Question 1

A network administrator has had difficulty keeping track of IP address assignments on networking devices and clients recently. Which of the following is the BEST technology to aid in this scenario?
A) DNS
B) DHCP
C) IPAM
D) NTP

Accepted Answer

IPAM (IP Address Management) is a technology that helps network administrators keep track of IP address assignments on networking devices and clients.

Question 2

Which of the following protocols are classified as connectionless? (Choose two.)
A) TFTP
B) FTP
C) HTTP
D) SNMP
E) SSH
F) IMAP

Accepted Answer

TFTP (Trivial File Transfer Protocol) and SNMP (Simple Network Management Protocol) are both connectionless protocols, meaning they do not establish a dedicated end-to-end connection before data is sent.

Question 3

Which of the following concepts would BEST describe when a company chooses to use a third-party vendor to host and administer a critical application?
A) SaaS
B) IaaS
C) PaaS
D) CASB

Accepted Answer

The answer of Which of the following concepts would BEST...

Question 4

Which of the following is networking stand-alone hardware that will permit any WiFi-compliant device to connect to a wired network?
A) Wireless hub
B) Wireless firewall
C) Wireless access point
D) Wireless bridge

Accepted Answer

A Wireless Access Point (WAP) allows WiFi-compliant devices to connect to a wired network.

Question 5

A network administrator is going to be performing a major upgrade to the network. Which of the following should the administrator use in case of a failure?
A) Baseline report
B) Vulnerability report
C) Rollback plan
D) Business continuity plan

Accepted Answer

A rollback plan is used to revert the system to its previous state in case the upgrade fails, ensuring minimal disruption to the network.

Question 6

A content filter is set to analyze XML and JSON that users access from the Internet. At which of the following layers is this analysis taking place?
A) 1
B) 3
C) 5
D) 7
E) 6

Accepted Answer

A content filter analyzes the content of data, which is done at the application layer (layer 7).

Question 7

A router is set up to utilize RIPv2 to route traffic throughout the network. Which of the following routing metrics is used to determine the path?
A) Distance
B) Bandwidth
C) Speed
D) Hop count

Accepted Answer

RIPv2 uses hop count as its routing metric to determine the best path to a destination network.

Question 8

A VoIP system will require 23 concurrent voice channels and one signaling channel. Which of the following types of WAN service would provide the BEST connectivity to the PSTN?
A) PRI
B) BRI
C) E1/E3
D) DSL

Accepted Answer

PRI (Primary Rate Interface) is a type of ISDN service that provides 23 voice channels and one signaling channel, making it ideal for connecting to the PSTN with the specified requirements.

Question 9

Which of the following can be done to implement network device hardening? (Choose two.)
A) Implement spanning tree
B) Perform VLAN hopping
C) Patch and update
D) Perform backups
E) Enable port mirroring
F) Change default admin password

Accepted Answer

Patching and updating software and firmware, as well as changing default admin passwords, are both effective ways to implement network device hardening.

Question 10

A network technician has salvaged several Ethernet cables from a datacenter. The technician attempts to use the cables to connect desktops to the network without success. Which of the following is MOST likely the issue?
A) The cables have an incorrect pin-out.
B) The cables are UTP instead of STP.
C) The cables are Cat 6 instead of Cat 5.
D) The cables are not plenum rated.

Accepted Answer

The most likely issue is that the cables have an incorrect pin-out, such as being crossover cables instead of straight-through cables, which are typically used to connect devices like desktops to network switches.

Question 11

Which of the following devices are MOST often responsible for 802.1q tagging? (Choose two.)
A) Switch
B) Router
C) IDS
D) Hub
E) IPS
F) Network tap

Accepted Answer

Switches and routers are most often responsible for 802.1q tagging. Switches use 802.1q tagging to create VLANs, while routers use 802.1q tagging to route traffic between VLANs.

Question 12

A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?
A) Install an IDS to monitor all traffic to and from the kiosks.
B) Install honeypots on the network to detect and analyze potential kiosk attacks before they occur.
C) Enable switchport security on the ports to which the kiosks are connected to prevent network-level attacks.
D) Create a new network segment with ACLs, limiting kiosks' traffic with the internal network.

Accepted Answer

Creating a new network segment with ACLs limits the kiosks' traffic with the internal network, effectively isolating them and reducing the risk of compromise from open service ports.

Question 13

A technician is downloading an ISO from a vendor's website. To ensure the integrity of the download, which of the following should be verified?
A) File size
B) Vendor URL
C) File hashing
D) Encryption

Accepted Answer

Verifying the file hash ensures the integrity of the download by confirming that the file has not been altered or corrupted.

Question 14

Which of the following creates a secure remote connection at the OSI network layer?
A) L2TP
B) SSL
C) DTLS
D) IPSec

Accepted Answer

IPSec operates at the OSI network layer (Layer 3) to provide secure communication over IP networks.

Question 15

A technician is configuring a printer for a client. The technician connects the printer to the network, but is unsure how to determine its switchport. Which of the following should the technician do FIRST to locate the switchport?
A) Perform a DNS lookup on the server.
B) Set up an SSH session to the desktop.
C) Reference the ARP table in the router.
D) Configure port security on the switch.

