Free N10-009 Exam Braindumps
CompTIA Network+ Questions 281–288 (page: 37)

Updated On: 29-May-2026

A network engineer is completing a new VoIP installation, but the phones cannot find the TFTP server to download the configuration files.
Which of the following DHCP features would help the phone reach the TFTP server?

  1. Exclusions
  2. Lease time
  3. Options
  4. Scope

Answer(s): C

Explanation:

In DHCP, Options can be configured to provide additional information to the client devices, such as the IP address of the TFTP server. Specifically, Option 150 is commonly used to specify the TFTP server's IP address in VoIP installations. This allows the VoIP phones to reach the TFTP server and download their configuration files.



Which of the following best represents north-south traffic?

  1. A connection between a computer and a public web server
  2. Data moving between a data center and a DR site
  3. Traffic between a production server and a backup server
  4. Routing updates between OSPF routers

Answer(s): A

Explanation:

North-south traffic refers to the data flow between internal network resources (such as servers or devices within a data center) and external resources, typically going from the internal network to the outside world or vice versa. A connection between a computer and a public web server represents this type of traffic, where data moves from an internal network (the computer) to an external network (the web server on the internet).



Which of the following provides an opportunity for an on-path attack?

  1. Phishing
  2. Dumpster diving
  3. Evil twin
  4. Tailgating

Answer(s): C

Explanation:

An evil twin attack is a type of on-path attack where an attacker sets up a rogue Wi-Fi access point that mimics a legitimate network, tricking users into connecting to it. Once connected, the attacker can intercept and manipulate the data traffic between the victim and the intended destination, making it an on-path (man-in-the- middle) attack.



A network administrator is configuring a network for a new site that will have 150 users. Within the next year, the site is expected to grow by ten uses. Each user will have two IP addresses, one computer, and one phone connected to the network.
Which of the following classful IPv4 address ranges will be best-suited for the network?

  1. Class D
  2. Class B
  3. Class A
  4. Class C

Answer(s): D

Explanation:

A Class C IPv4 address range provides a subnet with up to 254 usable host addresses, which is suitable for networks with around 150 users. Since each user requires two IP addresses (one for a computer and one for a phone), the network will need 300 addresses (150 users × 2 IPs per user), which can easily be accommodated within the 254 usable addresses of a Class C network with proper subnetting (e.g., using a /24 subnet mask).
Therefore, a Class C network is the best fit for the requirements.



A network administrator needs to assign IP addresses to a newly installed network. They choose

192.168.1.0/24 as their network address and need to create three subnets with 30 hosts on each subnet.
Which of the following is a valid subnet mask that will meet the requirements?

  1. 255.255.255.128
  2. 255.255.255.192
  3. 255.255.255.224
  4. 255.255.255.240

Answer(s): B

Explanation:

To accommodate 30 hosts per subnet, you need a subnet mask that allows for at least 32 IP addresses per subnet, considering that two addresses in each subnet are reserved (one for the network address and one for the broadcast address).
The subnet mask 255.255.255.192 provides 64 IP addresses per subnet, which includes the 30 hosts and the reserved addresses, meeting the requirement.
With a subnet mask of 255.255.255.192, there are 6 bits for the host portion (2^6 = 64), allowing for 62 usable addresses for hosts (after excluding the network and broadcast addresses). This is sufficient for 30 hosts per subnet.



The network engineering team needs to implement a wireless network within two separate buildings. Once the network is set up, users will need to authenticate using RADIUS in order to access internal resources.
Which of the following wireless technologies should the team implement?

  1. Mesh
  2. Enterprise
  3. Ad hoc
  4. Point to point

Answer(s): B

Explanation:

Enterprise wireless networks support robust security features such as RADIUS (Remote Authentication Dial-In User Service) for user authentication, making them ideal for environments where secure access to internal resources is required. This technology allows for centralized authentication and policy enforcement, ensuring that users can securely connect to the network. Additionally, enterprise wireless networks support more complex configurations, such as multiple access points spanning multiple buildings, which is needed in this case.



A network engineer discovers network traffic that is sending confidential information to an unauthorized and unknown destination.
Which of the following best describes the cause of this network traffic?

  1. Ransomware
  2. Darkware
  3. Malware
  4. Adware

Answer(s): C

Explanation:

Malware is a broad term that encompasses malicious software designed to damage or disrupt systems, and it can be responsible for sending confidential information to unauthorized destinations. This could include spyware, Trojans, or other types of malicious programs that secretly exfiltrate data. Since the network traffic is sending confidential information to an unknown destination, it is most likely the result of malware infection on the network.



A security administrator is looking for rogue servers on the network and would also like to determine which services are running on those servers.
Which of the following software tools should the administrator use?

  1. tracert
  2. nmap
  3. netstat
  4. ping

Answer(s): B

Explanation:

nmap (Network Mapper) is a powerful tool used for network discovery and security auditing. It can be used to identify rogue servers on the network by scanning IP ranges and detecting which systems are active.
Additionally, nmap can determine which services (such as HTTP, SSH, etc.) are running on those servers by performing service detection. This makes it the most suitable tool for the administrator's need to find rogue servers and determine their services.



Viewing page 37 of 92
Viewing questions 289 - 296 out of 768 questions


Post your Comments and Discuss CompTIA N10-009 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!