devices depending on the technology. Traditional bus networks required careful termination to prevent signal reflections. Star topology uses a central device, mesh provides multiple interconnections, and hybrid combines different topology types. Although bus networks are uncommon in modern Ethernet deployments, the topology remains important for networking concepts and examination knowledge.

Question 73

Which protocol is commonly used for secure web communication?

1. HTTP
2. HTTPS
3. FTP
4. Telnet

Correct Answer: 2

Explanation

HTTPS is the secure version of HTTP and uses TLS to protect communication between a client and web server. Encryption helps protect sensitive information such as login credentials, payment details, and session data from unauthorized interception. HTTPS commonly operates over TCP port 443. HTTP traditionally uses TCP port 80 and does not provide TLS encryption by itself. FTP is designed for file transfer, while Telnet provides remote terminal access without modern encryption. HTTPS is therefore the standard protocol for secure web traffic.

Question 74

What does network latency measure?

1. Available storage capacity
2. Time taken for data to travel between endpoints
3. Number of devices on a subnet
4. Maximum cable length

Correct Answer: 2

Explanation

Network latency measures the time required for data to travel between two points on a network. It is often expressed in milliseconds and can significantly affect interactive applications such as online gaming, voice communication, remote desktop sessions, and financial systems. Latency can be influenced by physical distance, routing paths, congestion, processing delays, and transmission technologies. Bandwidth measures capacity rather than delay. Understanding latency helps administrators distinguish slow response caused by network delay from problems related to insufficient throughput.

Question 75

Which security control can restrict network access based on a device’s MAC address?

1. MAC filtering
2. DNSSEC
3. NAT
4. Port forwarding

Correct Answer: 1

Explanation

MAC filtering allows a network device, commonly a wireless access point, to permit or deny connections based on the MAC addresses of client devices. Administrators can create allowlists or blocklists to control which hardware addresses are accepted. However, MAC addresses can potentially be spoofed, so MAC filtering should not be considered a complete security solution by itself. DNSSEC protects DNS information, NAT translates addresses, and port forwarding directs traffic toward specific internal services. MAC filtering is specifically associated with hardware-address-based access control.

Question 76

Which network service allows clients to automatically obtain a default gateway?

1. DNS
2. DHCP
3. FTP
4. NTP

Correct Answer: 2

Explanation

DHCP can automatically provide clients with several network configuration parameters, including an IP address, subnet mask, default gateway, and DNS server addresses. This reduces administrative effort and helps maintain consistent configuration across large numbers of devices. DHCP uses leases so that assigned addresses can be reused when clients disconnect or their leases expire. DNS performs name resolution, FTP transfers files, and NTP synchronizes clocks. DHCP is therefore the service commonly responsible for automatically providing default gateway information.

Question 77

Which type of attack attempts to overwhelm a network service with excessive traffic or requests?

1. Phishing
2. DDoS
3. Shoulder surfing
4. Tailgating

Correct Answer: 2

Explanation

A Distributed Denial-of-Service, or DDoS, attack attempts to make a service unavailable by overwhelming it with traffic or requests from multiple systems. The excessive load can consume bandwidth, processing resources, connection tables, or other service capacity. Organizations may use traffic filtering, rate limiting, upstream mitigation, and specialized DDoS protection services to reduce the impact. Phishing targets users through deceptive messages, shoulder surfing observes information directly, and tailgating exploits physical access controls. DDoS specifically targets service availability.

Question 78

Which interface configuration allows a network device to obtain an IPv4 address automatically?

1. DHCP
2. Static
3. Loopback
4. Manual DNS

Correct Answer: 1

Explanation

Selecting DHCP for an IPv4 interface allows the device to request network configuration automatically from a DHCP server. The server can provide an IP address, subnet mask, default gateway, DNS servers, and other options depending on its configuration. A static configuration requires the administrator to manually specify the address and related parameters. A loopback interface is used for logical host communication rather than automatic addressing. DHCP is therefore appropriate when centralized automatic IP configuration is desired.

Question 79

Which cable type is commonly used for cable television and broadband connections?

1. Fiber
2. Coaxial
3. UTP
4. Twinax

Correct Answer: 2

Explanation

Coaxial cable is widely associated with cable television and cable broadband services. It contains a central conductor surrounded by insulation and shielding, allowing it to carry electrical signals while providing protection against certain forms of interference. UTP is widely used for Ethernet connections, fiber uses light for high-speed data transmission, and twinax is commonly used for specialized high-speed short-distance connections. Coaxial cabling remains important in broadband infrastructure and other radio-frequency communication systems.

Question 80

Which technology creates an encrypted connection between a remote user and an organization’s network?

1. VLAN
2. VPN
3. STP
4. NAT

Correct Answer: 2

Explanation

A Virtual Private Network, or VPN, creates a protected communication channel between a remote user or network and another network across an untrusted connection. VPN technologies can provide encryption, authentication, and data integrity depending on the protocol and configuration. Remote-access VPNs are commonly used by employees who need secure access to internal resources from outside the organization. VLANs provide Layer 2 segmentation, STP prevents switching loops, and NAT translates addresses. VPN technology is therefore associated with secure remote connectivity.