CompTIA Network+ (N10-009) Practice Questions & Study Guide

Free CompTIA Network+ (N10-009) Practice Questions Preview

• Question 1

  SIMULATION -
  
  A network technician replaced an access layer switch and needs to reconfigure it to allow the connected devices to connect to the correct networks.
  
  
  INSTRUCTIONS -
  
  Click on the appropriate port(s) on Switch 1 and Switch 3 to verify or reconfigure the correct settings:
  Ensure each device accesses only its correctly associated network.
  Disable all unused switchports.
  Require fault-tolerant connections between the switches.
  Only make necessary changes to complete the above requirements.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  

  Correct Answer: See interactive view.

  Explanation:

  Based on the question's requirements, the provided simulation images, and the discussion summary, I agree with the suggested answer because it comprehensively addresses the key tasks: configuring ports based on connected devices and VLANs, ensuring fault tolerance, and disabling unused ports. The solution appropriately emphasizes the importance of configuring each port according to its connected device, which aligns perfectly with the scenario description.
  
  The reasoning for choosing this answer is that it thoroughly covers all aspects of the simulation question. It correctly identifies that:

  • Ports should be configured to match the VLAN requirements of connected devices (servers, PCs, printers, etc.).
  • Unused ports should be disabled to enhance security.
  • LACP should be configured on ports connecting switches to provide fault tolerance and increased bandwidth.

  This approach directly addresses the instructions given in the question, ensuring that devices connect to the correct networks and that the network is both functional and secure.
  
  The reason for not choosing other potential answers is that they might not comprehensively cover all instructions, especially the fault tolerance requirement (LACP configuration) or the disabling of unused ports, both of which are explicitly mentioned in the question. Simply setting VLANs without addressing redundancy or security would be an incomplete solution.

  • Switch 1 Configurations:
  • Port 1 to Port 7:
    • Ports should have VLANs set according to the devices they connect to. For instance, if a port is connecting to servers, only the VLAN for servers (e.g., VLAN 90) should be enabled and tagged if required.
    • Ensure unused VLANs are not active or set to untagged on these ports to prevent unauthorized network access.
  • Ports:
    • This port's configuration needs to align with the devices it connects to. Based on your first image, adjust the VLAN tagging accordingly. If it connects to printers, VLAN 60 should be tagged, and all other VLANs should be disabled or untagged.
  • Switch 3 Configurations:
  • Ports 2 to 8:
    • The configurations here must also match the connected devices. For mobile user connections, only VLANs relevant to user access (like VLAN 150 for WLAN) should be enabled and set to tagged or untagged based on network policies.
    • Any VLAN not associated with the connected devices should be disabled to secure the network.
  • Fault Tolerant Connections:
  • Ensure redundancy: If these switches are connected via multiple ports, configure Link Aggregation Control Protocol (LACP) if not already set up to provide redundancy and increased bandwidth.
  • Check duplex and speed settings: Ensure that duplex settings are set to Auto to avoid duplex mismatch which can cause performance issues.
  • Disabling Unused Ports:
  • Any port not connected or not planned to be used should be disabled to prevent unauthorized access or network breaches.
  • Final Checks:
  • Verify settings: After configuration changes, verify all settings to ensure they adhere to network policies and the devices are performing as expected.
  • Documentation: Update network documentation to reflect changes for future troubleshooting and audits.

  
  Citations:

  • VLAN Configuration, https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15_2_2_e/configuration/guide/scg1522e/swvlan.html
  • Link Aggregation Control Protocol (LACP), https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/topic-map/link-aggregation-control-protocol.html
  • Port Security, https://www.fortinet.com/resources/cyberglossary/port-security

• Question 2

  SIMULATION -
  
  A network technician was recently onboarded to a company. A manager has tasked the technician with documenting the network and has provided the technician with partial information from previous documentation.
  
  
  INSTRUCTIONS -
  
  Click on each switch to perform a network discovery by entering commands into the terminal. Type help to view a list of available commands.
  Fill in the missing information using the drop-down menus provided.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  

  Correct Answer: See interactive view.

