N10-008 practice questions 91–100

1. Question 91 · 871 in bank

   Which of the following is the MOST appropriate use case for the deployment of a clientless VPN?

   • ASecure web access to internal corporate resources.
   • BUpgrade security via the use of an NFV technology.
   • CConnect two datacenters across the Internet.
   • DIncrease VPN availability by using a SDWAN technology.

   Show answer

   Answer: A

   Explanation

   A: Typical use cases for a clientless VPN include internet kiosks and business partners that require access only to a specific set of services and resources in general, which works perfectly with the clientless VPN limitation. This also protects against unwanted access being provided to the wrong users. https://info.pivitglobal.com/resources/clientless-remote-access-vpn#:~:text=Typical%20use%20cases%20include%20internet%20kiosks%20and%20business,provided%20to%20the%20wrong%20users.%20Accessing%20Resources%20Remotely

   Source: Adapted from community discussion — kungfuseven

   Next question

2. Question 92 · 871 in bank

   Which of the following security controls indicates unauthorized hardware modifications?

   • ABiometric authentication
   • BMedia device sanitization
   • CChange management policy
   • DTamper-evident seals

   Show answer

   Answer: D

   Explanation

   D. Tamper-evident seals indicate unauthorized hardware modifications. Tamper-evident seals can be used to identify whether someone has attempted to physically tamper with hardware devices or components. If the seal is broken or missing, it can indicate that the device has been modified or compromised. Biometric authentication, media device sanitization, and change management policies are security controls that address other aspects of security, such as access control, data protection, and configuration management.

   Source: Adapted from community discussion — StellarSteve

   Next question

3. Question 93 · 871 in bank

   A network technician needs to install security updates on several switches on the company's network. The management team wants this completed as quickly and efficiently as possible. Which of the following should the technician do to perform the updates?

   • AUpload the security update onto each switch using a terminal emulator and a console cable.
   • BConfigure a TFTP server, SSH into each device, and perform the update.
   • CReplace each old switch with new switches that have the updates already performed.
   • DConnect a USB memory stick to each switch and perform the update.

   Show answer

   Answer: B

   Explanation

   TFTP Server: Setting up a TFTP (Trivial File Transfer Protocol) server allows you to store the security update files in one location. This avoids the need to transfer files individually to each switch. SSH: Secure Shell (SSH) is a secure protocol used for remote access and management of network devices. SSH provides encryption and secure authentication, making it the preferred method for accessing devices remotely. By combining TFTP and SSH, the technician can: Transfer Update Files: Upload the security update files to the TFTP server. SSH into Devices: Securely access each switch using SSH, which ensures a secure connection. Retrieve Updates: From the switch's command-line interface (CLI), retrieve the update files from the TFTP server. Perform Updates: Apply the security updates on each switch. This approach minimizes the need for physical access, speeds up the update process, and ensures that updates are performed securely and efficiently. It also allows centralized control over the update process and reduces potential downtime.

   Source: Adapted from community discussion — TheFivePips

   Next question

4. Question 94 · 871 in bank

   Which of the following describes traffic going in and out of a data center from the internet?

   • ADemarcation point
   • BNorth-South
   • CFibre Channel
   • DSpine and leaf

   Show answer

   Answer: B

   Explanation

   Traffic going in and out of a data center from the internet is referred to as North-South traffic (Option B). Demarcation point (Option A) refers to the physical point where the responsibility for a telecommunications circuit changes from one party to another. Fibre Channel (Option C) is a high-speed network technology used for storage area networks, and Spine and leaf (Option D) is a network topology used in data centers for connecting servers and switches.

   Source: Adapted from community discussion — StevenElev11n

   Next question

5. Question 95 · 871 in bank

   A technician is troubleshooting a connectivity issue with an end user. The end user can access local network shares and intranet pages but is unable to access the internet or remote resources. Which of the following needs to be reconfigured?

   • AThe IP address
   • BThe subnet mask
   • CThe gateway address
   • DThe DNS servers

   Show answer

   Answer: C

   Explanation

   Gateway. It's not DNS because you could still access remote resources by IP if DNS wasn't working/configured for name resolution.

