CompTIA

N10-008

CompTIA
Network+Exam
Version: 3.0

[ Total Questions: 132]

Web: www.marks4sure.com

Email: support@marks4sure.com
IMPORTANT NOTICE
Feedback
We have developed quality product and state-of-art service to ensure our customers interest. If you have any
suggestions, please feel free to contact us at feedback@marks4sure.com

Support
If you have any questions about our product, please provide the following items:

exam code
screenshot of the question
login id/email

please contact us at support@marks4sure.com and our technical experts will provide support within 24 hours.

Copyright
The product of each order has its own encryption code, so you should use it independently. Any unauthorized
changes will inflict legal punishment. We reserve the right of final explanation for this statement.
Practice Test CompTIA - N10-008

Question #:1

After the A record of a public website was updated, some visitors were unable to access the website. Which of
the following should be adjusted to address the issue?

A. TTL

B. MX

C. TXT

D. SOA

Answer: A

Question #:2

A network technician needs to correlate security events to analyze a suspected intrusion Which of the
following should the technician use?

A. SNMP

B. Log review

C. Vulnerability scanning

D. SIEM

Answer: D

Question #:3

Wireless users are reporting intermittent internet connectivity. Connectivity is restored when the users
disconnect and reconnect, utilizing the web authentication process each time. The network administrator can
see the devices connected to the APs at all times. Which of the following steps will MOST likelydetermine the
cause of the issue?

A. Verify the session time-out configuration on the captive portal settings

B. Check for encryption protocol mismatch on the client’s wireless settings

C. Confirm that a valid passphrase is being used during the web authentication

D. Investigate for a client’s disassociation caused by an evil twin AP

Answer: A

Pass Your Certification With Marks4sure Guarantee 1 of 56

Practice Test CompTIA - N10-008

Question #:4

A local firm has hired a consulting company to clean up its IT infrastructure. The consulting company notices
remote printing is accomplished by port forwarding via publicly accessible IPs through the firm's firewall
Which of the following would be the MOST appropriate way to enable secure remote printing?

A. SSH

B. VPN

C. Telnet

D. SSL

Answer: A

Question #:5

A network engineer performs the following tasks to increaseserver bandwidth:

Connects two network cables from the server to a switch stack

Configure LACP on the switchports

Verifies the correct configurations on the switch interfaces

Which of the following needs to be configured on the server?

A. Load balancing

B. Multipathing

C. NIC teaming

D. Clustering

Answer: C

Question #:6

A store owner would like to have secure wireless access available for both business equipment andpatron use.
Which of the following features should be configured to allow different wireless access through the same
equipment?

A. MIMO

B. TKIP

C. LTE

Pass Your Certification With Marks4sure Guarantee 2 of 56

Practice Test CompTIA - N10-008

D. SSID

Answer: D

Question #:7

A network engineer configured new firewalls with the correct configuration to be deployed to each remote
branch. Unneeded services were disabled, and all firewall rules were applied successfully. Which of the
following should the network engineer perform NEXT to ensure all the firewalls are hardened successfully?

A. Ensure an implicit permit rule is enabled

B. Configure the log settings on the firewalls to the central syslog server

C. Update the firewalls with current firmware and software

D. Use the same complex passwords on all firewalls

Answer: C

Question #:8

A company hired a technician to find all the devices connected within a network. Which of the following
software tools would BEST assist the technician in completing this task?

A. IP scanner

B. Terminal emulator

C. NetFlow analyzer

D. Port scanner

Answer: A

Question #:9

A network technician has multimode fiber optic cable available in an existing IDF. Which of the following
Ethernet standards should the technician use to connect the network switch to the existing fiber?

A. 10GBaseT

B. 1000BaseT

C. 1000BaseSX

D. 1000BaseLX

Pass Your Certification With Marks4sure Guarantee 3 of 56

Practice Test CompTIA - N10-008

Answer: A

Question #:10

A network technician was troubleshooting an issue for a user who was being directed to cloned websites that
were stealing credentials. The URLs were correct for the websites but an incorrect IP address was revealed
when the technician used ping on the user's PC After checking the is setting, the technician found the DNS
server address was incorrect Which of the following describes the issue?

A. Rogue DHCP server

B. Misconfigured HSRP

C. DNS poisoning

D. Exhausted IP scope

Answer: D

Question #:11

An attacker is attempting to find the password to a network by inputting common words and phrases in
plaintext to the password prompt. Which of the following attack types BEST describes this action?

A. Pass-the-hash attack

B. Rainbow table attack

C. Brute-force attack

D. Dictionary attack

Answer: D

Explanation
QUESTIONNO: 53

Which of the following technologies provides a failover mechanism for the default gateway?

A. FHRP

B. LACP

C. OSPF

D. STP

Answer: A

Pass Your Certification With Marks4sure Guarantee 4 of 56

Practice Test CompTIA - N10-008

Question #:12

Which of the following is used to track and document various types of known vulnerabilities?

A. CVE

B. Penetration testing

C. Zero-day

D. SIEM

E. Least privilege

Answer: A

Question #:13

A network technician is observing the behavior of an unmanaged switch when a new device is added to the
network and transmits data. Which of the following BEST describes how the switch processes this
information?

A. The data is flooded out of every port. including the one on which it came in.

B. The data is flooded out of every port but only in the VLAN where it is located.

C. The data is flooded out of every port, except the one on which it came in

D. The data is flooded out of every port, excluding the VLAN where it is located

Answer: C

Question #:14

Which of the following devices would be used to manage a corporate WLAN?

A. A wireless NAS

B. A wireless bridge

C. A wireless router

D. A wireless controller

Answer: D

Pass Your Certification With Marks4sure Guarantee 5 of 56

Practice Test CompTIA - N10-008

Question #:15

A network administrator redesigned the positioning of the APs to create adjacent areas of wireless coverage.
After project validation, some users still report poor connectivity when their devices maintain an association to
a distanced AP. Which of the following should the network administrator check FIRST?

