N10-008 practice questions 501–510

1. Question 501 · 871 in bank

   Which of the following VPN types provides the highest security for a user who travels often but also has the highest bandwidth requirements to provide a satisfactory user experience?

   • AFull-tunnel
   • BSite-to-site
   • CClientless
   • DSplit-tunnel

   Show answer

   Answer: A

   Explanation

   A Full-tunnel VPN provides the highest security for a user who travels often while also offering the highest bandwidth requirements for a satisfactory user experience. Explanation: Full-tunnel VPN: In a full-tunnel VPN configuration, all of the user's internet traffic, regardless of destination, is routed through the VPN tunnel to the corporate network. This ensures that all communication is encrypted and secured, even when the user is accessing the internet from public or untrusted networks. While this level of security is ideal for protecting sensitive data, it can result in higher bandwidth usage due to routing all traffic through the VPN. Benefits of Full-tunnel VPN for the scenario described: Highest Security: All traffic is encrypted and protected, making it the most secure option for users who frequently travel and connect to various networks, including public Wi-Fi.

   Source: Adapted from community discussion — actingnurse1

   Next question

2. Question 502 · 871 in bank

   A technician needs to map the path of a PC to the router. Which of the following tools should the technician use to accomplish this task?

   • Atraceroute
   • Bping
   • Cifconfig
   • Dnetstat

   Show answer

   Answer: A

   Explanation

   A. traceroute To map the path of a PC to the router, a technician should use the "traceroute" tool. Traceroute is a network diagnostic tool that displays the route and measuring transit delays of packets across an Internet Protocol (IP) network. It helps identify the routers or hops that a packet traverses from the source to the destination, allowing the technician to map the network path. The other options are useful for different network diagnostic purposes: - Ping (option B) is used to test the reachability of a host on an Internet Protocol (IP) network. - Ifconfig (option C) is used to configure network interfaces on a Unix or Linux system. - Netstat (option D) displays network connections, routing tables, interface statistics, masquerade connections, etc., on a Unix or Windows system.

   Source: Adapted from community discussion — salah112

   Next question

3. Question 503 · 871 in bank

   A company is using a DHCP server with 12-hour leases for its device configurations. A user records the information that the DHCP server provides and uses the information to connect a device with a manual IP set. Over time, the user experiences intermittent connectivity and recurring connection timeouts. Which of the following is the MOST likely cause of the issue?

   • AA duplicate IP address is on the network.
   • BThe user's device is pointing to an incorrect DNS server.
   • CThe device is set to use an incorrect subnet.
   • DThe device is set to use an incorrect gateway.

   Show answer

   Answer: A

   Explanation

   A. A duplicate IP address is on the network. The most likely cause of the issue described is that a duplicate IP address exists on the network. When the user manually sets the IP address on the device, and that IP address is already assigned to another device (due to the DHCP lease), conflicts can arise. This can result in intermittent connectivity issues, connection timeouts, and network disruptions.

   Source: Adapted from community discussion — salah112

   Next question

4. Question 504 · 871 in bank

   A technician is concerned about unauthorized personnel moving assets that are installed in a data center server rack. The technician installs a networked sensor that sends an alert when the server rack door is opened. Which of the following did the technician install?

   • ACipher lock
   • BAsset tags
   • CAccess control vestibule
   • DTamper detection

   Show answer

   Answer: D

   Explanation

   Tamper detection: Tamper detection refers to the implementation of sensors, alarms, or other mechanisms to detect unauthorized physical access or tampering with assets or equipment. In this case, the networked sensor installed on the server rack door is designed to detect if the door is opened without proper authorization and send an alert to notify relevant personnel. The other options mentioned have different meanings: A. Cipher lock: A cipher lock is a type of lock that requires a numeric code or password to gain access. It is a form of access control, but it does not necessarily involve detecting unauthorized access or tampering.

   Source: Adapted from community discussion — actingnurse1

   Next question

5. Question 505 · 871 in bank

   An administrator is preparing an organization for a potential disaster. The administrator configures the network switches and turns off the equipment in a data center. Which of the following is this scenario an example of?

