N10-009 Practice Test 23 — 15 Questions

Question 1

In a network, a collision domain is a network segment where which of the following is true?

Accepted Answer

A: Only one device can transmit at a time to avoid data collisions. In a collision domain, only one device can transmit at a time because if two or more devices transmit simultaneously, their signals collide, corrupting the data. This is a fundamental characteristic of half-duplex Ethernet segments, such as those using hubs or legacy bus topologies, where the medium is shared and CSMA/CD (Carrier Sense Multiple Access with Collision Detection) is used to manage access.

Answer

B: All devices share the same IP subnet

Answer

C: Broadcast traffic is confined to that segment

Answer

D: MAC addresses are resolved to IP addresses

Question 2

A network administrator needs to ensure that data sent from a host arrives at the correct destination on a different network. Which of the following provides the logical address used for this purpose in IPv4?

Accepted Answer

IP address. In IPv4, the logical address used to route data between different networks is the IP address. The IP address contains a network portion that routers use to forward packets across network boundaries, ensuring the data reaches the correct destination network and host.

Answer

MAC address

Answer

Port number

Answer

Default gateway

Question 3

An organization is implementing a network monitoring solution that uses SNMP. The administrator wants to receive traps from all devices but is concerned about the security of SNMPv1/v2c community strings. Which SNMP version should be used to provide authentication and encryption?

Accepted Answer

SNMPv3. SNMPv3 is the correct choice because it is the only version of SNMP that provides both authentication and encryption, addressing the security concerns with SNMPv1/v2c community strings. SNMPv3 supports user-based security models (USM) with features like message integrity, authentication, and encryption (e.g., using SHA/MD5 for auth and AES/DES for privacy). This ensures that traps are sent securely, preventing unauthorized access or tampering.

Answer

SNMPv1

Answer

SNMPv2c

Answer

SNMPv4

Question 4

Which of the following protocols is used to automatically assign IP addresses to devices on a network?

Accepted Answer

B) DHCP. DHCP (Dynamic Host Configuration Protocol) is the correct answer because it is specifically designed to automatically assign IP addresses and other network configuration parameters (such as subnet mask, default gateway, and DNS servers) to devices on a network. When a client device connects, it sends a DHCP Discover broadcast, and the DHCP server responds with an Offer, followed by a Request and Acknowledgment (DORA process), enabling plug-and-play connectivity.

Answer

A) DNS

Answer

C) ARP

Answer

D) ICMP

Question 5

A network administrator wants to logically segment a single physical switch into multiple separate broadcast domains without purchasing additional hardware. Which concept should be used?

Accepted Answer

Virtual LAN (VLAN). A VLAN logically segments a physical switch into multiple isolated broadcast domains by assigning switch ports to specific VLAN IDs (802.1Q). This prevents broadcast traffic from crossing VLAN boundaries without requiring additional hardware, as each VLAN functions as its own Layer 2 network.

Answer

Spanning Tree Protocol (STP)

Answer

Subnetting

Answer

Quality of Service (QoS)

Question 6

A network administrator is creating a new VLAN that will contain 20 devices. The administrator wants to use the most efficient subnet that provides enough usable IP addresses while minimizing waste. Which of the following subnet masks should be used?

Accepted Answer

255.255.255.224 (/27). A /27 subnet mask (255.255.255.224) provides 32 total addresses, of which 30 are usable (2^5 - 2 = 30). This is the most efficient choice for 20 devices because it offers exactly enough usable IPs with minimal waste (only 10 unused addresses), whereas a /28 would provide only 14 usable addresses (insufficient) and a /29 would provide only 6 usable addresses (also insufficient).

Answer

255.255.255.240 (/28)

Answer

255.255.255.248 (/29)

Answer

255.255.255.192 (/26)

Question 7

A network administrator is planning a maintenance window to upgrade the firmware on critical switches. Which step should the administrator perform first to ensure minimal downtime?

Accepted Answer

Test the new firmware in a lab environment. Testing the new firmware in a lab environment first validates compatibility and stability without risking production network downtime. This step identifies potential issues such as configuration incompatibilities or hardware-specific bugs before the maintenance window, ensuring a smooth upgrade process.

Answer

Download the firmware from the vendor website

Answer

Back up the current configuration and firmware image

Answer

Notify users of the upcoming maintenance

Question 8

A network administrator needs to securely transfer backup configuration files from a router to a remote server over the internet. Which protocol should be used?