  Explanation:

  I agree with the suggested answer.
  Here's a breakdown of the reasoning and how to arrive at the correct configuration:

  • Network Discovery: The simulation requires using the command line interface (CLI) of the switches to discover network information. The 'help' command provides a list of available commands on each switch.
  • Identifying MAC Addresses: The show mac address-table command is crucial. This command displays the MAC address table of the switch, which maps MAC addresses to specific ports. By examining this table on each switch, you can determine which MAC addresses are connected to which ports.
  • ARP Table Analysis: The show arp command is also important. This displays the ARP table, which maps IP addresses to MAC addresses. Combining the information from the MAC address table and the ARP table allows you to correlate IP addresses, MAC addresses, and switch ports.
  • Mapping Devices to Ports: By executing these commands on each switch, you can trace which PC is connected to which port. For example, if the show mac address-table command on Switch A shows that MAC address X is connected to port Gi1/0/1, and the show arp command shows that MAC address X is associated with IP address 192.168.1.10, then you know that PC with IP 192.168.1.10 is connected to Switch A, port Gi1/0/1.

  Why other approaches are incorrect: Without utilizing the show mac address-table and show arp commands, it is impossible to accurately determine the connections between PCs and switch ports within the simulation environment. The simulation is designed to specifically test your ability to use these commands for network discovery.

  The suggested answer correctly configures the connections based on the output from the show mac address-table and show arp commands executed on each switch.

• Question 3

  SIMULATION -
  
  Users are unable to access files on their department share located on file server 2. The network administrator has been tasked with validating routing between networks hosting workstation A and file server 2.
  
  
  INSTRUCTIONS -
  
  Click on each router to review output, identify any issues, and configure the appropriate solution.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  
  
  
  
  
  
  
  
  

  Correct Answer: See interactive view.

  Explanation:

  I agree with the suggested answer.
  Reasoning: The core issue is the lack of routing information on Router A and Router B, preventing traffic from reaching the 10.0.5.0/24 and 10.0.1.0/24 networks, respectively. The suggested answer correctly configures static routes on Router A and Router B to resolve this issue. Router A needs a static route pointing to the 10.0.5.0/24 network via its next-hop, and Router B needs a static route pointing to the 10.0.1.0/24 network via its next-hop. Router C does not need any modification as it is already correctly configured with routes to both networks.
  Specifically:

  • Router A: Needs a static route to 10.0.5.0/24. Without this, it doesn't know how to reach File Server 2.
  • Router B: Needs a static route to 10.0.1.0/24. Without this, it doesn't know how to reach Workstation A.
  • Router C: Is correctly configured with routes to both networks, so no changes are needed.

  Why other answers are likely incorrect: Any solution that doesn't address the missing routes on Router A and Router B will fail to restore connectivity. Modifying Router C is unnecessary and would not solve the underlying problem, as it's already correctly configured to route between the two networks.

  Configuration Details (from the provided image):

  • Router A Configuration:
  • ip route 10.0.5.0 255.255.255.0 [Router B's Gi0/0 IP Address] (e.g., ip route 10.0.5.0 255.255.255.0 10.0.2.2)
  • Router B Configuration:
  • ip route 10.0.1.0 255.255.255.0 [Router A's Gi0/0 IP Address] (e.g., ip route 10.0.1.0 255.255.255.0 10.0.2.1)

  This configuration ensures that both Router A and Router B have the necessary routing information to forward traffic to the appropriate networks, restoring connectivity between Workstation A and File Server 2.

  Important Considerations: The exact IP addresses for the next-hop gateways (Router B's Gi0/0 IP and Router A's Gi0/0 IP) will depend on the specific configuration of the network in the simulation environment. The general principle remains the same: static routes on Router A and Router B pointing to the missing networks.

  Expected Outcome: After applying these configurations, users should be able to access files on their department share located on File Server 2 from Workstation A.

  Troubleshooting Tips:

  • Verify the IP addresses used in the static routes are correct.
  • Check that the interfaces on the routers are up and running.
  • Use the ping command to test connectivity between devices.

  Disclaimer: As an AI, I can provide guidance, but practical application in a real network environment might require adjustments based on the specific context and constraints.

  Citations:

  • Static Routing, https://www.geeksforgeeks.org/static-routing/
  • How to Configure Basic Static Route in Cisco IOS, https://www.cisco.com/c/en/us/support/docs/ip/routing/16606-routings.html
  • Understanding IP Routing, https://www.computernetworkingnotes.com/ccna-study-guide/understanding-ip-routing.html

• Question 4

  SIMULATION -
  
  A network administrator has been tasked with configuring a network for a new corporate office. The office consists of two buildings, separated by 50 feet with no physical connectivity. The configuration must meet the following requirements:
  
  Devices in both buildings should be able to access the Internet.
  Security insists that all Internet traffic be inspected before entering the network.
  Desktops should not see traffic destined for other devices.
  