A. Validate the roaming settings on the APs and WLAN clients

B. Verify that the AP antenna type is correct for the new layout

C. Check to see if MU-MIMO was properly activated on the APs

D. Deactivate the 2.4GHz band on the APS

Answer: A

Question #:16

A network technician needs to ensure outside users are unable to telnet into any of the servers at the
datacenter. Which of the following ports should be blocked when checking firewall configuration?

A. 22

B. 23

C. 80

D. 3389

E. 8080

Answer: B

Question #:17

A network technician is installing new software on a Windows-based server in a different geographical

location. Which of the following would be BEST for the technician to use to perform this task?

A. RDP

B. SSH

C. FTP

D. DNS

Answer: A

Pass Your Certification With Marks4sure Guarantee 6 of 56

Practice Test CompTIA - N10-008

Question #:18

Which of the following would MOST likely be used to review previous upgrades to a system?

A. Business continuity plan

B. Change management

C. System life cycle

D. Standard operating procedures

Answer: B

Question #:19

SIMULATION

You have been tasked with setting up a wireless network in anoffice. The network will consist of 3 Access
Points and a single switch. The network must meet the following parameters:

The SSIDs need to be configured as CorpNet with a key of S3cr3t!

The wireless signals should not interfere with each other

The subnet the Access Points and switch are on should only support 30 devices maximum

The Access Points should be configured to only support TKIP clients at a maximum speed

INSTRUCTONS

Click on the wireless devices and review their information and adjust the settingsof the access points to meet
the given requirements.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Pass Your Certification With Marks4sure Guarantee 7 of 56

Practice Test CompTIA - N10-008

Pass Your Certification With Marks4sure Guarantee 8 of 56

Practice Test CompTIA - N10-008

Pass Your Certification With Marks4sure Guarantee 9 of 56

Practice Test CompTIA - N10-008

Pass Your Certification With Marks4sure Guarantee 10 of 56

Practice Test CompTIA - N10-008

Pass Your Certification With Marks4sure Guarantee 11 of 56

Practice Test CompTIA - N10-008

Pass Your Certification With Marks4sure Guarantee 12 of 56

Practice Test CompTIA - N10-008

See explanation below.

Explanation
On the first exhibit, the layout should be as follows

Access Point Name AP1

IP Address 192.168.1.3

Gateway 192.168.1.2

SSID corpnet

SSID Broadcast yes

Mode G

Channel 1

Speed Auto

Duplex Auto

WPA

Passphrase S3cr3t!

Exhibit 2 as follows

Access Point Name AP2

IP Address 192.168.1.4

Gateway 192.168.1.2

SSID corpnet

SSID Broadcast yes

Mode G

Channel 6

Speed Auto

Pass Your Certification With Marks4sure Guarantee 13 of 56

Practice Test CompTIA - N10-008

Duplex Auto

WPA

Passphrase S3cr3t!

Exhibit 3 as follows

Access Point Name AP3

IP Address 192.168.1.5

Gateway 192.168.1.2

SSID corpnet

SSID Broadcast yes

Mode G

Channel 11

Speed Auto

Duplex Auto

WPA

Passphrase S3cr3t!

Question #:20

A corporation has a critical system that would cause unrecoverable damage to the brand if it was taken offline.
Which of the following disaster recovery solutions should the corporation implement?

A. Full backups

B. Load balancing

C. Hot site

D. Snapshots

Answer: C

Question #:21

An engineer is configuring redundant network links between switches. Which of thefollowing should the
engineer enable to prevent network stability issues?

Pass Your Certification With Marks4sure Guarantee 14 of 56

Practice Test CompTIA - N10-008

A. 802.1Q

B. STP

C. Flow control

D. CSMA/CD

Answer: B

Question #:22

A customer wants to segregate the traffic between guests on a hypervisor. Which of the following does a
technician need to configure to meet the requirement?

A. Virtual switches

B. OSPF routing

C. Load balancers

D. NIC teaming

E. Fibre Channel

Answer: A
Question #:23

A technician is connecting multiple switches to create a large network for a new office. The switches are
unmanaged Layer 2 switches with multiple connections between each pair. The network is experiencing an
extreme amount of latency. Which of the following is MOST likely occurring?

A. Ethernet collisions

B. A DDoS attack

C. A broadcast storm

D. Routing loops

Answer: C

Question #:24

An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both
ends of the connection are configured for half duplex. Which of the following is the MOST likely cause of this
issue?

A.

Pass Your Certification With Marks4sure Guarantee 15 of 56

Practice Test CompTIA - N10-008

A. The link is improperly terminated

B. One of the devices is misconfigured

C. The cable length is excessive

D. One of the devices has a hardware issue

Answer: C

Question #:25

A network technician is investigating an issue with a desktop that is not connecting to the network. The
desktop was connecting successfully the previous day, and no changes were made to the environment. The
technician locates the switchport where the device is connected and observes the LED status light on the
switchport is not lit even though the desktop is turned on Other devices that arc plugged into the switch are
connecting to the network successfully Which of the following is MOST likely the cause of the desktop not
connecting?

A. Transceiver mismatch

B. VLAN mismatch

C. Port security

D. Damaged cable

E. Duplex mismatch

Answer: C

Question #:26

Which of the following BEST describes a network appliance that warns of unapproved devices that are
accessing the network?

A. Firewall

B. AP

C. Proxyserver

D. IDS

Answer: D

Question #:27

Pass Your Certification With Marks4sure Guarantee 16 of 56

Practice Test CompTIA - N10-008

A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a
non-standard socket Which of the following types of rules is the administrator implementing?

A. NAT

B. PAT

C. STP

D. SNAT

E. ARP

Answer: D

Question #:28

A technician is installing a new fiber connection toa network device in a datacenter. The connection from the
device to the switch also traverses a patch panel connection. The chain of connections is in the following
order:

Device

LC/LC patch cable

Patch panel

Cross-connect fiber cable

Patch panel

LC/LC patch cable

Switch

The connection is not working. The technician has changed both patch cables with known working patch
cables. The device had been tested and was working properly before being installed. Which of the following is
the MOST likely cause of the issue?

