N10-009 Practice Test 24 — 15 Questions

Question 1

A network administrator needs to securely transfer backup configuration files from a router to a remote server over the internet. Which protocol should be used?

Accepted Answer

SCP. SCP (Secure Copy Protocol) is the correct choice because it provides encrypted file transfers over SSH, ensuring confidentiality and integrity of backup configuration files transmitted over the internet. Unlike TFTP or FTP, SCP authenticates the remote server and encrypts the data in transit, which is essential for secure remote backups.

Answer

TFTP

Answer

FTP

Answer

SNMP

Question 2

A network administrator notices that log timestamps from different switches are inconsistent, making correlation of events difficult. Which protocol should be implemented to ensure all devices have the same time?

Accepted Answer

NTP. NTP (Network Time Protocol) is the standard protocol used to synchronize clocks across network devices. By configuring all switches to use the same NTP server, timestamps in logs become consistent, enabling accurate correlation of events across the network.

Answer

SNMP

Answer

SMTP

Answer

RIP

Question 3

A network operations center uses SNMP to monitor device health. An administrator needs to retrieve the current CPU utilization from a router. Which SNMP operation is most appropriate?

Accepted Answer

GET. The SNMP GET operation is used by an NMS (Network Management System) to actively request a specific variable from a managed device, such as the current CPU utilization from a router's OID. This is a poll-based retrieval, making it the correct choice for an administrator who needs to read a single value on demand.

Answer

SET

Answer

TRAP

Answer

INFORM

Question 4

A company wants to enforce network access control such that only authenticated users can connect to the wired network. The authentication server will use RADIUS. Which IEEE standard should be implemented?

Accepted Answer

802.1X. 802.1X is the IEEE standard for port-based network access control (PNAC). It provides a framework for authenticating devices before granting access to a wired or wireless LAN, using an authentication server such as RADIUS. This directly meets the requirement to enforce network access control so that only authenticated users can connect to the wired network.

Answer

802.11i

Answer

802.3af

Answer

802.1Q

Question 5

A network administrator is configuring a firewall to allow external users to securely access an internal web server. Which security technique should be used to place the web server in a separate, isolated network segment that is still accessible from the internet?

Accepted Answer

DMZ. A DMZ (demilitarized zone) is a separate, isolated network segment that exposes internal services, such as a web server, to external users while keeping the internal LAN secure. By placing the web server in the DMZ, the firewall can allow inbound traffic from the internet to the DMZ while blocking direct access to the internal network, enforcing strict access control policies.

Answer

VLAN

Answer

VPN

Answer

NAT

Question 6

An attacker is eavesdropping on network traffic to capture sensitive data sent over an unencrypted HTTP connection. Which technology should be implemented to protect data in transit between clients and web servers?

Accepted Answer

SSL/TLS. SSL/TLS (Secure Sockets Layer/Transport Layer Security) operates at the application layer to encrypt HTTP traffic, creating HTTPS. This ensures that data transmitted between clients and web servers is encrypted, preventing eavesdroppers from reading sensitive information like passwords or credit card numbers. TLS is the standard protocol for securing HTTP communications, as defined in RFC 8446.

Answer

IPSec

Answer

SSH

Answer

SNMPv3

Question 7

A network administrator is configuring IP addresses for a new subnet. The network address is 192.168.1.0 with a subnet mask of 255.255.255.240. How many usable host addresses are available on this subnet?

Accepted Answer

14. The subnet mask 255.255.255.240 (or /28) provides 16 total addresses per subnet. The network address (192.168.1.0) and the broadcast address (192.168.1.15) are reserved, leaving 16 - 2 = 14 usable host addresses. This is calculated as 2^(32-28) - 2 = 2^4 - 2 = 16 - 2 = 14.

Answer

16

Answer

30

Answer

62

Question 8

A network administrator needs to identify which hosts are generating the most traffic on the network and what types of traffic (e.g., HTTP, FTP). Which monitoring technology should be deployed?

Accepted Answer

NetFlow. NetFlow is the correct choice because it provides detailed visibility into network traffic flows, including source/destination IPs, ports, protocols, and application-level information (e.g., HTTP, FTP). Unlike SNMP, which only gives aggregate interface statistics, or Syslog, which logs device events, NetFlow captures per-flow metadata that directly answers the question of which hosts are generating the most traffic and what types of traffic they are using.

