CompTIA Network+ (2021 series)871 questions across 88 pages are complete and free, with no account or card.
871 questions in this bank
Free access · progress saved on this device
A network administrator is configuring DCHP and wants to explicitly set an IP address based on a MAC address. Which of the following should the administrator use?
Answer: E
in DHCP reservation the DHCP server is configured to reserve a specific IP address for a particular device based on its MAC address. statically assigning it would just be hand jamming not based on MAC address
Source: Adapted from community discussion — e5c1bb5
An administrator wants to host services on the internet using an internal server. The server is configured with an RFC1918 address, and the administrator wants to make the services that are hosted on the server available on one of the company's public IP addresses. Which of the following should the administrator configure to allow this access?
Answer: B
Congrats if you saw all 817 questions to pass this exam! I took the exam today and all I can say is, these questions on this website are good. It's like 85~90% same (even answer orders are same). Trust people's opinions in discussion comments, not the original answers cuz there are lots of wrong answers. If you see a 50/50 debate on a question, just google it. You will get the real answer for the question. Good luck, bros.
Source: Adapted from community discussion — tempovpn
A network administrator is trying to create a subnet, which is the most efficient size possible, for 31 laptops. Which of the following network subnets would be best in this situation?
Answer: C
Should be 10.10.10.0/26 (64IPs - 2 = 62 usable) 10.10.10.0/27 is 32 IPs - 2 = 30 usable. We need to fit 31 IPs therefore it should be /26. Correct me if I am wrong.
Source: Adapted from community discussion — Roman_Kwo
Users at a company will require more bandwidth on their wireless laptops because of a migration to the cloud. The company's current infrastructure contains four 802.11n access points, which are creating a bottleneck. Hardware upgrades are not an option. Which of the following configurations will provide a solution?
Answer: C
Channel bonding in 802.11n allows you to combine two adjacent 20 MHz channels into a single 40 MHz channel. This effectively doubles the theoretical bandwidth available on the wireless network, which can help alleviate the bottleneck and provide more bandwidth for users.
Source: Adapted from community discussion — a87d6a4
Which of the following systems would MOST likely be found in a screened subnet?
Answer: B
Use a screened subnet - previously known as a demilitarized zone (DMZ) - for all publicly viewable servers, including web servers, FTP servers, and email relay servers. A screened subnet is a version of the DMZ that is created with two firewalls (each of the routers are operating as a firewall) and the DMZ (also called the perimeter between them)
Source: Adapted from community discussion — Pongsathorn
Which of the following should be implemented to allow remote users to access network resources while only redirecting necessary traffic?
Answer: A
It was in my exam on April 25th, 2024. Split-tunnel VPN is a networking configuration where only specific traffic is routed through a VPN. At the same time, the remaining data is sent directly over the internet. Split tunneling means that some of your data is routed through an encrypted VPN connection while other apps and data have direct access to the Internet.
Source: Adapted from community discussion — tempovpn
A technician is troubleshooting servers with high CPU usage. While trying to connect, the technician needs to open a port for remote access. Which of the following ports should the technician open?
Answer: D
It was on my exam (April 25th, 2024) A. 443 - HTTPS B. 3321 - vnsstr C. 8080 - HTTP (alternative HTTP port) D. 5900 - VNC (Virtual Network Computing)
Source: Adapted from community discussion — tempovpn
A network security engineer is responding to a security incident. The engineer suspects that an attacker used an authorized administrator account to make configuration changes to the boundary firewall. Which of the following should the network security engineer review?
Answer: B
It was on my exam (April 25th, 2024) (Firewall) Audit logs provide a chronological record of system activities, including user actions, access attempts, and configuration changes, crucial for security monitoring and compliance audits.
Source: Adapted from community discussion — tempovpn
A systems administrator has two network switches that need to be cabled together via copper cabling. Neither of the switches support MDIX. Which of the following types of cables should the administrator use?
Answer: B
It was on my exam (April 25th, 2024) A 'crossover cable' is a type of Ethernet cable that has two ends with reversed wiring. This means that the transmit pins on one end are connected to the receive pins on the other end. This type of cable is used to directly connect two similar devices, such as two switches, without the need for a hub or a router.
Source: Adapted from community discussion — tempovpn
A network engineer wants to establish a site-o-site VPN tunnel using a protocol that allows for both data confidentially and authentication. Which of the following is the best choice?
Answer: C
ChatGPT Advanced Networking Tutor: "To establish a site-to-site VPN tunnel that provides both data confidentiality (encryption) and authentication, the best choice is: ESP (Encapsulating Security Payload) Explanation: IPSec is a framework of protocols that provides security services for IP networks, including encryption, authentication, and integrity. IPSec itself can use different protocols to achieve these goals. ESP (Encapsulating Security Payload), which is part of the IPSec suite, is specifically designed to provide data confidentiality through encryption as well as authentication and integrity. ESP encrypts the payload of the packet and can also include authentication of the entire packet (except for the IP header in transport mode). AH (Authentication Header), another protocol in the IPSec suite, provides authentication and integrity but does not provide encryption (data confidentiality). It only authenticates the packet and ensures it hasn't been tampered with, but it doesn't encrypt the data. Thus, ESP is the best choice for a protocol that allows both data confidentiality and authentication when establishing a site-to-site VPN tunnel."
Source: Adapted from community discussion — dadba8c
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
N10-008 practice, question 791. 871 questions available.
Version 1.0.0. How we source questions