N10-009 practice questions 1–10

1. Question 1 · 610 in bank

   SIMULATION - A network technician replaced an access layer switch and needs to reconfigure it to allow the connected devices to connect to the correct networks. INSTRUCTIONS - Click on the appropriate port(s) on Switch 1 and Switch 3 to verify or reconfigure the correct settings: Ensure each device accesses only its correctly associated network. Disable all unused switchports. Require fault-tolerant connections between the switches. Only make necessary changes to complete the above requirements. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

   

   

   

   

   

   

   

   

   

   

   

   

   

   

   

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   After reviewing some outside notes and doing this on paper, I think the answer is this below. Correct me if anything may be wrong though: SWITCH 1: - The only thing that would need to be fixed here is to set all the Speed and Duplex values to auto. - All LACP, tagging, and VLAN assignments look to be correct. SWITCH 3: - For all ports, set Speed and Duplex to auto (although I guess disabled ones don't matter as much). - For all ports, remove from VLAN 1 (although, again, disabled ports might not matter as much). - Port 1 and Port 2: * Enable port * Enable LACP * Add following VLANS as TAGGED: 60, 90, 120, 220 - Port 3: * Disable port - Port 4: * Add to VLAN 220 TAGGED * Add to VLAN 120 untagged - Port 5: * Disable port - Port 6: * Add to VLAN 120 untagged - Port 7: * Add to VLAN 60 untagged - Port 8: * Add to VLAN 90 untagged

   Source: Adapted from community discussion — airmancompsci

   

   Next question

2. Question 2 · 610 in bank

   Which of the following technologies are X.509 certificates most commonly associated with?

   • APKI
   • BVLAN tagging
   • CLDAP
   • DMFA

   Show answer

   Answer: A

   Explanation

   The correct answer is A: PKI (Public Key Infrastructure) The other options are less suitable because: VLAN tagging (B): This is a networking concept unrelated to certificate-based security LDAP (C): While LDAP can use certificates, it's primarily a directory service protocol MFA (D): While certificates can be used in MFA, they are just one of many possible authentication factors

   Source: Adapted from community discussion — chupapi_001

   Next question

3. Question 3 · 610 in bank

   A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

   • ASNMP trap
   • BPort mirroring
   • CSyslog collection
   • DAPI integration

   Show answer

   Answer: B

   Explanation

   B. Port mirroring Explanation: Port mirroring (also known as SPAN on Cisco devices) is the process of copying network traffic from one port (or a group of ports) on a switch to another port where a monitoring device, such as an Intrusion Detection System (IDS), can inspect the traffic. This is the best method for deploying a passive IDS because it allows the IDS to analyze network traffic without interfering with or disrupting the normal flow of data.

   Source: Adapted from community discussion — HeatSquad77

   Next question

4. Question 4 · 610 in bank

   Which of the following most likely requires the use of subinterfaces?

   • AA router with only one available LAN port
   • BA firewall performing deep packet inspection
   • CA hub utilizing jumbo frames
   • DA switch using Spanning Tree Protocol

   Show answer

   Answer: A

   Explanation

   A. A router with only one available LAN port Explanation: Subinterfaces are logical interfaces created on a single physical interface of a network device, such as a router. They are commonly used in scenarios where multiple VLANs or networks need to be configured on a single physical interface. Each subinterface is assigned its own VLAN ID and IP configuration.

   Source: Adapted from community discussion — HeatSquad77

   Next question

5. Question 5 · 610 in bank

   A company receives a cease-and-desist order from its ISP regarding prohibited torrent activity. Which of the following should be implemented to comply with the cease-and-desist order?

   • AMAC security
   • BContent filtering
   • CScreened subnet
   • DPerimeter network

   Show answer

   Answer: B

   Explanation

   B. Content filtering Explanation: Content filtering allows an organization to block or restrict access to specific types of content, such as torrenting websites or peer-to-peer (P2P) file-sharing activities. By implementing content filtering, the company can ensure compliance with the ISP's cease-and-desist order by preventing users from accessing prohibited services or websites.

