Network Security & Defense in Depth practice test: free CompTIA Network+ (N10-009) questions

Sample Practice Questions for Network Security & Defense in Depth

1. Question 1Ref: CompTIA Network+ N10-009 — Network Security: Common Attack Types, 14%

   A security analyst notices that a user is attempting to access resources by repeatedly trying different username and password combinations. Which attack type is this?

   APhishingBARP spoofingCVLAN hoppingDBrute force
   Show Answer & Explanation

   Correct Answer
   D. Brute force

   The keyed answer is "Brute force". A brute force attack systematically tries numerous credential combinations to gain unauthorized access. Phishing uses deceptive emails, VLAN hopping exploits trunk configurations, and ARP spoofing redirects traffic.

2. Question 2Ref: CompTIA Network+ N10-009 — Networking Concepts: Networking Appliances, 23%

   A network administrator deploys a device that analyzes traffic patterns and alerts when it detects potential intrusions but does not actively block them. What type of device was deployed?

   AIntrusion Detection SystemBIntrusion Prevention SystemCFirewallDProxy server
   Show Answer & Explanation

   Correct Answer
   A. Intrusion Detection System

   The keyed answer is "Intrusion Detection System". An IDS monitors traffic and generates alerts for suspicious activity but does not take action to block it. An IPS sits inline and can actively prevent threats. Firewalls filter based on rules.

3. Question 3Ref: CompTIA Network+ N10-009 — Network Security: Security Features and Defense, 14%

   A company wants to ensure that only authorized devices can connect to the corporate network, regardless of whether they connect via wired or wireless. Which security framework should be implemented?

   ARole-based access controlBContent filteringCGeofencingDNetwork Access Control
   Show Answer & Explanation

   Correct Answer
   D. Network Access Control

   The keyed answer is "Network Access Control". NAC enforces security policies by verifying device compliance before granting network access. It works across wired and wireless connections, checking posture, credentials, and device health.