N10-008 practice questions 111–120

1. Question 111 · 871 in bank

   A technician is monitoring a network interface and notices the device is dropping packets. The cable and interfaces, however, are in working order. Which of the following is MOST likely the cause?

   • AOID duplication
   • BMIB mismatch
   • CCPU usage
   • DEncapsulation errors

   Show answer

   Answer: C

   Explanation

   C. High CPU usage is the most likely cause of the device dropping packets when the cable and interfaces are in working order. When the CPU becomes overloaded, the device may not be able to process network packets quickly enough, leading to dropped packets.

   Source: Adapted from community discussion — JakeCharles

   Next question

2. Question 112 · 871 in bank

   Which of the following would be BEST to use to detect a MAC spoofing attack?

   • AInternet Control Message Protocol
   • BReverse Address Resolution Protocol
   • CDynamic Host Configuration Protocol
   • DInternet Message Access Protocol

   Show answer

   Answer: B

   Explanation

   My understanding (I'm new to this stuff so bear with me): A. ICMP- Used for testing connectivity with ping and such like with IP Adresses, not MAC Adresses. C. DHCP- Auto-assigns IP adresses on a network. Again, IP and not MAC. D. IMAP- Used for email servers, not MAC adresses Answer: B - Reverse Address Resolution Protocol . Can be used to ask what a machine's IP address is based on it's MAC address. If the adress has been spoofed it will obviously show a different IP than the one it is expecting to see

   Source: Adapted from community discussion — AaronS1990

   Next question

3. Question 113 · 871 in bank

   A technician is installing a high-density wireless network and wants to use an available frequency that supports the maximum number of channels to reduce interference. Which of the following standard 802.11 frequency ranges should the technician look for while reviewing WAP specifications?

   • A2.4GHz
   • B5GHz
   • C6GHz
   • D900MHz

   Show answer

   Answer: B

   Explanation

   5GHz is the frequency range that supports the maximum number of channels and reduces interference in a high-density wireless network. The 802.11 standard for this range offers more non-overlapping channels, which reduces the likelihood of interference with other devices and improves overall network performance.

   Source: Adapted from community discussion — JakeCharles

   Next question

4. Question 114 · 871 in bank

   A technician installed an 8-port switch in a user's office. The user needs to add a second computer in the office, so the technician connects both PCs to the switch and connects the switch to the wall jack. However, the new PC cannot connect to network resources. The technician then observes the following: ✑ The new computer does not get an IP address on the client's VLAN. ✑ Both computers have a link light on their NICs. ✑ The new PC appears to be operating normally except for the network issue. ✑ The existing computer operates normally. Which of the following should the technician do NEXT to address the situation?

   • AContact the network team to resolve the port security issue.
   • BContact the server team to have a record created in DNS for the new PC.
   • CContact the security team to review the logs on the company's SIEM.
   • DContact the application team to check NetFlow data from the connected switch.

   Show answer

   Answer: A

   Explanation

   A. Contact the network team to resolve the port security issue. Since the new computer does not get an IP address on the client's VLAN, it's likely that the issue is related to the switch's port security. The network team would be best equipped to troubleshoot and resolve this issue.

   Source: Adapted from community discussion — JakeCharles

   Next question

5. Question 115 · 871 in bank

   A network administrator needs to provide remote clients with access to an internal web application. Which of the following methods provides the HIGHEST flexibility and compatibility while encrypting only the connection to the web application?

   • AClientless VPN
   • BVirtual desktop
   • CVirtual network computing
   • DmGRE tunnel

   Show answer

   Answer: A

   Explanation

   A. Clientless VPN A clientless VPN (Virtual Private Network) provides the highest flexibility and compatibility for remote clients to access an internal web application because it allows remote users to connect to the internal network using a web browser, without the need to install any additional software or configurations on their device. This allows the remote users to access the web application securely over an encrypted connection, while also providing a high level of compatibility with different device types and operating systems. B, C and D are also options to access to internal network, but they may require additional software installation and configurations on the client side, which could lead to compatibility issues.

