N10-009 Network Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  SNMP

  Why it's wrong here

  Simple Network Management Protocol (SNMP) is primarily utilized for monitoring network devices, collecting operational data, and managing configurations remotely. While SNMP can send "traps" to notify a management station of specific events, these are typically short, predefined alerts rather than comprehensive, streaming log messages. It is not engineered as a robust, high-volume log transport mechanism for detailed system events, making it unsuitable for centralizing extensive device logs.

  When this WOULD be correct

  A network administrator needs to monitor device health metrics like CPU load and interface errors from routers and switches. Which protocol should be configured to allow a central server to poll these metrics?

• ✓

  Syslog

  Why this is correct

  Syslog is a standard protocol specifically designed for sending system log or event messages from network devices to a central server. Routers, switches, and other network components generate various operational messages, security alerts, and error notifications. By using Syslog, administrators can consolidate these diverse messages from multiple sources, enabling centralized log storage, analysis, and monitoring for efficient troubleshooting, security auditing, and compliance reporting.

• ✗

  NetFlow

  Why it's wrong here

  NetFlow is a network protocol developed by Cisco for collecting detailed IP traffic information as it traverses network interfaces. It provides granular data on network conversations, including source/destination IP addresses, ports, protocols, and byte counts, which is invaluable for traffic analysis, billing, and capacity planning. However, NetFlow specifically focuses on network *flow* data, not device-generated system events, operational messages, or security logs, making it inappropriate for centralized log collection.

  When this WOULD be correct

  A network administrator wants to monitor bandwidth usage and traffic patterns across the network to identify top talkers or detect anomalies. Which protocol should be configured on routers and switches to export traffic flow data to a collector?

• ✗

  TFTP

  Why it's wrong here

  Trivial File Transfer Protocol (TFTP) is a simple, connectionless protocol primarily used for transferring files over a network, often for specific tasks like booting diskless workstations or updating device firmware. Its design prioritizes simplicity over security and robust error handling, lacking features necessary for continuous, real-time streaming of event data or log messages. TFTP is not designed to function as a logging protocol for collecting dynamic, ongoing system events from multiple network devices.

  When this WOULD be correct

  A network administrator needs to back up router and switch configuration files to a central server. Which protocol should be used to transfer these files?

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question