   Source: Adapted from community discussion — Cyali

   Next question

6. Question 96 · 871 in bank

   An IT administrator received an assignment with the following objectives: ✑ Conduct a total scan within the company's network for all connected hosts. ✑ Detect all the types of operating systems running on all devices. ✑ Discover all services offered by hosts on the network. ✑ Find open ports and detect security risks. Which of the following command-line tools can be used to achieve these objectives?

   • Anmap
   • Barp
   • Cnetstat
   • Dtcpdump

   Show answer

   Answer: A

   Explanation

   A. nmap GPT says the tool that best aligns with the specified objectives is "nmap" (Network Mapper). Nmap is a powerful open-source network scanning tool that can be used to achieve the following objectives: Conduct a total scan within the company's network for all connected hosts. Detect all the types of operating systems running on all devices. Discover all services offered by hosts on the network. Find open ports and detect security risks. Nmap can scan a range of IP addresses, detect live hosts, perform OS detection, and enumerate open ports and services running on those hosts. It's a versatile tool for network administrators and security professionals to assess the security and configuration of devices on a network.

   Source: Adapted from community discussion — osmaster

   Next question

7. Question 97 · 871 in bank

   A network manager is configuring switches in IDFs to ensure unauthorized client computers are not connecting to a secure wired network. Which of the following is the network manager MOST likely performing?

   • ADisabling unneeded switchports
   • BChanging the default VLAN
   • CConfiguring DHCP snooping
   • DWriting ACLs to prevent access to the switch

   Show answer

   Answer: A

   Explanation

   ACL are on routers or multi-layer Switch, on comptia exams if they say "switch" there talking about layer 2 only and you can't add ACL on a Layer 2 switch.

   Source: Adapted from community discussion — wbear

   Next question

8. Question 98 · 871 in bank

   At which of the following OSI model layers does routing occur?

   • AData link
   • BTransport
   • CPhysical
   • DNetwork

   Show answer

   Answer: D

   Explanation

   The Network layer is responsible for logical addressing, routing, and path determination of data between source and destination hosts on different networks. The layer uses logical addresses (e.g., IP addresses) to route packets to their destination.

   Source: Adapted from community discussion — StevenElev11n

   Next question

9. Question 99 · 871 in bank

   An auditor assessing network best practices was able to connect a rogue switch into a network jack and get network connectivity. Which of the following controls would BEST address this risk?

   • AActivate port security on the switchports providing end user access.
   • BDeactivate Spanning Tree Protocol on network interfaces that are facing public areas.
   • CDisable Neighbor Resolution Protocol in the Layer 2 devices.
   • DEnsure port tagging is in place for network interfaces in guest areas.

   Show answer

   Answer: A

   Explanation

   A. Activate port security on the switchports providing end user access would BEST address the risk of a rogue switch being connected to the network. Port security limits the number of devices that can connect to a particular switchport, thereby preventing unauthorized devices from connecting to the network. By limiting the number of MAC addresses allowed on each switchport, the network administrator can help prevent rogue devices from connecting and potentially causing security issues.

   Source: Adapted from community discussion — StellarSteve

   Next question

10. Question 100 · 871 in bank

    Select 2

    A technician knows the MAC address of a device and is attempting to find the device's IP address. Which of the following should the technician look at to find the IP address? (Choose two.)

    • AARP table
    • BDHCP leases
    • CIP route table
    • DDNS cache
    • EMAC address table
    • FSTP topology

    Show answer

    Answer: AB

    Explanation

    GPT says the technician can look at the following options to find the IP address of a device when the MAC address is known: A. ARP table: The ARP (Address Resolution Protocol) table maps MAC addresses to IP addresses on a local network segment. If the device has communicated on the network recently, its MAC address and corresponding IP address should be in the ARP table of a device in the same local network segment. B. DHCP leases: The DHCP (Dynamic Host Configuration Protocol) server assigns IP addresses to devices on the network. If the device obtained its IP address through DHCP, the DHCP server's lease information will associate the MAC address with the assigned IP address. This is useful for devices that use dynamic IP assignment.

    Source: Adapted from community discussion — osmaster

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 91. 871 questions available.