   • AWarm site
   • BCold site
   • CCloud site
   • DHot site

   Show answer

   Answer: A

   Explanation

   The question implies that the switches are already in situ. If some of the hardware is on site already then this is a warm site.

   Source: Adapted from community discussion — Duubz

   Next question

6. Question 506 · 871 in bank

   Which of the following is used to require network devices to authenticate before gaining access to a LAN?

   • A802.1Q
   • B802.1X
   • C802.11ax
   • D802.3af

   Show answer

   Answer: B

   Explanation

   802.1X: IEEE 802.1X is a network access control standard that provides an authentication framework for controlling access to LANs or WLANs (Wireless Local Area Networks). It ensures that only authorized devices and users are granted access to the network. 802.1X is commonly used in Ethernet and Wi-Fi networks to enforce user-based authentication and security policies before allowing network access. The other options have different meanings: A. 802.1Q: IEEE 802.1Q is the standard for VLAN tagging in Ethernet networks. It allows multiple VLANs to be carried over a single Ethernet link. C. 802.11ax: IEEE 802.11ax, also known as Wi-Fi 6, is a wireless networking standard that improves the efficiency and performance of wireless networks, particularly in high-density environments. D. 802.3af: IEEE 802.3af is the standard for Power over Ethernet (PoE), which allows network devices to receive power over the same Ethernet cable used for data transmission. It's not directly related to network device authentication.

   Source: Adapted from community discussion — actingnurse1

   Next question

7. Question 507 · 871 in bank

   A network engineer is investigating reports of poor network performance. Upon reviewing a device configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following would be the MOST likely result of this finding?

   • AIncreased CRC errors
   • BIncreased giants and runts
   • CIncreased switching loops
   • DIncreased device temperature

   Show answer

   Answer: A

   Explanation

   - The different duplex settings on both ends of a connection can cause a mismatch in the flow control (sending data at different speed), leading data collisions. These collisions can result in corrupted data and increase the number of CRC errors.

   Source: Adapted from community discussion — StevenElev11n

   Next question

8. Question 508 · 871 in bank

   Which of the following routing protocols is BEST suited for use on a perimeter router?

   • AOSPF
   • BRIPv2
   • CEIGRP
   • DBGP

   Show answer

   Answer: D

   Explanation

   BGP is a path vector routing protocol that is designed for use between different autonomous systems (ASes) on the internet. It is commonly used for inter-domain routing, making it well-suited for perimeter routers that connect to external networks and ISPs. BGP allows the router to exchange routing information and make routing decisions based on policies, route preferences, and path attributes. It provides granular control over routing decisions and is particularly suited for large-scale networks with complex routing requirements. The other options are less suitable: A. OSPF is an interior gateway protocol commonly used within an autonomous system (AS). B. RIPv2 is also an interior gateway protocol and might not be the best choice for a perimeter router, especially in larger networks, due to its slower convergence and less advanced features compared to BGP.

   Source: Adapted from community discussion — actingnurse1

   Next question

9. Question 509 · 871 in bank

   A technician is investigating why a PC cannot reach a file server with the IP address 192.168.8.129. Given the following TCP/IP network configuration:

   

   Which of the following configurations on the PC is incorrect?

   • ASubnet mask
   • BIPv4 address
   • CDefault gateway
   • DIPv6 address

   Show answer

   Answer: A

   Explanation

   The subnet 255.255.255.128 is a /25 with 128 hosts, and you're trying to ping 192.168.8.129, which would be out of the scope. So I would think ( A ) would be the correct answer. Let me know your thoughts.

   Source: Adapted from community discussion — geocis

   Next question

10. Question 510 · 871 in bank

    Which of the following layers of the OSI model lies between the transport layer and the network layer?

    • AApplication
    • BData link
    • CSession
    • DPresentation

    Show answer

    Answer: C

    Explanation

    Is this question even possible? OSI layer are represented as follows 7. Application 6. Presentation 5. Session 4. Transport 3. Network 2. Data link 1. Physical But the question is asking which osi layer in between transport and network layer..

    Source: Adapted from community discussion — johnhi96

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 501. 871 questions available.