A. TX/RX is reversed

B. An incorrect cable was used

C. The device failed during installation

D. Attenuation is occurring

Answer: A

Pass Your Certification With Marks4sure Guarantee 17 of 56

Practice Test CompTIA - N10-008

Question #:29

A network device is configured to send critical events to a syslog server; however, the following alerts are not
being received:

Severity 5 LINK-UPDOWN: Interface 1/1, changed state to down

Severity 5LINK-UPDOWN: Interface 1/3, changed state to down

Which of the following describes the reason why the events are not being received?

A. The network device is not configured to log that level to the syslog server

B. The network device was down and could not send the event

C. The syslog server is not compatible with the network device

D. The syslog server did not have the correct MIB loaded to receive the message

Answer: A

Question #:30

A technician isdeploying a new switch model and would like to add it to the existing network monitoring
software. The technician wants to know what metrics can be gathered from a given switch. Which of the
following should the technician utilize for the switch?

A. MIB

B. Trap

C. Syslog

D. Audit log

Answer: A

Question #:31

A client recently added 100 users who are using VMs. All users have since reported slow or unresponsive
desktops. Reports show minimal network congestion, zero packet loss, and acceptable packet delay. Which of
the following metrics will MOST accurately show the underlying performance issues? (Choose two.)

A. CPU usage

B. Memory

C. Temperature

D.

Pass Your Certification With Marks4sure Guarantee 18 of 56

Practice Test CompTIA - N10-008

D. Bandwidth

E. Latency

F. Jitter

Answer: A B

Question #:32

An ITdirector is setting up new disaster and HA policies for a company. Limited downtime is critical to
operations. To meet corporate requirements, the director set up two different datacenters across the country
that will stay current on data and applications.In the event of an outage, the company can immediately switch
from one datacenter to another. Which of the following does this BEST describe?

A. A warm site

B. Data mirroring

C. Multipathing

D. Load balancing

E. A hot site

Answer: E

Question #:33

An organization with one core and five distribution switches is transitioning from a star to a full-mesh
topology Which of the following is the number of additional network connections needed?

A. 5

B. 7

C. 10

D. 15

Answer: A

Question #:34

A technician is assisting a user who cannot connect to a network resource. The technician first checks for a
link light. According to troubleshooting methodology, this is an example of:

A. using a bottom-to-top approach.

Pass Your Certification With Marks4sure Guarantee 19 of 56

Practice Test CompTIA - N10-008

B. establishing a plan of action.

C. documenting a finding.

D. questioning the obvious.

Answer: D

Question #:35

An IDS was installed behind the edge firewall after a network was breached. The network was then breached
again even though the IDS logged the attack. Which of the following should be used in place of these devices
to prevent future attacks?

A. A network tap

B. A proxy server

C. A UTM appliance

D. A content filter

Answer: C

Question #:36

A lab environment hosts Internet-facing web servers and other experimental machines, which technicians use
for various tasks A technician installs software on one of the web servers to allow communication to the
company's file server, but it is unable to connect to it Other machines in the building are able to retrieve files
from the file server. Which of the following is the MOST likely reason the web server cannot retrieve the files,
and what should be done to resolve the problem?

A. The lab environment's IDS is blocking the network traffic 1 he technician can whitelist the new
application in the IDS

B. The lab environment is located in the DM2, and traffic to the LAN zone is denied by default. The
technician can move the computer to another zone or request an exception from the

administrator.

C. The lab environment has lost connectivity to the company router, and the switch needs to be rebooted.
The technician can get the key to the wiring closet and manually restart the switch

D. The lab environment is currently set up with hubs instead of switches, and the requests are getting
bounced back The technician can submit a request for upgraded equipment to

management.

Pass Your Certification With Marks4sure Guarantee 20 of 56

Practice Test CompTIA - N10-008

Answer: B

Question #:37

The following configuration is applied to a DHCP server connected to a VPNconcentrator:

There are 300 non-concurrent sales representatives who log in for one hour a day to upload reports, and 252 of
these representatives are able to connect to the VPN without any Issues. The remaining sales representatives
cannot connect tothe VPN over the course of the day. Which of the following can be done to resolve the issue
without utilizing additional resources?

A. Decrease the lease duration

B. Reboot the DHCP server

C. Install a new VPN concentrator

D. Configure a new router

Answer: A

Question #:38

An administrator is writing a script to periodically log the IPv6 and MAC addresses of all the devices on a
network segment. Which ofthe following switch features will MOST likely be used to assist with this task?

A. Spanning Tree Protocol

B. Neighbor Discovery Protocol

C. Link Aggregation Control Protocol

D. Address Resolution Protocol

Answer: B

Question #:39

A company wants to implement a large number of WAPs throughout its building and allow users to be able to
move around the building without dropping their connections Which of the following pieces of equipment
would be able to handle this requirement?

A. A VPN concentrator

Pass Your Certification With Marks4sure Guarantee 21 of 56

Practice Test CompTIA - N10-008

B. A load balancer

C. A wireless controller

D. A RADIUS server

Answer: A

Question #:40

A technician is writing documentation regarding a company’s server farm. The technician needs to confirm the
server name for all Linux servers. Which of the following commands should the technician run?

A. ipconfig

B. nslookup

C. arp

D. route

Answer: B

Question #:41

Which of the following systems would MOST likely be found in ascreened subnet?

A. RADIUS

B. FTP

C. SQL

D. LDAP

Answer: B

Question #:42

An ARP request is broadcasted and sends the following request.

''Who is 192.168.1.200? Tell 192.168.1.55''

At which of the following layers of the OSI model does this request operate?

A. Application

B.

Pass Your Certification With Marks4sure Guarantee 22 of 56

Practice Test CompTIA - N10-008

B. Data link

C. Transport

D. Network

E. Session

Answer: B

Question #:43

Which of the following is MOST likely to generate significant East-West traffic in a datacenter?

A. A backup of a large video presentation to cloud storage for archival purposes

B. A duplication of a hosted virtual server to another physical server for redundancy

C. A download of navigation data to a portable device for offline access

D. A query from an IoT device to a cloud-hosted server for a firmware update

Answer: B

Question #:44

Which of the following would be BEST to use to detect a MAC spoofing attack?

