N10-008 practice questions 301–310

1. Question 301 · 871 in bank

   A technician wants to deploy a new wireless network that comprises 30 WAPs installed throughout a three-story office building. All the APs will broadcast the same SSID for client access. Which of the following BEST describes this deployment?

   • AExtended service set
   • BBasic service set
   • CUnified service set
   • DIndependent basic service set

   Show answer

   Answer: A

   Explanation

   Answer is A. A Extended Service Set is configured on multiple access points to form an extended service area. The question states there is 30 wireless access points

   Source: Adapted from community discussion — RobJob

   Next question

2. Question 302 · 871 in bank

   An organization is interested in purchasing a backup solution that supports the organization's goals. Which of the following concepts would specify the maximum duration that a given service can be down before impacting operations?

   • AMTTR
   • BRTO
   • CMTBF
   • DRPO

   Show answer

   Answer: B

   Explanation

   The maximum duration that a given service can be down before it impacts operations is often referred to as the Recovery Time Objective (RTO). RTO is a key consideration in any backup and disaster recovery plan, as it determines how quickly the organization needs to be able to recover from a disruption or failure. It is typically expressed in terms of time, and it helps to inform the design and implementation of the backup solution. For example, if an organization has a critical service that must be available 24/7, it may have a very low RTO, requiring that the service be restored within a matter of minutes or even seconds. On the other hand, if the service can be down for a longer period of time without significantly impacting operations, the organization may have a higher RTO. When selecting a backup solution, it is important to consider the organization's RTO requirements and ensure that the solution is capable of meeting those needs. A solution that does not meet the organization's RTO requirements may not be sufficient to ensure the availability of critical services in the event of a disruption or failure.

   Source: Adapted from community discussion — AntonioTech

   Next question

3. Question 303 · 871 in bank

   During an annual review of policy documents, a company decided to adjust its recovery time frames. The company agreed that critical applications can be down for no more than six hours, and the acceptable amount of data loss is no more than two hours. Which of the following should be documented as the RPO?

   • ATwo hours
   • BFour hours
   • CSix hours
   • DEight hours

   Show answer

   Answer: A

   Explanation

   The correct answer is A. Two hours. Explanation: RPO (Recovery Point Objective) is a concept that defines the maximum amount of data loss that an organization can tolerate in the event of a disaster or outage. In this scenario, the company has agreed that the acceptable amount of data loss is no more than two hours, which means that the RPO is two hours. RTO (Recovery Time Objective) is a concept that defines the maximum amount of time that a service or system can be down before it starts to negatively impact business operations. In this scenario, the company has agreed that critical applications can be down for no more than six hours, which means that the RTO is six hours. Therefore, the RPO for this company is two hours.

   Source: Adapted from community discussion — Sinfulonsunday

   Next question

4. Question 304 · 871 in bank

   A network administrator is given the network 80.87.78.0/26 for specific device assignments. Which of the following describes this network?

   • A80.87.78.0 - 80.87.78.14
   • B80.87.78.0 - 80.87.78.110
   • C80.87.78.1 - 80.87.78.62
   • D80.87.78.1 - 80.87.78.158

   Show answer

   Answer: C

   Explanation

   The network 80.87.78.0/26 represents a block of 64 IP addresses, ranging from 80.87.78.0 to 80.87.78.63. The "/26" indicates that the first 26 bits of the 32-bit IP address are used for the network prefix, leaving 6 bits for host addresses. To determine the range of assignable IP addresses for specific device assignments, we need to identify the valid host addresses within this range. The valid host addresses are 80.87.78.1 to 80.87.78.62, since the network address (80.87.78.0) and broadcast address (80.87.78.63) are reserved and cannot be assigned to a device. Therefore, the answer is C. 80.87.78.1 - 80.87.78.62.

   Source: Adapted from community discussion — StellarSteve

   Next question

5. Question 305 · 871 in bank

   An organization set up its offices so that a desktop is connected to the network through a VoIP phone. The VoIP vendor requested that voice traffic be segmented separately from non-voice traffic. Which of the following would allow the organization to configure multiple devices with network isolation on a single switch port?

   • ASubinterfaces
   • BLink aggregation
   • CLoad balancing
   • DTunneling

   Show answer

   Answer: A

   Explanation

   A. Subinterfaces Subinterfaces are often used in the context of virtual LANs (VLANs) to achieve network isolation on a single switch port. With subinterfaces, you can divide a physical interface into multiple logical interfaces, each associated with a different VLAN. This segmentation allows for separate traffic handling and isolation. In the case of connecting a desktop and a VoIP phone to the same switch port while keeping voice traffic segmented from non-voice traffic, configuring subinterfaces with VLANs is a common and effective approach. This enables the organization to achieve the required network isolation.

