CompTIA Network (N10-008) Practice Exam #5 Questions and
Answers.
Which of the following is often used to allow one node to communicate with many other
nodes, such as in DMVPN connections? - ANS Multipoint GRE (mGRE) is a protocol that
can be used to enable one node to communicate with many nodes by encapsulating layer
3 protocols to create tunnels over another network. The mGRE protocol is often used in
Dynamic Multipoint VPN (DMVPN) connections.;A network technician needs to install a
server to authenticate remote users before accessing corporate network resources when
working from home. Which kind of server should the network technician implement? -
ANS A remote access server (RAS) or remote desktop gateway is a type of server that
provides a suite of services to connect users to a network or the Internet remotely;During
what period should all scheduled work on production network equipment be conducted? -
ANS - Downtime
By using a maintenance window, all downtime is limited and the organization can prepare
in advance for the scheduled work to be carried out. You should schedule maintenance
windows outside of normal business hours since they will usually result in downtime.;One
of your coworkers recently installed a new game they found for free online. Ever since
then, their computer has acted strange and is operating extremely slow. What type of
attack are they likely a victim of? - ANS Malware is any software intentionally designed to
cause damage to a computer, server, client, or computer network. By contrast, software
that causes unintentional harm due to some deficiency is typically described as a software
bug. Malware includes viruses, worms, logic bombs, and many other malicious types of
code.;You are investigating a network connectivity issue that is affecting two of your
network clients. When you check the switchports of these clients, you observe that the
switchports' physical interfaces are continually going up and down. Which of the following
is the most likely reason for the flapping of the switchports you are observing? - ANS A
duplicate MAC address occurs when two or more devices are responding to data requests
as if they are the only device on the network with that physical address. One indication of
this occurring is when a switch continually changes the port assignments for that address
as it updates its content-addressable memory (CAM) table to reflect the physical address
and switchport bindings. This will cause the switchports to continually flap by going up and
down as the assignments are updated within the CAM table.;Which device actively
defends the network by detecting threats and shutting down ports or changing
configurations to prevent attacks? - ANS Intrusion Protection Systems (IPS) can
reconfigure themselves based on the threats experienced.
*Firewalls maintain a static configuration and cannot change their configurations
automatically.;You are setting up uplink ports for multiple switches to communicate with
one another. All of the VLANs should communicate from the designated server switch.
Which of the following should be set on the trunk ports if VLAN 1 is not the management
, VLAN? - ANS The 801.q standard is used to define VLAN tagging (or port tagging) for
Ethernet frames and the accompanying procedures to be used by bridges and switches in
handling such frames. Traffic should be properly tagged when combined over a single
trunk port to ensure they are not sent to the wrong VLAN by mistake. If VLAN tagging is
not enabled, all of the VLAN traffic will be sent to the native or default VLAN, VLAN 1. By
default, VLAN 1 is enabled and all unused ports are assigned to it.;You have been
contracted by Dion Training to conduct a penetration test against its learning
management system (LMS). The LMS is a web application that is hosted in the
organization's DMZ. Which of the following appliance allow lists should the organization
add your source IP in before the engagement begins? - ANS - WAF (web application fire
wall)
The learning management system (LMS) is a web application, therefore the source IP of
the attacking workstation needs to be added to the web application firewall's allow list to
prevent it from being blocked. Adding a source IP address to the allow list will exclude it
from ACL rules and other signatures. This prevents an active device, like a web
application firewall (WAF), layer 4 firewall, or an intrusion protection system (IPS) from
blocking the penetration tester during the assessment. By having your IP added to the
allow list, you can focus your time and efforts on finding vulnerabilities with the servers
themselves instead of trying to break through a compensating control like a WAF or IPS.;A
wireless technician wants to configure a wireless network to identify itself to visitors by
including the word "Guest" in the name. This wireless network needs to provide coverage
to the entire building and requires 3 wireless access points to accomplish this coverage
level. What would allow users to identify the wireless network by its displayed name as a
single network? - ANS - ESSID (extended service set)
a wireless network can utilize multiple wireless access points to broadcast a single
network name for access by the clients.
*BSSID (Basic Service Set) can only utilize a single access point in each wireless
network;Which of the following IEEE specifications describes the use of the spanning tree
protocol (STP)? - ANS IEEE 802.1d;At which of the following OSI layer does QoS
operate? - ANS Quality of Service (QoS) occurs at both Layer 2 and Layer 3 of the OSI
Model. Layer 2 Quality of Service (QoS) allows for traffic prioritization and bandwidth
management to minimize network delay using Cost of Service (CoS) classification, and
DSCP marking under the 802.1p standard. Layer 3 Quality of Service (QoS) allows for
managing the quality of network connections through its packet routing decisions.;Dion
Training wants to create a DNS record to enter DKIM or SPF information into the domain
name system to help prevent from spam coming from their domain. Which type of DNS
record should be created? - ANS The DNS text (TXT) record lets a domain administrator
enter text into the Domain Name Systems. The TXT record was originally intended as a
place for human-readable notes. However, now it is also possible to put some machine-
readable data into TXT records. TXT records are a key component of several different
Answers.
