CompTIA Network+ (N10-009) practice quiz

Question 1

A company deploys a cloud environment where the network administrator manages virtual switches and subnets but not the underlying physical hosts. Which cloud service model is being used?

Accepted Answer

Infrastructure as a Service

Answer

Software as a Service

Answer

Platform as a Service

Answer

Function as a Service

Question 2

A network administrator configures a switch port so that devices on VLAN 10 and VLAN 20 can communicate through a single router interface. What is this configuration called?

Accepted Answer

Router on a stick

Answer

Port mirroring

Answer

Spanning tree root bridge

Answer

Link aggregation

Question 3

A network administrator wants to capture all traffic passing through a switch port for forensic analysis without interrupting production traffic. Which feature should be enabled?

Accepted Answer

Port mirroring

Answer

Port security

Answer

Spanning tree

Answer

VLAN tagging

Question 4

A disaster recovery plan requires that after a failure, the network must be restored within four hours with data no more than one hour old. Which metrics define these requirements?

Accepted Answer

RTO of 4 hours and RPO of 1 hour

Answer

MTBF of 4 hours and MTTR of 1 hour

Answer

SLA uptime of 99.9% and load balancing

Answer

NTP synchronization and NTP failover

Question 5

A technician uses the ping command and receives replies with a TTL value of 254. The destination is five hops away. What does the TTL value indicate about the packets?

Accepted Answer

The packets have traversed one router

Answer

The packets are being fragmented at each hop

Answer

The packets originated from a Linux host

Answer

The packets exceeded the hop limit

Question 6

A company is deploying VoIP phones and needs to ensure voice traffic is prioritized over data traffic during network congestion. Which technology should the administrator configure on the switches?

Accepted Answer

Quality of Service

Answer

Port mirroring

Answer

EtherChannel

Answer

Spanning tree priority

Question 7

A security policy requires that all encryption keys be rotated every 90 days and old keys be securely destroyed. Which security concept does this policy address?

Accepted Answer

Key management

Answer

Role-based access control

Answer

Network segmentation

Answer

Geofencing

Question 8

A technician notices that a fiber optic link shows high error counters on both ends. The cable was recently installed. What should the technician check first?

Accepted Answer

Fiber connector cleanliness and alignment

Answer

Router routing table

Answer

Switch VLAN configuration

Answer

DHCP lease times

Question 9

A user reports extremely slow file transfers to a network share. The technician measures throughput at 5 Mbps, but the switch port shows 1 Gbps link speed. What should the technician investigate next?

Accepted Answer

Check for duplex mismatch or NIC configuration issues

Answer

Replace the Cat6a patch cable

Answer

Upgrade the switch to 10 Gbps

Answer

Increase the DHCP lease duration

Question 10

A network administrator is creating documentation that shows the physical layout of devices in each server rack, including U positions and port connections. What type of diagram is this?

Accepted Answer

Rack diagram

Answer

Logical network diagram

Answer

Cable schedule

Answer

Topology map

Question 11

An administrator configures Rapid Spanning Tree Protocol on all campus switches. Compared to classic 802.1D STP, what is the primary operational improvement RSTP delivers?

Accepted Answer

Sub-second convergence after failure

Answer

Support for more VLANs

Answer

Automatic port security

Answer

Built-in wireless integration

Question 12

A company needs redundant fiber links between two buildings that converge in under one second after a cable cut. Which combination of technologies best achieves this goal?

Accepted Answer

RSTP with UDLD

Answer

STP with BPDU guard

Answer

RIPv2 with port mirroring

Answer

Static routing with EtherChannel

Question 13

A company deploys WPA3-Enterprise on its corporate wireless network. Which authentication framework does WPA3-Enterprise use to verify individual user credentials?

Accepted Answer

802.1X with RADIUS

Answer

Pre-shared key

Answer

MAC address filtering

Answer

Captive portal with LDAP

Question 14

A network engineer configures an IPSec VPN between two offices. Which protocol encrypts the actual data traffic within the IPSec tunnel after Phase 2 negotiation completes?

Accepted Answer

ESP Encapsulating Security Payload

Answer

AH Authentication Header

Answer

IKE Internet Key Exchange

Answer

ISAKMP

Question 15

A user cannot access an external website but can ping devices on the same local subnet. Following the OSI troubleshooting model, which layer should the technician investigate first?

Accepted Answer

Layer 3 Network

Answer

Layer 1 Physical

Answer

Layer 2 Data Link

Answer

Layer 7 Application

Question 16

A networking team separates the control plane from the data plane in their network fabric, enabling centralized policy management for routing across the entire infrastructure. Which approach does this describe?

Accepted Answer

SDN

Answer

NFV

Answer

VPN

Answer

SD-WAN

Question 17

Which network function translates many private IP addresses to a single public IP address so internal hosts can access the internet?

