N10-008 practice questions 271–280

1. Question 271 · 871 in bank

   Network users reported that a recent firmware upgrade to a firewall did not resolve the issue that prompted the upgrade. Which of the following should be performed NEXT?

   • AReopen the service ticket, request a new maintenance window, and roll back to the anterior firmware version.
   • BGather additional information to ensure users' concerns are not been caused by a different issue with similar symptoms.
   • CEmploy a divide-and-conquer troubleshooting methodology by engaging the firewall vendor's support.
   • DEscalate the issue to the IT management team in order to negotiate a new SLA with the user's manager.

   Show answer

   Answer: B

   Explanation

   I think A and D can be ruled out, you wouldn’t negotiate a new SLA or roll back the upgraded firmware. I would go with B here. If the firewall firmware was thought to be the initial problem and so they upgraded it, and this didn’t resolve the issue, it is less likely this is the actual problem. The best NEXT step would be to gather additional information to ensure users' concerns are not been caused by a different issue with similar symptoms. Afterwards you would have a better idea of whether it's a different issue or if it's time to engage the firewalls vendor support. Happy to be shown to be wrong, but this is my thinking.

   Source: Adapted from community discussion — Itsameeee3

   Next question

2. Question 272 · 871 in bank

   An administrator would like to allow Windows clients from outside the office to access workstations without using third-party software. Which of the following access methods would meet this requirement?

   • ARemote desktop gateway
   • BSplit tunnel
   • CSite-to-site VPN
   • DVNC

   Show answer

   Answer: A

   Explanation

   The key here is NO third-party software must be used so: To allow Windows clients from outside the office to access workstations without using third-party software, the administrator can use the Remote Desktop Protocol (RDP). RDP is a built-in feature of the Windows operating system that allows users to remotely connect to and control other Windows computers over a network connection. To use RDP, the administrator will need to enable the Remote Desktop feature on the workstations that need to be accessed, and ensure that the appropriate firewall rules are in place to allow RDP traffic to pass through. The administrator will also need to provide the remote users with the necessary credentials to access the workstations. Once RDP is set up and configured, the remote users can use the Remote Desktop client on their own computers to connect to the workstations and access them as if they were physically present in the office. This allows the administrator to provide remote access to the workstations without the need for any additional software or third-party tools.

   Source: Adapted from community discussion — AntonioTech

   Next question

3. Question 273 · 871 in bank

   A client who shares office space and an IT closet with another company recently reported connectivity issues throughout the network. Multiple third-party vendors regularly perform on-site maintenance in the shared IT closet. Which of the following security techniques would BEST secure the physical networking equipment?

   • ADisabling unneeded switchports
   • BImplementing role-based access
   • CChanging the default passwords
   • DConfiguring an access control list

   Show answer

   Answer: A

   Explanation

   I think it's 'A'. Here is my thought process: A security technique is needed that best secures physical networkink equipments. so...'B' 'C' 'D' answers are not gonna work since a person still is able to walk up to a device and cause harm, however out of the options given...option 'A' would best secure the physical devices.

   Source: Adapted from community discussion — TomSawyer

   Next question

4. Question 274 · 871 in bank

   A network engineer is investigating issues on a Layer 2 switch. The department typically shares a switchport during meetings for presentations, but after the first user shares, no other users can connect. Which of the following is MOST likely related to this issue?

   • ASpanning Tree Protocol is enabled on the switch.
   • BVLAN trunking is enabled on the switch.
   • CPort security is configured on the switch.
   • DDynamic ARP inspection is configured on the switch.

   Show answer

   Answer: C

   Explanation

   C. Port security is configured on the switch. The most likely issue related to this scenario is that port security is configured on the switch. Port security is a Layer 2 security feature that restricts access to a switch port based on the MAC address of the device that is connected to it. When a port reaches its maximum number of allowed MAC addresses, it will prevent any further connections to that port. If the department is sharing a switchport during meetings for presentations, then it is possible that the maximum number of allowed MAC addresses has already been reached by the first user, and therefore no other users can connect.

   Source: Adapted from community discussion — StellarSteve

   References

   • Cisco documentation

   Next question

5. Question 275 · 871 in bank

   A company's primary ISP is experiencing an outage. However, the network administrator notices traffic continuing to flow through a secondary connection to the same ISP. Which of the following BEST describes this configuration?

   • ADiverse paths
   • BLoad balancing
   • CMultipathing
   • DVirtual Router Redundancy Protocol

   Show answer

   Answer: A

   Explanation

   Mike Meyers "It’s very common for ISPs to share common lines and such, especially when they are servicing the same physical location. It’s therefore critically important to ensure path diversity, where the lines out of your ISP follow diverse paths to other routers. A common method for path diversity in smaller centers, for example, uses a fiber connection for the primary path and a very fast cellular connection as a failover. Use of both a fiber ISP and a different cable ISP can also lead to path diversity."

