N10-009 Network Operations Practice Question
A network administrator needs to securely transfer backup configuration files from a router to a remote server over the internet. Which protocol should be used?
⚠ Common exam trap
The N10-009 exam often tests the distinction between TFTP (for local, unsecure boot/backup) and SCP (for secure remote transfers), and the trap here is that candidates might choose TFTP because it is commonly used for router backups in lab environments, overlooking the 'over the internet' security requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SCP
SCP (Secure Copy Protocol) is the correct choice because it provides encrypted file transfers over SSH, ensuring confidentiality and integrity of backup configuration files transmitted over the internet. Unlike TFTP or FTP, SCP authenticates the remote server and encrypts the data in transit, which is essential for secure remote backups.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
TFTP
Why it's wrong here
TFTP (Trivial File Transfer Protocol) is an incorrect choice for secure transfers due to its fundamental design, which completely lacks encryption and robust authentication mechanisms. It operates over UDP port 69 and is primarily used for simple, unauthenticated file transfers, often for booting diskless workstations or transferring firmware within a secure local network. The absence of any security features means configuration files would be exposed in plaintext, and anyone could potentially access or modify them without proper authorization.
When this WOULD be correct
When transferring configuration files to a local server on a trusted, isolated network segment where speed is critical and security is not a concern.
- ✗
FTP
Why it's wrong here
FTP (File Transfer Protocol) is unsuitable for securely transferring backup configuration files because it transmits both user authentication credentials (username and password) and the file data itself in plaintext. This lack of encryption makes FTP highly vulnerable to eavesdropping and man-in-the-middle attacks, allowing unauthorized parties to easily capture sensitive router configurations. While it can transfer files, its inherent insecurity makes it inappropriate for confidential data over public networks.
When this WOULD be correct
When the question specifies a trusted internal network with no security concerns, and the requirement is for simple file transfers with authentication and directory listing, FTP would be appropriate.
- ✓
SCP
Why this is correct
SCP (Secure Copy Protocol) is the correct choice because it leverages the Secure Shell (SSH) protocol to encrypt both the data in transit and the authentication credentials. This robust encryption protects sensitive configuration files from eavesdropping and tampering during transfer between the router and a destination, ensuring confidentiality and integrity. It operates over TCP port 22, making it suitable for secure transfers over untrusted networks like the internet.
- ✗
SNMP
Why it's wrong here
SNMP (Simple Network Management Protocol) is designed for monitoring and managing network devices, allowing administrators to query device status, modify configurations, and receive alerts. While it can interact with device configurations, its primary function is not for bulk file transfers of entire backup configuration files. SNMP is used to retrieve or set specific configuration parameters or MIB objects, not to move complete files like a router's entire running or startup configuration, making it an inappropriate tool for this specific task.
When this WOULD be correct
When the question asks for a protocol to monitor network devices, retrieve status information, or configure devices remotely (e.g., 'Which protocol should be used to poll a router's interface statistics from a central management server?').
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SCPCorrect answer▾
Why this is correct
SCP (Secure Copy Protocol) is the correct choice because it leverages the Secure Shell (SSH) protocol to encrypt both the data in transit and the authentication credentials. This robust encryption protects sensitive configuration files from eavesdropping and tampering during transfer between the router and a destination, ensuring confidentiality and integrity. It operates over TCP port 22, making it suitable for secure transfers over untrusted networks like the internet.
✗TFTPWrong answer — click to see why▾
Why this is wrong here
TFTP lacks encryption and authentication, making it insecure for transferring backup files over the internet where data could be intercepted or modified.
★ When this WOULD be the correct answer
When transferring configuration files to a local server on a trusted, isolated network segment where speed is critical and security is not a concern.
Why candidates choose this
Candidates may associate TFTP with router configuration transfers due to its common use in local network device management, overlooking the security requirements of internet-based transfers.
✗FTPWrong answer — click to see why▾
Why this is wrong here
FTP transmits data, including authentication credentials, in cleartext, making it insecure for transferring sensitive backup files over the internet.
★ When this WOULD be the correct answer
When the question specifies a trusted internal network with no security concerns, and the requirement is for simple file transfers with authentication and directory listing, FTP would be appropriate.
Why candidates choose this
Candidates may associate FTP with file transfers and overlook the security requirement, or they may confuse FTP with SFTP/FTPS which are secure.
✗SNMPWrong answer — click to see why▾
Why this is wrong here
SNMP is used for network management and monitoring, not for secure file transfer. It lacks the capability to transfer backup configuration files securely over the internet.
★ When this WOULD be the correct answer
When the question asks for a protocol to monitor network devices, retrieve status information, or configure devices remotely (e.g., 'Which protocol should be used to poll a router's interface statistics from a central management server?').
Why candidates choose this
Candidates may confuse SNMP's management capabilities with file transfer, or think SNMP can be used to back up configurations because it can read/write MIB objects, but it is not designed for bulk file transfer.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
TFTP
TFTP, or Trivial File Transfer Protocol, is a simple, lightweight network protocol used to transfer files between devices without the security or advanced features of FTP.
Key term
Router
A router is a networking device that connects different networks together and directs data traffic between them by choosing the best path for data to travel.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.