Step2Study

CompTIA Network+ (N10-009) practice questions

218 free questions with answers and explanations.

Practice test
  1. 51.A hospital network architect wants to isolate medical IoT devices so that even if one device is compromised, an attacker cannot pivot laterally to access electronic health record servers or administrative workstations. The devices must still reach a central monitoring server. Which design approach BEST achieves this goal?Network Security
  2. 52.A technician is connecting a single desktop printer to a switch port. The printer only needs access to VLAN 10 and does not require multiple VLAN tags. How should the technician configure this switch port?Network Implementation
  3. 53.A technician notices that a switch has begun flooding unicast frames out every port instead of forwarding them only to the correct destination port. An analysis shows the switch's MAC address table is completely full of thousands of random, spoofed source MAC addresses received on a single port. Which attack is most likely occurring?Network Security
  4. 54.A network administrator needs to remotely manage a Linux server's command-line interface over an encrypted connection. Which default port should be allowed through the firewall?Network Operations
  5. 55.Users report that the network feels sluggish during business hours. A technician wants to quickly determine which specific hosts are consuming the most bandwidth across multiple routers without deploying a full packet capture. Which monitoring approach is best suited for this task?Network Operations
  6. 56.A firewall administrator needs a device that automatically allows return traffic for an established outbound connection without requiring a separate explicit rule for the reply packets. Which firewall type provides this behavior?Network Security
  7. 57.A network engineer is configuring a monitoring server to receive unsolicited SNMP trap messages from network devices. Which UDP port should the server listen on?Networking Concepts
  8. 58.A company with branch offices connected via MPLS, broadband, and LTE links wants traffic to dynamically choose the best path based on real-time performance metrics, while abstracting the underlying transport from application policy. Which technology should be deployed?Networking Concepts
  9. 59.A company allows remote employees to connect via VPN to access internal file shares and applications. To reduce load on the VPN concentrator and conserve bandwidth, management wants employees' general internet browsing traffic to go directly to the internet rather than passing through the corporate tunnel. Which VPN configuration should be implemented?Network Operations
  10. 60.A technician runs a traceroute to a company's public web server and observes low, consistent latency at every intermediate hop along the path. However, the final hop (the destination server itself) shows latency spikes of over 800 ms on some probes. Other services hosted on the same subnet as the web server respond quickly. What does this result most likely indicate?Network Troubleshooting
  11. 61.A financial services firm wants a disaster recovery facility that already has hardware, network connectivity, and environmental systems in place, but data and applications must be restored from recent backups before the site becomes operational. The firm wants to balance ongoing cost against recovery speed. Which site type best fits this requirement?Network Operations
  12. 62.A network engineer configures an Ethernet interface to support frames larger than the standard 1500-byte MTU to improve throughput for a storage area network. What is this feature called?Networking Concepts
  13. 63.A wireless engineer is deploying an access point to cover a long, narrow warehouse aisle and wants to concentrate the RF signal down the length of the aisle rather than spreading it in all directions. Which antenna type should be used?Network Implementation
  14. 64.A penetration tester repeatedly sends spoofed 802.11 management frames to a client connected to the corporate WPA2 access point, forcing the client to disconnect. Moments later, the client automatically reconnects, and the tester captures the resulting four-way handshake for offline password cracking. Which technique did the tester use to force the reconnection?Network Security
  15. 65.A company sets up a disaster recovery facility that has power, HVAC, and network cabling installed, along with some pre-configured server racks, but the actual servers and current data backups are not yet in place and would need to be shipped and restored during an activation. This best describes which type of DR site?Network Operations
  16. 66.Employees on a floor suddenly begin receiving IP addresses from an unauthorized 192.168.50.0/24 range instead of the corporate 10.10.10.0/24 range, and many cannot reach the internet. A technician suspects an unauthorized DHCP server was plugged into an access port. Which switch feature should be enabled to block DHCP offers arriving from untrusted ports?Network Security
  17. 67.A network administrator wants a switch to immediately notify the monitoring server whenever an interface goes down, rather than waiting for the next scheduled query. Which SNMP mechanism accomplishes this?Network Operations
