N10-009 practice questions 171–180

1. Question 171 · 610 in bank

   A company discovers on video surveillance recordings that an unauthorized person installed a rogue access point in its secure facility. Which of the following allowed the unauthorized person to do this?

   • AEvil twin
   • BHoneytrap
   • CWardriving
   • DTailgating

   Show answer

   Answer: D

   Explanation

   The key detail is that the unauthorized person was physically present in a secure facility, as captured on video. Installing a rogue access point requires physical access to connect the device to the network or place it within range. Options A, B, and C are either attack types or external activities that don’t address the physical entry. Tailgating (D) directly explains how the person bypassed physical security to get inside and install the device. Without such access, the installation couldn’t have occurred, regardless of the subsequent attack method ( D. Tailgating

   Source: Adapted from community discussion — AriGarcia

   Next question

2. Question 172 · 610 in bank

   A secure communication link needs to be configured between data centers via the internet. The data centers are located in different regions. Which of the following is the best protocol for the network administrator to use?

   • ADCI
   • BGRE
   • CVXLAN
   • DIPSec

   Show answer

   Answer: D

   Explanation

   DCI isn’t a protocol. GRE and VXLAN are tunneling/overlay protocols but lack native encryption, requiring additional security layers (IPSec) to be secure. IPSec directly addresses security with encryption and authentication, making it a standard choice for site-to-site VPNs over the internet. It can also encapsulate other protocols if needed, but as a standalone solution, it meets the requirement for secure communication. D. IPSec

   Source: Adapted from community discussion — AriGarcia

   Next question

3. Question 173 · 610 in bank

   Which of the following can be implemented to add an additional layer of security between a corporate network and network management interfaces?

   • AJump box
   • BConsole server
   • CAPI interface
   • DIn-band management

   Show answer

   Answer: A

   Explanation

   A. Jump box The jump box is a standard, effective solution for securing access to management interfaces, often used in enterprise environments to enforce policies like multi-factor authentication, logging, and network segmentation. A console server (B) is more about access than security layering. An API interface (C) facilitates interaction, not protection. In-band management (D) is the opposite of adding security, as it integrates management with regular network traffic.

   Source: Adapted from community discussion — AriGarcia

   Next question

4. Question 174 · 610 in bank

   A network administrator performed upgrades on a server and installed a new NIC to improve performance. Following the upgrades, users are unable to reach the server. Which of the following is the most likely reason?

   • AThe PoE power budget was exceeded.
   • BTX/RX was transposed.
   • CA port security violation occurred.
   • DAn incorrect cable type was installed.

   Show answer

   Answer: C

   Explanation

   The most likely reason is C, a port security violation. Replacing the NIC changes the MAC address, and if the switch was locked to the old MAC, it would block the new one, causing users to lose access. This aligns with common network administration experiences post-upgrade. B is a close contender if cabling was manually altered, but port security is a more frequent culprit in such scenarios. A (PoE) is unlikely because servers don’t typically use PoE, and a NIC upgrade wouldn’t affect a power budget. B (TX/RX transposed) could occur if cabling was disturbed or a mismatched setup was introduced, but Auto-MDI/MDIX reduces this likelihood in modern setups. D (Incorrect cable) is possible but less probable with modern auto-correcting hardware.

   Source: Adapted from community discussion — AriGarcia

   Next question

5. Question 175 · 610 in bank

   A company is hosting a secure server that requires all connections to the server to be encrypted. A junior administrator needs to harden the web server. The following ports on the web server are open:

   

   Which of the following ports should be disabled?

   • A22
   • B80
   • C443
   • D587

   Show answer

   Answer: B

   Explanation

   Port 80 is the unsecure port of HTTPS hence port 80 is HTTP. This port out of all the other ports are unsecure. 22- ssh secure 443- https secure 587- SMTPS Secure version of STMP

   Source: Adapted from community discussion — BobbyCruz111

   Next question

6. Question 176 · 610 in bank

   A junior network technician at a large company needs to create networks from a Class C address with 14 hosts per subnet. Which of the following numbers of host bits is required?

   • AOne
   • BTwo
   • CThree
   • DFour

   Show answer

   Answer: D

   Next question

7. Question 177 · 610 in bank

   Which of the following is a company most likely enacting if an accountant for the company can only see the financial department's shared folders?

   • AGeneral Data Protection Regulation
   • BLeast privilege network access
   • CAcceptable use policy
   • DEnd user license agreement

   Show answer

   Answer: B

   Explanation

   The principle of least privilege dictates that users or systems should only have access to the resources necessary for their job functions no more, no less. If the accountant can only see the financial department’s shared folders, this directly reflects least privilege.

   Source: Adapted from community discussion — AriGarcia

   Next question

8. Question 178 · 610 in bank

   Which of the following connector types would most likely be used to connect to an external antenna?

   • ABNC
   • BST
   • CLC
   • DMPO

   Show answer

   Answer: A

   Next question

9. Question 179 · 610 in bank

   A company recently converted most of the office laptops to connect wirelessly to the corporate network. After a recent high-traffic malware attack, narrowing the event to a specific user was difficult because of the wireless configuration. Which of the following actions should the company take?

   • ARestrict users to the 5GHz frequency.
   • BUpgrade to a mesh network.
   • CMigrate from PSK to Enterprise.
   • DImplement WPA2 encryption.

   Show answer

   Answer: C

   Explanation

   Enterprise authentication (WPA2-Enterprise or WPA3-Enterprise) uses 802.1X with a RADIUS server, requiring unique credentials per user, allowing administrators to Identify specific users in security logs.

   Source: Adapted from community discussion — AriGarcia

   Next question

10. Question 180 · 610 in bank

    Which of the following cloud service models most likely requires the greatest up-front expense by the customer when migrating a data center to the cloud?

    • AInfrastructure as a service
    • BSoftware as a service
    • CPlatform as a service
    • DNetwork as a service

    Show answer

    Answer: A

    Explanation

    IaaS most likely requires the greatest up-front expense due to the complexity of migrating entire server environments, including potential downtime, licensing, and professional services. PaaS could be costly if apps need heavy refactoring, but IaaS typically mirrors a data center’s scope more directly, amplifying initial costs.

    Source: Adapted from community discussion — AriGarcia

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-009 practice, question 171. 610 questions available.