   Source: Adapted from community discussion — HeatSquad77

   Next question

6. Question 6 · 610 in bank

   Which of the following requires network devices to be managed using a different set of IP addresses?

   • AConsole
   • BSplit tunnel
   • CJump box
   • DOut of band

   Show answer

   Answer: D

   Explanation

   D. Out of band Explanation: Out-of-band (OOB) management requires a separate network or set of IP addresses to manage devices independently of the production network. This ensures that management traffic is isolated from regular network traffic, providing enhanced security and access even if the primary network is down.

   Source: Adapted from community discussion — HeatSquad77

   Next question

7. Question 7 · 610 in bank

   A network administrator wants to configure a backup route in case the primary route fails. A dynamic routing protocol is not installed on the router. Which of the following routing features should the administrator choose to accomplish this task?

   • ANeighbor adjacency
   • BLink state flooding
   • CAdministrative distance
   • DHop count

   Show answer

   Answer: C

   Explanation

   I'm a bit torn here. Both Hop Count and Administrative Distance seem relevant, but I need to think about the context. Since the routing protocol isn't dynamic, they might be using static routing or have administrative nodes set up certain rules based on hop counts. Therefore, choosing Administrative Distance could make sense as a way to configure backup routes by applying administrative criteria that include hop counts. But then again, hop count is more of a metric used during route discovery and management rather than an administrative setting for backup routing. So, perhaps the correct answer is D. Hop Count if they're using static routing based on known network segments, or C. Administrative distance as an administrative rule that includes hop counts. I'm still leaning towards C. Administrative distance because it allows applying administrative criteria like considering hop count when setting up backup routes.

   Source: Adapted from community discussion — 93831b0

   Next question

8. Question 8 · 610 in bank

   Which of the following steps of the troubleshooting methodology should a technician take to confirm a theory?

   • ADuplicate the problem.
   • BIdentify the symptoms.
   • CGather information.
   • DDetermine any changes.

   Show answer

   Answer: A

   Explanation

   A. Duplicate the problem. Explanation: To confirm a theory, a technician needs to reproduce the issue under similar conditions to ensure the identified cause matches the symptoms and behavior of the problem. Duplicating the problem helps validate the theory and provides evidence that the suspected cause is correct.

   Source: Adapted from community discussion — HeatSquad77

   Next question

9. Question 9 · 610 in bank

   A network administrator is deploying a new switch and wants to make sure that the default priority value was set for a spanning tree. Which of the following values would the network administrator expect to see?

   • A4096
   • B8192
   • C32768
   • D36684

   Show answer

   Answer: C

   Explanation

   The default priority value is derived by multiplying 8 by 4096. priority value is typically configured in increments of 4096 default priority value for a spanning tree is 32768 In spanning tree protocol, a lower priority value indicates a higher priority, meaning a switch with a lower priority is more likely to be chosen as the root bridge.

   Source: Adapted from community discussion — Philco

   Next question

10. Question 10 · 610 in bank

    A network administrator is configuring a wireless network with an ESSID. Which of the following is a user benefit of ESSID compared to SSID?

    • AStronger wireless connection
    • BRoaming between access points
    • CAdvanced security
    • DIncreased throughput

    Show answer

    Answer: B

    Explanation

    user benefit of ESSID compared to SSID is that it allows for seamless roaming between multiple access points within a network, meaning a user can move between different locations in a building while maintaining a constant connection to the same network name (ESSID), without needing to manually reconnect to a new access point (SSID); essentially providing uninterrupted connectivity across a larger area. ESSID : Represents the entire wireless network, including multiple access points, and ensures consistent network name across the whole network, enabling seamless roaming SSID Refers to the visible network name that users see and connect to on a single access point.

    Source: Adapted from community discussion — Philco

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-009 practice, question 1. 610 questions available.