N10-008 practice questions 441–450

1. Question 441 · 871 in bank

   A network administrator discovers that users in an adjacent building are connecting to the company's guest wireless network to download inappropriate material. Which of the following can the administrator do to MOST easily mitigate this issue?

   • AReduce the wireless power levels
   • BAdjust the wireless channels
   • CEnable wireless client isolation
   • DEnable wireless port security

   Show answer

   Answer: A

   Explanation

   This question is not worded well. First off: Wireless Client Isolation is a security feature that prevents wireless clients from communicating with one another. This feature is useful for guest and BYOD SSIDs adding a level of security to limit attacks and threats between devices connected to the wireless networks. This question I think assumes the guest network is coming from one building and not the other. For this I would Vote A (but it's a crummy question)

   Source: Adapted from community discussion — GeekSpunk

   Next question

2. Question 442 · 871 in bank

   An organization would like to implement a disaster recovery strategy that does not require a facility agreement or idle hardware. Which of the following strategies MOST likely meets the organization’s requirements?

   • ACloud site
   • BCold site
   • CWarm site
   • DHot site

   Show answer

   Answer: A

   Explanation

   They want no binding contract with a building and they want no hardware, therefore Cloud is the best and only option the company wants.

   Source: Adapted from community discussion — LayinCable

   Next question

3. Question 443 · 871 in bank

   A network administrator is investigating reports about network performance and finds high utilization on a switch uplink. The administrator is unsure whether this is an anomaly or normal behavior that will require an upgrade to resolve. Which of the following should the administrator reference to gain historical perspective?

   • ADevice configuration review
   • BARP table export
   • CService-level agreement
   • DNetwork performance baseline

   Show answer

   Answer: D

   Explanation

   Historical perspective indicates they want to check the previous record, which tells me the baseline would be the best answer for this one..

   Source: Adapted from community discussion — johnhi96

   Next question

4. Question 444 · 871 in bank

   A network administrator is troubleshooting a client’s device that cannot connect to the network. A physical inspection of the switch shows the RJ45 is connected. The NIC shows no activity lights. The network administrator moves the device to another location and connects to the network without issues. Which of the following tools would be the BEST option for the network administrator to use to further troubleshoot?

   • ATone generator
   • BMultimeter
   • COptical time-domain reflectometer
   • DCable tester

   Show answer

   Answer: D

   Explanation

   D. Cable tester would be the best option for the network administrator to use to further troubleshoot the connectivity issue. A cable tester is a tool specifically designed to test the integrity and connectivity of network cables. It can help identify issues such as miswiring, open circuits, short circuits, and cable faults. By using a cable tester, the network administrator can verify if the network cable is functioning properly or if there are any issues with its connectivity.

   Source: Adapted from community discussion — rah555

   Next question

5. Question 445 · 871 in bank

   A non-employee was able to enter a server room. Which of the following could have prevented this from happening?

   • AA security camera
   • BA biometric reader
   • COTP key fob
   • DEmployee training

   Show answer

   Answer: B

   Explanation

   Well, only one of those answers will actually prevent individuals from entering the server room. A security camera will detect, but not prevent. A OTP key fob can always be stolen. Employee training will make employees more aware about unauthorized entry, but it won't prevent it. Only a biometric reader is able to prevent unauthorized entry into a server room because biometrics are unique to an individual.

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 446 · 871 in bank

   A large number of PCs are obtaining an APIPA IP address, and a number of new computers were added to the network. Which of the following is MOST likely causing the PCs to obtain an APIPA address?

   • ARogue DHCP server
   • BNetwork collision
   • CIncorrect DNS settings
   • DDHCP scope exhaustion

   Show answer

   Answer: D

   Explanation

   B and C are irrelevant to the topic. A - A rogue DHCP server would be handing out addresses from outside to APIPA range, which would most likely cause IP Conflict, which is when 2 or more devices on the same network shares the same IP Address. D is correct because when you run out of Addresses to hand out, the DHCP can't do anything and so APIPA takes over and hands out an random address from within the APIPA range.

   Source: Adapted from community discussion — Molongo

   Next question

7. Question 447 · 871 in bank

   An engineer is using a tool to run an ICMP sweep of a network to find devices that are online. When reviewing the results, the engineer notices a number of workstations that are currently verified as being online are not listed in the report. The tool was configured to scan using the following information: Network address: 172.28.16.0 - CIDR: /22 - The engineer collected the following information from the client workstation: IP address: 172.28.17.206 - Subnet mask: 255.255.252.0 - Which of the following MOST likely explains why the tool is failing to detect some workstations?

   • AThe scanned network range is incorrect.
   • BThe subnet mask on the client is misconfigured.
   • CThe workstation has a firewall enabled.
   • DThe tool is unable to scan remote networks.

   Show answer

   Answer: C

   Explanation

   According to ChatGPT v4 C. The workstation has a firewall enabled. The most likely reason for the tool failing to detect some workstations, despite having the correct network range and subnet mask, is that those workstations have a firewall enabled. Firewalls can be configured to block ICMP packets, making the workstations appear offline or undetectable during an ICMP sweep.

   Source: Adapted from community discussion — testgok

   Next question

8. Question 448 · 871 in bank

   Which of the following can be used to limit the ability of devices to perform only HTTPS connections to an internet update server without exposing the devices to the public internet?

   • AAllow connections only to an internal proxy server.
   • BDeploy an IDS system and place it in line with the traffic.
   • CCreate a screened network and move the devices to it.
   • DUse a host-based network firewall on each device.

   Show answer

   Answer: A

   Explanation

   According to ChatGPT v4 A. Allow connections only to an internal proxy server. By allowing connections only to an internal proxy server, you can limit the devices to perform only HTTPS connections to the internet update server without exposing them to the public internet. The proxy server can be configured to allow only HTTPS connections to the specific update server while blocking all other traffic, providing a secure and controlled connection.

   Source: Adapted from community discussion — testgok

   Next question

9. Question 449 · 871 in bank

   A network administrator notices excessive wireless traffic occurring on an access point after normal business hours. The access point is located on an exterior wall. Which of the following should the administrator do to limit wireless access outside the building?

   • ASet up a private VLAN.
   • BDisable roaming on the WAP.
   • CChange to a directional antenna.
   • DStop broadcasting of the SSID.

   Show answer

   Answer: C

   Explanation

   According to ChatGPT v4 C. Change to a directional antenna. Changing to a directional antenna can help limit wireless access outside the building. Directional antennas focus the wireless signal in a specific direction, reducing the signal strength outside the targeted area. This can help prevent unauthorized access from outside the building and reduce the potential for interference from other sources.

   Source: Adapted from community discussion — testgok

   Next question

10. Question 450 · 871 in bank

    A technician thinks one of the router ports is flapping. Which of the following available resources should the technician use in order to determine if the router is flapping?

    • AAudit logs
    • BNetFlow
    • CSyslog
    • DTraffic logs

    Show answer

    Answer: C

    Explanation

    C. Syslog Port flapping is when something connected to that network port is constantly reconnecting and disconnecting. As a result, Syslog can record and report that information as it stores logs from routers, switches and firewalls.

    Source: Adapted from community discussion — AfroBro87

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 441. 871 questions available.