N10-008 practice questions 601–610

1. Question 601 · 871 in bank

   A network technician is configuring a wireless network that consists of multiple APs for better coverage and allows roaming between the APs. Which of the following types of SSIDs should the technician configure?

   • ABasic Service Set
   • BIndependent Basic Service Set
   • CExtended Service Set
   • DDistribution System Service

   Show answer

   Answer: C

   Explanation

   C. Extended Service Set An Extended Service Set (ESS) is a set of interconnected Basic Service Sets (BSS) in a wireless LAN. In a scenario where multiple Access Points (APs) are used to provide better coverage and allow roaming between them, an Extended Service Set is the appropriate configuration. An ESS allows wireless clients to roam seamlessly between different APs within the same wireless network.

   Source: Adapted from community discussion — salah112

   Next question

2. Question 602 · 871 in bank

   A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?

   • AChange the email client configuration to match the MX record.
   • BReduce the TTL record prior to the MX record change.
   • CPerform a DNS zone transfer prior to the MX record change.
   • DUpdate the NS record to reflect the IP address change.

   Show answer

   Answer: B

   Explanation

   B. Reduce the TTL record prior to the MX record change. The Time-to-Live (TTL) value in DNS records determines how long the information is cached by DNS resolvers. When making changes to critical DNS records like the MX (Mail Exchange) record, it's a good practice to reduce the TTL in advance. This way, when you make the actual change, the updated information propagates more quickly through the DNS infrastructure, minimizing downtime and potential issues.

   Source: Adapted from community discussion — salah112

   Next question

3. Question 603 · 871 in bank

   Which of the following network topologies contains a direct connection between every node in the network?

   • AMesh
   • BHub-and-spoke
   • CStar
   • DPoint-to-point

   Show answer

   Answer: A

   Explanation

   A. Mesh In a mesh network topology, every node (device or computer) is directly connected to every other node in the network. This direct connection between nodes provides redundancy and multiple communication paths, which can enhance reliability and fault tolerance. Mesh networks can be either full mesh, where every node connects to every other node, or partial mesh, where only certain nodes have direct connections to each other.

   Source: Adapted from community discussion — salah112

   Next question

4. Question 604 · 871 in bank

   Which of the following layers of the OSI model is responsible for end-to-end encryption?

   • APresentation
   • BApplication
   • CSession
   • DTransport

   Show answer

   Answer: D

   Explanation

   D. Transport The layer responsible for end-to-end encryption in the OSI model is the Transport layer. The Transport layer (Layer 4) is where encryption protocols such as Transport Layer Security (TLS) or Secure Sockets Layer (SSL) are implemented to ensure secure communication between applications on different devices. These protocols provide data integrity, confidentiality, and authentication, thus achieving end-to-end encryption.

   Source: Adapted from community discussion — salah112

   Next question

5. Question 605 · 871 in bank

   A company, which is located in a coastal town, retrofitted an office building for a new data center. The underground fiber optics were brought in and connected to the switches in the basement network MDF. A server data center was built on the fifth floor with the two rooms vertically connected by fiber optics. Which of the following types of environmental sensors is most needed?

   • ATemperature sensor in the network MOF
   • BWater sensor in the network MDF
   • CTemperature sensor in the data center
   • DWater sensor in the data center

   Show answer

   Answer: B

   Explanation

   B. Water sensor in the network MDF. - I think the question is getting at potential flood risk. The basement is where the MDF is so you would want to have water sensor in the basement which is most likely to place a flood would occur in the building.

   Source: Adapted from community discussion — 3Ycam

   Next question

6. Question 606 · 871 in bank

   A network administrator needs to monitor traffic on a specific port on a switch. Which of the following should the administrator configure to accomplish the task?

   • APort security
   • BPort tagging
   • CPort mirroring
   • DMedia access control

   Show answer

   Answer: C

   Explanation

   C. Port mirroring To monitor traffic on a specific port on a switch, the network administrator should configure port mirroring. Port mirroring (also known as SPAN - Switched Port Analyzer) allows the switch to copy the traffic from one or more ports and send it to another port, known as the monitoring port. This enables the administrator to analyze and monitor the network traffic without disrupting the normal operation of the switch or the devices connected to the mirrored ports.

