A secure communication link needs to be configured between data centers via the internet. The data centers are located in different regions.Which of the following is the best protocol for the network administrator to use?
Answer(s): D
IPSec (Internet Protocol Security) is the best protocol for securing communication between data centers over the internet. It provides encryption, integrity, and authentication for data-in-transit, ensuring that sensitive information is protected from interception and tampering. IPSec is commonly used in VPNs (Virtual Private Networks) and site-to-site VPNs for secure, encrypted connections between remote locations.
Which of the following can be implemented to add an additional layer of security between a corporate network and network management interfaces?
Answer(s): A
A jump box (jump server) is a hardened, controlled-access device that acts as an intermediary between a corporate network and network management interfaces. It provides an additional layer of security by requiring administrators to log in to the jump box first before accessing critical infrastructure devices, such as routers, switches, or servers. This helps isolate and protect management interfaces from direct exposure to the corporate network, reducing the risk of unauthorized access and attacks.
A network administrator performed upgrades on a server and installed a new NIC to improve performance. Following the upgrades, users are unable to reach the server.Which of the following is the most likely reason?
Answer(s): C
Many network switches enforce port security, which restricts access to specific MAC addresses on a given port.When the network administrator installed a new NIC, the MAC address changed, potentially triggering a port security violation. As a result, the switch may have disabled the port, preventing users from accessing the server.To resolve this, the administrator should:Check the switch logs for security violations.Clear the port security settings or update the allowed MAC address list.Ensure the switch port is not in an error-disabled state.
A junior network technician at a large company needs to create networks from a Class C address with 14 hosts per subnet.Which of the following numbers of host bits is required?
To determine the number of host bits required for a subnet that supports 14 hosts, we use the host formula:2h 2 = Number of usable hosts where h is the number of host bits, and we subtract 2 (one for the network address and one for the broadcast address).Let's check for 14 hosts:24 - 2 = 16 - 2 = 14This satisfies the requirement.
Which of the following is a company most likely enacting if an accountant for the company can only see the financial department's shared folders?
Answer(s): B
Least privilege network access is a security principle that ensures users only have access to the data and resources necessary for their job role. In this case, the accountant is restricted to the financial department's shared folders, meaning access controls are in place to enforce the principle of least privilege, limiting exposure to sensitive or unnecessary data.
Which of the following connector types would most likely be used to connect to an external antenna?
A BNC (Bayonet Neill-Concelman) connector is commonly used for coaxial cables, which are frequently used in RF (radio frequency) applications such as external antennas, CCTV systems, and radio communications. BNC connectors provide a secure, quick-connect/disconnect mechanism, making them ideal for wireless networking and antenna connections.
A company recently converted most of the office laptops to connect wirelessly to the corporate network. After a recent high-traffic malware attack, narrowing the event to a specific user was difficult because of the wireless configuration.Which of the following actions should the company take?
Migrating from PSK (Pre-Shared Key) to Enterprise mode (also known as WPA2/WPA3-Enterprise) will allow the company to authenticate users individually using unique credentials via 802.1X authentication and a RADIUS server. This approach enables better tracking of user activity and enhances security by associating each device with a specific user, making it easier to trace potential security incidents like high- traffic malware attacks.
Which of the following cloud service models most likely requires the greatest up-front expense by the customer when migrating a data center to the cloud?
Infrastructure as a Service (IaaS) requires the greatest up-front expense when migrating a data center to the cloud because the customer is responsible for purchasing and managing virtualized computing resources such as virtual machines (VMs), storage, networking, and security configurations. The company must design, configure, and migrate applications, data, and services from the on-premises data center to the cloud.
Post your Comments and Discuss CompTIA N10-009 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the N10-009 content, but please register or login to continue.