A. Internet Control MessageProtocol

B. Reverse Address Resolution Protocol

C. Dynamic Host Configuration Protocol

D. Internet Message Access Protocol

Answer: B

Question #:45

A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building.
Several APs are mounted in this office. The users report that the network connections frequently disconnect
and reconnect throughout the day. Whichof the following is the MOST likely cause of this issue?

A. The AP association time is set too low

B. EIRP needs to be boosted

C.

Pass Your Certification With Marks4sure Guarantee 23 of 56

Practice Test CompTIA - N10-008

C. Channel overlap is occurring

D. The RSSI is misreported

Answer: B

Question #:46

Which of the following transceiver types can support up to 40Gbps?

A. SFP+

B. QSFP+

C. QSFP

D. SFP

Answer: B

Question #:47

There are two managed legacy switches running that cannot be replaced or upgraded. These switches do not
support cryptographic functions, but they are password protected. Which of the following should a network
administrator configure to BEST prevent unauthorized access?

A. Enable a management access list

B. Disable access to unnecessary services.

C. Configure a stronger password for access

D. Disable access to remote management

E. Use an out-of-band access method.

Answer: A
Question #:48

A small, family-run business uses a single SOHO router to provide Internet and WiFi to its employees At the
start of a new week, employees come in and find their usual WiFi network is no longer available, and there is
a new wireless network to which they cannot connect. Given that information, which of the following should
have been done to avoid this situation'

A. The device firmware should have been kept current.

B. Unsecure protocols should have been disabled.

C. Parental controls should have been enabled

Pass Your Certification With Marks4sure Guarantee 24 of 56

Practice Test CompTIA - N10-008

D. The default credentials should have been changed

Answer: A

Question #:49

A technician receives feedback that some users are experiencing high amounts of jitter while using the
wireless network. While troubleshooting the network, the technician uses the ping command with the IP
address of the default gateway and verifies large variations in latency. The technician thinks the issue may be
interference from other networks and non-802.11 devices. Which of the following tools should the technician
use to troubleshoot the issue?

A. NetFlow analyzer

B. Bandwidth analyzer

C. Protocol analyzer

D. Spectrum analyzer

Answer: D

Question #:50

A city has hired a new employee who needs to be able to work when traveling at home and at the municipal
sourcing of a neighboring city that snares services. The employee is issued a laptop, and a technician needs to
train the employee on the appropriate solutions for secure access to the network from all the possible locations
On which of the following solutions would the technician MOST likely train the employee?

A. Site-to-site VPNs between the two city locations and client-to-site software on the employee's laptop tor
all other remote access

B. Client-to-site VPNs between the travel locations and site-to-site software on the employee's laptop for
all other remote access

C. Client-to-site VPNs between the two city locations and site-to-site software on the employee's laptop for
all other remote access

D. Site-to-site VPNs between the home and city locations and site-to-site software on the employee's laptop
for all other remote access

Answer: A

Question #:51

Which of thefollowing DNS records works as an alias to another record?

A.

Pass Your Certification With Marks4sure Guarantee 25 of 56

Practice Test CompTIA - N10-008

A. AAAA

B. CNAME

C. MX

D. SOA

Answer: B

Question #:52

A technician is troubleshooting a workstation's network connectivity and wants to confirm which switchport
corresponds to the wall jack the PC is using Which of the following concepts would BEST help the
technician?

A. Consistent labeling

B. Change management

C. Standard work instructions

D. Inventory management

E. Network baseline

Answer: A

Question #:53

A network administrator is installing a wireless network at aclient’s office. Which of the following IEEE
802.11 standards would be BEST to use for multiple simultaneous client access?

A. CDMA

B. CSMA/CD

C. CSMA/CA

D. GSM

Answer: A

Question #:54

Which of the following would need to be configured to ensure a device with a specific MAC address is always
assigned the same IP address from DHCP?

A.

Pass Your Certification With Marks4sure Guarantee 26 of 56

Practice Test CompTIA - N10-008

A. Scope options

B. Reservation

C. Dynamic assignment

D. Exclusion

E. Static assignment

Answer: B

Question #:55

A technician is installing multiple UPS units in a major retail store. The technician is required to keep track of
all changes to new and old equipment. Which of the following will allow the technician to record these
changes?

A. Asset tags

B. A smart locker

C. An access control vestibule

D. A camera

Answer: A

Question #:56

Which of the following is the physical topology for an Ethernet LAN?

A. Bus

B. Ring

C. Mesh

D. Star

Answer: D

Question #:57

Within the realm of network security, Zero Trust:

A. prevents attackers from moving laterally through a system.

B.

Pass Your Certification With Marks4sure Guarantee 27 of 56

Practice Test CompTIA - N10-008

B. allows a server to communicate with outside networks without a firewall.

C. block malicious software that is too new to be found in virus definitions.

D. stops infected files from being downloaded via websites.

Answer: C

Question #:58

Which of the following connector types would have the MOST flexibility?

A. SFP

B. BNC

C. LC

D. RJ45

Answer: A

Question #:59

A technician is searching for a device that is connected to the network and has the device’sphysical network
address. Which of the following should the technician review on the switch to locate the device’s network
port?

A. IP route table

B. VLAN tag

C. MAC table

D. QoS tag

Answer: C

Question #:60

Which of the following routing protocols is used to exchange routeinformation between public autonomous
systems?

A. OSPF

B. BGP

C. EGRIP

Pass Your Certification With Marks4sure Guarantee 28 of 56

Practice Test CompTIA - N10-008

D. RIP

Answer: B

Question #:61

According to troubleshooting methodology, which of the following should the technician doNEXT after
determining the most likely probable cause of an issue?

A. Establish a plan of action to resolve the issue and identify potential effects

B. Verify full system functionality and, if applicable, implement preventive measures

C. Implement the solution or escalate as necessary

D. Test the theory to determine the cause

Answer: D

Question #:62

Which of the following types of devices can provide content filtering and threat protection, and manage
multiple IPSec site-to-site connections?

