NEW QUESTION 1

A technician is troubleshooting intermittent connectivity between devices and viewing the following syslog entries from a switch:

Which of the following are these entries indicative of?

• A. DDoS attack
• B. Jitter
• C. Latency
• D. Link flapping

Answer: D

Explanation:
The syslog entries are indicative of link flapping, which is when a switch port rapidly transitions between the up and down states. This can cause intermittent connectivity issues, network instability, and increased CPU utilization on the switch. Link flapping can be caused by various factors, such as faulty cables, misconfigured interfaces, duplex mismatches, or network attacks. To troubleshoot link flapping, the technician should check the physical layer, verify the interface settings, and monitor the network traffic for
anomalies. References:
✑ What is Link Flapping? - CompTIA1
✑ Troubleshooting Switch Port and Interface Problems - Cisco2
✑ Network Troubleshooting - N10-008 CompTIA Network+ : 4.1 - YouTube3

NEW QUESTION 2

An ISP configured an internet connection to provide 20Mbps, but actual data rates are occurring at 10Mbps and causing a significant delay in data transmission. Which of the following specifications should the ISP check?

• A. Throughput
• B. Latency
• C. Bandwidth
• D. Jitter

Answer: A

Explanation:
Throughput is the actual amount of data that can be transferred over a network in a given time. Throughput can be affected by various factors such as congestion, interference, errors, or hardware limitations. If the throughput is lower than the configured internet connection speed, it can cause a significant delay in data transmission. The ISP should check the throughput and identify the source of the problem.
References: Network+ Study Guide Objective 2.2: Explain the concepts and characteristics of routing and switching.

NEW QUESTION 3

An engineer is using a tool to run an ICMP sweep of a network to find devices that are online. When reviewing the results, the engineer notices a number of workstations that are currently verified as being online are not listed in the report.
The tool was configured to scan using the following information: Network address: 172.28.16.0
CIDR: /22
The engineer collected the following information from the client workstation: IP address: 172.28.17.206
Subnet mask: 255.255.252.0
Which of the following MOST likely explains why the tool is failing to detect some workstations?

• A. The scanned network range is incorrect.
• B. The subnet mask on the client is misconfigured.
• C. The workstation has a firewall enabled.
• D. The tool is unable to scan remote networks.

Answer: C

Explanation:
A firewall is a device or software that filters and controls the incoming and outgoing network traffic based on predefined rules. A firewall can block ICMP packets, which are used for ping and other diagnostic tools. If the workstation has a firewall enabled, it may not respond to the ICMP sweep and appear as offline. The engineer should check the firewall settings on the workstation and allow ICMP traffic if needed.
References: Network+ Study Guide Objective 4.1: Given a scenario, use the appropriate tool.

NEW QUESTION 4

While setting up a new workstation, a technician discovers that the network connection is only 100 full duplex (FD), although it is connected to a gigabit switch.
While reviewing the interface information in the switch CLI, the technician notes the port is operating at IOOFD but Shows many RX and TX errors. The technician moves the computer to another switchport and experiences the same issues.
Which of the following is MOST likely the cause of the low data rate and port errors?

• A. Bad switch ports
• B. Duplex issues
• C. Cable length
• D. Incorrect pinout

Answer: B

NEW QUESTION 5

Which of the following describes traffic going in and out of a data center from the internet?

• A. Demarcation point
• B. North-South
• C. Fibre Channel
• D. Spine and leaf

Answer: B

NEW QUESTION 6

A network manager wants to view network traffic for devices connected to a switch. A network engineer connects an appliance to a free port on the switch and needs to configure the switch port connected to the appliance. Which of the following is the best option for the engineer to enable?

• A. Trunking
• B. Port mirroring
• C. Full duplex
• D. SNMP

Answer: B

Explanation:
Port mirroring is a feature that allows a switch to copy the traffic from one or more ports to another port, where a network analyzer or a monitoring device can capture and analyze the traffic. Port mirroring is useful for troubleshooting and security purposes, as it allows the network engineer to see the traffic that is passing through the switch without affecting the normal operation of the network.
References
✑ 1: Port Mirroring - CompTIA Network+ Certification (N10-008): The Total Course [Video]
✑ 2: CompTIA Network+ Certification Exam Objectives, page 5
✑ 3: CompTIA Network+ N10-005: 2.1 – Port Mirroring - Professor Messer IT Certification Training Courses
✑ 4: CompTIA Network+ N10-005: 1.4 – Port Mirroring

NEW QUESTION 7

An employee reports to a network administrator that internet access is not working. Which of the following should the administrator do FIRST?

