CompTIA Network+ N10-009 (V9) Exam Practice Test 2

A SIEM platform aggregates and correlates log data from many different devices and sources, helping detect patterns not visible from any single device's logs alone.

LLDP and CDP allow directly connected devices to advertise information about themselves to their neighbors, enabling automatic discovery of physical topology. SNMP monitors device status, NTP synchronizes time, and STP prevents Layer 2 loops.

nslookup queries DNS resolution, ping tests basic reachability, traceroute shows each hop along a path, and netstat displays active connections and listening ports on the local machine.

Since the issue is localized to one area, insufficient coverage and localized interference/channel overlap are the most likely causes. A failed DHCP server, expired certificate, or DNS misconfiguration would typically affect the whole building.

Since local subnet communication works but off-subnet traffic fails entirely, an incorrect or missing default gateway is the most likely cause, since the gateway routes traffic beyond the local subnet.

Single-mode and multimode transceivers use different light sources and fiber core sizes, making them generally incompatible when paired on the same link.

Each PoE switch has a total power budget shared across connected devices, and once exhausted, the switch refuses to power additional devices even if compatible and properly cabled.

The methodology calls for gathering information and identifying symptoms before forming a theory, which the technician skipped by immediately replacing hardware based on a vague report.

A screened subnet, or DMZ, isolates public-facing servers in their own segment between the internet and internal network, limiting damage if that server is compromised.

A DDoS attack originates from many distributed sources, often thousands of compromised devices, distinguishing it from a traditional DoS attack typically from a single source.

An evil twin attack involves a rogue access point mimicking a legitimate network's SSID to trick users into connecting, allowing traffic interception. VLAN hopping crosses VLAN boundaries, MAC flooding overwhelms a switch's MAC table, and ARP spoofing manipulates local Layer 2 mappings.

Geofencing restricts access based on a device's physical geographic location. MFA adds a second authentication factor unrelated to location, role-based access control restricts based on job role, and SSO allows one login for multiple systems.

A jump box serves as a single, tightly controlled and monitored intermediary that administrators must pass through before accessing sensitive internal systems. A screened subnet isolates public-facing servers, a CDN caches content, and a load balancer distributes traffic.

DNSSEC adds cryptographic signatures to DNS records, allowing resolvers to verify a response genuinely came from the authoritative source. DoH encrypts the query in transit but doesn't validate record authenticity the way DNSSEC does.

Active-active has multiple sites simultaneously processing traffic and sharing load, unlike active-passive where one site remains idle as a standby. Cold and warm sites describe DR site readiness levels, not simultaneous active load sharing.

A load balancer distributes incoming traffic across multiple backend servers, preventing any single server from becoming overwhelmed. A proxy relays and filters requests, an IDS monitors for threats, and NAS provides shared file storage.

Packet capture records the full contents of packets, including payload data, allowing deep inspection of application-layer issues. Flow data summarizes statistics without payload detail, SNMP polling retrieves device status, and baseline metrics compare against historical norms.

A baseline or golden configuration establishes a known-good reference against which future configuration drift can be detected. A rack diagram documents physical layout, a heat map documents signal coverage, and an asset inventory tracks hardware/software assets.

A UPS provides battery backup, a PDU distributes power to multiple rack devices, a patch panel terminates and organizes cable runs, and a PoE injector delivers power over Ethernet when the switch itself doesn't support it.

A directional antenna focuses signal strength in a specific direction, ideal for covering a long, narrow space like a warehouse aisle, rather than spreading signal evenly as an omnidirectional antenna would.

Enterprise authentication uses 802.1X to authenticate each user individually against a backend server such as RADIUS, tied to Active Directory. PSK uses one shared passphrase, WEP is outdated, and a captive portal without authentication doesn't verify identity.

Link aggregation, often using LACP, combines multiple physical NICs into a single logical link, increasing throughput and providing redundancy. VLAN tagging segments traffic, spanning tree prevents loops, and jumbo frames increase frame size.

Since native VLAN traffic is sent untagged, a mismatch means untagged frames can be misinterpreted as belonging to the wrong VLAN, a security risk exploited in VLAN hopping attacks. This is not automatically corrected and does not shut the trunk down.

An FHRP allows two or more routers to share a virtual IP address as a redundant default gateway, automatically failing over without client reconfiguration. NAT and PAT translate addresses, and a subinterface is a logical division of a physical interface.

SD-WAN is transport agnostic, working across different underlying WAN transport types, while providing central policy management to route traffic over the best-performing link. VXLAN addresses data center Layer 2 extension, ZTA addresses security posture, and STP prevents Layer 2 loops.

VLSM allows subnets of different sizes to be created from a single address block, matching each network's actual number of devices rather than wasting addresses on equally sized blocks.

A spine-and-leaf topology connects every leaf switch to every spine switch, ensuring any two devices are the same number of hops apart. Star/hub and spoke centralizes around one device, and point to point connects only two devices.

DAC cables integrate the transceiver directly into the cable assembly, providing a low-cost, low-latency connection for short-distance, high-speed links. Single-mode fiber is for longer distances, Category 3 is outdated, and coaxial is not typical for switch-to-switch links.

UDP does not perform retransmission, minimizing latency at the cost of guaranteed delivery, fitting real-time applications like VoIP. TCP guarantees delivery but adds retransmission delay, ICMP is used for diagnostics, and GRE is a tunneling protocol.

NFV replaces dedicated hardware appliances with software-based instances on standard server hardware. A CDN caches content, multitenancy describes shared infrastructure, and elasticity describes automatic scaling.