N10-008 practice questions 371–380

1. Question 371 · 871 in bank

   A cafeteria is facing lawsuits related to criminal internet access that was made over its guest network. The marketing team, however, insists on keeping the cafeteria's phone number as the wireless passphrase. Which of the following actions would improve wireless security while accommodating the marketing team and accepting the terms of use?

   • ASetting WLAN security to use EAP-TLS
   • BDeploying a captive portal for user authentication
   • CUsing geofencing to limit the area covered by the WLAN
   • DConfiguring guest network isolation

   Show answer

   Answer: B

   Explanation

   B. Captive portal will log whoever is trying to use the guest network. Terms and conditions need to be approved by the guest user making the user liable for any wrongdoing. Dumb question thougj. Company is already facing a lawsuit and still want to cater to the marketing team using a weak password. Lol

   Source: Adapted from community discussion — 1stAid

   Next question

2. Question 372 · 871 in bank

   An administrator would like to have two servers at different geographical locations provide fault tolerance and high performance while appearing as one URL to users. Which of the following should the administrator implement?

   • ALoad balancing
   • BMultipathing
   • CNIC teaming
   • DWarm site

   Show answer

   Answer: A

   Explanation

   Think about what load balancing really is. A load balancer evens out the workload onto multiple servers containing the same information. If one servers gets too many hosts requesting information, another server kicks on and is used so the first server doesn't get bogged down. And you don't need to know the IP address of both servers. This is just done automatically with a load balancer.

   Source: Adapted from community discussion — StrawberryTechie

   Next question

3. Question 373 · 871 in bank

   An IT technician successfully connects to the corporate wireless network at a bank. While performing some tests, the technician observes that the physical address of the DHCP server has changed even though the network connection has not been lost. Which of the following would BEST explain this change?

   • AServer upgrade
   • BDuplicate IP address
   • CScope exhaustion
   • DRogue server

   Show answer

   Answer: D

   Explanation

   D. Rogue server is the BEST explanation for the physical address of the DHCP server changing without the network connection being lost. A rogue DHCP server is a device that has been set up incorrectly or maliciously to act as a DHCP server on a network, providing IP addresses to clients. When a rogue DHCP server is present on the network, it can cause network issues such as IP address conflicts, and it can change the IP address of the legitimate DHCP server.

   Source: Adapted from community discussion — StellarSteve

   Next question

4. Question 374 · 871 in bank

   An ISP is providing internet to a retail store and has terminated its point of connection using a standard Cat 6 pin-out. Which of the following terminations should the technician use when running a cable from the ISP's port to the front desk?

   • AF-type connector
   • BTIA/EIA-568-B
   • CLC
   • DSC

   Show answer

   Answer: B

   Explanation

   The BEST termination to use when running a cable from the ISP's port to the front desk in a retail store that has a standard Cat 6 pin-out is B. TIA/EIA-568-B. TIA/EIA-568-B is a standard for structured cabling, which includes the pin-outs for various types of Ethernet cables, including Cat 6. Using TIA/EIA-568-B standard ensures that the cable is terminated correctly, which can help prevent network connectivity issues and signal interference. This standard is widely used in the telecommunications industry and is the recommended choice for terminating Cat 6 cables.

   Source: Adapted from community discussion — StellarSteve

   Next question

5. Question 375 · 871 in bank

   A company needs to virtualize a replica of its internal physical network without changing the logical topology and the way that devices behave and are managed. Which of the following technologies meets this requirement?

   • ANVF
   • BSDWAN
   • CVIP
   • DMPLS

   Show answer

   Answer: A

   Explanation

   A. NFV (Network Functions Virtualization). NFV allows network functions, such as firewalls, routers, and load balancers, to be virtualized and run on industry-standard servers instead of having dedicated hardware appliances. This approach enables network services to be rapidly deployed, scaled, and managed in a more flexible and cost-effective manner. By using NFV, the company can create a virtual replica of its physical network, with the same logical topology and behavior, while running network functions as virtualized instances.

