Step2Study

CompTIA Network+ (N10-009) practice questions

218 free questions with answers and explanations.

Practice test
  1. 151.A network administrator configures a trunk link between two switches. On Switch A, the native VLAN is set to VLAN 1, while on Switch B, it is mistakenly set to VLAN 99. Devices on VLAN 1 begin experiencing intermittent connectivity issues, and the switches log CDP native VLAN mismatch warnings. What is the most likely root cause of the reported issue?Network Troubleshooting
  2. 152.A startup wants to use a third-party email platform accessible via a web browser without managing any underlying servers, storage, or software installations. Which cloud service model best describes this?Networking Concepts
  3. 153.A CISO mandates that no user or device, whether inside or outside the corporate network, should be automatically trusted, and that every access request must be authenticated, authorized, and continuously validated regardless of location. Which security model is being described?Network Security
  4. 154.A network administrator wants a AAA solution for administering network devices that encrypts the entire authentication packet and separates authentication, authorization, and accounting into distinct processes, allowing granular control over which commands each administrator can execute on a router. Which protocol best meets this requirement?Network Security
  5. 155.A network engineer wants all switches and routers to keep synchronized timestamps for accurate event log correlation. Which protocol and port combination should be configured?Networking Concepts
  6. 156.A network administrator wants visibility into traffic flow statistics but is deploying the monitoring tool on lower-cost switches that only support standardized sampling of packets at the interface level rather than full flow export from the routing engine. Which technology is being used?Network Operations
  7. 157.A pilot deployment of 5 GHz wireless access points experiences intermittent client disconnections every 10–15 minutes. A Wi-Fi analyzer shows the APs briefly disappearing from channel 116 before reappearing on a different channel moments later. No other wireless devices are detected causing interference. What is the most likely explanation?Network Troubleshooting
  8. 158.A user reports that all traffic destined for the default gateway seems to pass through a coworker's workstation first. Packet captures show that workstation replying to ARP requests claiming to own the gateway's IP address, with its own MAC address mapped to that IP in every host's ARP cache. Which attack is being performed?Network Security
  9. 159.A network engineer configures OSPF on a router using the default reference bandwidth of 100Mbps. A path to a destination traverses a 1Gbps link, a 100Mbps link, and a 10Mbps link in sequence. What is the total OSPF cost of this path?Network Implementation
  10. 160.A systems administrator needs to allow IT staff to remotely control the desktop of a Windows server through a firewall for maintenance tasks. Which TCP port must be permitted?Network Operations
  11. 161.A network technician is troubleshooting connectivity and confirms that a router uses logical addressing to determine the best path to forward packets between different networks. At which layer of the OSI model does this addressing and path determination occur?Networking Concepts
  12. 162.An enterprise network uses iBGP between two routers within the same autonomous system. Both routers receive routes to the same external prefix from different eBGP peers, and all other BGP attributes are equal except LOCAL_PREF. Router A advertises the prefix with a LOCAL_PREF of 200, while Router B advertises it with a LOCAL_PREF of 100. Which router's path will be preferred by BGP's best path selection algorithm?Network Implementation
  13. 163.Three switches are interconnected in a triangle topology running Spanning Tree Protocol. All switches have the default priority of 32768. Switch A has MAC address 00:1A:2B:3C:4D:5E, Switch B has 00:1A:2B:3C:4D:5D, and Switch C has 00:1A:2B:3C:4D:5F. Which switch will be elected the root bridge?Network Implementation
  14. 164.A company's DHCP server resides on VLAN 10, but clients on VLAN 20 are unable to obtain IP addresses from it because the router separates the broadcast domains. Which configuration on the VLAN 20 interface will resolve this issue?Network Operations
  15. 165.An administrator wants to allow remote engineers to access a segmented internal management network without exposing internal management interfaces directly to the internet. All remote sessions should first authenticate and be logged through a single hardened host before reaching internal devices. Which solution best meets this requirement?Network Operations
  16. 166.A technician examines an IPv6 address configured automatically on a workstation's interface: FE80::A1B2:3C4D:5E6F:7A8B. What type of address is this?Networking Concepts
  17. 167.A web hosting company wants IPv6-only clients to resolve www.example.com directly to an IPv6 address without any translation. Which DNS record type must be created?Network Operations
  18. 168.Users across a domain report intermittent authentication failures when logging into workstations. Event logs on affected machines show Kerberos errors referencing clock skew. The affected workstations are not synchronized to the same time source as the domain controller. Which issue is most likely responsible?Network Troubleshooting