Accepted Answer

The technician should first reference the ARP table in the router to find the MAC address of the printer and then use that information to determine which switchport the printer is connected to.

Question 16

A critical vulnerability is discovered on a network device. The vendor states it has already patched this vulnerability in its current release. Which of the following actions should an administrator take?
A) Change the default password
B) Use a firewall in front of the device.
C) Update the firmware.
D) Upgrade the configuration.

Accepted Answer

Updating the firmware will apply the vendor's patch to fix the critical vulnerability, ensuring the device is secure.

Question 17

A technician has been alerted of incoming HTTP traffic on the LAN segment that should not contain any web servers. The technician has the IP address of the destination host and wants to determine if the socket for HTTP is open. Which of the following should the technician perform?
A) Baseline assessment
B) Packet analysis
C) Port scan
D) Patch-level assessment

Accepted Answer

A port scan should be performed to determine if the socket for HTTP (port 80) is open on the destination host.

Question 18

Joe, an employee at a large regional bank, wants to receive company email on his personal smartphone and tablet. To authenticate on the mail server, he must first install a custom security application on those mobile devices. Which of the following policies would BEST enforce this requirement?
A) Incident response policy
B) BYOD policy
C) DLP policy
D) Remote access policy

Accepted Answer

A BYOD (Bring Your Own Device) policy would best enforce the requirement for employees to install a custom security application on their personal devices to access company resources, such as email.

Question 19

A second router was installed on a network to be used as a backup for the primary router that works as a gateway. The infrastructure team does not want to change the IP address of the gateway on the devices. Which of the following network components should be used in this scenario?
A) Loopback IP
B) Virtual IP
C) Reserved IP
D) Public IP

Accepted Answer

A Virtual IP (VIP) can be used to allow multiple routers to share the same IP address, enabling seamless failover without changing the IP address on devices.

Question 20

Users in a school lab are reporting slow connections to the servers and the Internet. Other users in the school have no issues. The lab has 25 computers and is connected with a single 1Gb Ethernet connection on Cat 5e wiring to an unmanaged switch. There are also three spare Cat 5e cable runs, which are not in use. The school wants to double the connection speed between the lab and the servers without running new cables. Which of the following would be the BEST solution?
A) Plug in a second spare cable at each end to double the speed.
B) Replace the switches with ones that utilize port bonding and use the spare cables.
C) Replace the switches with 10Gb switches and utilize the existing cabling.
D) Plug in a second cable and set one port to TX and one port to RX.

Accepted Answer

Replacing the switches with ones that utilize port bonding (also known as link aggregation) and using the spare cables will effectively double the connection speed by combining multiple Ethernet links into a single logical link.

Exam 10: CompTIA Network+

A network administrator has had difficulty keeping track of IP address assignments on networking devices and clients recently. Which of the following is the BEST technology to aid in this scenario?

Which of the following protocols are classified as connectionless? (Choose two.)

Which of the following concepts would BEST describe when a company chooses to use a third-party vendor to host and administer a critical application?

Which of the following is networking stand-alone hardware that will permit any WiFi-compliant device to connect to a wired network?

A network administrator is going to be performing a major upgrade to the network. Which of the following should the administrator use in case of a failure?

A content filter is set to analyze XML and JSON that users access from the Internet. At which of the following layers is this analysis taking place?

A router is set up to utilize RIPv2 to route traffic throughout the network. Which of the following routing metrics is used to determine the path?

A VoIP system will require 23 concurrent voice channels and one signaling channel. Which of the following types of WAN service would provide the BEST connectivity to the PSTN?

Which of the following can be done to implement network device hardening? (Choose two.)

A network technician has salvaged several Ethernet cables from a datacenter. The technician attempts to use the cables to connect desktops to the network without success. Which of the following is MOST likely the issue?

Which of the following devices are MOST often responsible for 802.1q tagging? (Choose two.)

A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?

A technician is downloading an ISO from a vendor's website. To ensure the integrity of the download, which of the following should be verified?

Which of the following creates a secure remote connection at the OSI network layer?

A technician is configuring a printer for a client. The technician connects the printer to the network, but is unsure how to determine its switchport. Which of the following should the technician do FIRST to locate the switchport?

A critical vulnerability is discovered on a network device. The vendor states it has already patched this vulnerability in its current release. Which of the following actions should an administrator take?

A technician has been alerted of incoming HTTP traffic on the LAN segment that should not contain any web servers. The technician has the IP address of the destination host and wants to determine if the socket for HTTP is open. Which of the following should the technician perform?

Joe, an employee at a large regional bank, wants to receive company email on his personal smartphone and tablet. To authenticate on the mail server, he must first install a custom security application on those mobile devices. Which of the following policies would BEST enforce this requirement?

A second router was installed on a network to be used as a backup for the primary router that works as a gateway. The infrastructure team does not want to change the IP address of the gateway on the devices. Which of the following network components should be used in this scenario?