Which of the following is often used to allow one node to communicate with many other
nodes, such as in DMVPN connections? - ANS Multipoint GRE (mGRE) is a protocol that
can be used to enable one node to communicate with many nodes by encapsulating layer
3 protocols to create tunnels over another network. The mGRE protocol is often used in
Dynamic Multipoint VPN (DMVPN) connections.;A network technician needs to install a
server to authenticate remote users before accessing corporate network resources when
working from home. Which kind of server should the network technician implement? -
ANS A remote access server (RAS) or remote desktop gateway is a type of server that
provides a suite of services to connect users to a network or the Internet remotely;During
what period should all scheduled work on production network equipment be conducted? -
ANS - Downtime
By using a maintenance window, all downtime is limited and the organization can prepare
in advance for the scheduled work to be carried out. You should schedule maintenance
windows outside of normal business hours since they will usually result in downtime.;One
of your coworkers recently installed a new game they found for free online. Ever since
then, their computer has acted strange and is operating extremely slow. What type of
attack are they likely a victim of? - ANS Malware is any software intentionally designed to
cause damage to a computer, server, client, or computer network. By contrast, software
that causes unintentional harm due to some deficiency is typically described as a software
bug. Malware includes viruses, worms, logic bombs, and many other malicious types of
code.;You are investigating a network connectivity issue that is affecting two of your
network clients. When you check the switchports of these clients, you observe that the
switchports' physical interfaces are continually going up and down. Which of the following
is the most likely reason for the flapping of the switchports you are observing? - ANS A
duplicate MAC address occurs when two or more devices are responding to data requests
as if they are the only device on the network with that physical address. One indication of
this occurring is when a switch continually changes the port assignments for that address
as it updates its content-addressable memory (CAM) table to reflect the physical address
and switchport bindings. This will cause the switchports to continually flap by going up and
down as the assignments are updated within the CAM table.;Which device actively
defends the network by detecting threats and shutting down ports or changing
configurations to prevent attacks? - ANS Intrusion Protection Systems (IPS) can
reconfigure themselves based on the threats experienced.
*Firewalls maintain a static configuration and cannot change their configurations
automatically.;You are setting up uplink ports for multiple switches to communicate with
one another. All of the VLANs should communicate from the designated server switch.
Which of the following should be set on the trunk ports if VLAN 1 is not the management
, VLAN? - ANS The 801.q standard is used to define VLAN tagging (or port tagging) for
Ethernet frames and the accompanying procedures to be used by bridges and switches in
handling such frames. Traffic should be properly tagged when combined over a single
trunk port to ensure they are not sent to the wrong VLAN by mistake. If VLAN tagging is
not enabled, all of the VLAN traffic will be sent to the native or default VLAN, VLAN 1. By
default, VLAN 1 is enabled and all unused ports are assigned to it.;You have been
contracted by Dion Training to conduct a penetration test against its learning
management system (LMS). The LMS is a web application that is hosted in the
organization's DMZ. Which of the following appliance allow lists should the organization
add your source IP in before the engagement begins? - ANS - WAF (web application fire
wall)
The learning management system (LMS) is a web application, therefore the source IP of
the attacking workstation needs to be added to the web application firewall's allow list to
prevent it from being blocked. Adding a source IP address to the allow list will exclude it
from ACL rules and other signatures. This prevents an active device, like a web
application firewall (WAF), layer 4 firewall, or an intrusion protection system (IPS) from
blocking the penetration tester during the assessment. By having your IP added to the
allow list, you can focus your time and efforts on finding vulnerabilities with the servers
themselves instead of trying to break through a compensating control like a WAF or IPS.;A
wireless technician wants to configure a wireless network to identify itself to visitors by
including the word "Guest" in the name. This wireless network needs to provide coverage
to the entire building and requires 3 wireless access points to accomplish this coverage
level. What would allow users to identify the wireless network by its displayed name as a
single network? - ANS - ESSID (extended service set)
a wireless network can utilize multiple wireless access points to broadcast a single
network name for access by the clients.
*BSSID (Basic Service Set) can only utilize a single access point in each wireless
network;Which of the following IEEE specifications describes the use of the spanning tree
protocol (STP)? - ANS IEEE 802.1d;At which of the following OSI layer does QoS
operate? - ANS Quality of Service (QoS) occurs at both Layer 2 and Layer 3 of the OSI
Model. Layer 2 Quality of Service (QoS) allows for traffic prioritization and bandwidth
management to minimize network delay using Cost of Service (CoS) classification, and
DSCP marking under the 802.1p standard. Layer 3 Quality of Service (QoS) allows for
managing the quality of network connections through its packet routing decisions.;Dion
Training wants to create a DNS record to enter DKIM or SPF information into the domain
name system to help prevent from spam coming from their domain. Which type of DNS
record should be created? - ANS The DNS text (TXT) record lets a domain administrator
enter text into the Domain Name Systems. The TXT record was originally intended as a
place for human-readable notes. However, now it is also possible to put some machine-
readable data into TXT records. TXT records are a key component of several different