  18. 68.A video conferencing application needs to send a single stream of data to multiple specific participants simultaneously without flooding every device on the network. Which traffic type does this describe?Networking Concepts
  19. 69.A wireless network engineer selects a 5GHz channel in the UNII-2 band for a new access point deployment. The access point must comply with regulatory requirements for this frequency range in most countries. Which feature must the access point support to legally operate on this channel?Network Implementation
  20. 70.A network administrator configures a LACP-based link aggregation group (LAG) consisting of four 1Gbps physical links between two switches. After deployment, a single large file transfer between two hosts is measured at only 1Gbps of throughput rather than the expected aggregate bandwidth. Which of the following BEST explains this behavior?Network Implementation
  21. 71.A network technician is troubleshooting a client workstation that can access local network resources but cannot reach any external websites. The technician performs a `ping` to a known external IP address, which succeeds. However, a `ping` to a known external website URL fails. Which of the following is the MOST likely cause of this issue?Network Troubleshooting
  22. 72.A company wants to rent virtualized servers, storage, and networking infrastructure from a cloud provider, while retaining full control over the operating systems and installed applications. Which cloud service model best fits this requirement?Networking Concepts
  23. 73.A company's disaster recovery plan specifies an RPO of 4 hours. The backup system performs incremental backups every 6 hours at 12:00 AM, 6:00 AM, 12:00 PM, and 6:00 PM. A server failure occurs at 3:00 PM. How much data would be lost, and does this meet the stated RPO?Network Operations
  24. 74.A network administrator reviewing vendor documentation notices that a switch model's manufacturer has stopped releasing security patches and firmware updates entirely, though hardware replacement parts are still available for purchase. Which lifecycle stage best describes this switch?Network Operations
  25. 75.A switch port running Spanning Tree Protocol has just been enabled and is currently examining incoming BPDUs to determine its role in the topology, but it is not yet forwarding user traffic or learning MAC addresses. Which STP port state is this?Network Implementation
  26. 76.A network administrator configures port security on a switch access port, setting the maximum MAC address count to one and the violation action to shutdown. A user later connects a small unmanaged hub to that port and attaches two additional devices. What is the expected result?Network Implementation
  27. 77.An EIGRP router has a successor route to a destination network with a feasible distance of 20. A neighboring router advertises an alternate path with a reported distance of 15. According to the Feasibility Condition, when will this alternate path be installed as a feasible successor in the topology table?Network Implementation
  28. 78.Users report being redirected to a fraudulent banking website even though they typed the correct URL directly into their browser. Investigation reveals that the organization's DNS resolver contains a fake IP address mapped to the bank's legitimate domain name. Which attack has occurred?Network Security
  29. 79.A company's web server sits behind a stateful firewall. Clients report that they can send requests to the server, but responses never arrive, even though a packet capture on the server shows the responses being sent out. Network diagrams reveal that outbound traffic from the server is routed through a different firewall than the one through which inbound requests arrive. What is the most likely cause of the failure?Network Troubleshooting
  30. 80.Two branch offices require a permanent, always-on encrypted connection so that all users and servers on both networks can communicate transparently without installing individual VPN client software on each device. Which solution best meets this requirement?Network Operations
  31. 81.A technician is configuring a firewall rule to permit an internal server to send and receive unencrypted file transfer control commands using traditional FTP. Which port must be allowed for the FTP control channel?Networking Concepts
  32. 82.A technician runs a traceroute to a remote server and observes the following partial output for hops 8 through 10: '8 * * * Request timed out. 9 * * * Request timed out. 10 15 ms 14 ms 16 ms remote-server.com'. What does this output MOST likely indicate?Network Troubleshooting
  33. 83.A technician is troubleshooting a client's laptop that can browse internal file shares by IP address but cannot access them by hostname, and also cannot browse the internet. The laptop's IP configuration is otherwise correct. Which tool should the technician use FIRST to confirm the root cause?Network Troubleshooting
