N10-009 Network Operations Practice Question
A network administrator needs to automate the backup of router configuration files to a remote server over the internet. The backup must be encrypted and authenticated. Which protocol should the administrator use in the automated script?
⚠ Common exam trap
The N10-009 exam often tests the distinction between secure and insecure file transfer protocols, and the trap here is that candidates may confuse FTP with SFTP or FTPS, assuming FTP itself provides encryption, or they may choose TFTP because it is commonly used for router backups in lab environments, forgetting that the question specifies 'over the internet' and requires encryption and authentication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SCP
SCP (Secure Copy Protocol) is the correct choice because it provides both encryption and authentication by operating over SSH (Secure Shell), which encrypts the entire session and verifies the server's identity using public-key cryptography. This makes it suitable for automating secure backups of router configuration files to a remote server over the internet, as it supports scripting with tools like expect or SSH keys without interactive password prompts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
TFTP
Why it's wrong here
TFTP (Trivial File Transfer Protocol) is unsuitable for secure backups because it operates without any encryption or authentication mechanisms. It transmits data in plaintext and offers no way to verify the identity of the sender or receiver, making it highly vulnerable to eavesdropping and unauthorized access. TFTP is typically used for transferring small, non-sensitive files within a trusted local network, such as booting diskless workstations or transferring firmware updates.
When this WOULD be correct
A network administrator needs to quickly transfer a router configuration file to a local TFTP server on the same LAN segment, with no security requirements.
- ✗
FTP
Why it's wrong here
FTP (File Transfer Protocol) is an insecure choice for backing up router configurations due to its fundamental design flaws regarding security. It transmits both user credentials (username and password) and the file data itself in plaintext over the network. This lack of encryption makes FTP highly susceptible to packet sniffing and man-in-the-middle attacks, compromising the confidentiality and integrity of the configuration files.
When this WOULD be correct
An administrator needs to transfer files within a trusted local network where security is not a concern, and the devices support FTP for simple file transfers without encryption overhead.
- ✓
SCP
Why this is correct
SCP (Secure Copy Protocol) is the most appropriate choice because it leverages SSH (Secure Shell) for both data encryption and strong authentication. This ensures that router configuration files are transferred securely over an untrusted network, protecting sensitive data from eavesdropping and tampering. Its widespread support on network devices makes it ideal for automated, script-based backups to a remote server.
- ✗
HTTP
Why it's wrong here
HTTP (Hypertext Transfer Protocol) is an inappropriate protocol for securely backing up router configuration files because it transmits all data, including potentially sensitive configuration details, in an unencrypted format. While primarily used for web browsing, its lack of inherent security makes it vulnerable to interception and disclosure. Although HTTPS (HTTP Secure) provides encryption, it is generally less common and often more complex to implement for automated router configuration backups compared to the streamlined, security-focused SCP.
When this WOULD be correct
A question asking for a protocol to transfer configuration files within a secure internal network where encryption is not required, or when using HTTPS (HTTP over SSL/TLS) for secure web-based management interfaces.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SCPCorrect answer▾
Why this is correct
SCP (Secure Copy Protocol) is the most appropriate choice because it leverages SSH (Secure Shell) for both data encryption and strong authentication. This ensures that router configuration files are transferred securely over an untrusted network, protecting sensitive data from eavesdropping and tampering. Its widespread support on network devices makes it ideal for automated, script-based backups to a remote server.
✗TFTPWrong answer — click to see why▾
Why this is wrong here
TFTP lacks encryption and authentication, making it unsuitable for secure backups over the internet.
★ When this WOULD be the correct answer
A network administrator needs to quickly transfer a router configuration file to a local TFTP server on the same LAN segment, with no security requirements.
Why candidates choose this
Candidates may associate TFTP with router configuration backup due to its simplicity and common use in local network environments, overlooking the security requirements for internet-based transfers.
✗FTPWrong answer — click to see why▾
Why this is wrong here
FTP transmits data in plaintext, including authentication credentials, and does not provide encryption or authentication for the backup files, failing the security requirements.
★ When this WOULD be the correct answer
An administrator needs to transfer files within a trusted local network where security is not a concern, and the devices support FTP for simple file transfers without encryption overhead.
Why candidates choose this
Candidates may associate FTP with file transfer automation and overlook its lack of encryption, assuming it is sufficient for remote backups over the internet.
✗HTTPWrong answer — click to see why▾
Why this is wrong here
HTTP does not provide encryption or authentication by default; it transmits data in plaintext, making it unsuitable for secure backup of router configurations over the internet.
★ When this WOULD be the correct answer
A question asking for a protocol to transfer configuration files within a secure internal network where encryption is not required, or when using HTTPS (HTTP over SSL/TLS) for secure web-based management interfaces.
Why candidates choose this
Candidates may confuse HTTP with HTTPS, assuming it provides security, or think that web-based management is sufficient for automated backups without considering encryption requirements.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
Asymmetric Encryption Algorithm Comparison
| Algorithm | Key Exchange | Signatures | Equivalent Security Key | Notes |
|---|---|---|---|---|
| RSA-3072 | Yes | Yes | 128-bit | Widely deployed; slow for bulk data |
| ECDSA P-256 | No | Yes | 128-bit | Fast signatures; standard TLS certs |
| ECDH / ECDHE | Yes | No | 128-bit | Perfect forward secrecy in TLS 1.3 |
| DH / DHE | Yes | No | 128-bit (3072-bit key) | Replaced by ECDHE in modern TLS |
| Ed25519 | No | Yes | ~128-bit | SSH keys, modern PKI |
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
Backup
A backup is a copy of computer data taken and stored separately so that the original data can be restored if it is lost, damaged, or corrupted.
Key term
SCP
SCP (Secure Copy Protocol) is a network protocol used to securely transfer files between computers over an encrypted SSH connection.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on N10-009
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network administrator needs to automatically back up the configuration files of all network devices (routers, switches, firewalls) to a central server every night. The administrator requires the transfer to be encrypted to protect sensitive configuration data. Which protocol should the administrator use to retrieve the configuration files?
medium- A.TFTP
- B.FTP
- ✓ C.SCP
- D.HTTP
Why C: SCP (Secure Copy Protocol) uses SSH for encrypted file transfers, making it ideal for securely retrieving configuration files from network devices to a central server. It ensures both authentication and data encryption, protecting sensitive configuration data during transit.
Variation 2. A network administrator needs to securely transfer backup configuration files from a router to a remote server over the internet. Which protocol should be used?
medium- A.TFTP
- B.FTP
- ✓ C.SCP
- D.SNMP
Why C: SCP (Secure Copy Protocol) is the correct choice because it provides encrypted file transfers over SSH, ensuring confidentiality and integrity of backup configuration files transmitted over the internet. Unlike TFTP or FTP, SCP authenticates the remote server and encrypts the data in transit, which is essential for secure remote backups.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.