N10-008 practice questions 51–60

1. Question 51 · 871 in bank

   A company just migrated its email service to a cloud solution. After the migration, two-thirds of the internal users were able to connect to their mailboxes, but the connection fails for the other one-third of internal users. Users working externally are not reporting any issues. The network administrator identifies the following output collected from an internal host: c:\user> nslookup newmail.company.com Non-Authoritative answer: Name: newmail.company.com - IPs: 3.219.13.186, 64.58.225.184, 184.168.131.243 Which of the following verification tasks should the network administrator perform NEXT?

   • ACheck the firewall ACL to verify all required IP addresses are included.
   • BVerify the required router PAT rules are properly configured.
   • CConfirm the internal DNS server is replying to requests for the cloud solution.
   • DValidate the cloud console to determine whether there are unlicensed requests.

   Show answer

   Answer: A

   Explanation

   - The output of the nslookup command indicates that the newmail.company.com domain name resolves to three different IP addresses, which suggests that the email service has been migrated to a cloud solution. However, one-third of the internal users are not able to connect to their mailboxes, which may indicate that the firewall is blocking traffic to the cloud email service.

   Source: Adapted from community discussion — StevenElev11n

   Next question

2. Question 52 · 871 in bank

   A network technician was hired to harden the security of a network. The technician is required to enable encryption and create a password for AP security through the web browser. Which of the following would BEST support these requirements?

   • AESP
   • BWPA2
   • CIPSec
   • DACL

   Show answer

   Answer: B

   Explanation

   A. ESP - Encapsulating Security Payload (IPsec header) B. WPA2 - encryption for wifi that is configured through browser C. IPSec - for VPNs D. ACL - access control list

   Source: Adapted from community discussion — CapJackSparrow

   Next question

3. Question 53 · 871 in bank

   Select 2

   Which of the following ports are associated with IMAP? (Choose two.)

   • A25
   • B110
   • C143
   • D587
   • E993
   • F995

   Show answer

   Answer: CE

   Explanation

   IMAP (Internet Message Access Protocol): - Port 143: This is the default port used for unencrypted IMAP connections. - Port 993: This is the default port used for encrypted IMAP connections using SSL (Secure Sockets Layer) or TLS (Transport Layer Security).

   Source: Adapted from community discussion — StevenElev11n

   Next question

4. Question 54 · 871 in bank

   A network administrator is trying to identify a device that is having issues connecting to a switchport. Which of the following would BEST help identify the issue?

   • AA syslog server
   • BChange management records
   • CA rack diagram
   • DThe security log

   Show answer

   Answer: A

   Explanation

   I'm inclined to agree with wbear's response, I think the answer is both A and C in an ideal world but for this exam, I would go for A (first). The question says 'connecting' which suggests it has connected or connects intermittently. In the real world, you probably would check logs to see if there were any error msgs and then the rack diagram. Of course you could jump straight to checking the diagram but personally I would check the logs first.

   Source: Adapted from community discussion — shadowalka

   Next question

5. Question 55 · 871 in bank

   A company with multiple routers would like to implement an HA network gateway with the least amount of downtime possible. This solution should not require changes on the gateway setting of the network clients. Which of the following should a technician configure?

   • AAutomate a continuous backup and restore process of the system's state of the active gateway.
   • BUse a static assignment of the gateway IP address on the network clients.
   • CConfigure DHCP relay and allow clients to receive a new IP setting.
   • DConfigure a shared VIP and deploy VRRP on the routers.

   Show answer

   Answer: D

   Explanation

   The open standard protocol Virtual Router Redundancy Protocol (VRRP) is similar to HSRP, the differences mainly being in terminology and packet formats. In VRRP, the active router is known as the master, and all other routers in the group are known as backup routers. There is no specific standby router; instead, all backup routers monitor the status of the master, and in the event of a failure, a new master router is selected from the available backup routers based on priority

   Source: Adapted from community discussion — tahs

   Next question

6. Question 56 · 871 in bank

   Which of the following protocols would allow a secure connection to a Linux-based system?

   • ASMB
   • BFTP
   • CRDP
   • DSSH

   Show answer

   Answer: D

   Explanation

   SSH (Secure Shell) is the protocol that would allow a secure connection to a Linux-based system. SSH is a cryptographic network protocol used for securely accessing and managing remote systems. It provides secure authentication and encrypted communication, making it a standard choice for securely connecting to and administering Linux servers and systems.

   Source: Adapted from community discussion — osmaster

   Next question

7. Question 57 · 871 in bank

   Which of the following provides redundancy on a file server to ensure the server is still connected to a LAN even in the event of a port failure on a switch?

   • ANIC teaming
   • BLoad balancer
   • CRAID array
   • DPDUs

   Show answer

   Answer: A

   Explanation

   NIC teaming (also known as network interface card teaming or link aggregation) is a technique that allows multiple network interface cards (NICs) to be combined into a single logical interface. By using NIC teaming, the file server can be connected to the network through multiple physical connections, providing redundancy and increasing bandwidth. If one of the NICs or ports fails, the remaining NICs can continue to handle network traffic, ensuring that the file server remains connected to the LAN. This helps to improve network reliability and availability, and reduces the risk of downtime.

   Source: Adapted from community discussion — rah555

   Next question

8. Question 58 · 871 in bank

   A network administrator is troubleshooting the communication between two Layer 2 switches that are reporting a very high runt count. After trying multiple ports on both switches, the issue persists. Which of the following should the network administrator perform to resolve the issue?

   • AIncrease the MTU size on both switches.
   • BRecertify the cable between both switches.
   • CPerform a factory reset on both switches.
   • DEnable debug logging on both switches.

   Show answer

   Answer: B

   Explanation

   Runts are frames that are smaller than the minimum frame size (64 bytes) and are typically considered errors in a network. When Layer 2 switches report a high runt count, it often indicates a problem with the physical layer, such as a mismatch or issue with the cabling. By trying multiple ports on both switches and still encountering the issue, it's likely that the problem is not limited to a single port or switch. Given this situation, the most appropriate action is to focus on the common element in the communication path, which is the cable connecting the two switches. Recertifying the cable involves testing its quality, verifying that it meets the required specifications, and ensuring that it is properly terminated. This can help identify and address any physical issues with the cable that might be causing runts.

   Source: Adapted from community discussion — TheFivePips

   Next question

9. Question 59 · 871 in bank

   Users attending security training at work are advised not to use single words as passwords for corporate applications. Which of the following does this BEST protect against?

   • AAn on-path attack
   • BA brute-force attack
   • CA dictionary attack
   • DMAC spoofing
   • EDenial of service

   Show answer

   Answer: C

   Explanation

   While the answer can be both a brute force attack and a dictionary attack, the best answer for this question is a dictionary attack. A dictionary attack software matches the hash to those produced by ordinary words found in a dictionary.

   Source: Adapted from community discussion — RobJob

   Next question

10. Question 60 · 871 in bank

    A network administrator would like to enable NetFlow on a Layer 3 switch but is concerned about how the feature may impact the switch. Which of the following metrics should the administrator graph using SNMP to BEST measure the feature's impact?

    • ACPU usage
    • BTemperature
    • CElectrical consumption
    • DBandwidth usage

    Show answer

    Answer: A

    Explanation

    A. CPU usage would be one of the key metrics to measure the impact of NetFlow on a Layer 3 switch as it would indicate if the switch is experiencing any increased processing workload due to the feature being enabled. It would be a good idea to also monitor the memory usage of the switch to ensure that it does not run out of memory when NetFlow is enabled.

    Source: Adapted from community discussion — JakeCharles

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 51. 871 questions available.