   Source: Adapted from community discussion — salah112

   Next question

7. Question 607 · 871 in bank

   Several WIFI users are reporting the inability to connect to the network. WLAN users on the guest network are able to access all network resources without any performance issues. The following table summarizes the findings after a site survey of the area in question:

   

   Which of the following should a wireless technician do NEXT to troubleshoot this issue?

   • AReconfigure the channels to reduce overlap
   • BReplace the omni antennas with directional antennas
   • CUpdate the SSIDs on all the APs
   • DDecrease power in AP 3 and AP 4

   Show answer

   Answer: A

   Explanation

   Received Signal Strength Indication (RSSI) is a measurement of the strength of a received radio signal. It is measured as a negative number on a logarithmic scale, which means that the closer to 0 the RSSI is, the better the signal. Clearly, AP 1 and AP 2 has channel/frequency overlap that causes the RF signals to interfere with each other. Thus, the correct answer is A. Answer B is incorrect because by using directional antennas, the RF signal will be directed toward a single direction. Directional antennas are commonly used for long-range fixed wireless, but since you would presumably want to cover an area with enough signal so users can connect, this answer is out of the question. Answer C is incorrect because the SSID of a wireless network allows clients to connect, but it is not directly related to performance issues. Answer D is incorrect because that would increase attenuation and decrease the radiated signal of APs 3 and 4 (causing performance drop in the guest network) without addressing the low received signal strength from APs 1 and 2.

   Source: Adapted from community discussion — [Removed]

   Next question

8. Question 608 · 871 in bank

   A company is designing a new complex. The primary and alternate data centers will be in separate buildings 6.2mi (10km) apart and will be connected via fiber. Which of the following types of SFP is the best choice?

   • A10GBASE-SR
   • B10000BASE-LX
   • C10GBASE-LR
   • D1000BASE-SX

   Show answer

   Answer: C

   Explanation

   Given the distance of 6.2 miles (10 km) between the primary and alternate data centers, the best choice for the SFP (Small Form-Factor Pluggable) module is: C. 10GBASE-LR The "LR" in 10GBASE-LR stands for "Long Range," and it is designed for longer-distance connections, typically reaching up to 10 kilometers over single-mode fiber. In this scenario, where the data centers are 6.2 miles (10 km) apart and connected via fiber, the 10GBASE-LR SFP module is the most suitable choice for ensuring reliable and high-speed connectivity between the two locations.

   Source: Adapted from community discussion — salah112

   Next question

9. Question 609 · 871 in bank

   Which of the following should a junior security administrator recommend implementing to mitigate malicious network activity?

   • AIntrusion prevention system
   • BLoad balancer
   • CAccess logging
   • DEndpoint encryption

   Show answer

   Answer: A

   Explanation

   A. Intrusion prevention system To mitigate malicious network activity, a junior security administrator should recommend implementing an Intrusion Prevention System (IPS). An IPS is designed to monitor network and/or system activities for malicious or unwanted behavior and can take preventive actions to stop such activities.

   Source: Adapted from community discussion — salah112

   Next question

10. Question 610 · 871 in bank

    Select 2

    A client wants to increase overall security after a recent breach. Which of the following would be best to implement? (Choose two.)

    • ALeast privilege network access
    • BDynamic inventories
    • CCentral policy management
    • DZero-touch provisioning
    • EConfiguration drift prevention
    • FSubnet range limits

    Show answer

    Answer: AC

    Explanation

    A. Least privilege network access: Implementing the principle of least privilege ensures that users and systems have only the minimum levels of access or permissions necessary to perform their functions. This helps to limit the potential impact of security breaches. C. Central policy management: Centralized policy management allows for consistent application of security policies across the entire network. This ensures that security settings are centrally configured, monitored, and enforced, reducing the likelihood of misconfigurations or oversights that could lead to security vulnerabilities. While all the options listed can contribute to overall security, the two mentioned above are particularly effective in controlling access and managing security policies, which are crucial aspects of post-breach security measures.

    Source: Adapted from community discussion — lauren2wright

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 601. 871 questions available.