  
  INSTRUCTIONS -
  
  Select the appropriate network device for each location. If applicable, click on the magnifying glass next to any device which may require configuration updates and make any necessary changes.
  Not all devices will be used, but all locations should be filled.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  

  Correct Answer: See interactive view.

  Explanation:

  I agree with the suggested answer with some modifications. The optimal configuration, considering the requirements and constraints, involves placing a Firewall for security, a Router for internet connectivity and routing, Switches in both buildings for local network traffic, and a Wireless Access Point (WAP) instead of a Wireless Range Extender to connect the two buildings.
  
  Here's the breakdown:

  • Device: Firewall
    Reason: This is crucial for inspecting all incoming and outgoing Internet traffic, as mandated by security requirements. It acts as the first line of defense.
  • Device: Router
    Reason: The router connects the internal network to the Internet (via the Firewall). It also handles routing traffic between Building A and Building B.
  • Device: Switch
    Reason: This provides wired connectivity for devices within Building A. The switch isolates traffic, ensuring desktops only see traffic intended for them.
  • Device: Wireless Access Point (WAP)
    Reason: Instead of a range extender, a WAP is more appropriate. Range extenders retransmit the signal, potentially halving the bandwidth. A WAP connects to the network via a wired connection to the switch in Building A and provides a dedicated wireless network for Building B to connect to. Given the 50-foot separation, a strategically placed WAP can provide sufficient coverage.
  • Device: Switch
    Reason: This provides wired connectivity for devices within Building B that connects to the WAP to Building A.

  Why not Wireless Range Extender? While a range extender could work, it generally degrades network performance. A Wireless Access Point (WAP) offers a more robust and efficient solution for connecting the two buildings, assuming a wired connection can be established from Building A's switch to the location of the WAP within Building A.

  The modified configuration addresses all the requirements:

  • Internet Access: Achieved through the Router and Firewall.
  • Traffic Inspection: Guaranteed by the Firewall.
  • Traffic Isolation: Provided by the switches in each building.
  • Connectivity between Buildings: Facilitated by the WAP.

• Question 5

  SIMULATION -
  
  A network technician needs to resolve some issues with a customer's SOHO network. The customer reports that some of the devices are not connecting to the network, while others appear to work as intended.
  
  
  INSTRUCTIONS -
  
  Troubleshoot all the network components and review the cable test results by clicking on each device and cable. Type help in each terminal to view a list of available commands.
  
  Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem.
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  
  
  
  
  
  
  
  
  
  
  
  

  Correct Answer: See interactive view.

  Explanation:

  Based on the simulation and the discussion summary, I agree with the suggested answer. The primary issue preventing devices from connecting to the network is the incorrect IP address configuration on the printer. Fixing the printer's IP address will likely resolve the connectivity problem.
  
  Reasoning:

  • The discussion summary highlights that the printer's IP address is incorrectly configured. The printer is configured with an IP address of 10.10.11.56/24, but it should be 10.10.11.16/24.
  • The network segment appears to be 10.10.11.0/24. A device with an IP address of 10.10.11.56/24 may not be able to communicate correctly within that network segment if other devices are expecting 10.10.11.16.
  • By correcting the printer's IP address to 10.10.11.16/24, the printer will be on the same subnet as the other devices, thus resolving the connectivity issue.

  
  Reasons for not choosing other potential solutions:

  • While other issues, such as VLAN assignments and cable types, are mentioned in the discussion, the primary and most immediate problem to address is the IP address configuration of the printer.
  • Addressing the printer's IP configuration is the most direct way to resolve the "some of the devices are not connecting to the network" issue reported by the customer.
  • Other issues like cable length and VLAN configuration might need further investigation but are not the immediate cause of the reported problem.

  
  

  
  Citations:

  • Understanding IP Addresses and Subnets, [invalid URL removed]

• Question 6

  SIMULATION -
  
  After a recent power outage, users are reporting performance issues accessing the application servers. Wireless users are also reporting intermittent Internet issues.
  