  19. 169.A network administrator is investigating reports of intermittent connectivity and slow speeds on a wireless network operating in the 2.4 GHz band. A Wi-Fi analyzer shows high channel utilization and several access points (APs) from neighboring businesses broadcasting on channels 1, 6, and 11. The administrator's own APs are also using channels 1, 6, and 11. Which of the following actions should the administrator take FIRST to mitigate the issue?Network Troubleshooting
  20. 170.A network engineer is troubleshooting an application that uses TCP to guarantee reliable, ordered delivery of data between a client and server. At which layer of the OSI model does TCP operate to provide this reliability?Networking Concepts
  21. 171.A network administrator configures a firewall rule using a wildcard mask of 0.0.0.15 to match a range of addresses for an ACL. How many host addresses does this wildcard mask cover?Networking Concepts
  22. 172.A technician is using the `ping` command to troubleshoot connectivity to a remote server. The command output shows `Destination Host Unreachable` messages. The technician then runs `traceroute` to the same destination and observes that the output stops at the first hop (the local router). Which of the following is the MOST likely cause of this issue?Network Troubleshooting
  23. 173.A technician is troubleshooting a server that connects to a 10Gbps switch port. Performance monitoring shows that the server's network interface is consistently operating at 1Gbps, despite the NIC being a 10Gbps card and the switch port configured for 10Gbps. The cable used is a Cat 6a, rated for 10Gbps up to 100 meters. Which of the following is the MOST probable cause of the speed discrepancy?Network Troubleshooting
  24. 174.While reviewing centralized logs, a technician finds a message tagged with syslog severity level 3. According to the standard syslog severity scale, which classification does this represent?Network Operations
  25. 175.During a VoIP deployment, users report that calls sound choppy and words are occasionally clipped, though no calls are dropped. A network engineer captures traffic and notices that RTP packets are arriving at highly inconsistent intervals, even though overall packet loss is minimal. Which performance issue is being described?Network Troubleshooting
  26. 176.A technician reviewing centralized syslog messages notices entries tagged with facility code 4. According to standard syslog facility definitions, what type of messages does this facility represent?Network Operations
  27. 177.A network administrator receives reports that several internal web applications are running very slowly. The web servers are hosted on-premises. The administrator opens the Task Manager on one of the web servers and observes CPU utilization at 10%, memory utilization at 30%, and disk I/O at 5%. However, the network interface card (NIC) utilization is consistently at 95% or higher. Which of the following is the MOST likely cause of the slow application performance?Network Troubleshooting
  28. 178.A content delivery network (CDN) provider assigns the same IP address to multiple geographically distributed servers so that user requests are automatically routed to the nearest server based on network topology. Which traffic type does this describe?Networking Concepts
  29. 179.A network administrator is upgrading enterprise wireless security to eliminate the risk of offline dictionary attacks against captured pre-shared key handshakes, a well-known weakness of WPA2-PSK. Which technology should be implemented?Network Security
  30. 180.A network technician is setting up VLANs on a new switch. After configuring VLAN 10 for the sales department and VLAN 20 for the marketing department, users in VLAN 10 can communicate with each other, and users in VLAN 20 can communicate with each other. However, users in VLAN 10 cannot communicate with users in VLAN 20. The switch is connected to a router that handles inter-VLAN routing. Which of the following is the MOST likely cause of the communication failure between VLANs?Network Troubleshooting
  31. 181.A security-conscious organization is upgrading its wireless network and wants to eliminate vulnerability to offline dictionary attacks against the pre-shared key exchange used in previous wireless security standards. Which feature of WPA3 directly addresses this concern?Network Implementation
  32. 182.A company wants to combine four physical 1Gbps switch ports into a single logical interface providing both increased throughput and redundancy between two switches. Which technology should be configured?Network Implementation
  33. 183.A technician is deploying a small office wireless network using the 2.4GHz band with three access points placed to minimize interference. Which set of channels should be used to avoid overlapping frequencies?Network Implementation
  34. 184.A security team wants to observe and study attacker techniques and tools without exposing production systems to real risk. They deploy an isolated decoy server running intentionally vulnerable services and populated with fake sensitive data, then closely monitor all traffic and activity directed at it. Which security tool have they implemented?Network Security
