Which of the following offers the ability to manage access at the cloud VM instance?
Answer(s): A
Security group is a cloud-based firewall that controls inbound and outbound traffic at the instance level (e.g., AWS EC2 instances, Azure VMs). Security groups define allow/deny rules based on IP addresses, protocols, and ports to manage access to a cloud-based virtual machine (VM).
In an environment with one router, which of the following will allow a network engineer to communicate between VLANs without purchasing additional hardware?
A subinterface allows inter-VLAN communication on a single router using the Router-on-a-Stick method.This approach configures multiple logical (sub)interfaces on a single physical interface of the router, each assigned to a different VLAN. The router handles VLAN tagging (802.1Q) and routes traffic between VLANs, enabling communication without additional hardware.
A network administrator is concerned with on-path attacks and wants to provide encryption of fully qualified domain names in outbound communications.Which of the following best describes the protocol that provides the proper security layer for internet communication?
Answer(s): B
DoH (DNS over HTTPS) encrypts fully qualified domain name (FQDN) queries by encapsulating them within HTTPS traffic. This prevents on-path attacks (such as Man-in-the-Middle attacks) from intercepting or tampering with DNS queries. DoH enhances privacy and security by ensuring that DNS requests are encrypted, making it harder for attackers to manipulate or eavesdrop on domain name resolutions.
A network administrator wants to restrict inbound traffic to allow only HTTPS to the company website, denying all other inbound traffic from the internet.Which of the following would best accomplish this goal?
An Access Control List (ACL) on the edge firewall is the best way to restrict inbound traffic and allow only HTTPS (port 443) to the company website while blocking all other inbound traffic from the internet.Firewalls use ACLs to filter network traffic based on IP addresses, protocols, and ports, ensuring that only authorized traffic is permitted.
A network engineer is deploying switches at a new remote office. The switches have been preconfigured with hostnames and STP priority values.Based on the following table:Which of the following switches will become the root bridge?
The root bridge in STP is determined first by the lowest priority value. In this case, both core-sw01 and access- sw01 have a priority of 4096, which is lower than the other switches (32768).When there is a tie in priority, the switch with the lower MAC address is selected as the root bridge. Comparing the MAC addresses:core-sw01: 0000.0000.005f access-sw01: 0000.0000.005eSince 0000.0000.005e is lower than 0000.0000.005f, access-sw01 will become the root bridge.
Which of following must be implemented to securely connect a company's headquarters with a branch location?
Answer(s): D
A site-to-site VPN is the best solution for securely connecting a company's headquarters with a branch location. This type of VPN establishes a permanent, encrypted tunnel between two networks, allowing seamless and secure communication between them. It is typically configured on firewalls or routers at each site, ensuring data security over the internet.
A network engineer needs to virtualize network services, including a router, at a remote branch location.Which of the following solutions meets the requirements?
NFV (Network Functions Virtualization) allows network services, such as routers, firewalls, and load balancers, to be virtualized and run on standard hardware instead of dedicated network appliances. This meets the requirement of virtualizing network services, including a router, at a remote branch location. NFV enables flexibility, cost savings, and scalability by replacing physical network devices with software-based solutions running on virtual machines or cloud environments.
A group of users cannot connect to network resources. The technician runs ipconfig from one user's device and is able to ping the gateway shown from the command.Which of the following is most likely preventing the users from accessing network resources?
If users cannot connect to network resources but can ping the gateway, this suggests they have an IP address assigned but might have incorrect network settings, such as a wrong DNS server or incorrect subnet information. This issue often occurs when a rogue DHCP server (an unauthorized DHCP server on the network) assigns incorrect or malicious IP configurations, preventing users from accessing network resources correctly.
Post your Comments and Discuss CompTIA N10-009 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the N10-009 content, but please register or login to continue.