Free N10-009 Exam Braindumps
CompTIA Network+ Questions 265–272 (page: 35)

Updated On: 29-May-2026

After providing a username and password, a user must input a passcode from a phone application.
Which of the following authentication technologies is used in this example?

  1. SSO
  2. LDAP
  3. MFA
  4. SAML

Answer(s): C

Explanation:

Multi-Factor Authentication (MFA) requires users to provide two or more authentication factors to verify their identity. In this case, the user enters:
1. Username and password (Something they know)
2. Passcode from a phone application (Something they have)
This combination ensures stronger security by requiring an additional authentication factor beyond just a password.



Which of the following facilities is the best example of a warm site in the event of information system disruption?

  1. A combination of public and private loud services to restore data
  2. A partial infrastructure, software, and data on site
  3. A full electrical infrastructure in place, but no customer devices on site
  4. A full infrastructure in place, but no current data on site

Answer(s): B

Explanation:

A warm site is a backup facility that has some infrastructure, pre-installed software, and partial data replication, but it still requires some configuration and updates before becoming fully operational after a disaster. This balances cost and recovery speed, making it more prepared than a cold site but not as fully operational as a hot site.



Which of the following services runs on port 636?

  1. SMTP
  2. Syslog
  3. TFTP
  4. LDAPS

Answer(s): D

Explanation:

LDAPS (Lightweight Directory Access Protocol Secure) is the secure, encrypted version of LDAP that runs over port 636 using SSL/TLS encryption to protect directory authentication and queries. It is commonly used for secure user authentication and directory access in Active Directory and other directory services.



A company wants to implement data loss prevention by restricting user access to social media platforms and personal cloud storage on workstations.
Which of the following types of filtering should the company deploy to achieve these goals?

  1. Port
  2. DNS
  3. MAC
  4. Content

Answer(s): D

Explanation:

Content filtering is used to restrict access to specific types of websites, applications, or online services, such as social media platforms and personal cloud storage. This is commonly done through firewalls, web proxies, or security appliances that analyze and block content based on predefined rules. Content filtering helps enforce data loss prevention (DLP) policies by preventing users from uploading or sharing sensitive data on unauthorized platforms.



An organization is struggling to get effective coverage using the wireless network. The organization wants to implement a solution that will allow for continuous connectivity anywhere in the facility.
Which of the following should the network administrator suggest to ensure the best coverage?

  1. Implementing additional ad hoc access points
  2. Providing more Ethernet drops for user connections
  3. Deploying a mesh network in the building
  4. Changing the current frequency of the Wi-Fi

Answer(s): C

Explanation:

A mesh network is the best solution for ensuring continuous Wi-Fi coverage throughout a facility. Mesh networking uses multiple interconnected access points (nodes) to extend coverage, improve reliability, and allow devices to seamlessly roam between access points without disconnection. This solution is ideal for large buildings where a single router or traditional access point deployment does not provide full coverage.



Which of the following protocols allows automatic routing failover for an active-passive firewall pair?

  1. EIGRP
  2. OSPF
  3. VRRP
  4. BGP

Answer(s): C

Explanation:

VRRP (Virtual Router Redundancy Protocol) enables automatic routing failover for an active-passive firewall pair by allowing multiple routers (or firewalls) to share a virtual IP address. The active firewall handles traffic while the passive firewall remains on standby. If the active firewall fails, VRRP automatically fails over to the passive firewall, ensuring continuous network availability.



Which of the following is a major difference between an IPS and IDS?

  1. An IPS needs to be installed in line with traffic and an IDS does not.
  2. An IPS is signature-based and an IDS is not.
  3. An IPS is less susceptible to false positives than an IDS.
  4. An IPS requires less administrative overhead than an IDS.

Answer(s): A

Explanation:

The major difference between Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS) is how they operate within the network:
IPS (Intrusion Prevention System) is installed in-line with network traffic, meaning it can actively block threats in real time before they reach their target.
IDS (Intrusion Detection System) is not in-line, meaning it monitors and alerts on suspicious activity but does not actively block threats. Instead, it relies on administrators or other security systems to take action.



Which of the following describes the best reason for using BGP?

  1. Preventing a loop within a LAN
  2. Improving reconvergence times
  3. Exchanging router updates with a different ISP
  4. Sharing routes with a Layer 3 switch

Answer(s): C

Explanation:

BGP (Border Gateway Protocol) is primarily used for routing between different autonomous systems (ASes), such as when an organization connects to multiple ISPs or exchanges routing information across different networks. It is the protocol of the internet, ensuring that networks can communicate globally by exchanging routing updates between ISPs and large-scale enterprises.



Viewing page 35 of 92
Viewing questions 273 - 280 out of 768 questions


Post your Comments and Discuss CompTIA N10-009 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!