Far Out CompTIA Network+Exam N10-008 Free Download

NEW QUESTION 1

A network field technician is installing and configuring a secure wireless network. The technician performs a site survey. Which of the following documents would MOST likely be created as a result of the site survey?

• A. Physical diagram
• B. Heat map
• C. Asset list
• D. Device map

Answer: B

Explanation:
A heat map would most likely be created as a result of the site survey. A heat map is a graphical representation of the wireless signal strength and coverage in a given area. It can show the location of APs, antennas, walls, obstacles, interference sources, and dead zones. It can help with planning, optimizing, and troubleshooting wireless networks. References: https://www.netspotapp.com/what-is-a-wifi-heatmap.html

NEW QUESTION 2

A systems operator is granted access to a monitoring application, configuration application,
and timekeeping application. The operator is denied access to the financial and project management applications by the system's security configuration. Which of the following BEST describes the security principle in use?

• A. Network access control
• B. Least privilege
• C. Multifactor authentication
• D. Separation of duties

Answer: D

NEW QUESTION 3

Which of the following bandwidth management techniques uses buffers al the client side to prevent TCP retransmissions from occurring when the ISP starts to drop packets of specific types that exceed the agreed traffic rate?

• A. Traffic shaping
• B. Traffic policing
• C. Traffic marking
• D. Traffic prioritization

Answer: D

NEW QUESTION 4

Which of the following factors should be considered when evaluating a firewall to protect a datacenter’s east-west traffic?

• A. Replication traffic between an on-premises server and a remote backup facility
• B. Traffic between VMs running on different hosts
• C. Concurrent connections generated by Internet DDoS attacks
• D. VPN traffic from remote offices to the datacenter’s VMs

Answer: B

Explanation:
When evaluating a firewall to protect a datacenter’s east-west traffic, it is important to consider traffic between VMs running on different hosts. This type of traffic is referred to as east-west traffic and is often protected by internal firewalls. By implementing firewalls, an organization can protect their internal network against threats such as lateral movement, which can be caused by attackers who have breached a perimeter firewall. References: Network+ Certification Study Guide, Chapter 5: Network Security

NEW QUESTION 5

Which of the following is used to elect an STP root?

• A. A bridge ID
• B. A bridge protocol data unit
• C. Interface port priority
• D. A switch's root port

Answer: B

Explanation:
"Using special STP frames known as bridge protocol data units (BPDUs), switches communicate with other switches to prevent loops from happening in the first place. Configuration BPDUs establish the topology, where one switch is elected root bridge and acts as the center of the STP universe. Each switch then uses the root bridge as a reference point to maintain a loop-free topology."

NEW QUESTION 6

A Chief Information Officer wants to monitor network breaching in a passive, controlled manner. Which of the following would be best to implement?

• A. Honeypot
• B. Perimeter network
• C. Intrusion prevention system
• D. Port security

Answer: A

Explanation:
A honeypot is a decoy system that is designed to attract and trap hackers who attempt to breach the network. A honeypot mimics a real system or network, but contains fake or non- sensitive data and applications. A honeypot can be used to monitor network breaching in a passive, controlled manner, as it allows the network administrator to observe the hacker’s behavior, techniques, and tools without compromising the actual network or data. A honeypot can also help to divert the hacker’s attention from the real targets and collect forensic evidence for further analysis or prosecution.

NEW QUESTION 7

Which of the following most likely occurs when an attacker is between the target and a legitimate server?

• A. IP spoofing
• B. VLAN hopping
• C. Rogue DHCP
• D. On-path attack

Answer: D

Explanation:
An on-path attack (also known as a man-in-the-middle attack) is a type of security attack where the attacker places themselves between two devices (often a web browser and a web server) and intercepts or modifies communications between the two1. The attacker can then collect information as well as impersonate either of the two agents. For example, an on-path attacker could capture login credentials, redirect traffic to malicious sites, or inject malware into legitimate web pages.
The other options are not correct because they describe different types of attacks:
•IP spoofing is the practice of forging the source IP address of a packet to make it appear as if it came from a trusted or authorized source2.
•VLAN hopping is a technique that allows an attacker to access a VLAN that they are not authorized to access by sending packets with a modified VLAN tag3.
•Rogue DHCP is a scenario where an unauthorized DHCP server offers IP configuration parameters to clients on a network, potentially causing network disruption or redirection to malicious sites4.
References
2: Understanding Targeted Attacks: What is a Targeted Attack? 3: Types of attacks - Security on the web | MDN
1: What is an on-path attacker? | Cloudflare
4: [What is a Rogue DHCP Server? - Definition from Techopedia]

NEW QUESTION 8

Which of the following types of attacks can be used to gain credentials by setting up rogue APs with identical corporate SSIDs?

