N10-009 Free Practice Test

- (Exam Topic 3)
Which of the following compromises internet-connected devices and makes them vulnerable to becoming part of a botnet? (Select TWO).

1. A. Deauthentication attack
2. B. Malware infection
3. C. IP spoofing
4. D. Firmware corruption
5. E. Use of default credentials
6. F. Dictionary attack

Correct Answer: BE

- (Exam Topic 1)
Client devices cannot enter a network, and the network administrator determines the DHCP scope is exhausted. The administrator wants to avoid creating a new DHCP pool. Which of the following can the administrator perform to resolve the issue?

1. A. Install load balancers
2. B. Install more switches
3. C. Decrease the number of VLANs
4. D. Reduce the lease time

Correct Answer: D
To resolve the issue of DHCP scope exhaustion without creating a new DHCP pool, the administrator can reduce the lease time. By decreasing the lease time, the IP addresses assigned by DHCP will be released back to the DHCP scope more quickly, allowing them to be assigned to new devices.
References:
CompTIA Network+ Certification Study Guide, Exam N10-007, Fourth Edition, Chapter 2: The OSI Model and Networking Protocols, Objective 2.3: Given a scenario, implement and configure the appropriate addressing schema.
https://www.networkcomputing.com/data-centers/10-tips-optimizing-dhcp-performance

- (Exam Topic 3)
A malicious user is using special software 10 perform an on-path attack. Which of the following best practices should be configured to mitigate this threat?

1. A. Dynamic ARP inspection
2. B. Role-based access
3. C. Control plane policing
4. D. MAC filtering

Correct Answer: A

- (Exam Topic 2)
A network technician needs to correlate security events to analyze a suspected intrusion. Which of the following should the technician use?

1. A. SNMP
2. B. Log review
3. C. Vulnerability scanning
4. D. SIEM

Correct Answer: D
SIEM stands for Security Information and Event Management, which is a tool that collects, analyzes, and correlates data from various network devices and sources to provide alerts and reports on security incidents and events. A network technician can use SIEM to correlate security events to analyze a suspected intrusion, as SIEM can help identify the source, target, method, and impact of an attack, as well as provide recommendations for remediation. References: https://www.comptia.org/blog/what-is-siem

- (Exam Topic 1)
A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building. Several APs are mounted in this office. The users report that the network connections frequently disconnect and reconnect throughout the day. Which of the following is the MOST likely cause of this issue?

1. A. The AP association time is set too low
2. B. EIRP needs to be boosted
3. C. Channel overlap is occurring
4. D. The RSSI is misreported

Correct Answer: C
Channel overlap is a common cause of wireless connectivity issues, especially in high-density environments where multiple APs are operating on the same or adjacent frequencies. Channel overlap can cause interference, signal degradation, and performance loss for wireless devices. The AP association time, EIRP, and RSSI are not likely to cause frequent disconnects and reconnects for wireless users.