• A. Establish a theory of probable cause.
• B. Identify symptoms.
• C. Determine if anything has changed.
• D. Ask the user to restart the computer.

Answer: C

Explanation:
When a user reports that internet access is not working, it is important to first determine if there have been any recent changes to the network or the user's computer that could have caused the issue. This could include changes to the network configuration, the installation of new software or hardware, or other events that could have impacted the user's ability to access the internet. By determining if anything has changed, the administrator can narrow down the possible causes of the issue and focus on addressing the most likely cause.

NEW QUESTION 8

An engineer needs to verity the external record tor SMTP traffic. The engineer logged in to the server and entered the nslookup command. Which of the following commands should the engineer send before entering the DNS name?

• A. set type=A
• B. is -d company-mail.com
• C. set domain=company.mail.com
• D. set querytype=Mx

Answer: D

NEW QUESTION 9

Users report they cannot reach any websites on the internet. An on-site network engineer is able to duplicate the issue on a different PC. The network engineer then tries to ping a website and receives the following message:
Ping request could not find host www.google.com. Please check the name and try again. Which of the following is the next step the engineer should take?

• A. Ping 127. 0. 0. 1 to test local hardware.
• B. Test the website from outside the company.
• C. Ping internal name server functionality.
• D. Check internet firewall logs for blocked DNS traffi

Answer: C

Explanation:

The error message “Ping request could not find host www.google.com” indicates that the network engineer’s PC cannot resolve the hostname www.google.com to its corresponding IP address. This means that there is a problem with the DNS (Domain Name System) service, which is responsible for translating hostnames to IP addresses and vice versa. The DNS service can be provided by internal or external name servers, depending on the network configuration.
The next step the engineer should take is to ping the internal name server functionality, which means to test if the PC can communicate with the name server that is configured in its network settings, and if the name server can resolve internal hostnames, such as those of the company’s servers or devices. To do this, the engineer can use the following commands:
✑ To find out the IP address of the name server, use ipconfig /all and look for the DNS Servers entry.
✑ To ping the name server, use ping <name server IP address> and check if the packets are sent and received successfully.
✑ To test the name resolution, use nslookup <internal hostname> and check if the name server returns the correct IP address.
If the ping or the nslookup commands fail, it means that the internal name server is not working properly, and the engineer should troubleshoot the name server configuration or connectivity. If the ping and the nslookup commands succeed, it means that the internal name server is working properly, but there is a problem with the external name resolution, and the engineer should check the internet firewall logs for blocked DNS traffic, or test the website from outside the company.
ReferencesWindows 10 can’t resolve hostnames - ping with IP works but not with hostnamePing request could not find host xyz.local. Please check the name and try againDNS problem, nslookup works, ping doesn’t Users are connected to a switch on an Ethernet interface of a campus router. The service provider is connected to the serial 1 interface on the router. The output of the interfaces is:
E1/0: 192.168.8.1/24 S1: 192.168.7.252/30

NEW QUESTION 10

An organization has a security staff shortage and must prioritize efforts in areas where the staff will have the most impact. In particular, the focus is to
avoid expending resources on identifying non-relevant events. A security analyst is reviewing web server logs and sees the following:

Which of the following should the analyst recommend?

• A. Configuring the web server log to filter out 404 errors on image files
• B. Updating firewall rules to block 202.180.155.1
• C. Resyncing the network time server and monitoring logs for future anomalous behavior
• D. Checking with the penetration testing team to see if the team ran any scans on January 14, 2021

