Courseiva
Network OperationshardMultiple ChoiceObjective-mapped

N10-009 Network Operations Practice Question

A network administrator needs to automate the backup of router configuration files to a remote server over the internet. The backup must be encrypted and authenticated. Which protocol should the administrator use in the automated script?

⚠ Common exam trap

The N10-009 exam often tests the distinction between secure and insecure file transfer protocols, and the trap here is that candidates may confuse FTP with SFTP or FTPS, assuming FTP itself provides encryption, or they may choose TFTP because it is commonly used for router backups in lab environments, forgetting that the question specifies 'over the internet' and requires encryption and authentication.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

SCP

SCP (Secure Copy Protocol) is the correct choice because it provides both encryption and authentication by operating over SSH (Secure Shell), which encrypts the entire session and verifies the server's identity using public-key cryptography. This makes it suitable for automating secure backups of router configuration files to a remote server over the internet, as it supports scripting with tools like expect or SSH keys without interactive password prompts.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • TFTP

    Why it's wrong here

    TFTP (Trivial File Transfer Protocol) is unsuitable for secure backups because it operates without any encryption or authentication mechanisms. It transmits data in plaintext and offers no way to verify the identity of the sender or receiver, making it highly vulnerable to eavesdropping and unauthorized access. TFTP is typically used for transferring small, non-sensitive files within a trusted local network, such as booting diskless workstations or transferring firmware updates.

    When this WOULD be correct

    A network administrator needs to quickly transfer a router configuration file to a local TFTP server on the same LAN segment, with no security requirements.

  • FTP

    Why it's wrong here

    FTP (File Transfer Protocol) is an insecure choice for backing up router configurations due to its fundamental design flaws regarding security. It transmits both user credentials (username and password) and the file data itself in plaintext over the network. This lack of encryption makes FTP highly susceptible to packet sniffing and man-in-the-middle attacks, compromising the confidentiality and integrity of the configuration files.

    When this WOULD be correct

    An administrator needs to transfer files within a trusted local network where security is not a concern, and the devices support FTP for simple file transfers without encryption overhead.

  • SCP

    Why this is correct

    SCP (Secure Copy Protocol) is the most appropriate choice because it leverages SSH (Secure Shell) for both data encryption and strong authentication. This ensures that router configuration files are transferred securely over an untrusted network, protecting sensitive data from eavesdropping and tampering. Its widespread support on network devices makes it ideal for automated, script-based backups to a remote server.

  • HTTP

    Why it's wrong here

    HTTP (Hypertext Transfer Protocol) is an inappropriate protocol for securely backing up router configuration files because it transmits all data, including potentially sensitive configuration details, in an unencrypted format. While primarily used for web browsing, its lack of inherent security makes it vulnerable to interception and disclosure. Although HTTPS (HTTP Secure) provides encryption, it is generally less common and often more complex to implement for automated router configuration backups compared to the streamlined, security-focused SCP.

    When this WOULD be correct

    A question asking for a protocol to transfer configuration files within a secure internal network where encryption is not required, or when using HTTPS (HTTP over SSL/TLS) for secure web-based management interfaces.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

SCPCorrect answer

Why this is correct

SCP (Secure Copy Protocol) is the most appropriate choice because it leverages SSH (Secure Shell) for both data encryption and strong authentication. This ensures that router configuration files are transferred securely over an untrusted network, protecting sensitive data from eavesdropping and tampering. Its widespread support on network devices makes it ideal for automated, script-based backups to a remote server.

TFTPWrong answer — click to see why

Why this is wrong here

TFTP lacks encryption and authentication, making it unsuitable for secure backups over the internet.

★ When this WOULD be the correct answer

A network administrator needs to quickly transfer a router configuration file to a local TFTP server on the same LAN segment, with no security requirements.

Why candidates choose this

Candidates may associate TFTP with router configuration backup due to its simplicity and common use in local network environments, overlooking the security requirements for internet-based transfers.

FTPWrong answer — click to see why

Why this is wrong here

FTP transmits data in plaintext, including authentication credentials, and does not provide encryption or authentication for the backup files, failing the security requirements.

★ When this WOULD be the correct answer

An administrator needs to transfer files within a trusted local network where security is not a concern, and the devices support FTP for simple file transfers without encryption overhead.

Why candidates choose this

Candidates may associate FTP with file transfer automation and overlook its lack of encryption, assuming it is sufficient for remote backups over the internet.

HTTPWrong answer — click to see why

Why this is wrong here

HTTP does not provide encryption or authentication by default; it transmits data in plaintext, making it unsuitable for secure backup of router configurations over the internet.

★ When this WOULD be the correct answer

A question asking for a protocol to transfer configuration files within a secure internal network where encryption is not required, or when using HTTPS (HTTP over SSL/TLS) for secure web-based management interfaces.

Why candidates choose this

Candidates may confuse HTTP with HTTPS, assuming it provides security, or think that web-based management is sufficient for automated backups without considering encryption requirements.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Quick reference

Asymmetric Encryption Algorithm Comparison

AlgorithmKey ExchangeSignaturesEquivalent Security KeyNotes
RSA-3072YesYes128-bitWidely deployed; slow for bulk data
ECDSA P-256NoYes128-bitFast signatures; standard TLS certs
ECDH / ECDHEYesNo128-bitPerfect forward secrecy in TLS 1.3
DH / DHEYesNo128-bit (3072-bit key)Replaced by ECDHE in modern TLS
Ed25519NoYes~128-bitSSH keys, modern PKI

About these practice questions

This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

2 more ways this is tested on N10-009

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. A network administrator needs to automatically back up the configuration files of all network devices (routers, switches, firewalls) to a central server every night. The administrator requires the transfer to be encrypted to protect sensitive configuration data. Which protocol should the administrator use to retrieve the configuration files?

medium
  • A.TFTP
  • B.FTP
  • C.SCP
  • D.HTTP

Why C: SCP (Secure Copy Protocol) uses SSH for encrypted file transfers, making it ideal for securely retrieving configuration files from network devices to a central server. It ensures both authentication and data encryption, protecting sensitive configuration data during transit.

Variation 2. A network administrator needs to securely transfer backup configuration files from a router to a remote server over the internet. Which protocol should be used?

medium
  • A.TFTP
  • B.FTP
  • C.SCP
  • D.SNMP

Why C: SCP (Secure Copy Protocol) is the correct choice because it provides encrypted file transfers over SSH, ensuring confidentiality and integrity of backup configuration files transmitted over the internet. Unlike TFTP or FTP, SCP authenticates the remote server and encrypts the data in transit, which is essential for secure remote backups.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.