Answer

SNMP

Answer

Syslog

Answer

ICMP

Question 9

Drag and drop the steps to set up a wireless network with WPA2-PSK encryption on a SOHO router into the correct order.

Accepted Answer

Connect router to modem and power, connect computer via Ethernet, access web interface, configure SSID, select WPA2-PSK and enter passphrase, save settings.. Wireless setup includes hardware connection, web access, SSID, security, and save.

Answer

Connect router to modem and power, access web interface, configure SSID, select WPA2-PSK and enter passphrase, connect computer via Ethernet, save settings.

Answer

Connect computer via Ethernet, access web interface, select WPA2-PSK and enter passphrase, configure SSID, save settings, connect router to modem and power.

Answer

Connect router to modem and power, connect computer via Ethernet, access web interface, save settings, configure SSID, select WPA2-PSK.

Question 10

A network administrator needs to create a diagram that shows the IP addressing scheme, VLAN assignments, and routing protocols used in the network. This diagram will be used for troubleshooting and future planning. Which type of documentation should the administrator create?

Accepted Answer

Logical topology diagram. A logical topology diagram is correct because it documents the IP addressing scheme, VLAN assignments, and routing protocols—abstract elements that define how data flows through the network, independent of physical device locations. This type of diagram is essential for troubleshooting Layer 3 issues and planning changes to the network's logical design.

Answer

Physical topology diagram

Answer

Rack elevation diagram

Answer

Cable management plan

Question 11

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model into the correct order (top-down approach).

Accepted Answer

Check application layer, then transport layer, then network layer, then data link layer, then physical layer.. Top-down troubleshooting starts at the application layer and works down to physical.

Answer

Check physical layer, then data link layer, then network layer, then transport layer, then application layer.

Answer

Check application layer, then network layer, then transport layer, then data link layer, then physical layer.

Answer

Check application layer, then transport layer, then data link layer, then network layer, then physical layer.

Question 12

A company is deploying a wireless network in an office where employees move between floors. They want clients to authenticate once and maintain connectivity without re-authenticating when roaming between access points (APs). Which IEEE wireless standard provides this fast roaming capability?

Accepted Answer

802.11r. 802.11r, also known as Fast BSS Transition (FT), enables clients to roam between access points without re-authenticating at each new AP. It achieves this by using a cached Pairwise Master Key (PMK) and a four-way handshake that is optimized to reduce the time required for reassociation, typically completing in under 50 milliseconds. This ensures seamless connectivity for mobile users moving between floors.

Answer

802.11i

Answer

802.11e

Answer

802.11n

Question 13

A network administrator needs to upgrade the firmware on a core switch. According to change management best practices, which step should be performed first?

Accepted Answer

Submit a change request. According to change management best practices, the first step in any network change is to submit a change request (option C). This ensures the proposed firmware upgrade is reviewed, approved, and documented before any technical actions are taken, reducing the risk of unplanned outages and providing a rollback plan. Skipping this step violates ITIL/change management frameworks and can lead to unauthorized changes that impact network stability.

Answer

Download the new firmware

Answer

Create a backup of the current configuration

Answer

Schedule a maintenance window

Question 14

A network administrator needs to analyze bandwidth usage on a WAN link to determine which applications are generating the most traffic. The administrator requires detailed flow-level data including source/destination IP, ports, and protocol. Which technology should be used to collect this information?

Accepted Answer

NetFlow. NetFlow is the correct choice because it provides detailed flow-level data, including source and destination IP addresses, ports, and protocols, which is exactly what the administrator needs to analyze bandwidth usage per application on a WAN link. Unlike SNMP or Syslog, NetFlow captures per-flow metadata that allows identification of which applications are generating the most traffic.

Answer

SNMP

Answer

Syslog

Answer

ICMP

Question 15

Which IPv6 address type is used for one-to-many communication and is similar to an IPv4 multicast address?

Accepted Answer

Multicast. IPv6 multicast addresses (FF00::/8) are designed for one-to-many communication, where a single packet is delivered to multiple interfaces that have joined the multicast group. This directly parallels the behavior of IPv4 multicast addresses (224.0.0.0/4), making option A correct.

Answer

Anycast

Answer

Unicast

Answer

Broadcast