N10-009 Network Operations Practice Question
A network engineer needs to securely transfer router configuration files to a central backup server. The backup server supports SCP and TFTP. Which protocol should the engineer use?
⚠ Common exam trap
The trap here is that TFTP is commonly associated with router configuration backups in many study materials, leading candidates to overlook the 'securely' keyword in the question and choose TFTP despite its lack of encryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SCP
SCP (Secure Copy Protocol) is the correct choice because it encrypts both the authentication and the data transfer using SSH, ensuring confidentiality and integrity of the router configuration files during transit. TFTP, while simple and often used for network device backups, lacks any encryption or authentication, making it insecure for transferring sensitive configuration data over a network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SCP
Why this is correct
SCP (Secure Copy Protocol) leverages SSH (Secure Shell) for data transfer, inherently providing strong encryption for the entire session, including the file content and authentication credentials. This ensures confidentiality and integrity of sensitive router configuration files, making it the ideal choice for secure backups. It also provides robust authentication mechanisms to verify both client and server identities, preventing unauthorized access.
- ✗
TFTP
Why it's wrong here
TFTP (Trivial File Transfer Protocol) is a very simple UDP-based protocol designed for basic file transfers without any security features. It transmits data in clear text and offers no authentication, meaning anyone can potentially intercept the configuration file or impersonate a legitimate client/server. This makes it entirely unsuitable for securely transferring sensitive router configurations, as it offers no protection against eavesdropping or tampering.
- ✗
HTTP
Why it's wrong here
HTTP (Hypertext Transfer Protocol) transmits data, including file contents and any authentication credentials, in clear text over the network, making it vulnerable to eavesdropping and man-in-the-middle attacks. While HTTPS (HTTP Secure) would provide encryption, the question specifically mentions HTTP and implies it's not available or secure for this purpose, further compounded by the scenario's limitation to SCP and TFTP on the server.
When this WOULD be correct
When the question asks for a protocol to transfer configuration files to a web server for remote access via a browser, and security is not a concern (e.g., in a lab environment).
- ✗
FTP
Why it's wrong here
FTP (File Transfer Protocol) transmits both control information and data, including usernames and passwords, in clear text, making it highly susceptible to credential theft and data interception. Although it's a common file transfer protocol, its lack of inherent encryption and the fact it's not listed as a supported protocol on the backup server in this specific scenario make it an inappropriate and insecure choice for transferring sensitive router configurations.
When this WOULD be correct
A question that asks for a protocol to transfer large files quickly over a trusted internal network where security is not a concern, and the backup server supports FTP but not SCP or SFTP.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SCPCorrect answer▾
Why this is correct
SCP (Secure Copy Protocol) leverages SSH (Secure Shell) for data transfer, inherently providing strong encryption for the entire session, including the file content and authentication credentials. This ensures confidentiality and integrity of sensitive router configuration files, making it the ideal choice for secure backups. It also provides robust authentication mechanisms to verify both client and server identities, preventing unauthorized access.
✗HTTPWrong answer — click to see why▾
Why this is wrong here
HTTP does not provide encryption or authentication, making it insecure for transferring sensitive router configuration files. The question specifies a need for secure transfer, and HTTP lacks the security features required.
★ When this WOULD be the correct answer
When the question asks for a protocol to transfer configuration files to a web server for remote access via a browser, and security is not a concern (e.g., in a lab environment).
Why candidates choose this
Candidates may confuse HTTP with HTTPS, assuming HTTP provides security, or they might think HTTP is commonly used for file transfers in network management contexts.
✗FTPWrong answer — click to see why▾
Why this is wrong here
FTP transmits data and credentials in cleartext, lacking encryption, which makes it insecure for transferring sensitive router configuration files. The question specifies a need for secure transfer, and SCP provides encryption via SSH, while FTP does not.
★ When this WOULD be the correct answer
A question that asks for a protocol to transfer large files quickly over a trusted internal network where security is not a concern, and the backup server supports FTP but not SCP or SFTP.
Why candidates choose this
Candidates may know FTP is commonly used for file transfers and overlook the security requirement, or they may confuse FTP with SFTP (which is secure) due to similar names.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
SCP
SCP (Secure Copy Protocol) is a network protocol used to securely transfer files between computers over an encrypted SSH connection.
Key term
Integrity
Integrity is the assurance that data has not been altered or tampered with in an unauthorized way, preserving its accuracy and consistency from source to destination.
About these practice questions
One of 464 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.