  35. 185.A network technician is setting up a new point-to-point wireless bridge between two buildings. After configuring the access points (APs) and aligning the antennas, basic connectivity (ping) works, but observed throughput is significantly lower than expected, even with a strong signal. The wireless link is configured for 802.11ac using a 40 MHz channel width. Which of the following is the MOST likely cause of the poor throughput?Network Troubleshooting
  36. 186.A technician needs to run network cabling through the space above a drop ceiling that is also used as a return-air path for the building's HVAC system. Which type of cable MUST be used in this space to comply with fire code?Network Implementation
  37. 187.A network administrator is investigating a report that users on a specific subnet (192.168.10.0/24) are unable to access resources on another subnet (192.168.20.0/24). Users on the 192.168.20.0/24 subnet can successfully access resources on the 192.168.10.0/24 subnet. The router connecting these two subnets is configured correctly, and pings from the router to hosts on both subnets are successful. Which of the following is the MOST likely cause of this asymmetric communication issue?Network Troubleshooting
  38. 188.A company wants to filter and cache outbound employee web requests, hiding internal client IP addresses from external websites while enforcing content filtering policies. Which device should be deployed?Networking Concepts
  39. 189.A company's email administrator is configuring DNS so that inbound mail servers know where to deliver messages for the domain. Which DNS record type must be created?Network Operations
  40. 190.A technician is terminating a single-mode fiber run to connect a small form-factor SFP transceiver in a high-density patch panel. Which connector type is most commonly used for this application?Network Implementation
  41. 191.A technician transfers a 250 MB file across a link rated at 100 Mbps, and the transfer completes in exactly 25 seconds. What is the actual throughput of the transfer, and what does this result suggest?Network Troubleshooting
  42. 192.A network technician is investigating reports of intermittent network connectivity and slow speeds for users connected to a specific wireless access point. The access point is located near a microwave oven in a break room. What is the MOST likely cause of these issues?Network Troubleshooting
  43. 193.A network administrator is configuring a new routing policy on an edge router that connects the company's autonomous system (AS 65000) to two different Internet Service Providers (ISPs). The administrator wants to ensure that outbound traffic destined for a specific public prefix (203.0.113.0/24) always prefers ISP A, even if ISP B advertises a shorter AS_PATH. Which BGP attribute should the administrator manipulate on the router to achieve this routing preference?Network Implementation
  44. 194.A network administrator needs to establish a secure, encrypted connection from a remote office to the main data center over the public internet. The connection must allow all traffic between the two sites to be protected without requiring individual users to initiate a VPN client. Which type of VPN should the administrator implement?Network Operations
  45. 195.A network administrator is reviewing logs and discovers that a large number of ICMP echo requests are flooding the network, specifically targeting a critical server. The source IP addresses appear to be legitimate internal hosts, but the server is becoming unresponsive. What type of attack is most likely occurring?Network Security
  46. 196.A network administrator is reviewing the network documentation and finds a diagram that depicts the physical location of devices, cable runs between wiring closets, and rack elevations. What type of network diagram is the administrator examining?Network Operations
  47. 197.A network technician is installing a new fiber optic cable run between two buildings located 400 meters apart. The connection needs to support 10 Gigabit Ethernet. The technician has several fiber cable types available. Which of the following fiber optic cable types is the most appropriate choice for this specific distance and bandwidth requirement?Network Implementation
  48. 198.A network administrator needs to segment a large corporate network into several smaller broadcast domains to improve performance and security. Which of the following technologies should the administrator implement?Network Implementation
  49. 199.A network administrator is designing a new wireless deployment for a large university campus. The design requires high throughput and reliable connectivity across a wide outdoor area, including courtyards and pathways between buildings. Which of the following antenna types would be most suitable for providing focused, long-range coverage between specific points or across distinct outdoor zones?Network Implementation
  50. 200.A network technician is troubleshooting poor wireless performance in a densely populated office building. Users report frequent disconnections and slow speeds, especially during peak hours. The technician observes that many access points (APs) are configured to use the same channels in the 5GHz band, even if they are not directly overlapping. Which of the following is the most likely cause of the performance issues?Network Implementation