   Source: Adapted from community discussion — StellarSteve

   Next question

6. Question 376 · 871 in bank

   A network technician needs to ensure the company’s external mail server can pass reverse lookup checks. Which of the following records would the technician MOST likely configure?

   • APTR
   • BAAAA
   • CSPF
   • DCNAME

   Show answer

   Answer: A

   Explanation

   A. PTR (Pointer) record. A PTR record is a type of DNS record that maps an IP address to a domain name. Reverse lookup checks are used to verify that an IP address is associated with a valid domain name, and are commonly used in anti-spam and anti-phishing measures. In the case of an external mail server, a PTR record would need to be configured in the DNS server for the domain name that corresponds to the server's IP address. This would allow reverse lookup checks to verify that the mail server is authorized to send email from the domain name associated with its IP address.

   Source: Adapted from community discussion — StellarSteve

   Next question

7. Question 377 · 871 in bank

   Which of the following is used to prioritize Internet usage per application and per user on the network?

   • ABandwidth management
   • BLoad balance routing
   • CBorder Gateway Protocol
   • DAdministrative distance

   Show answer

   Answer: A

   Explanation

   Bandwidth management is the process of measuring and controlling the communications (traffic, packets) on a network link, to avoid filling the link to capacity or overfilling the link, which would result in network congestion and poor performance of the network.

   Source: Adapted from community discussion — Cas509

   Next question

8. Question 378 · 871 in bank

   Select 2

   A network administrator views a network pcap and sees a packet containing the following:

   

   Which of the following are the BEST ways for the administrator to secure this type of traffic? (Choose two.)

   • AMigrate the network to IPv6.
   • BImplement 802.1 X authentication.
   • CSet a private community string.
   • DUse SNMPv3.
   • EIncorporate SSL encryption.
   • FUtilize IPSec tunneling.

   Show answer

   Answer: CD

   Explanation

   C. Set a private community string. D. Use SNMPv3. C. Set a private community string: The "community: public" line indicates that the default community string "public" is being used for SNMP requests. This is a well-known community string that is often used for testing but should not be used in production environments. Changing the community string to a private, unique value is essential to prevent unauthorized access. Only devices with the correct community string can access SNMP data. D. SNMPv3: SNMPv3 is the most secure version of SNMP. It provides authentication, data integrity, and encryption features to protect SNMP traffic. By using SNMPv3, the administrator can ensure that SNMP traffic is secure and protected from unauthorized access and data tampering.

   Source: Adapted from community discussion — Hchfyvggjg

   Next question

9. Question 379 · 871 in bank

   A network technician is troubleshooting a network issue for employees who have reported issues with speed when accessing a server in another subnet. The server is in another building that is 410ft (125m) away from the employees' building. The 10GBASE-T connection between the two buildings uses Cat 5e. Which of the following BEST explains the speed issue?

   • AThe connection type is not rated for that distance.
   • BA broadcast storm is occurring on the subnet.
   • CThe cable run has interference on it.
   • DThe connection should be made using a Cat 6 cable.

   Show answer

   Answer: A

   Explanation

   Using compTIA logic (they hint oddly specific 125m) the issue is that this is wrong "connection type". Sounds weird, but cat6 doesn't solve anything & nothing points to interference or broadcast storm.

   Source: Adapted from community discussion — DumbTIA

   Next question

10. Question 380 · 871 in bank

    Which of the following is a security flaw in an application or network?

    • AA threat
    • BA vulnerability
    • CAn exploit
    • DA risk

    Show answer

    Answer: B

    Explanation

    Most people will be guessing between B and C. A vulnerability is a weakness in an application or network. You can take advantage of an vulnerability using an exploit. Answer I believe is B

    Source: Adapted from community discussion — Molongo

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 371. 871 questions available.