   Source: Adapted from community discussion — JakeCharles

   Next question

6. Question 116 · 871 in bank

   A network engineer receives the following when connecting to a switch to configure a port: telnet 10.1.200.1 Connecting to 10.1.200.1..Could not open connection to the host, on port 23: Connect failed. Which of the following is the MOST likely cause for the failure?

   • AThe network engineer is using the wrong protocol.
   • BThe network engineer does not have permission to configure the device.
   • CSNMP has been secured with an ACL.
   • DThe switchport the engineer is trying to configure is down.

   Show answer

   Answer: A

   Explanation

   The most likely cause for the failure is that the switch is not listening on the default telnet port (TCP port 23). Therefore, the correct option is A. The network engineer is using the wrong protocol. To verify this, the engineer should check the switch configuration to see if the telnet service is enabled and if it is using a different port. The engineer should also ensure that the telnet client is configured to use the correct port if it is not using the default port.

   Source: Adapted from community discussion — StellarSteve

   Next question

7. Question 117 · 871 in bank

   A network attack caused a network outage by wiping the configuration and logs of the border firewall. Which of the following sources, in an investigation to determine how the firewall was compromised, can provide the MOST detailed data?

   • ASyslog server messages
   • BMIB of the attacked firewall
   • CNetwork baseline reports
   • DNetFlow aggregate data

   Show answer

   Answer: D

   Explanation

   NetFlow is a tremendous security tool. It provides anomaly detection and investigative capabilities that can be helpful in incident response. The Cisco Cyber Threat Defense (CTD) solution uses NetFlow as the primary security visibility tool. NetFlow plays a crucial role in the preparation and identification phases. Information collected in NetFlow records can be used as part of identifying, categorizing, and scoping suspected incidents as part of the identification. NetFlow data also provides great benefits for attack traceback and attribution. In addition, NetFlow provides visibility into what is getting into your network and what information is being exfiltrated out of your network. https://www.ciscopress.com/articles/article.asp?p=2812391&seqNum=5#:~:text=NetFlow%20is%20a%20tremendous%20security,the%20primary%20security%20visibility%20tool.

   Source: Adapted from community discussion — Nishkurup

   Next question

8. Question 118 · 871 in bank

   A network engineer needs to reduce the overhead of file transfers. Which of the following configuration changes would accomplish that goal?

   • ALink aggregation
   • BJumbo frames
   • CPort security
   • DFlow control
   • ELower FTP port

   Show answer

   Answer: B

   Explanation

   Because jumbo frames are larger than standard frames, fewer frames are needed and therefore CPU processing overhead is reduced. Jumbo frames are packets that are longer than the standard Ethernet (IEEE 802.3) frame size of 1,518 bytes.

   Source: Adapted from community discussion — onikafei

   Next question

9. Question 119 · 871 in bank

   Select 2

   Which of the following devices have the capability to allow communication between two different subnetworks? (Choose two.)

   • AIDS
   • BAccess point
   • CLayer 2 switch
   • DLayer 3 switch
   • ERouter
   • FMedia converter

   Show answer

   Answer: DE

   Explanation

   The devices that have the capability to allow communication between two different subnetworks are Router and Layer 3 switch. Routers and Layer 3 switches operate at the network layer (Layer 3) of the OSI model and can perform IP routing to connect different subnetworks. They can also perform other functions such as packet filtering, network address translation (NAT), and access control. IDS (Intrusion Detection System), access points, Layer 2 switches, and media converters operate at lower layers of the OSI model and do not have the same capability as routers and Layer 3 switches to connect different subnetworks.

   Source: Adapted from community discussion — StellarSteve

   Next question

10. Question 120 · 871 in bank

    A network technician is implementing a solution that will allow end users to gain access to multiple applications after logging on. Which of the following authentication methods would allow this type of access?

    • ASSO
    • BLDAP
    • CEAP
    • DTACACS+

    Show answer

    Answer: A

    Explanation

    What is Single Sign-On? Single sign-on (SSO) is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials.

    Source: Adapted from community discussion — Iamboolean

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 111. 871 questions available.