Answer: A

Explanation:
This answer will help the organization to avoid expending resources on identifying non- relevant events, as the 404 errors on image files are not indicative of any security threat or issue, but rather a misconfiguration or a broken link on the web server. The 404 errors on image files are also very frequent and repetitive, as shown by the web server log, which can clutter the log and make it harder to spot any relevant events. By filtering out these errors, the analyst can focus on more important events and reduce the noise in the log. The other answers are not as good as A, because they either do not address the problem of identifying non-relevant events, or they are based on incorrect assumptions or information. For example:
✑ B. Updating firewall rules to block 202.180.155.1 is not a good answer, because the IP address 202.180.155.1 is not doing anything malicious or suspicious, but rather requesting image files that do not exist on the web server. Blocking this IP address will not improve the security of the web server, but rather create unnecessary firewall rules and possibly deny legitimate access to the web server.
✑ C. Resyncing the network time server and monitoring logs for future anomalous behavior is not a good answer, because there is no evidence that the network time server is out of sync or causing any problems. The web server log shows that the entries are all within a few minutes of each other, which is normal and expected. Resyncing the network time server will not help the analyst to identify non-relevant events, but rather waste time and resources on an unrelated task.
✑ D. Checking with the penetration testing team to see if the team ran any scans on January 14, 2021 is not a good answer, because the web server log does not show any signs of a penetration test or a scan. The log shows only 404 errors on image files, which are not typical of a penetration test or a scan, which would usually target different types of files, ports, or vulnerabilities. Checking with the penetration testing team will not help the analyst to identify non-relevant events, but rather distract the analyst from the actual events and possibly create false alarms.
https://www.professormesser.com/network-plus/n10-008/n10-008-video/general-network-troubleshooting-n10-008/

NEW QUESTION 11

An administrator wants to increase the availability of a server that is connected to the office network. Which of the following allows for multiple NICs to share a single IP address and offers maximum performance while providing fault tolerance in the event of a NIC failure?

• A. Multipathing
• B. Spanning Tree Protocol
• C. First Hop Redundancy Protocol
• D. Elasticity

Answer: A

Explanation:
Reference: https://docs.oracle.com/cd/E19455-01/806-6547/6jffv7oma/index.html

NEW QUESTION 12

A network administrator wants to improve the security of the management console on the company's switches and ensure configuration changes made can be correlated to the administrator who conformed them Which of the following should the network administrator implement?

• A. Port security
• B. Local authentication
• C. TACACS+
• D. Access control list

Answer: C

Explanation:
TACACS+ is a protocol that provides centralized authentication, authorization, and accounting (AAA) for network devices and users. TACACS+ can help improve the security of the management console on the company’s switches by verifying the identity and credentials of the administrators, enforcing granular access policies and permissions, and logging the configuration changes made by each administrator. This way, the network administrator can ensure only authorized and authenticated users can access and modify the switch settings, and also track and correlate the changes made by each user. References: https://www.comptia.org/blog/what-is-tacacs

NEW QUESTION 13

A customer wants to segregate the traffic between guests on a hypervisor. Which of the following does a technician need to configure to meet the requirement?

• A. Virtual switches
• B. OSPF routing
• C. Load balancers
• D. NIC teaming
• E. Fibre Channel

Answer: A

Explanation:
A virtual switch is a software-based switch that connects virtual machines on a hypervisor. A virtual switch can create and manage VLANs, which are logical segments of a network that isolate traffic between different groups of devices. A customer can use virtual switches to segregate the traffic between guests on a hypervisor by creating a separate VLAN for each guest and assigning it to a virtual switch port. References:
https://www.comptia.org/blog/what-is-a-virtual-switch

NEW QUESTION 14

A network resource was accessed by an outsider as a result of a successful phishing
campaign. Which of the following strategies should be employed to mitigate the effects of phishing?

• A. Multifactor authentication
• B. Single sign-on
• C. RADIUS
• D. VPN

Answer: A

Explanation:
Multifactor authentication is a security measure that requires users to provide multiple pieces of evidence before they can access a network resource. This could include requiring users to enter a username, password, and a code sent to the user's mobile phone before they are allowed access. This ensures that the user is who they say they are, reducing the risk of malicious actors gaining access to network resources as a result of a successful phishing campaign.

NEW QUESTION 15

An engineer is configuring redundant network links between switches. Which of the following should the engineer enable to prevent network stability issues?

• A. 802.1Q
• B. STP
• C. Flow control
• D. CSMA/CD

Answer: B

Explanation:
Spanning Tree Protocol (STP) should be enabled when configuring redundant network links between switches. STP ensures that only one active path is used at a time, preventing network loops and stability issues.
References:
✑ CompTIA Network+ Certification Study Guide

NEW QUESTION 16
......