Accepted Answer

PAT (Port Address Translation)

Answer

DNS

Answer

DHCP relay

Answer

Load balancing

Question 18

Which IEEE wireless standard operates exclusively in the 5 GHz band with a maximum data rate of 54 Mbps?

Accepted Answer

802.11a

Answer

802.11b

Answer

802.11g

Answer

802.11n

Question 19

Which protocol should an administrator use to securely access a switch's command-line interface over the network, replacing the insecure Telnet?

Accepted Answer

SSH

Answer

FTP

Answer

HTTP

Answer

SNMP

Question 20

An organization deploys multiple interconnected decoy systems across its network to lure attackers and study their behavior. Which deception technology is this?

Accepted Answer

Honeynet

Answer

Sinkhole

Answer

DMZ

Answer

Honeypot

Question 21

Which command displays a Windows host's IP address, subnet mask, and default gateway?

Accepted Answer

ipconfig

Answer

netstat

Answer

nslookup

Answer

tracert

Question 22

Which CIDR notation represents the subnet mask 255.255.255.224?

Accepted Answer

/27

Answer

/26

Answer

/28

Answer

/25

Question 23

An attacker connects an unauthorized DHCP server to a switch and hands out false addresses. Which feature inspects DHCP messages and drops offers from ports not configured as trusted?

Accepted Answer

DHCP snooping

Answer

Port security

Answer

BPDU guard

Answer

Storm control

Question 24

Which command-line utility performs a reverse DNS lookup to find the host name associated with a given IP address?

Accepted Answer

nslookup

Answer

ipconfig

Answer

netstat

Answer

tracert

Question 25

A workstation shows no link light on its switch port. Following a bottom-up troubleshooting approach, which OSI layer should the technician check first?

Accepted Answer

Physical

Answer

Data Link

Answer

Network

Answer

Transport

Question 26

Which Windows command combines the functions of ping and traceroute by showing packet loss and latency at each hop over a period of time?

Accepted Answer

pathping

Answer

netstat

Answer

ipconfig /all

Answer

nbtstat

Question 27

What is the Protocol Data Unit (PDU) at the Network layer of the OSI model?

Accepted Answer

Packet

Answer

Frame

Answer

Segment

Answer

Bit

Question 28

Which port number is used by HTTPS by default?

Accepted Answer

443

Answer

80

Answer

22

Answer

53

Question 29

Which IP address range is reserved for Automatic Private IP Addressing (APIPA)?

Accepted Answer

169.254.0.0/16

Answer

10.0.0.0/8

Answer

192.168.0.0/16

Answer

172.16.0.0/12

Question 30

Which routing protocol is classified as a link-state protocol?

Accepted Answer

OSPF

Answer

RIP

Answer

BGP

Answer

EIGRP (hybrid only)

Question 31

Which DNS record type maps a hostname to an IPv6 address?

Accepted Answer

AAAA

Answer

A

Answer

MX

Answer

CNAME

Question 32

What is the function of DHCP snooping on a switch?

Accepted Answer

To block rogue DHCP servers on untrusted ports

Answer

To encrypt DHCP traffic

Answer

To speed up DHCP leases

Answer

To assign static addresses

Question 33

Which SNMP version adds authentication and encryption?

Accepted Answer

SNMPv3

Answer

SNMPv1

Answer

SNMPv2c

Answer

All versions equally

Question 34

What is the first step in a formal change management process?

Accepted Answer

Request and document the change

Answer

Implement the change immediately

Answer

Skip testing

Answer

Notify users after the fact

Question 35

Which logging severity level is the most severe in syslog?

Accepted Answer

Level 0 (Emergency)

Answer

Level 7 (Debug)

Answer

Level 4 (Warning)

Answer

Level 6 (Informational)

Question 36

Which authentication protocol is used with 802.1X to authenticate devices on a wired network?

Accepted Answer

EAP

Answer

IPsec

Answer

OSPF

Answer

NTP

Question 37

What does Network Access Control (NAC) enforce?

Accepted Answer

Only compliant, authenticated devices may connect

Answer

Bandwidth limits for all users

Answer

Wireless channel selection

Answer

IP address assignment

Question 38

Which protocol is a connectionless transport protocol best suited for real-time voice and video?

Accepted Answer

UDP

Answer

TCP

Answer

IPsec

Answer

OSPF

Question 39

Which common issue occurs when one side of a link is set to full duplex and the other to half duplex?

Accepted Answer

Duplex mismatch causing errors and poor throughput

Answer

Complete loss of link

Answer

A broadcast storm

Answer

DNS failure

Question 40

What does Power over Ethernet (PoE) provide to a device?

Accepted Answer

Electrical power over the data cable

Answer

Wireless connectivity

Answer

Routing

Answer

DNS resolution