A. Layer 3 switch

B. VPN headend

C. Next-generation firewall

D. Proxy server

E. Intrusion prevention

Answer: C

Question #:63

A network administrator discovers that users in an adjacent building areconnecting to the company’s guest
wireless network to download inappropriate material. Which of the following can the administrator do to
MOST easily mitigate this issue?

A. Reduce the wireless power levels

B. Adjust the wireless channels

C. Enablewireless client isolation

Pass Your Certification With Marks4sure Guarantee 29 of 56

Practice Test CompTIA - N10-008

D. Enable wireless port security

Answer: A

Question #:64

A SaaS provider has decided to leave an unpatched VM available via a public DMZ port. With which of the
following concepts is this technique MOST closely associated?

A. Insider threat

B. War driving

C. Evil twin

D. Honeypot

Answer: D

Question #:65

A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a
radio. Which of the following antenna types should the AP utilize?

A. Omni

B. Directional

C. Yagi

D. Parabolic

Answer: A

Question #:66

A network administrator is setting up several loT devices on a new VLAN and wants to accomplish the
following

1. Reduce manual configuration on each system

2. Assign a specific IP address to each system

3. Allow devices to move to different switchports on the same VLAN

Which of the following should the network administrator do to accomplish these requirements?

A. Set up a reservation for each device

Pass Your Certification With Marks4sure Guarantee 30 of 56

Practice Test CompTIA - N10-008

B. Configure a static IP on each device

C. Implement private VLANs for each device

D. Use DHCP exclusions to address each device

Answer: C

Question #:67

A network is experiencing a number of CRC errors during normal network communication. At which of the
following layers of the OSI model will the administrator MOST likely start to troubleshoot?

A. Layer 1

B. Layer 2

C. Layer 3

D. Layer 4

E. Layer 5

F. Layer 6

G. Layer 7

Answer: B

Question #:68

Which of the following is used to prioritize Internet usage per application and per user on the network?

A. Bandwidth management

B. Load balance routing

C. Border Gateway Protocol

D. Administrative distance

Answer: A

Question #:69

A Chief Information Officer (CIO) wants to improve the availability of a company's SQL database Which of
the following technologies should be utilized to achieve maximum availability?

Pass Your Certification With Marks4sure Guarantee 31 of 56

Practice Test CompTIA - N10-008

A. Clustering

B. Port aggregation

C. NIC teaming

D. Snapshots

Answer: C

Question #:70

A network technician is reviewing an upcoming project's requirements to implement laaS. Which of the
following should the technician consider?

A. Software installation processes

B. Type of database to be installed

C. Operating system maintenance

D. Server hardware requirements

Answer: D

Question #:71

An organization wants to implement a method of centrally managing logins to network services. Which of the
following protocols should the organization use to allow for authentication, authorization and auditing?

A. MS-CHAP

B. RADIUS

C. LDAPS

D. RSTP

Answer: A

Question #:72

A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to
assign. The ISP assigned 196.26.4.0/26, and the branch gateway router now has the following configurations
on the interface that peers to the ISP:

Pass Your Certification With Marks4sure Guarantee 32 of 56

Practice Test CompTIA - N10-008

The network engineer observes that all users have lost Internet connectivity. Which of the following describes
the issue?

A. The incorrect subnet mask was configured

B. The incorrect gateway was configured

C. The incorrect IPaddress was configured

D. The incorrect interface was configured

Answer: A

Question #:73

Which of the following is a system that is installed directly on a server's hardware and abstracts the hardware
from any guest machines?

A. Storage array

B. Type 1 hypervisor

C. Virtual machine

D. Guest QS

Answer: A

Question #:74

Several WIFI users are reporting the inability to connect to the network. WLAN users on the guest network are
able to access all network resources without any performance issues. The following table summarizes the
findings after a site survey of the area in question:

Which of the following should a wireless technician do NEXT to troubleshoot this issue?

Pass Your Certification With Marks4sure Guarantee 33 of 56

Practice Test CompTIA - N10-008

A. Reconfigure the channels to reduce overlap

B. Replace the omni antennas with directional antennas

C. Update the SSIDs on all the APs

D. Decrease power in AP 3 and AP 4

Answer: A

Question #:75

A technician is deploying a low-density wireless network and is contending with multiple types of building
materials. Which of the following wireless frequencies would allow for the LEAST signal attenuation?

A. 2.4GHz

B. 5GHz

C. 850MHz

D. 900MHZ

Answer: B

Question #:76

A network engineer is investigating reports of poor network performance. Upon reviewing a report, the
engineer finds that jitter at the office is greater than 10ms on the only WANconnection available. Which of the
following would be MOST affected by this statistic?

A. A VoIP sales call with a customer

B. An in-office video call with a coworker

C. Routing table from the ISP

D. Firewall CPU processing time

Answer: A

Question #:77

You are tasked with verifying the following requirements are met in order to ensure network security.

Requirements:

Pass Your Certification With Marks4sure Guarantee 34 of 56

Practice Test CompTIA - N10-008

Datacenter

Ensure network is subnetted to allow all devices to communicate properly whileminimizing address space
usage

Provide a dedicated server to resolve IP addresses and hostnames correctly and handle port 53 traffic

Building A

Ensure network is subnetted to allow all devices to communicate properly while minimizing address space
usage

Provide devices to support 5 additional different office users

Add an additional mobile user

Replace the Telnet server with a more secure solution

Screened subnet

Ensure network is subnetted to allow all devices to communicate properly while minimizing address space
usage

Provide a server to handle external 80/443 traffic

Provide a server to handle port 20/21 traffic

INSTRUCTIONS

Drag and drop objects onto the appropriate locations. Objects can be used multiple times and not all
placeholders need to be filled.

Available objects are located in both the Servers and Devices tabs of the Drag & Drop menu.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Pass Your Certification With Marks4sure Guarantee 35 of 56

Practice Test CompTIA - N10-008

See explanation below.

