CompTIA N10-009 Practice Test

Explanation

A /23 subnet provides 512 total addresses, of which 510 are usable (subtracting 2 for network and broadcast addresses). This would satisfy the need for 255 additional addresses.

Explanation:
Infrastructure as a Service (IaaS) provides scalable compute power, storage, and networking resources on demand. It is the best choice for a company that needs to customize its cloud solution based on size, compute capacity, and storage needs.
IaaS Benefits:

• Provides virtual machines, storage, and networking resources.
• Scalable based on company needs.
• Reduces the need for physical infrastructure.

Incorrect Options:

• A. SaaS (Software as a Service): Delivers software applications (e.g., Google Docs, Microsoft 365) but does not provide compute/storage infrastructure.
• B. PaaS (Platform as a Service): Provides a development environment for application deployment but not full infrastructure control.
• D. IaC (Infrastructure as Code): A methodology for automating infrastructure, not a cloud deployment model.

Explanation:

• A Change Advisory Board (CAB) reviews and approves network changes. Before approval, they need a detailed action plan outlining the change, potential impacts, and mitigation strategies.
• A Plan of Action includes risk assessments, rollback procedures, and deployment steps, which are critical for decision-making.

Explanation

In a mesh topology, every node is directly connected to every other node. This provides high redundancy and reliability, as there are multiple paths for data to travel between nodes. This topology is often used in networks where high availability is crucial.

Explanation:

Content filtering can be used to block or restrict access to websites and services that facilitate torrenting and other prohibited activities. By implementing content filtering, the company can comply with the ISP's cease-and-desist order and prevent users from accessing torrent sites and engaging in prohibited activities.

Explanation:

Comprehensive and Detailed Explanation:
If a network appliance fails to start, standard remote access methods like SSH won't work. Instead, Out-of-Band (OOB) management provides a dedicated access path(e.g., a console portoriDRAC/iLO), allowing administrators to troubleshoot devices even when the network is down.
Breakdown of Options:
A. Crash cart– A physical monitor/keyboard setup, not a remote solution.
B. Jump box– A hardened system used for secure remote access but requires the device to be operational.
C. Secure Shell (SSH)– Requires the device to be fully booted and network connected.
D. Out-of-band management–Correct answer. Provides independent access for troubleshooting failed network devices.

Explanation:

Comprehensive and Detailed Explanation:
The mostlikely causeof buffering issues when moving outdoors issignal degradation.
Wireless signals weaken as they travel through obstacles such as walls, glass, and air, leading toweaker connections and reduced data rates.
Breakdown of Options:
A. Network congestion– While congestion can slow down network speeds, itaffects all users, not just those moving outdoors.
B. Wireless interference– Interference is possible but ismore likely caused by other wireless signalsrather than outdoor movement.
C. Signal degradation–Correct answer.Wireless signals weaken withdistance and obstaclessuch as walls, reducing performance.
D. Client disassociation– Disassociation occurs when clientslose connection to the AP, but the question states that usersexperience buffering, indicating they are still connected but with a weak signal.

Explanation:
Comprehensive and Detailed Explanation:

• The key difference is that an Intrusion Prevention System (IPS) is installed in line with network traffic, allowing it to actively block threats. In contrast, an Intrusion Detection System (IDS) only monitors and alerts without actively blocking traffic.

Breakdown of Options:
A. An IPS needs to be installed in line with traffic and an IDS does not. Correct answer. IPS actively prevents threats, while IDS only detects them.
B. An IPS is signature-based and an IDS is not.–False, both can use signature based detection.
C. An IPS is less susceptible to false positives than an IDS.–False, both can produce false positives, depending on configurations.
D. An IPS requires less administrative overhead than an IDS.–False, IPS requires more administrative effort due to real-time blocking decisions.

Explanation:

DHCP snooping is a security feature on network switches that helps to prevent unauthorized (rogue) DHCP servers from assigning IP addresses to clients. By implementing DHCP snooping, the network administrator can restrict DHCP responses to authorized servers only, preventing unauthorized DHCP configurations, such as incorrect DNS IPs, from being assigned to clients. This helps prevent man-in-the-middle attacks where malicious actors misconfigure DNS to redirect users to fraudulent sites.

Explanation:

Site-to-Site VPN: A site-to-site VPN is used to securely connect two networks, such as a company's headquarters and a branch location, over the internet. This type of VPN creates a secure tunnel for data transmission, ensuring confidentiality and integrity.
Split-tunnel VPN (A): Allows some traffic to bypass the VPN tunnel, which may not secure all communications.
Clientless VPN (B): Used for individual users to access the network without VPN client software.
Full-tunnel VPN (C): Typically used for individual user traffic rather than connecting two networks.