   Source: Adapted from community discussion — salah112

   Next question

6. Question 306 · 871 in bank

   An attacker targeting a large company was able to inject malicious A records into internal name resolution servers. Which of the following attack types was MOST likely used?

   • ADNS poisoning
   • BOn-path
   • CIP spoofing
   • DRogue DHCP

   Show answer

   Answer: A

   Explanation

   If the A record is modified it is usually to change hostname to IP address resolution. Answer A is the correct answer here as this is an example of DNS poisoning if a malicious attacker can gain access to do this to a company.

   Source: Adapted from community discussion — MikeLynch

   Next question

7. Question 307 · 871 in bank

   The following DHCP scope was configured for a new VLAN dedicated to a large deployment of 325 IoT sensors:

   

   The first 244 IoT sensors were able to connect to the TFTP server, download the configuration file, and register to an IoT management system. The other sensors are being shown as offline. Which of the following should be performed to determine the MOST likely cause of the partial deployment of the sensors?

   • ACheck the gateway connectivity to the TFTP server.
   • BCheck the DHCP network scope.
   • CCheck whether the NTP server is online.
   • DCheck the IoT devices for a hardware failure.

   Show answer

   Answer: B

   Explanation

   Since the CIDR is /24, there are 256 available IPs. The first IP would be for the gateway, and the last IP for the broadcast address, leaving you with 254 available IPs. Since the exclusion range is from 10.10.0.1 - 10, remove 10 available IPs and you're left with 244. 244 IoT sensors were able to be assigned an IP, but the others weren't due to DHCP exhaust. Hence the answer being "B".

   Source: Adapted from community discussion — Paradox_Walnut

   Next question

8. Question 308 · 871 in bank

   A network technician receives a report from the server team that a server's network connection is not working correctly. The server team confirms the server is operating correctly except for the network connection. The technician checks the switchport connected to the server and reviews the following data:

   

   Which of the following should the network technician perform to correct the issue?

   • AReplace the Cat 5 patch cable with a Cat 6 cable.
   • BInstall a crossover cable between the server and the switch.
   • CReset the switchport configuration.
   • DUse NetFlow data from the switch to isolate the issue.
   • EDisable MDIX on the switchport and reboot the server.

   Show answer

   Answer: A

   Explanation

   The answer is A, as others have said, but because of the bandwidth. Cat 5 = 100BASE-T, the cable is too slow for a 1000MBPS network. Anthony Sequeira "Bad cables, incorrect pinouts, or bent pins: Faulty cables (with electrical characteristics preventing successful transmission) or faulty connectors (which do not properly make connections) can prevent successful data transmission at Layer 1. A bad cable could simply be an incorrect category of cable being used for a specific purpose. For example, using a Cat 5 cable (instead of a Cat 6 or higher cable) to connect two 1000BASE-TX devices would result in data corruption. Bent pins in a connector or incorrect pinouts could also cause data to become corrupted."

   Source: Adapted from community discussion — LeonardSnart

   Next question

9. Question 309 · 871 in bank

   Which of the following would be BEST to install to find and block any malicious users within a network?

   • AIDS
   • BIPS
   • CSCADA
   • DICS

   Show answer

   Answer: B

   Explanation

   you are not right: IPS is correct IPS takes action itself to block the attempted intrusion or otherwise remediate the incident. IDS is designed to only provide an alert about a potential incident, which enables a security operations center (SOC) analyst to investigate the event and determine whether it requires further action.

   Source: Adapted from community discussion — bx88

   Next question

10. Question 310 · 871 in bank

    Which of the following can be used to validate domain ownership by verifying the presence of pre-agreed content contained in a DNS record?

    • ASOA
    • BSRV
    • CAAA
    • DTXT

    Show answer

    Answer: D

    Explanation

    The option that can be used to validate domain ownership by verifying the presence of pre-agreed content contained in a DNS record is D. TXT. A TXT (text) record is a type of DNS record that allows domain owners to provide additional information about a domain name. A TXT record can be used for various purposes, including domain verification. For example, when setting up a domain for email authentication, a domain owner can create a TXT record with specific information that email providers can use to verify that the domain is legitimate.

    Source: Adapted from community discussion — StellarSteve

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 301. 871 questions available.