Explanation
Top left subnet – 206.208.134.0/28

Pass Your Certification With Marks4sure Guarantee 36 of 56

Practice Test CompTIA - N10-008

Top right subnet – 10.72.63.0/28

Bottom subnet – 192.168.11.0/28

Screened Subnet devices – Web server, FTP server

Building A devices – SSH server top left, workstations on all 5 on the right, laptop on bottom left

DataCenter devices – DNS server.

Question #:78

Which of the following protocol types describes secure communication on port 443?

A. ICMP

B. UDP

C. TCP

D. IP

Answer: C

Question #:79

A network administrator wants to improve the security of the management console on the company's switches
and ensure configuration changes made can be correlated to the administrator who conformed them Which of
the following should the network administrator implement?

A. Port security

B. Local authentication

C. TACACS+

D. Access control list

Answer: C

Question #:80

Which of the following technologies allows traffic to be sent through two different ISPs to increase
performance?

A. Fault tolerance

B. Quality of service

Pass Your Certification With Marks4sure Guarantee 37 of 56

Practice Test CompTIA - N10-008

C. Load balancing

D. Port aggregation

Answer: A

Question #:81

A company that uses VoIP telephones is experiencing intermittent issues with one-way audio and dropped
conversations The manufacturer says the system will work if ping times are less than 50ms. The company has
recorded the following ping times:

Which of the following is MOST likely causing the issue?

A. Attenuation

B. Latency

C. VLAN mismatch

D. Jitter

Answer: A

Question #:82

A new cabling certification is being requested every time a network technician rebuilds one end of a Cat 6
(vendor-certified)cable to create a crossover connection that is used to connect switches. Which of the
following would address this issue by allowing the use of the original cable?

A. CSMA/CD

B. LACP

C. PoE+

D. MDIX

Answer: D

Question #:83

A website administrator is concerned the company’s static website could be defaced by hacktivists or used as a
pivot point to attack internal systems. Which of the following should a network security administrator

Pass Your Certification With Marks4sure Guarantee 38 of 56

Practice Test CompTIA - N10-008

recommend to assist with detecting these activities?

A. Implement file integrity monitoring.

B. Change the default credentials.

C. Use SSL encryption.

D. Update the web-server software.

Answer: C

Question #:84

Atechnician is installing a high-density wireless network and wants to use an available frequency that supports
the maximum number of channels to reduce interference. Which of the following standard 802.11 frequency
ranges should the technician look for while reviewing WAP specifications?

A. 2.4GHz

B. 5GHz

C. 6GHz

D. 900MHz

Answer: B

Question #:85

A networkengineer is investigating reports of poor network performance. Upon reviewing a device

configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following
would be the MOST likely result of this finding?

A. IncreasedCRC errors

B. Increased giants and runts

C. Increased switching loops

D. Increased device temperature

Answer: A

Question #:86

Branch users are experiencing issues with videoconferencing. Which of the following will the company
MOST likely configure to improveperformance for these applications?

Pass Your Certification With Marks4sure Guarantee 39 of 56

Practice Test CompTIA - N10-008

A. Link Aggregation Control Protocol

B. Dynamic routing

C. Quality of service

D. Network load balancer

E. Static IP addresses

Answer: C

Question #:87

A company built a new building at its headquarters location. The new building is connected to the company’s
LAN via fiber-optic cable. Multiple users in the new building are unable to access the company’s intranet site
via their web browser, but they are able to access internet sites. Which of the following describes how the
network administrator can resolve this issue?

A. Correct the DNS server entries in the DHCP scope

B. Correct the external firewall gateway address

C. Correct the NTP server settings on the clients

D. Correct a TFTP Issue on the company’s server

Answer: A

Question #:88

A network technician is reviewing the interface counters on a router interface. The technician is attempting to
confirm a cable issue. Given the following information:

Which of the following metrics confirms there is a cablingissue?

A.

Pass Your Certification With Marks4sure Guarantee 40 of 56

Practice Test CompTIA - N10-008

A. Last cleared

B. Number of packets output

C. CRCs

D. Giants

E. Multicasts

Answer: C

Question #:89

A user recently made changes to a PC that caused it to be unable to access websites by both FQDN and IP
Local resources, such as the file server remain accessible. Which of the following settings did the user MOST
likely misconfigure?

A. Static IP

B. Default gateway

C. DNS entries

D. Local host file

Answer: B
Question #:90

Given thefollowing information:

Which of the following command-line tools would generate this output?

A. netstat

B. arp

C. dig

D. tracert

Answer: A

Pass Your Certification With Marks4sure Guarantee 41 of 56

Practice Test CompTIA - N10-008

Question #:91

Which of the following service models would MOST likely be used toreplace on-premises servers with a
cloud solution?

A. PaaS

B. IaaS

C. SaaS

D. Disaster recovery as a Service (DRaaS)

Answer: B

Question #:92

A user tries to ping 192.168.1.100 from the command prompt on the 192.168.2.101 network but gets the
following response: U.U.U.U. Which of the following needs to be configured for these networks to reach each
other?

A. Network address translation

B. Default gateway

C. Loopback

D. Routing protocol

Answer: B

Question #:93

The management team needs to ensure unnecessary modifications to the corporate network are not permitted
and version control is maintained. Which of the following documents would BEST support this?

A. An incident response plan

B. A business continuity plan

C. Achange management policy

D. An acceptable use policy

Answer: C

Question #:94

Pass Your Certification With Marks4sure Guarantee 42 of 56

Practice Test CompTIA - N10-008

A technician wants to deploy a new wireless network that comprises 30 WAPs installed throughout a
three-story office building. All the APs will broadcast the sameSSID for client access. Which of the following
BEST describes this deployment?

A. Extended service set

B. Basic service set

C. Unified service set

D. Independent basic service set

Answer: A

Question #:95

Which of the following is the LARGEST MTU for a standard Ethernet frame?

A. 1452

B. 1492

C. 1500

D. 2304

Answer: C

Question #:96

A user reports a weak signal when walking 20ft (61 m) away from the WAP in one direction, but a strong
signal when walking 20ft in the opposite direction The technician has reviewed the configuration and
confirmed the channel type is correct There is no jitter or latency on the connection Which of the following
would be the MOST likely cause of the issue?