   Source: Adapted from community discussion — LeonardSnart

   References

   • Cisco documentation

   Next question

6. Question 276 · 871 in bank

   SIMULATION - A network technician replaced a switch and needs to reconfigure it to allow the connected devices to connect to the correct networks. INSTRUCTIONS - Click on the appropriate port(s) on Switch 1 and Switch 3 to verify or reconfigure the correct settings: • Ensure each device accesses only its correctly associated network • Disable all unused switch ports • Require fault-tolerant connections between the switches • Only make necessary changes to complete the above requirements If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

   

   

   

   

   

   

   

   

   

   

   

   

   

   

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer:

   Explanation

   Explanation: To reconfigure the switch, the technician needs to click on the appropriate port(s) on Switch 1 and Switch 3. The technician should ensure that each device only has access to its correctly associated network. The technician should also disable all unused switch ports. Finally, the technician should require fault-tolerant connections between the switches. If at any time the technician wants to bring back the initial state of the simulation, they can click on the Reset All button.

   Source: Adapted from community discussion — WinEH

   Next question

7. Question 277 · 871 in bank

   A company's web server is hosted at a local ISP. This is an example of:

   • Acolocation.
   • Ban on-premises data center.
   • Ca branch office.
   • Da cloud provider.

   Show answer

   Answer: A

   Explanation

   This is an example of colocation. Colocation is the practice of renting space in a data center to host a company's own server equipment. In a colocation arrangement, the company provides its own servers and network equipment, but the data center provides the physical space, power, cooling, and connectivity to the Internet. The company can manage its own server and network equipment, but it benefits from the data center's reliable infrastructure and 24/7 technical support. An on-premises data center is a data center that is owned and operated by a company on its own physical premises. A branch office is a physical location of a company outside of its main headquarters, where employees can perform their work and interact with customers. A cloud provider is a company that provides access to computing resources, such as servers, storage, and applications, over the Internet. The resources are hosted and managed by the cloud provider, rather than the user's own on-premises infrastructure.

   Source: Adapted from community discussion — MelzTheArtist

   Next question

8. Question 278 · 871 in bank

   A network administrator is preparing answers for an annual risk assessment that is required for compliance purposes. Which of the following would be an example of an internal threat?

   • AAn approved vendor with on-site offices
   • BAn infected client that pulls reports from the firm
   • CA malicious attacker from within the same country
   • DA malicious attacker attempting to socially engineer access into corporate offices

   Show answer

   Answer: B

   Explanation

   B. An infected client that pulls reports from the firm Why not An approved vendor with on-site offices? An approved vendor with on-site offices is not an example of an internal threat because they are an external entity with authorized access to the company's network or facilities. Internal threats typically come from individuals within the company such as employees, contractors, or other insiders who may have authorized access to the company's systems but may abuse this access for malicious purposes or inadvertently cause harm to the company's network or data.

   Source: Adapted from community discussion — IT__noob

   Next question

9. Question 279 · 871 in bank

   Which of the following is MOST likely to generate significant East-West traffic in a datacenter?

   • AA backup of a large video presentation to cloud storage for archival purposes
   • BA duplication of a hosted virtual server to another physical server for redundancy
   • CA download of navigation data to a portable device for offline access
   • DA query from an IoT device to a cloud-hosted server for a firmware update

   Show answer

   Answer: B

   Explanation

   East-west traffic, in a networking context, is the transfer of data packets from server to server within a data center. The term east-west for this type of traffic comes from network diagram drawings that usually depict local area network (LAN) traffic horizontally

   Source: Adapted from community discussion — Coliwood

   Next question

10. Question 280 · 871 in bank

    Classification using labels according to information sensitivity and impact in case of unauthorized access or leakage is a mandatory component of:

    • Aan acceptable use policy.
    • Ba memorandum of understanding.
    • Cdata loss prevention.
    • Da non-disclosure agreement.

    Show answer

    Answer: C

    Explanation

    Data loss prevention (DLP) systems are used to ensure that end-users do not send sensitive or critical information outside the corporate network. These DLP products help a network administrator control what data end users can transfer. While an Acceptable Use Policy (AUP), Non-Disclosure Agreement (NDA), or MOU (Memorandum of Understanding) might provide some administrative controls to help mitigate the threat of data loss or theft, a DLP is the BEST solution as it provides a technical way to enforce your policies.

    Source: Adapted from community discussion — Mehsotopes

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 271. 871 questions available.