  34. 84.Users on VLAN 30 report that newly connected laptops cannot obtain IP addresses, while devices already on the network keep functioning normally. The DHCP server logs show repeated 'no addresses available' errors for the /24 scope, which uses an 8-day lease time. Without immediately redesigning the IP addressing scheme, what should the administrator do first to relieve the address shortage?Network Operations
  35. 85.A network administrator is investigating a report that users on a specific subnet (192.168.10.0/24) can send traffic to a web server (172.16.1.100) located in a different subnet, but they never receive a response. The web server itself is functioning correctly and can communicate with other subnets. Which of the following is the MOST likely cause of this asymmetric communication block?Network Troubleshooting
  36. 86.A wireless engineer configures access points in a dense multi-AP office deployment to use an 80MHz channel width in the 5GHz band to maximize per-client throughput. Users soon report intermittent connectivity issues and slow speeds near AP boundaries. What is the most likely cause of this problem?Network Implementation
  37. 87.A technician wants to use nslookup in interactive mode to query only the MX records for a domain named example.com. Which sequence of commands accomplishes this?Network Troubleshooting
  38. 88.A mid-sized company obtains its own public autonomous system number and establishes BGP peering sessions with two different ISPs to provide internet redundancy. Which term best describes this network design?Network Implementation
  39. 89.A user calls the help desk to report that reverse DNS lookups are failing for the company's mail server, causing outgoing email to be flagged as spam by some receivers. Which DNS record type must be correctly configured to allow a lookup from an IP address to a hostname?Network Operations
  40. 90.A network engineer wants IPv6 clients to automatically generate their own addresses using router advertisements while also receiving DNS server information without deploying a full stateful DHCPv6 server. Which router configuration accomplishes this?Network Operations
  41. 91.A network technician is following the standard troubleshooting methodology after a user reports intermittent connectivity. The technician has already identified the problem and established a theory of probable cause. What should the technician do NEXT?Network Troubleshooting
  42. 92.A company's disaster recovery plan requires a critical e-commerce application to be restored within 8 hours (RTO). The company is evaluating a cold site that requires 72 hours to procure, install, and configure replacement hardware before service can resume. Which conclusion is correct?Network Operations
  43. 93.A network administrator configures a static route on a router: the destination network is 172.16.30.0/24 and the next hop is set to 10.1.1.1, an address that is not on a directly connected interface but is reachable through an existing route in the routing table. Before the router can forward packets toward 172.16.30.0/24, what must it first perform?Network Implementation
  44. 94.A technician installs a new Cat 6 cable run measuring 150 meters between an IDF closet and a workstation. Users report frequent dropped connections and the switch reports a high number of CRC errors on that port. A cable certifier shows the wire map, NEXT, and return loss all pass. What is the most likely cause of the issue?Network Troubleshooting
  45. 95.A router learns a route to 192.168.50.0/24 via both OSPF and EIGRP with different metrics. Assuming default administrative distances, which route will the router install in its routing table?Network Implementation
  46. 96.A network technician is setting up a new point-to-point wireless bridge between two buildings. After configuring the access points (APs) at both ends, the link establishes but the signal strength is much lower than expected, and throughput is poor despite a clear line of sight. Both APs are using directional antennas. Which of the following is the MOST likely cause of the issue?Network Troubleshooting
  47. 97.A technician configures a new router ACL that permits only HTTP and HTTPS traffic to a web server. After applying the ACL to the interface, all other traffic types are automatically blocked even though no explicit deny statement was written for them. Which concept explains this behavior?Network Security
  48. 98.A network technician is troubleshooting a client's workstation that cannot access a specific web server by its hostname (e.g., 'webserver.internal.com') but can successfully access it using its IP address (e.g., '192.168.1.100'). Other workstations on the same subnet do not experience this issue. Which of the following is the MOST likely cause?Network Troubleshooting
  49. 99.A technician uses a certified cable tester to test a Cat 6 run and finds that Near-End Crosstalk (NEXT) values exceed the acceptable limit at one end of the cable. What does this measurement indicate?Network Troubleshooting
  50. 100.A technician installed a new Cat 6 cable run that passes directly alongside fluorescent light fixtures in a drop ceiling. Users on that segment report intermittent packet loss and slow performance, especially when the lights are on. Which issue is MOST likely occurring?Network Troubleshooting