A. Antenna type

B. Power levels

C. Frequency

D. Encryption type

Answer: A

Question #:97

A technician is configuring a network switch to be used in a publicly accessible location. Which of the

Pass Your Certification With Marks4sure Guarantee 43 of 56

Practice Test CompTIA - N10-008

following should the technician configure on the switchto prevent unintended connections?

A. DHCP snooping

B. Geofencing

C. Port security

D. Secure SNMP

Answer: C

Question #:98

A network administrator has been directed to present the network alerts from the past week to the company's
executive staff. Which of the following will provide the BEST collection and presentation of this data?

A. A port scan printout

B. A consolidated report of various network devices

C. A report from the SIEM tool

D. A report from a vulnerability scan done yesterday

Answer: C

Question #:99

An IT organization needs to optimize speeds for globalcontent distribution and wants to reduce latency in
high-density user locations. Which of the following technologies BEST meets the organization’s
requirements?

A. Load balancing

B. Geofencing

C. Public cloud

D. Content delivery network

E. Infrastructure as a service

Answer: D

Question #:100

Access to a datacenter should be individually recorded by a card reader even when multiple employees enter

Pass Your Certification With Marks4sure Guarantee 44 of 56

Practice Test CompTIA - N10-008

the facility at the same time. Which of the following allowsthe enforcement of this policy?

A. Motion detection

B. Access control vestibules

C. Smart lockers

D. Cameras

Answer: B

Question #:101

A network administrator walks into a datacenter and notices an unknown person is following closely. The
administrator stops and directs the person tothe security desk. Which of the following attacks did the network
administrator prevent?

A. Evil twin

B. Tailgating

C. Piggybacking

D. Shoulder surfing

Answer: B

Question #:102

Client devices cannot enter a network, and the network administrator determines the DHCP scope is
exhausted. The administrator wants to avoid creating a new DHCP pool. Which of the following can the
administrator perform to resolve the issue?

A. Install load balancers

B. Install more switches

C. Decrease the number of VLANs

D. Reduce the lease time

Answer: D

Question #:103

Anetwork administrator is configuring a load balancer for two systems. Which of the following must the
administrator configure to ensure connectivity during a failover?

Pass Your Certification With Marks4sure Guarantee 45 of 56

Practice Test CompTIA - N10-008

A. VIP

B. NAT

C. APIPA

D. IPv6 tunneling

E. Broadcast IP

Answer: A

Question #:104

A network administrator is downloading a large patch that will be uploaded to several enterprise switches
simultaneously during the day's upgrade cycle. Which of the following should the administrator do to help
ensure the upgrade process will be less likely to cause problems with the switches?

A. Confirm the patch's MD5 hash prior to the upgrade

B. Schedule the switches to reboot after an appropriate amount of time.

C. Download each switch's current configuration before the upgrade

D. Utilize FTP rather than TFTP to upload the patch

Answer: C

Question #:105

A network technician is manually configuring the network settings for a new device and is told the network
block is 192.168.0.0/20. Which of the following subnets should the technician use?

A. 255.255.128.0

B. 255.255.192.0

C. 255.255.240.0

D. 255.255.248.0

Answer: C

Question #:106

A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use
to detect the exact break point of thefiber link?

Pass Your Certification With Marks4sure Guarantee 46 of 56

Practice Test CompTIA - N10-008

A. OTDR

B. Tone generator

C. Fusion splicer

D. Cable tester

E. PoE injector

Answer: A

Question #:107

A network administrator needs to query the NSs for a remote application. Which of the following commands
would BEST help the administrator accomplish this task?

A. dig

B. arp

C. show interface

D. hostname

Answer: A

Question #:108

A network administrator is designing a new datacenter in a different region that will need to communicate to
the old datacenter with a secure connection. Which of the following access methods would provide the BEST
security for this new datacenter?

A. Virtual network computing

B. Secure Socket Shell

C. In-band connection

D. Site-to-site VPN

Answer: D

Question #:109

Which of the following TCP ports is used by the Windows OS for file sharing?

A. 53

Pass Your Certification With Marks4sure Guarantee 47 of 56

Practice Test CompTIA - N10-008

B. 389

C. 445

D. 1433

Answer: C

Question #:110

Given the following output:

Which of the following attacks is this MOST likely an example of?

A. ARP poisoning

B. VLAN hopping

C. Rogue access point

D. Amplified DoS

Answer: A

Question #:111

A network administrator is implementing OSPF on all of a company’s network devices. Which of the
following will MOST likely replace all the company’s hubs?

A. A Layer 3 switch

B. A proxy server

C. A NGFW

D. A WLAN controller

Answer: A

Question #:112

Pass Your Certification With Marks4sure Guarantee 48 of 56

Practice Test CompTIA - N10-008

Which of the following can be used to centrally manage credentials for various types of administrative
privileges on configured network devices?

A. SSO

B. TACACS+

C. Zero Trust

D. Separation of duties

E. Multifactor authentication

Answer: B

Question #:113

A technician is troubleshooting a previously encountered issue. Which of the following should the technician
reference to find what solution was implemented to resolve the issue?

A. Standard operating procedures

B. Configuration baseline documents

C. Work instructions

D. Change management documentation

Answer: A

Question #:114

A technician is troubleshooting a network switch that seems to stop responding to requests intermittently
whenever the logging level is set for debugging. Which of the following metrics should the technician check to
begin troubleshooting the issue?

A. Audit logs

B. CPU utilization

C. CRC errors

D. Jitter

Answer: B

Question #:115

Pass Your Certification With Marks4sure Guarantee 49 of 56

Practice Test CompTIA - N10-008

A network technician is investigating an IP phone that does not register in the VoIP system Although it
received an IP address, it did not receive the necessary DHCP options The information that is needed for the
registration is distributes by the OHCP scope All other IP phones are working properly. Which of the
following does the technician need to verify?

A. VLAN mismatch

B. Transceiver mismatch

C. Latency

D. DHCP exhaustion

Answer: A

Question #:116

A network technician is installing an analog desk phone for a new receptionist After running a new phone line,
the technician now needs to cnmp on a new connector. Which of the following connectors would MOST likely
be used in this case?

