Free Practice Questions for CompTIA N10-009 Exam

The correct answer is PAT (Port Address Translation). According to the CompTIA Network+ N10-009 objectives, PAT is a form of Network Address Translation (NAT) that allows multiple internal hosts—or services—to be mapped to a single public IP address using different port numbers. PAT can also translate destination port numbers, which is exactly what is occurring in this scenario.

In this case, the firewall receives incoming traffic on port 80 (commonly used for HTTP) and forwards it to an internal server listening on port 88. This process is often referred to as port forwarding, which is a practical implementation of PAT. The firewall rewrites the destination port and potentially the destination IP address so that external clients can access internal services without exposing internal addressing schemes.

The other options do not apply. TLS and SSL are encryption protocols used to secure data in transit; they do not perform port translation. FHRP (First Hop Redundancy Protocol), such as HSRP or VRRP, provides gateway redundancy and high availability, not traffic forwarding or port remapping.

The Network+ objectives emphasize understanding how firewalls and NAT technologies manipulate IP addresses and ports to enable secure access to internal resources. PAT is the technology that enables this functionality, making it the correct answer.

224.0.0.1 is a multicast address that allows packets to be sent to all hosts within a multicast group. Since video streaming often uses multicast to efficiently distribute data to multiple clients without unnecessary duplication, this is the correct answer.

•Why not the other options?

•127.0.0.1 (A) – This is the loopback address used for internal device testing, not for multicast traffic.

•172.17.1.1 (B) – This is a private unicast address, meaning it can only send packets to one specific host.

•240.0.0.1 (D) – This falls within the reserved experimental IP address range and is not used for multicast.

When the command switchport voice vlan 69 is used, it tags the voice traffic with VLAN 69, while the workstation traffic continues untagged on the access VLAN, which is typically considered thedata VLAN. This configuration enables both voice and data traffic over the same port while keeping them in separate VLANs for QoS and traffic management.

A = 192.168.10.0/26

B = 192.168.1.0/23

C = 10.0.0.1/18

Using the choices shown in the screenshot, the best-fit subnet selections are based on host growth requirements first, then segmentation .

For Company A , the current device count is 32 . With 20% growth , that becomes about 39 devices . A /27 only supports 30 usable hosts , so it is too small. A /26 supports 62 usable hosts , so 192.168.10.0/26 is the correct choice.

For Company B , the current device count is 100 . With 20% growth , that becomes 120 devices . The smallest correct subnet would normally be a /25 with 126 usable hosts , but that option is not shown. From the available choices, 192.168.1.0/23 is the smallest subnet that still supports more than 120 hosts, so that is the best answer.

For Company C , the current device count is 10,000 . With 20% growth , it needs space for 12,000 hosts . A /18 provides 16,382 usable hosts , while a /19 is not available and a /21 or /22 would be far too small. Therefore, 10.0.0.1/18 is the correct selection.

One important note: the dropdown choices shown do not actually let all three companies be placed into a single true Class B network block. So these answers are the best valid selections from the provided options .

The best answer is B. Elasticity . Quantum computing workloads are highly specialized and often require access to extremely expensive, limited, and on-demand processing resources. In cloud terms, elasticity is the ability to rapidly allocate and release resources as demand changes. That makes it a strong fit for environments where usage may spike for short periods and then drop off again.

A quantum host would not usually be designed around ordinary shared-office priorities. Instead, it would favor the ability to obtain powerful compute capacity exactly when needed, without keeping that level of capacity permanently assigned. That is the practical value of elasticity in a cloud model.

Scalability is close, but it usually describes the broader ability to increase capacity over time or as demand grows. Elasticity is more specific to dynamic, responsive adjustment of resources, which matches specialized compute workloads much better. Multitenancy refers to multiple customers sharing underlying infrastructure, and cost is always important, but neither is the main technical characteristic being highlighted here.

For exam purposes, when a scenario describes advanced or highly variable compute demand in the cloud, elasticity is usually the strongest answer because it focuses on rapid resource expansion and reduction as needed.

A captive portal is a web page that users must view and interact with before being granted access to a network. It is commonly used in guest networks to enforce terms of use agreements. When a user connects to the network, they are redirected to this portal where they must accept the terms of use before proceeding. This method ensures that users are aware of and agree to the network ' s policies, making it the best choice for this scenario. References: CompTIA Network+ Exam Objectives and official study guides.

A DoS (Denial of Service) attack directly targets availability, one of the core security goals (CIA triad) emphasized in Network+ (N10-009) security objectives. A web-based customer portal depends on reachable services (web servers, load balancers, DNS, upstream bandwidth). In a DoS, an attacker attempts to overwhelm the portal or its supporting infrastructure—consuming bandwidth, exhausting server resources, or saturating state tables—so legitimate users cannot connect or experience severe degradation. This is the most direct and common scenario where “availability” is impacted for a public web service.

MAC flooding aims to overflow a switch’s CAM table and can lead to traffic being broadcast out ports, which is more commonly associated with enabling sniffing or disruption within a local switched network segment—not typically the primary attack described for a web portal’s availability. ARP spoofing is a local network man-in-the-middle/redirection technique affecting integrity/confidentiality and potentially availability for local hosts, but it is not the best match for a public portal availability impact. Rogue devices can introduce risk, but the option is broad and indirect; DoS is the clearest availability-focused threat.

