πŸ”

N10-009 β€” questions

Page 12 of 31 Β· 604 total questions.

Topic 1 Β· Question 227 Β· Select all that apply

An administrator enables DNS filtering on the firewall to block users from visiting malicious websites. Which of the following should the administrator also do? (Choose two.)

  • ADisable DoH in users’ internet browsers. (correct answer)
  • BUpdate NS record to point to DNS filter servers.
  • CBlock port 443 to the malicious websites.
  • DBlock port 53 to servers on the internet. (correct answer)
  • EDisable TLS v1.3 in users’ internet browsers.
  • FImplement DNSSEC for corporate records.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Disable DoH in users’ internet browsers. Option D: Block port 53 to servers on the internet.

Topic 1 Β· Question 228

Which of the following is concerned with guaranteed availably of a cloud resource?

  • AIPAM
  • BSLA (correct answer)
  • CMTBF
  • DEOL
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: SLA

Topic 1 Β· Question 229

A network consultant needs to decide between running an Ethernet uplink or using the built-in 5GHz point-to-point functionality on a WAP. Which of the following documents provides the best information to assist the consultant with this decision?

  • ASite survey results (correct answer)
  • BPhysical diagram
  • CService-level agreement
  • DLogical diagram
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Site survey results

Topic 1 Β· Question 230

While troubleshooting connectivity issues, a junior network administrator is given explicit instructions to test the host’s TCP/IP stack first. Which of the following commands should the network administrator run?

  • Aping 127.0.0.1 (correct answer)
  • Bping 169.254.1.1
  • Cping 172.16.1.1
  • Dping 192.168.1.1
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: ping 127.0.0.1

Topic 1 Β· Question 231

Users at an organization report that the wireless network is not working in some areas of the building. Users report that other wireless network SSIDs are visible when searching for the network, but the organization’s network is not displayed. Which of the following is the most likely cause?

  • AInterference or channel overlap
  • BInsufficient wireless coverage (correct answer)
  • CRoaming misconfiguration
  • DClient disassociation issues
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Insufficient wireless coverage

Topic 1 Β· Question 232

Which of the following panels would be best to facilitate a central termination point for all network cables on the floor of a company building?

  • APatch (correct answer)
  • BUPS
  • CMDF
  • DRack
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Patch

Topic 1 Β· Question 233

Which of the following is most commonly associated with many systems sharing one IP address in the public IP-addressing space?

  • APAT (correct answer)
  • BNAT
  • CVIP
  • DNAT64
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: PAT

Topic 1 Β· Question 234

A network administrator is reviewing a production web server and observes the following output from the netstat command: Which of the following actions should the network administrator take to harden the security of the web server?

Exhibit 1 for question 234
  • ADisable the unused ports. (correct answer)
  • BEnforce access control lists.
  • CPerform content filtering.
  • DSet up a screened subnet.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Disable the unused ports. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 235

A network technician is examining the configuration on an access port and notices more than one VLAN has been set. Which of the following best describes how the port is configured?

  • AWith a voice VLAN (correct answer)
  • BWith too many VLAN
  • CWith a default VLAN
  • DWith a native VLAN
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: With a voice VLAN

Explanation

A VLAN creates a logical layer-2 broadcast domain to segment devices independently of physical location.

Topic 1 Β· Question 236

A small company has the following IP addressing strategy: User subnet: 192.168.1.0/24 - Voice subnet: 192.168.2.0/24 - Server subnet: 192 168.10.0/24 - A user is unable to connect to the company fileshare server located at 192.168.10.1. The user's networking configuration is: Which of the following will most likely correct the issue?

Exhibit 1 for question 236
  • AChanging the IPv4 address to 192.168.10.1
  • BChanging the subnet mask to 255.255.255.0 (correct answer)
  • CChanging the DNS servers to internet IPs
  • DChanging the physical address to 7A-01-7A-21-01-50
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Changing the subnet mask to 255.255.255.0

Explanation

Subnetting divides an IP network into smaller routing and broadcast domains for address efficiency and segmentation.

Topic 1 Β· Question 237

A network administrator needs to connect a department to a new network segment. They need to use a DHCP server located on another network. Which of the following can the administrator use to complete this task?

  • AIP Helper (correct answer)
  • BReservation
  • CExclusion
  • DScope
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: IP Helper

Topic 1 Β· Question 238

A network engineer is implementing a solution by which on-premises servers are migrated to a cloud service provider. Which of the following service models will provide a lift and shift solution to meet this requirement?

  • AInfrastructure as a service (correct answer)
  • BInfrastructure as code
  • CSoftware as a service
  • DSoftware-defined network
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Infrastructure as a service

Topic 1 Β· Question 239

A network administrator is conducting an assessment and found network devices that do not meet standards. Which of the following configurations is considered a set of rules that devices should adhere to?

  • AProduction
  • BBackup
  • CCandidate
  • DGolden (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Golden

Topic 1 Β· Question 240

An IT department asks a newly hired employee to use a personal laptop until the company can provide one. Which of the following policies is most applicable to this situation?

  • AIAM
  • BBYOD (correct answer)
  • CDLP
  • DAUP
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: BYOD

Topic 1 Β· Question 241

Which of the following offers the ability to manage access at the cloud VM instance?

  • ASecurity group (correct answer)
  • BInternet gateway
  • CDirect Connect
  • DNetwork ACL
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Security group

Topic 1 Β· Question 242

In an environment with one router, which of the following will allow a network engineer to communicate between VLANs without purchasing additional hardware?

  • ASubinterfaces (correct answer)
  • BVXLAN
  • CLayer 3 switch
  • DVIP
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Subinterfaces

Topic 1 Β· Question 243

A network administrator is concerned with on-path attacks and wants to provide encryption of fully qualified domain names in outbound communications. Which of the following best describes the protocol that provides the proper security layer for internet communication?

  • ASSL
  • BDoH (correct answer)
  • CTLS
  • DDNSSEC
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: DoH This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 244

A network administrator wants to restrict inbound traffic to allow only HTTPS to the company website, denying all other inbound traffic from the internet. Which of the following would best accomplish this goal?

  • AACL on the edge firewall (correct answer)
  • BPort security on an access switch
  • CContent filtering on a web gateway
  • DURL filtering on an outbound proxy
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: ACL on the edge firewall

Explanation

A firewall enforces traffic policy by permitting or blocking connections based on configured rules.

Topic 1 Β· Question 245

A network engineer is deploying switches at a new remote office. The switches have been preconfigured with hostnames and STP priority values. Based on the following table: Which of the following switches will become the root bridge?

Exhibit 1 for question 245
  • Acore-sw01
  • Baccess-sw01 (correct answer)
  • Cdistribution-sw01
  • Daccess-sw02
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: access-sw01

Topic 1 Β· Question 246

Which of following must be implemented to securely connect a company’s headquarters with a branch location?

  • ASplit-tunnel VPN
  • BClientless VPN
  • CFull-tunnel VPN
  • DSite-to-site VPN (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Site-to-site VPN

Explanation

A VPN creates an encrypted tunnel across an untrusted network for private remote or site connectivity. This option keeps traffic private / properly secured as required.

Showing questions 221–240 of 604 Β· Page 12 of 31