A. DB9

B. RJ11

C. RJ45

D. DB25

Answer: A

Question #:117

A workstation is configured with the following network details:

Software on the workstation needs to send a query tothe local subnet broadcast address. To which of the
following addresses should the software be configured to send the query?

A. 10.1.2.0

B. 10.1.2.1

C. 10.1.2.23

D. 10.1.2.255

Pass Your Certification With Marks4sure Guarantee 50 of 56

Practice Test CompTIA - N10-008

E. 10.1.2.31

Answer: E

Question #:118

A user reports being unable to access network resources after making some changes in the office. Which of the
following should a network technician do FIRST?

A. Check the system’s IP address

B. Do a ping test against the servers

C. Reseat the cables into the back of the PC

D. Ask what changes were made

Answer: D

Question #:119

Which of the following factors should be considered when evaluating a firewall to protect a datacenter’s
east-west traffic?

A. Replication traffic between an on-premises server and a remote backup facility

B. Traffic between VMs running on different hosts

C. Concurrent connections generated by Internet DDoS attacks

D. VPN traffic from remote offices to the datacenter’s VMs

Answer: A

Question #:120

Which of the following provides redundancy ona file server to ensure the server is still connected to a LAN
even in the event of a port failure on a switch?

A. NIC teaming

B. Load balancer

C. RAID array

D. PDUs

Pass Your Certification With Marks4sure Guarantee 51 of 56

Practice Test CompTIA - N10-008

Answer: A

Question #:121

A network engineer is designing a new secure wireless network. The engineer has been given the following
requirements:

1 Must not use plaintext passwords

2 Must be certificate based

3. Must be vendor neutral

Which of the following methods should the engineer select?

A. TWP-RC4

B. CCMP-AES

C. EAP-TLS

D. WPA2

Answer: C

Question #:122

A network field technician is installing and configuring a secure wireless network. The technician performs a
site survey. Which of the following documents would MOST likely be created as a result of the site survey?

A. Physical diagram

B. Heat map

C. Asset list

D. Device map

Answer: B

Question #:123

A technician is installing a cable modem in a SOHO. Which of the following cable types will the technician
MOST likely use to connect a modem to the ISP?

A. Coaxial

B. Single-mode fiber

Pass Your Certification With Marks4sure Guarantee 52 of 56

Practice Test CompTIA - N10-008

C. Cat 6e

D. Multimode fiber

Answer: A

Question #:124

A wireless network was installed in a warehouse for employees to scan crates with a wireless handheld
scanner. The wireless network was placed in the corner of the building near the ceiling for maximum coverage
However users in the offices adjacent lo the warehouse have noticed a large amount of signal overlap from the
new network Additionally warehouse employees report difficulty connecting to the wireless network from the
other side of the building; however they have no issues when Ihey are near the antenna Which of the following
is MOST likely the cause?

A. The wireless signal is being refracted by the warehouse's windows

B. The antenna's power level was set too high and is overlapping

C. An omnidirectional antenna was used instead of a unidirectional antenna

D. The wireless access points are using channels from the 5GHz spectrum

Answer: A

Question #:125

The network administrator is informed that a user’s email password is frequently hacked by brute-force
programs. Which of the following policies should the network administrator implements to BEST mitigate this
issue? (Choose two.)

A. Captive portal

B. Two-factor authentication

C. Complex passwords

D. Geofencing

E. Role-based access

F. Explicit deny

Answer: B C

Question #:126

Pass Your Certification With Marks4sure Guarantee 53 of 56

Practice Test CompTIA - N10-008

A technician needs to configure a Linux computer for network monitoring. The technician has the following
information:

Linux computer details:

Switch mirror port details:

After connecting the Linux computer to the mirror port on the switch, which of the following commands
should the technician run on the Linux computer?

A. ifconfig ecth0 promisc

B. ifconfig eth1 up

C. ifconfig eth0 10.1.2.3

D. ifconfig eth1 hw ether A1:B2:C3:D4:E5:F6

Answer: A

Question #:127

Which of the following ports is commonly used byVoIP phones?

A. 20

B. 143

C. 445

D. 5060

Answer: D

Question #:128

A systems administrator needs to improve WiFi performance in a densely populated office tower and use the
latest standard. There is a mix of devices that use 2.4 GHz and 5 GHz. Which of the followingshould the
systems administrator select to meet this requirement?

A. 802.11ac

Pass Your Certification With Marks4sure Guarantee 54 of 56

Practice Test CompTIA - N10-008

B. 802.11ax

C. 802.11g

D. 802.11n

Answer: B

Question #:129

Which of the following security devices would be BEST to use to provide mechanical access control to the
MDF/IDF?

A. A smart card

B. A key fob

C. An employee badge

D. A door lock

Answer: B

Question #:130

During the security audit of a financial firm the Chief Executive Officer (CEO) questions why there are three
employees who perform very distinct functions on the server. There is an administrator for creating users
another for assigning the users lo groups and a third who is the only administrator to perform file rights
assignment Which of the following mitigation techniques is being applied'

A. Privileged user accounts

B. Role separation

C. Container administration

D. Job rotation

Answer: B

Question #:131

At which of the following OSI model layers would a technician find an IP header?

A. Layer 1

B. Layer 2

Pass Your Certification With Marks4sure Guarantee 55 of 56

Practice Test CompTIA - N10-008

C. Layer 3

D. Layer 4

Answer: C

Question #:132

Which of the following policies is MOST commonly used for guest captive portals?

A. AUP

B. DLP

C. BYOD

D. NDA

Answer: A

Pass Your Certification With Marks4sure Guarantee 56 of 56

About Marks4sure.com
marks4sure.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam
Questions, Study Guides, Practice Tests.

We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially
Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on.

View list of all certification exams: All vendors

We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed
below.

Sales: sales@marks4sure.com
Feedback: feedback@marks4sure.com
Support: support@marks4sure.com

Any problems about IT certification or our products, You can write us back and we will get back to you within 24
hours.