Accepted Answer

SCP. SCP (Secure Copy Protocol) is the correct choice because it provides encrypted file transfers over SSH, ensuring confidentiality and integrity of backup configuration files transmitted over the internet. Unlike TFTP or FTP, SCP authenticates the remote server and encrypts the data in transit, which is essential for secure remote backups.

Answer

TFTP

Answer

FTP

Answer

SNMP

Question 9

A network administrator notices that log timestamps from different switches are inconsistent, making correlation of events difficult. Which protocol should be implemented to ensure all devices have the same time?

Accepted Answer

NTP. NTP (Network Time Protocol) is the standard protocol used to synchronize clocks across network devices. By configuring all switches to use the same NTP server, timestamps in logs become consistent, enabling accurate correlation of events across the network.

Answer

SNMP

Answer

SMTP

Answer

RIP

Question 10

A network operations center uses SNMP to monitor device health. An administrator needs to retrieve the current CPU utilization from a router. Which SNMP operation is most appropriate?

Accepted Answer

GET. The SNMP GET operation is used by an NMS (Network Management System) to actively request a specific variable from a managed device, such as the current CPU utilization from a router's OID. This is a poll-based retrieval, making it the correct choice for an administrator who needs to read a single value on demand.

Answer

SET

Answer

TRAP

Answer

INFORM

Question 11

A company wants to enforce network access control such that only authenticated users can connect to the wired network. The authentication server will use RADIUS. Which IEEE standard should be implemented?

Accepted Answer

802.1X. 802.1X is the IEEE standard for port-based network access control (PNAC). It provides a framework for authenticating devices before granting access to a wired or wireless LAN, using an authentication server such as RADIUS. This directly meets the requirement to enforce network access control so that only authenticated users can connect to the wired network.

Answer

802.11i

Answer

802.3af

Answer

802.1Q

Question 12

A network administrator is configuring a firewall to allow external users to securely access an internal web server. Which security technique should be used to place the web server in a separate, isolated network segment that is still accessible from the internet?

Accepted Answer

DMZ. A DMZ (demilitarized zone) is a separate, isolated network segment that exposes internal services, such as a web server, to external users while keeping the internal LAN secure. By placing the web server in the DMZ, the firewall can allow inbound traffic from the internet to the DMZ while blocking direct access to the internal network, enforcing strict access control policies.

Answer

VLAN

Answer

VPN

Answer

NAT

Question 13

An attacker is eavesdropping on network traffic to capture sensitive data sent over an unencrypted HTTP connection. Which technology should be implemented to protect data in transit between clients and web servers?

Accepted Answer

SSL/TLS. SSL/TLS (Secure Sockets Layer/Transport Layer Security) operates at the application layer to encrypt HTTP traffic, creating HTTPS. This ensures that data transmitted between clients and web servers is encrypted, preventing eavesdroppers from reading sensitive information like passwords or credit card numbers. TLS is the standard protocol for securing HTTP communications, as defined in RFC 8446.

Answer

IPSec

Answer

SSH

Answer

SNMPv3

Question 14

A network administrator is configuring IP addresses for a new subnet. The network address is 192.168.1.0 with a subnet mask of 255.255.255.240. How many usable host addresses are available on this subnet?

Accepted Answer

14. The subnet mask 255.255.255.240 (or /28) provides 16 total addresses per subnet. The network address (192.168.1.0) and the broadcast address (192.168.1.15) are reserved, leaving 16 - 2 = 14 usable host addresses. This is calculated as 2^(32-28) - 2 = 2^4 - 2 = 16 - 2 = 14.

Answer

16

Answer

30

Answer

62

Question 15

Drag and drop the steps to set up a wireless network with WPA2-PSK encryption on a SOHO router into the correct order.

Accepted Answer

Connect router to modem and power, connect computer via Ethernet, access web interface, configure SSID, select WPA2-PSK and enter passphrase, save settings.. Wireless setup includes hardware connection, web access, SSID, security, and save.

Answer

Connect router to modem and power, access web interface, configure SSID, select WPA2-PSK and enter passphrase, connect computer via Ethernet, save settings.

Answer

Connect computer via Ethernet, access web interface, select WPA2-PSK and enter passphrase, configure SSID, save settings, connect router to modem and power.

Answer

Connect router to modem and power, connect computer via Ethernet, access web interface, save settings, configure SSID, select WPA2-PSK.