  
  INSTRUCTIONS -
  
  Click on each tab at the top of the screen. Select a widget to view information, then use the drop-down menus to answer the associated questions.
  
  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
  
  
  
  
  
  
  
  
  
  

  Correct Answer: See interactive view.

  Explanation:

  Based on the provided information and the discussion summary, I agree with the suggested answer.
  
  The suggested answer implies the need to analyze network performance and connectivity issues following a power outage, encompassing aspects of WAN link selection, router diagnostics, and identifying high-traffic workstations. The questions from the images (which are not provided in text format, but are described in the discussion summary) requires that the candidate determine the best WAN link for VoIP, identify connectivity problems with a router, and identify the workstation IP generating the most traffic.
  
  Here's a breakdown of why this is the best approach, based on the discussion summary:
  

  • WAN Link Selection (WAN2): The discussion summary clearly states that WAN2 is preferred for VoIP traffic due to "better average throughput and less downtime." This directly addresses the intermittent internet issues reported by wireless users and ensures better quality for VoIP, which is sensitive to network latency and packet loss.
  • Router Diagnostics (Router A): The summary highlights that "Router A is experiencing connectivity issues, indicated by 'request timed out' in ping tests and zero traffic." Diagnosing and addressing router connectivity is crucial for restoring network performance after a power outage.
  • Identifying High-Traffic Workstations (10.1.90.53): The summary identifies 10.1.90.53 as the workstation IP generating the most traffic. Identifying such workstations helps in troubleshooting performance bottlenecks and ensuring fair bandwidth allocation.

  
  Therefore, addressing these three components (WAN link, Router, Workstation IP) is essential for resolving the performance issues, making the suggested answer very comprehensive.
  

• Question 7

  Which of the following steps of the troubleshooting methodology would most likely include checking through each level of the OSI model after the problem has been identified?

  • A. Establish a theory.
  • B. Implement the solution.
  • C. Create a plan of action.
  • D. Verify functionality.

  Correct Answer: A

  Explanation:

  The suggested answer is correct. The question asks about the step in the troubleshooting methodology that most likely includes checking through each level of the OSI model *after* the problem has been identified.
  Reasoning:

  • The troubleshooting methodology involves several steps, including:
    1. Identify the problem
    2. Establish a theory of probable cause
    3. Test the theory to determine the cause
    4. Establish a plan of action to resolve the problem
    5. Implement the solution
    6. Verify full system functionality
    7. Document the issue
  • Checking each layer of the OSI model is a diagnostic technique used to pinpoint the source of a network issue. This is most relevant when establishing a theory of probable cause. By systematically checking each layer, you can isolate the layer where the problem is occurring.

  Why other options are incorrect:

  • B. Implement the solution: This step occurs *after* the problem has been diagnosed and a solution has been determined. Checking the OSI model layers helps to *find* the solution, not implement it.
  • C. Create a plan of action: While a plan might include specific tests related to certain OSI layers, the *initial* methodical checking of each layer is more closely tied to figuring out *what* the plan should address.
  • D. Verify functionality: This happens after a solution is implemented to ensure it worked.

  Therefore, the most appropriate step for checking the OSI model layers is A. Establish a theory.

  
  Citations:

  • CompTIA Troubleshooting Methodology, https://www.comptia.org/ (This is a general reference to CompTIA as the source of the troubleshooting methodology. A more specific URL for the methodology itself is difficult to provide as it's part of their certification training.)
  • OSI Model explained, https://www.cloudflare.com/learning/ddos/reference/osi-model/

• Question 8

  While troubleshooting a VoIP handset connection, a technician's laptop is able to successfully connect to network resources using the same port. The technician needs to identify the port on the switch. Which of the following should the technician use to determine the switch and port?

  • A. LLDP
  • B. IKE
  • C. VLAN
  • D. netstat

  Correct Answer: A

  Explanation:

  I agree with the suggested answer. The technician should use LLDP (Link Layer Discovery Protocol) to determine the switch and port.
  Reasoning:

  • LLDP is a Layer 2 protocol used by network devices to advertise their identity, capabilities, and neighbors on a local area network. This protocol allows a device to discover basic device information about neighboring devices. This includes the switch's name, port number, VLAN configuration, and other relevant information.
  • Since the technician's laptop can connect to the network using the same port as the VoIP handset, the problem is likely with the VoIP handset's configuration or the switch port's configuration for VoIP. LLDP is the best tool to identify the switch and port the handset is connected to.

