Question 1

A switch vendor recently released a patch to fix a critical vulnerability found in its switch OS. Which of the following should a network administrator do NEXT according to best practices?
A) Test the patch in a test environment.
B) Put the patch into production immediately.
C) Put the patch into production with a rollback plan.
D) Choose a single production switch and pilot the patch.
E) Put the patch into production at the next maintenance window.

Accepted Answer

Testing the patch in a test environment first is a best practice to ensure it does not introduce new issues before deploying it to production.

Question 2

A company's receptionist hands out slips of paper with access codes to visitors each day. A recent internal audit revealed the current method of guest access needs to be improved. Which of the following would improve the security of the guest network?
A) Implement WPA2-PSK.
B) Implement a captive portal.
C) Implement certificate-based 802.1X.
D) Implement MAC filtering.

Accepted Answer

Implementing a captive portal would improve security by requiring guests to authenticate through a web page before accessing the network, allowing for better control and monitoring of guest access.

Question 3

A Chief Information Officer (CIO) wants a third party to verify the security surrounding an enterprise SQL database server. Which of the following services should the CIO implement?
A) PCI compliance
B) Database health check
C) Penetration test
D) Network baseline

Accepted Answer

A penetration test is a service that involves simulating cyberattacks to identify vulnerabilities in a system, including an SQL database server, and is suitable for verifying security.

Question 4

A web server administrator has changed the domain registrar's A record for the company's website. External users can reach the website, but internal users are unable to do so. The web server is accessible by typing the internal IP into a web browser. Which of the following is the reason why the web server cannot be accessed?
A) The NAT has not been configured to point to an internal resource.
B) An egress firewall rule is blocking access to the web server.
C) The IDS has determined it is a rogue web server.
D) The corporate DNS server has not been updated.

Accepted Answer

The corporate DNS server has not been updated, so internal users are still resolving the old IP address instead of the new one.

Question 5

A company's Chief Information Security Officer (CISO) has decided to increase overall network security by implementing two-factor authentication. All users already have username/password combinations and require an additional factor of authentication. Which of the following would satisfy the requirements?
A) Additional PIN
B) Security questions
C) RSA token
D) Access control lists

Accepted Answer

An RSA token is a physical device that generates a code used as a second factor of authentication, providing something the user has, which complements the username/password (something the user knows).

Question 6

A company needs to implement a fault-tolerant server configuration after the failure of its database server. The company decides to implement load-balancing redundant servers. Which of the following should be used for file storage for the servers?
A) IDE
B) Cloud storage
C) SAN
D) iSCSI

Accepted Answer

SAN (Storage Area Network) is a dedicated high-speed network that provides block-level storage access to multiple servers. It is commonly used in fault-tolerant server configurations to provide shared storage for redundant servers.

Question 7

A company requires a network storage solution that allows for the use of OS-specific credentials and permissions. The company purchases a SOHO solution, which includes support for SMB, iSCSI, FTP, Telnet, and NFS natively out of the box. Which of the following should be done FIRST?
A) Verify user credentials.
B) Generate new keys and certificates.
C) Disable unnecessary services.
D) Hash files that will be stored.

Accepted Answer

Disabling unnecessary services should be done first to reduce potential security vulnerabilities and ensure that only required services are running.

Question 8

A technician is troubleshooting a host that is having intermittent issues connecting to internal network resources and the company servers. Using a packet sniffer, the technician notices there are several TCP communications that are missing packets in sequence and need to be retransmitted. The technician receives several SYN-ACK packets with incorrect addressing. Which of the following is the MOST likely cause of these issues?
A) DNS poisoning attack
B) Evil twin on the company network
C) ARP poisoning attack
D) Misconfigured VLAN on the local switch

Accepted Answer

An ARP poisoning attack can cause incorrect IP-to-MAC address mappings, leading to incorrect addressing in TCP communications and resulting in packet loss and retransmissions.

Question 9

A network technician is installing a wireless solution. The solution needs to support new and legacy wireless network clients at the maximum possible speed. Which of the following wireless standards should the technician install?
A) 802.11a
B) 802.11ac
C) 802.11b
D) 802.11g
E) 802.11n

Accepted Answer

802.11n supports both 2.4GHz and 5GHz bands, providing compatibility with legacy devices and offering higher speeds than older standards like 802.11a, b, and g.

Question 10

A network technician needs to create separate networks for several classrooms and administrative offices. They have been provided with the network address 192.168.1.0/24. They will need five classrooms of 25 hosts, two classrooms of 14 hosts, six admin hosts on the network, and three subnets for router connections. Which of the following IP concepts would need to be deployed?
A) VLSM
B) Class B private network
C) EUI-64
D) IPv6

Accepted Answer

Variable Length Subnet Masking (VLSM) allows for the creation of subnets of different sizes, which is necessary to efficiently allocate the given /24 network address to the various subnets required for classrooms, admin hosts, and router connections.

Question 11

A network administrator notices a wireless network with the SSID HOME-33BC-5G that has a high signal strength and open authentication. When the administrator connects to the SSID, corporate servers can be accessed. Which of the following has the network administrator discovered?
A) Evil twin
B) Man in the middle
C) Spoofing
D) Rogue AP
E) Wardriving

Accepted Answer

A rogue AP is an unauthorized wireless access point that is connected to a legitimate network. It can be used to intercept traffic, launch attacks, or provide unauthorized access to the network.

Question 12

A network technician is working on a new wireless project. The network manager has a primary requirement of achieving speeds of at least 1 Gbps when connected. Which of the following standards would be appropriate for the technician to implement?
A) 802.11a
B) 802.11ac
C) 802.11b
D) 802.11n

Accepted Answer

802.11ac supports speeds over 1 Gbps, making it suitable for the requirement.

