N10-009 Network Operations Practice Question
A network administrator needs to automatically back up the configuration files of all network devices (routers, switches, firewalls) to a central server every night. The administrator requires the transfer to be encrypted to protect sensitive configuration data. Which protocol should the administrator use to retrieve the configuration files?
⚠ Common exam trap
The N10-009 exam often tests SCP versus TFTP, where candidates mistakenly choose TFTP because it is simpler and commonly used for backups, but they overlook the encryption requirement specified in the question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SCP
SCP (Secure Copy Protocol) uses SSH for encrypted file transfers, making it ideal for securely retrieving configuration files from network devices to a central server. It ensures both authentication and data encryption, protecting sensitive configuration data during transit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
TFTP
Why it's wrong here
TFTP (Trivial File Transfer Protocol) is an inappropriate choice for securely backing up configuration files due to its fundamental design as a "trivial" protocol. It operates without any encryption, meaning all transferred data is exposed in plaintext, and it completely lacks user authentication mechanisms. This absence of security features makes TFTP highly vulnerable to unauthorized access and data interception, rendering it entirely unsuitable for handling sensitive network configuration data.
When this WOULD be correct
A network administrator needs to quickly transfer a small configuration file to a device in a lab environment where security is not a concern, and simplicity and speed are prioritized.
- ✗
FTP
Why it's wrong here
FTP (File Transfer Protocol) is not a secure protocol for backing up configuration files because it transmits both control commands and data, including authentication credentials, in plaintext. This vulnerability allows attackers to easily intercept sensitive information, such as usernames, passwords, and the configuration data itself, using packet sniffers. Without the explicit implementation of FTPS (FTP Secure) or SFTP (SSH File Transfer Protocol), standard FTP offers no encryption or data integrity protection.
When this WOULD be correct
A network administrator needs to transfer large firmware files to multiple devices, and the devices only support FTP for file transfer, with encryption provided by a separate VPN tunnel.
- ✓
SCP
Why this is correct
SCP (Secure Copy Protocol) is the correct choice because it leverages the Secure Shell (SSH) protocol to provide robust encryption and authentication for file transfers. This ensures that sensitive configuration files are transmitted securely over the network, protecting them from eavesdropping and unauthorized access during backup operations. Its inherent security features make it ideal for automated, confidential data movement in network environments.
- ✗
HTTP
Why it's wrong here
HTTP (Hypertext Transfer Protocol) is unsuitable for securely backing up configuration files because it transmits all data, including potentially sensitive configuration details, in plaintext. This fundamental lack of encryption exposes the information to eavesdropping and interception by unauthorized parties on the network. While HTTPS (HTTP Secure) would provide encryption, the question specifically refers to HTTP, which inherently lacks the necessary security mechanisms for confidential data transfer.
When this WOULD be correct
When the question specifies a need for unencrypted, simple web-based retrieval of configuration files from devices with built-in HTTP servers, and encryption is not required.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SCPCorrect answer▾
Why this is correct
SCP (Secure Copy Protocol) is the correct choice because it leverages the Secure Shell (SSH) protocol to provide robust encryption and authentication for file transfers. This ensures that sensitive configuration files are transmitted securely over the network, protecting them from eavesdropping and unauthorized access during backup operations. Its inherent security features make it ideal for automated, confidential data movement in network environments.
✗TFTPWrong answer — click to see why▾
Why this is wrong here
TFTP lacks encryption and authentication, making it insecure for transferring sensitive configuration files over a network.
★ When this WOULD be the correct answer
A network administrator needs to quickly transfer a small configuration file to a device in a lab environment where security is not a concern, and simplicity and speed are prioritized.
Why candidates choose this
Candidates may associate TFTP with network device configuration backups due to its common use for firmware upgrades and basic file transfers, overlooking its lack of security features.
✗FTPWrong answer — click to see why▾
Why this is wrong here
FTP transfers data in plaintext, including authentication credentials and configuration files, which violates the requirement for encrypted transfer to protect sensitive data.
★ When this WOULD be the correct answer
A network administrator needs to transfer large firmware files to multiple devices, and the devices only support FTP for file transfer, with encryption provided by a separate VPN tunnel.
Why candidates choose this
Candidates may associate FTP with file transfers and overlook the encryption requirement, or mistakenly think FTP can be secured with implicit encryption like FTPS.
✗HTTPWrong answer — click to see why▾
Why this is wrong here
HTTP does not provide built-in encryption; it transmits data in plaintext, failing the requirement for encrypted transfer of sensitive configuration files.
★ When this WOULD be the correct answer
When the question specifies a need for unencrypted, simple web-based retrieval of configuration files from devices with built-in HTTP servers, and encryption is not required.
Why candidates choose this
Candidates may assume HTTP can be used over HTTPS for encryption, but the question explicitly states HTTP (not HTTPS), and they might overlook the lack of encryption in HTTP.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Key term
SSH
SSH (Secure Shell) is a cryptographic network protocol that provides secure, encrypted communication and remote administration between two devices over an unsecured network.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.