N10-009 Network Operations Practice Question
A network administrator needs to remotely manage multiple routers and switches. The management traffic must be encrypted. Which protocol should be used for the remote terminal sessions?
⚠ Common exam trap
CompTIA often tests the distinction between Telnet and SSH by presenting a scenario that requires encryption, hoping candidates overlook that Telnet offers no security and default to it because of its simplicity or familiarity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSH
SSH (Secure Shell) encrypts all traffic, including authentication credentials and session data, making it the correct choice for securely managing routers and switches over a network. Telnet transmits everything in plaintext, while SNMP and HTTP lack the interactive encrypted terminal session required for remote CLI management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Telnet
Why it's wrong here
Telnet is an outdated protocol that provides remote command-line access but transmits all data, including usernames, passwords, and commands, in unencrypted cleartext over TCP port 23. This fundamental lack of encryption makes Telnet extremely vulnerable to eavesdropping and man-in-the-middle attacks, rendering it completely unsuitable for secure remote management of network devices. Its use is strongly discouraged in any production environment due to the severe security risks it poses.
When this WOULD be correct
In a scenario where the question specifies a legacy network with no security requirements or asks for a protocol that does not require encryption, Telnet would be correct for remote terminal access.
- ✓
SSH
Why this is correct
SSH (Secure Shell) is the industry-standard protocol for secure remote command-line access to network devices. It establishes an encrypted tunnel over TCP port 22, protecting all management traffic, including authentication credentials and commands, from eavesdropping and tampering. This robust encryption and strong authentication make SSH the preferred choice for securely managing multiple routers and switches from a remote location, ensuring confidentiality and integrity.
- ✗
SNMP
Why it's wrong here
SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices by collecting operational data and sending alerts, not for providing interactive command-line access. It allows a network management station to query device agents for statistics, status, and configuration information, or to receive traps for critical events. While essential for network oversight, SNMP does not facilitate direct configuration changes through a terminal session, which is the primary requirement for managing multiple devices.
When this WOULD be correct
A question asking for a protocol to collect performance metrics or monitor device status from multiple routers and switches, especially when encrypted communication is required (SNMPv3).
- ✗
HTTP
Why it's wrong here
HTTP (Hypertext Transfer Protocol) is primarily designed for accessing web-based graphical user interfaces (GUIs) on devices, not for interactive command-line management. It transmits all data, including potentially sensitive configuration details, in cleartext over TCP port 80, making it highly insecure for remote administration. While HTTPS provides encryption, neither HTTP nor HTTPS is typically used for the direct terminal sessions required to manage device configurations via command-line interface.
When this WOULD be correct
When the question asks for a protocol to access a web-based management interface on a network device without encryption requirements, HTTP would be correct.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SSHCorrect answer▾
Why this is correct
SSH (Secure Shell) is the industry-standard protocol for secure remote command-line access to network devices. It establishes an encrypted tunnel over TCP port 22, protecting all management traffic, including authentication credentials and commands, from eavesdropping and tampering. This robust encryption and strong authentication make SSH the preferred choice for securely managing multiple routers and switches from a remote location, ensuring confidentiality and integrity.
✗TelnetWrong answer — click to see why▾
Why this is wrong here
Telnet transmits data, including credentials, in plaintext, so it does not provide encryption for remote terminal sessions, which is required by the question.
★ When this WOULD be the correct answer
In a scenario where the question specifies a legacy network with no security requirements or asks for a protocol that does not require encryption, Telnet would be correct for remote terminal access.
Why candidates choose this
Candidates often confuse Telnet with SSH because both provide remote terminal access, and they may overlook the encryption requirement or assume Telnet can be secured with other measures.
✗SNMPWrong answer — click to see why▾
Why this is wrong here
SNMP is used for network monitoring and management of device configurations, not for establishing remote terminal sessions. It does not provide an interactive command-line interface for routers and switches.
★ When this WOULD be the correct answer
A question asking for a protocol to collect performance metrics or monitor device status from multiple routers and switches, especially when encrypted communication is required (SNMPv3).
Why candidates choose this
Candidates may confuse SNMP's role in network management with remote terminal access, or think that because SNMP can manage devices, it can also be used for interactive sessions.
✗HTTPWrong answer — click to see why▾
Why this is wrong here
HTTP is not encrypted and is used for web traffic, not for remote terminal sessions to manage routers and switches.
★ When this WOULD be the correct answer
When the question asks for a protocol to access a web-based management interface on a network device without encryption requirements, HTTP would be correct.
Why candidates choose this
Candidates may confuse HTTP with HTTPS or think that web-based management is equivalent to terminal sessions, overlooking the encryption requirement.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
Telnet
Telnet is a network protocol that provides a bidirectional, interactive text-based communication session between two machines over a network, typically used for remote access and management of network devices.
Key term
SSH
SSH (Secure Shell) is a cryptographic network protocol that provides secure, encrypted communication and remote administration between two devices over an unsecured network.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.