• A. VLAN hopping
• B. Evil twin
• C. DNS poisoning
• D. Social engineering

Answer: B

NEW QUESTION 9

A network administrator is configuring a firewall to allow for a new cloud-based email server. The company standard is to use SMTP to route email traffic. Which of the following ports, by default, should be reserved for this purpose?

• A. 23
• B. 25
• C. 53
• D. 110

Answer: B

Explanation:
Port 25, by default, should be reserved for SMTP traffic to allow for a new cloud-based email server. SMTP stands for Simple Mail Transfer Protocol, which is a network protocol that enables email communication between mail servers and clients. SMTP uses port 25 as its default port for sending and receiving email messages over TCP/IP networks. A cloud-based email server is an email server that is hosted on a cloud service provider’s infrastructure, rather than on-premise or in-house. A cloud-based email server can offer advantages such as scalability, reliability, security, and cost-effectiveness. To allow for a new cloud-based email server, a firewall should be configured to open port 25 for SMTP traffic. References: [CompTIA Network+ Certification Exam Objectives], What Is SMTP? | Mailtrap Blog, Cloud Email Server: What Is It & How Does It Work? | Zoho Mail

NEW QUESTION 10

A technician is troubleshooting network connectivity from a wall jack. Readings from a multimeter indicate extremely low ohmic values instead of the rated impedance from the switchport. Which of the following is the MOST likely cause of this issue?

• A. Incorrect transceivers
• B. Faulty LED
• C. Short circuit
• D. Upgraded OS version on switch

Answer: C

Explanation:
A short circuit is a condition where two conductors in a circuit are connected unintentionally, creating a low resistance path for the current. This causes the voltage to drop and the current to increase, which can damage the circuit or cause a fire. A multimeter can measure the resistance or impedance of a circuit, and if it shows extremely low values, it indicates a short circuit.

NEW QUESTION 11

A technician is searching for a device that is connected to the network and has the device’s physical network address. Which of the following should the technician review on the switch to locate the device’s network port?

• A. IP route table
• B. VLAN tag
• C. MAC table
• D. QoS tag

Answer: C

Explanation:
To locate a device's network port on a switch, a technician should review the switch's MAC address table. The MAC address table maintains a list of MAC addresses of devices connected to each port on the switch. By checking the MAC address of the device in question, the technician can identify the port to which the device is connected. References: CompTIA Network+ Certification Study Guide, Sixth Edition by Glen E. Clarke

NEW QUESTION 12

A technician just validated a theory that resolved a network outage. The technician then verified that all users could access resources. Which of the following is the next step the technician should take in the network troubleshooting methodology?

• A. Verify the services are restored.
• B. Test a new theory.
• C. Write the lessons learned.
• D. Identify where the network outage is occurring.

Answer: C

Explanation:
The network troubleshooting methodology is a systematic process of identifying and resolving network problems. It consists of eight steps:
* 1. Identify the problem.
* 2. Establish a theory of probable cause.
* 3. Test the theory to determine the cause.
* 4. Establish a plan of action to resolve the problem and identify potential effects.
* 5. Implement the solution or escalate as necessary.
* 6. Verify full system functionality and, if applicable, implement preventive measures.
* 7. Document findings, actions, and outcomes.
* 8. Write the lessons learned.
The last step, writing the lessons learned, is important for improving the network troubleshooting skills and knowledge. It involves reviewing the entire troubleshooting process, analyzing the root cause of the problem, evaluating the effectiveness of the solution, and identifying any best practices, tips, or tools that can be used for future reference. Writing the lessons learned can also help to update the network documentation, policies, and procedures, and share the experience and feedback with other network professionals

NEW QUESTION 13

Which of the following is a benefit of the spine-and-leaf network topology?

• A. Increased network security
• B. Stable network latency
• C. Simplified network management
• D. Eliminated need for inter-VLAN routing

Answer: A

NEW QUESTION 14

A technician is checking network devices to look for opportunities to improve security Which of the following toots would BEST accomplish this task?

• A. Wi-Fi analyzer
• B. Protocol analyzer
• C. Nmap
• D. IP scanner

Answer: B

Explanation:
A protocol analyzer is a tool that can capture and analyze network traffic and identify security issues such as unauthorized devices, malicious packets, or misconfigured settings.
A Wi-Fi analyzer is a tool that can measure the signal strength, interference, and channel usage of wireless networks, but it cannot provide detailed information about network security.
Nmap and IP scanner are tools that can scan network hosts and ports for open services, vulnerabilities, or operating systems, but they cannot monitor network traffic in real time.

NEW QUESTION 15

A company's primary ISP is experiencing an outage. However, the network administrator notices traffic continuing to flow through a secondary connection to the same ISP. Which of the following BEST describes this configuration?

• A. Diverse paths
• B. Load balancing
• C. Multipathing
• D. Virtual Router Redundancy Protocol

Answer: A

NEW QUESTION 16
......