Which of the following protocols is used to route traffic on the public internet?
Answer(s): A
Border Gateway Protocol (BGP) is the protocol used to route traffic between different autonomous systems (AS) on the public internet. It determines the best path for data packets across multiple networks based on various attributes such as path length, policies, and network reliability. BGP is the backbone of internet routing and ensures that data can traverse between different networks globally.
Which of the following protocols provides remote access utilizing port 22?
SSH (Secure Shell) is a protocol that provides secure remote access to devices over a network. It uses port 22 by default and encrypts the connection, ensuring secure data transmission. SSH is commonly used by network administrators for securely managing servers and other network devices remotely.
After changes were made to a firewall, users are no longer able to access a web server. A network administrator wants to ensure that ports 80 and 443 on the web server are still accessible from the user IP space.Which of the following commands is best suited to perform this testing?
Answer(s): D
nmap (Network Mapper) is the best tool for testing whether specific ports (e.g., 80 for HTTP and 443 for HTTPS) are open and accessible on a web server. It is commonly used for network discovery and security auditing and allows the network administrator to scan a target system to determine the status of specific ports.For example, the administrator can run the following command:nmap -p 80,443 <web_server_IP>This command will check whether ports 80 and 443 are open on the specified web server.
Which of the following attacks would most likely cause duplicate IP addresses in a network?
A rogue DHCP server can cause duplicate IP addresses on a network by assigning conflicting IP addresses to devices.When an unauthorized DHCP server operates in a network, it may offer IP configurations that overlap with those assigned by the legitimate DHCP server. This results in duplicate IP address assignments, leading to connectivity issues for affected devices.
An organization wants better network visibility. The organization's requirements include:Multivendor/OS-monitoring capabilitiesReal-time collectionData correlationWhich of the following meets these requirements?
Answer(s): B
SIEM (Security Information and Event Management) systems provide the capabilities required for better network visibility, as described in the organization's requirements. SIEM solutions:1. Multivendor/OS Monitoring Capabilities: Collect and process data from multiple sources, including diverse vendors and operating systems.2. Real-time Collection: Offer real-time monitoring and logging of events across the network.3. Data Correlation: Analyze and correlate data from various devices and systems to identify patterns, anomalies, or security events.
An administrator is evaluating the use of authentication within SNMP.Which of the following is the most secure way of authenticating devices using only SNMP?
SNMP version 3 (SNMPv3) provides the most secure way to authenticate devices and manage network monitoring. Unlike earlier versions (SNMPv1 and SNMPv2c), SNMPv3 includes robust security features such as:1. Authentication: Supports authentication using user-based security models (USM), ensuring only authorized users can access SNMP data.2. Encryption: Provides encryption for SNMP messages, preventing data from being intercepted or tampered with.3. Trap Messages: Allows configuring trap messages for critical events, enabling real-time alerts for network administrators.
A company has observed increased user traffic to gambling websites and would like to limit this behavior on work computers.Which of the following should the company most likely implement?
A content filter is the most appropriate solution for restricting access to gambling websites and other unwanted online content. Content filtering works by analyzing and blocking access to specific websites or categories of content based on predefined rules or policies. It can be implemented at the firewall, proxy server, or through specialized filtering software.
Following a fire in a data center, the cabling was replaced. Soon after an administrator notices network issues.Which of the following are the most likely causes of the network issues? (Choose two.)
Answer(s): D,E
The RJ45 cables were replaced with unshielded cablesUnshielded cables (e.g., UTP) can cause network issues in environments with high electromagnetic interference (EMI), such as data centers. Shielded cables (e.g., STP or FTP) are typically used in such environments to minimize interference and ensure reliable communication.The wrong transceiver type was used for the new terminationUsing the wrong transceiver (e.g., mismatched single-mode vs. multimode fiber, or incorrect connector type) can cause connectivity issues, such as failure to establish a link or poor signal quality. This is especially common when cables are replaced without verifying compatibility with the transceivers and switches.
Post your Comments and Discuss CompTIA N10-009 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the N10-009 content, but please register or login to continue.