  Reasons for not choosing other options:

  • IKE (Internet Key Exchange): IKE is a protocol used to establish a secure channel in IPsec VPNs and has nothing to do with identifying switch ports.
  • VLAN (Virtual Local Area Network): While VLANs are related to network segmentation, using VLANs will not give details of which port the handset is connected to.
  • netstat: netstat is a command-line utility that displays network connections, routing tables, and network interface statistics. It's useful for troubleshooting network connectivity issues on a host, but not for identifying switch ports. It works on layer 3/4 and won't provide layer 2 discovery information of the switch and port.

  Citations:

  • LLDP - Wikipedia, https://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol

• Question 9

  A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

  • A. A separate scope for the file server using a /32 subnet
  • B. A reservation for the server based on the MAC address
  • C. A static IP address within the DHCP IP range
  • D. A SLAAC for the server

  Correct Answer: B

  Explanation:

  I agree with the suggested answer.
  The best solution is B. A reservation for the server based on the MAC address.
  Reasoning:

  • A DHCP reservation allows the network administrator to assign a specific and consistent IP address to the file server based on its MAC address. This ensures that the server always receives the same IP address, which is crucial for reliable file sharing and accessibility.
  • Using a reservation avoids potential IP address conflicts that could occur if the server were to obtain an IP address dynamically and that address was subsequently assigned to another device.

  Reasons for not choosing the other options:

  • A. A separate scope for the file server using a /32 subnet: A /32 subnet mask means only one IP address can be assigned in that subnet, the server itself. There's no room for a gateway or any other hosts. This would isolate the server from the rest of the network, making it inaccessible to users.
  • C. A static IP address within the DHCP IP range: While assigning a static IP address seems straightforward, it can lead to IP address conflicts if the DHCP server also assigns that address to another device. Managing static IP addresses within a DHCP range requires careful coordination to avoid overlaps.
  • D. SLAAC for the server: SLAAC (Stateless Address Autoconfiguration) is primarily used in IPv6 networks. While SLAAC can assign an IP address, it's not typically the best approach for servers that require a stable and predictable IP address in environments using DHCP for IPv4 address assignment. Furthermore, SLAAC relies on router advertisements, and its configuration is less centralized than DHCP reservations.

  By using a DHCP reservation, the administrator can ensure that the file server always has the same IP address, without the risk of conflicts or the need for manual IP address management.

• Question 10

  Which of the following technologies are X.509 certificates most commonly associated with?

  • A. PKI
  • B. VLAN tagging
  • C. LDAP
  • D. MFA

  Correct Answer: A

  Explanation:

  The suggested answer is A (PKI), and I agree with this answer.
  Reasoning: X.509 certificates are a fundamental component of Public Key Infrastructure (PKI). PKI is the framework that enables secure electronic communication through the use of digital certificates. These certificates, which conform to the X.509 standard, bind a public key to an identity (e.g., a person, device, or organization), and are used for encryption, digital signatures, and authentication.
  VLAN tagging (B) is used for network segmentation.
  LDAP (C) is a directory service protocol and, while it can use certificates for secure communication, it is not primarily associated with X.509 certificates.
  MFA (D) is a security system that requires more than one method of authentication from independent categories of credentials to verify the user’s identity for a login or other transaction. Certificates can be used as a factor in MFA, but MFA is not the primary technology associated with X.509 certificates.
  Therefore, PKI is the most appropriate answer because X.509 certificates are integral to its operation.

  Reasons for not choosing other options:

  • B (VLAN tagging): This is a networking concept and not related to certificate-based security.
  • C (LDAP): While LDAP can use certificates for authentication, it's not the core technology associated with X.509 certificates.
  • D (MFA): Certificates can be *a* factor in MFA, but MFA itself isn't directly linked to X.509 certificates.

  Based on CompTIA N10-009 exam objectives, it is crucial to understand the application of security technologies such as PKI and their components like X.509 certificates.

  Citations:

  • Public Key Infrastructure (PKI), https://www.entrust.com/resources/glossary/public-key-infrastructure
  • X.509, https://sectigo.com/resource-library/x509-certificate