Question 13

A network administrator is deploying a new switch in an existing IDF. The current switch has only copper Ethernet ports available to use for the trunk ports. Which of the following cable types should the network administrator deploy?
A) Straight-through
B) Console
C) Rollover
D) Crossover

Accepted Answer

A crossover cable is used to connect two similar devices, such as switch to switch, using copper Ethernet ports.

Question 14

Joe, a network technician, has received a report that one of his clients is experiencing an issue connecting to the network. Joe observes two clients are connected to a hub, which is connected to separate wall jacks. Which of the following has MOST likely occurred?
A) Switching loop
B) ARP cache poisoning
C) Improperly tagged ports
D) Wrong VLAN assignment
E) Duplicate IP addresses

Accepted Answer

The answer of Joe, a network technician, has received a...

Question 15

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?
A) International export controls policy
B) Remote access policy
C) Privileged user agreement
D) Data loss policy
E) Service-level agreement

Accepted Answer

A Remote access policy is essential for managing how employees can securely access the company's network and resources from any location worldwide.

Question 16

A technician is working on a Linux VM in a lab environment to become more familiar with the operating system. The technician has configured a basic website and wants to allow access to it from a different machine on the local network. Which of the following should the technician do so other machines can connect?
A) Allow communication through ifconfig.
B) Use netstat to open necessary ports.
C) Add access rules in iptables.
D) Employ arp to configure a new route.

Accepted Answer

The technician should add access rules in iptables to allow traffic through the necessary ports for the website, enabling other machines on the local network to connect.

Question 17

A system administrator reports that one of the two domain name servers does not seem to be responding to DNS requests from clients. The servers are both up and running, name service is running on them, and DNS requests appear in the logs. Both servers respond to queries made at the console. Which of the following tools should the systems administrator use to gather more information?
A) Run a port scanner on each name server to ensure TCP port 53 is open and listening.
B) Run tracert from a desktop client to query each name server and see what answers are sent back from each server. Run tracert from a desktop client to query each name server and see what answers are sent back from each server.
C) Ping the name servers by IP address to make sure they are up, and then ping each name server by name in case name resolution is not working for the server names.
D) Generate DNS queries and use a packet sniffer to capture DNS traffic to/from both name servers and look for differences.

Accepted Answer

The answer of A system administrator reports that one of...

Question 18

When trying to determine why users are unable to access a web-based application that was working the previous day, which of the following should be the FIRST question to ask to determine the scope of the issue?
A) What has been changed on the web server since the previous day?
B) Is the application online for the end user to access?
C) Does the user have access to the application?
D) Is this a system-wide issue or just a certain user's issue?

Accepted Answer

The answer of When trying to determine why users are...

Question 19

Which of the following steps is a network technician MOST likely to take to secure a new network printer? (Choose two.)
A) Change the default credentials.
B) Disable unnecessary services.
C) Secure the physical access.
D) Generate new encryption keys.
E) Enable HTTPS access.
F) Turn on WPS.

Accepted Answer

Changing default credentials and disabling unnecessary services are common steps to secure a network printer, as they help prevent unauthorized access and reduce potential vulnerabilities.

Question 20

An end user at an Internet cafe tries to visit an online retailer's website; however, the website for a competitor loads. The user checks the URL in the address bar and verifies it is correct, but the competitor's page still loads. Which of the following BEST describes what is occurring?
A) Cross-site scripting
B) Session hijacking
C) Man in the middle
D) DNS poisoning

Accepted Answer

DNS poisoning is when the DNS records are altered to redirect users to a different website, which explains why the user is being redirected to a competitor's site despite entering the correct URL.

Exam 10: CompTIA Network+

A switch vendor recently released a patch to fix a critical vulnerability found in its switch OS. Which of the following should a network administrator do NEXT according to best practices?

A company's receptionist hands out slips of paper with access codes to visitors each day. A recent internal audit revealed the current method of guest access needs to be improved. Which of the following would improve the security of the guest network?

A Chief Information Officer (CIO) wants a third party to verify the security surrounding an enterprise SQL database server. Which of the following services should the CIO implement?

A company needs to implement a fault-tolerant server configuration after the failure of its database server. The company decides to implement load-balancing redundant servers. Which of the following should be used for file storage for the servers?

A company requires a network storage solution that allows for the use of OS-specific credentials and permissions. The company purchases a SOHO solution, which includes support for SMB, iSCSI, FTP, Telnet, and NFS natively out of the box. Which of the following should be done FIRST?

A network technician is installing a wireless solution. The solution needs to support new and legacy wireless network clients at the maximum possible speed. Which of the following wireless standards should the technician install?

A network administrator notices a wireless network with the SSID HOME-33BC-5G that has a high signal strength and open authentication. When the administrator connects to the SSID, corporate servers can be accessed. Which of the following has the network administrator discovered?

A network technician is working on a new wireless project. The network manager has a primary requirement of achieving speeds of at least 1 Gbps when connected. Which of the following standards would be appropriate for the technician to implement?

A network administrator is deploying a new switch in an existing IDF. The current switch has only copper Ethernet ports available to use for the trunk ports. Which of the following cable types should the network administrator deploy?

Joe, a network technician, has received a report that one of his clients is experiencing an issue connecting to the network. Joe observes two clients are connected to a hub, which is connected to separate wall jacks. Which of the following has MOST likely occurred?

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?

When trying to determine why users are unable to access a web-based application that was working the previous day, which of the following should be the FIRST question to ask to determine the scope of the issue?

Which of the following steps is a network technician MOST likely to take to secure a new network printer? (Choose two.)

An end user at an Internet cafe tries to visit an online retailer's website; however, the website for a competitor loads. The user checks the URL in the address bar and verifies it is correct, but the competitor's page still loads. Which of the following BEST describes what is occurring?