N10-009 Network Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  TFTP

  Why it's wrong here

  TFTP, or Trivial File Transfer Protocol, is a lightweight protocol known for its simplicity and lack of security features, including authentication and encryption. It operates over UDP and is primarily used for transferring small files in scenarios where security is not a concern, such as booting diskless workstations or initial firmware updates. Consequently, using TFTP for automated network device configuration backups would expose critical device settings to significant security risks, as data could be easily intercepted or altered.

  When this WOULD be correct

  A question asks: 'Which protocol is commonly used for simple, unencrypted file transfers during network device bootstrapping or firmware upgrades when security is not a concern?'

• ✗

  FTP

  Why it's wrong here

  FTP, or File Transfer Protocol, transmits both control commands and data in cleartext, meaning all information, including usernames, passwords, and the configuration files themselves, is sent unencrypted over the network. This inherent lack of encryption makes FTP highly susceptible to eavesdropping and man-in-the-middle attacks, compromising the confidentiality and integrity of network device configurations. Therefore, relying on FTP for automated backups of sensitive network settings is a significant security vulnerability that should be avoided.

  When this WOULD be correct

  A question asking for a protocol to transfer files in a trusted internal network where security is not a concern, or when the requirement is for a simple, widely supported protocol without encryption.

• ✓

  SFTP

  Why this is correct

  SFTP, or SSH File Transfer Protocol, provides robust security for automated network device configuration backups by leveraging the underlying SSH protocol. It encrypts both data and authentication credentials, preventing eavesdropping and ensuring data integrity during transfer. This secure channel is crucial for protecting sensitive network configurations from unauthorized access and tampering, making it the ideal choice for automated, secure transfers.

• ✗

  HTTP

  Why it's wrong here

  HTTP is fundamentally an unencrypted application layer protocol designed for retrieving web pages and resources, not for secure, programmatic file transfers like configuration backups. It transmits data in cleartext, making any sensitive information, including device configurations, vulnerable to interception and exposure. While HTTP/S (secure HTTP) adds encryption, the protocol itself lacks the robust file transfer capabilities and authentication mechanisms typically required for automated network device management.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”