===========

•Since this issue occurred after a configuration change on a Layer 3 switch, the most likely cause is misconfigured ACLs (Access Control Lists).

•ACLs control which traffic is allowed or denied, so an incorrect ACL may be blocking access to the file server.

•Why not the other options?

•Switching loop (B): A switching loop occurs at Layer 2 (not Layer 3) and causes network-wide broadcast storms, not just loss of access to a file server.

•Duplicate IP addresses (C): This would cause connectivity issues for the devices with the conflict, but not necessarily prevent all users from accessing the file server.

•Wrong default route (D): The default route is used for traffic leaving the local network. If users are unable to access an internal file server, this is unlikely to be the issue.

An evil twin attack is when an attacker sets up a rogue access point (AP) with the same SSID as a legitimate one to trick users into connecting. Once users connect, attackers often present fake login pages or capture unencrypted session data to steal login credentials.

A. DNS poisoning manipulates DNS resolution but is not inherent to evil twin.

C. ARP spoofing is a Layer 2 attack involving MAC/IP mapping manipulation.

D. Denial of service can be a side effect but is not the primary objective of evil twin attacks.

The main purpose of an evil twin is credential theft, enabling further unauthorized access to networks or systems.

References (CompTIA Network+ N10-009):

Domain: Network Security — Wireless attacks, rogue APs, evil twins.

Traffic analysis involves monitoring and inspecting network traffic flows to detect unusual patterns, such as a workstation sending large volumes of outbound SMTP (spam). This process enables identification of malware as the root cause.

B. Availability monitoring checks uptime but doesn’t diagnose spam traffic.

C. Baseline metrics show normal usage but don’t pinpoint infected hosts.

D. Network discovery identifies devices, not malicious traffic flows.

References (CompTIA Network+ N10-009):

Domain: Network Security — Traffic analysis, malware detection, identifying compromised hosts.

(Note: Ips will be change on each simulation task, so we have given example answer for the understanding)

To troubleshoot all the network components and review the cable test results, you can use the following steps:

Click on each device and cable to open its information window.

Review the information and identify any problems or errors that may affect the network connectivity or performance.

Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem.

Fill in the remediation form using the drop-down menus provided.

Here is an example of how to fill in the remediation form for PC1:

The component with a problem is PC1.

The problem is Incorrect IP address.

The solution is Change the IP address to 192.168.1.10.

You can use the same steps to fill in the remediation form for other components.

To enter commands in each device, you can use the following steps:

Click on the device to open its terminal window.

Enter the command ipconfig /all to display the IP configuration of the device, including its IP address, subnet mask, default gateway, and DNS servers.

Enter the command ping < IP address >  to test the connectivity and reachability to another device on the network by sending and receiving echo packets. Replace < IP address > with the IP address of the destination device, such as 192.168.1.1 for Core Switch 1.

Enter the command tracert < IP address >  to trace the route and measure the latency of packets from the device to another device on the network by sending and receiving packets with increasing TTL values. Replace < IP address > with the IP address of the destination device, such as 192.168.1.1 for Core Switch 1.

Here is an example of how to enter commands in PC1:

Click on PC1 to open its terminal window.

Enter the command ipconfig /all to display the IP configuration of PC1. You should see that PC1 has an incorrect IP address of 192.168.2.10, which belongs to VLAN 2 instead of VLAN 1.

Enter the command ping 192.168.1.1 to test the connectivity to Core Switch 1. You should see that PC1 is unable to ping Core Switch 1 because they are on different subnets.

Enter the command tracert 192.168.1.1 to trace the route to Core Switch 1. You should see that PC1 is unable to reach Core Switch 1 because there is no route between them.

You can use the same steps to enter commands in other devices, such as PC3, PC4, PC5, and Server 1.

Smishing (SMS phishing) occurs when attackers send fraudulent text messages pretending to be a trusted source, tricking the victim into giving up sensitive credentials. Since this came via text message, it qualifies as smishing.

A. DNS poisoning corrupts name resolution.

B. ARP spoofing manipulates MAC-to-IP mappings.

C. Vishing is phishing via voice calls, not text.

References (CompTIA Network+ N10-009):

Domain: Network Security — Social engineering, phishing types (smishing, vishing, spear phishing).

Comprehensive and Detailed Explanation (aligned to N10-009):

802.1X provides port-based Network Access Control (NAC), requiring authentication (often through RADIUS) before granting access. This is the standard for enterprise authentication on both wired and wireless networks.

A. 802.1Q defines VLAN trunking.

C. 802.3bt defines higher-power PoE.

D. 802.11h deals with spectrum management in wireless.

References (CompTIA Network+ N10-009):

Domain: Network Security — NAC, 802.1X authentication.

A jump box is a hardened, isolated system that provides secure access to critical infrastructure devices like routers and firewalls.

A CNAME (Canonical Name) record maps an alias to the correct fully qualified domain name (FQDN). If a user is redirected to the wrong hostname, correcting or updating the CNAME ensures the alias points to the proper domain.

B. PTR record maps IP to hostname (reverse DNS), not forward website resolution.

C. NTP relates to time sync, irrelevant to DNS resolution.

D. TXT record stores metadata like SPF or DKIM info, not used for hostname aliasing.

References (CompTIA Network+ N10-009):

Domain: Network Standards, Protocols, and Implementations — DNS record types (A, AAAA, CNAME, PTR, TXT).