N10-009 CompTIA Network+ Certification Exam Free Practice Exam Questions (2025 Updated)

WPA3-Enterprise provides strong security and supports authentication using domain identities through a RADIUS server and 802.1X authentication. This is the best choice for a corporate environment requiring user-based authentication.

WPA3-Enterprise Benefits:

Uses 802.1X with EAP (Extensible Authentication Protocol) to authenticate users via a directory service (e.g., Active Directory).

Eliminates shared passwords (PSK) for authentication.

Provides strong encryption and resistance to brute-force attacks.

Incorrect Options:

A. Enable MAC Security:

MAC filtering is not secure because MAC addresses can be spoofed.

B. Generate a PSK for Each User:

Pre-shared keys (PSK) are used in WPA-Personal, not in an enterprise setting.

Does not scale well in corporate environments.

C. Implement WPS:

Wi-Fi Protected Setup (WPS) is a vulnerable security method meant for home users.

Not suitable for enterprise authentication.

Port 587 is used for secure email submission. This port is designated for message submission by mail clients to mail servers using the SMTP protocol, typically with STARTTLS for encryption.

Port 25: Traditionally used for SMTP relay, but not secure and often blocked by ISPs for outgoing mail due to spam concerns.

Port 110: Used for POP3 (Post Office Protocol version 3), not typically secured.

Port 143: Used for IMAP (Internet Message Access Protocol), which can be secured with STARTTLS or SSL/TLS.

Port 587: Specifically used for authenticated email submission (SMTP) with encryption, ensuring secure transmission of email from clients to servers.

Network References:

CompTIA Network+ N10-007 Official Certification Guide: Discusses email protocols and ports, including secure email transmission.

Cisco Networking Academy: Provides training on securing email communications and the use of appropriate ports.

Network+ Certification All-in-One Exam Guide: Explains email protocols, ports, and security considerations for email transmission.

When dealing with troubleshooting and change management, the plan of action outlines the steps, risks, and mitigation strategies. A change advisory board (CAB) uses this documented plan to decide whether to approve the change.

A. Identify the problem is the first step in troubleshooting, not decision-making for CAB.

B. Develop a theory is diagnostic work, not planning.

C. Test the theory confirms causes but doesn’t provide actionable planning information.

References (CompTIA Network+ N10-009):

Domain: Network Operations — Change management, troubleshooting methodology, CAB processes.

Multi-factor authentication (MFA) requires two or more different categories of authentication factors:

Something you know (password, PIN)

Something you have (smart card, hardware token)

Something you are (biometric)

The only valid second factor here is a hard token (e.g., a key fob generating one-time codes).

A. PIN is still “something you know,” the same category as a password.

B. Favorite color is a weak knowledge-based factor, not a true second factor.

D. Mother’s maiden name is also “something you know” and insecure.

References (CompTIA Network+ N10-009):

Domain: Network Security — Authentication methods, MFA factor categories.

When traceroute shows asterisks (timeouts) instead of IP addresses or hostnames, it may indicate that intermediate routers are dropping ICMP packets. However, performing an nslookup will reveal the IP address associated with the domain name, confirming that DNS resolution is correct and helping identify the path to the target server. The document states:

“nslookup is used to query DNS servers to retrieve IP address information associated with a domain name, which helps confirm DNS resolution is working correctly even when traceroute results show timeouts.”

Power over Ethernet (PoE) delivers power to devices such as VoIP phones over the same cables used for data. If the total power requirement of connected devices exceeds the PoE power budget of the switch or injector, some devices may not receive adequate power and could intermittently reboot. This issue would not affect the workstation, which is likely receiving power separately. References: CompTIA Network+ Exam Objectives and official study guides.

A proxy server can filter internet access by controlling which websites or services users can reach. It enforces content policies and can provide caching and monitoring.

A. A router directs traffic but doesn’t filter internet sites by itself.

B. A cloud gateway could also filter, but the most direct answer is proxy.

D. An IDS detects suspicious activity but doesn’t filter browsing access.

References (CompTIA Network+ N10-009):

Domain: Network Security — Proxy servers, filtering, access control.

When an organization moves its DNS servers to new IP addresses, the NS (Name Server) records must be updated. The NS record defines which DNS servers are authoritative for a domain. Ifthese records still point to the old IP addresses, clients will continue to query the outdated servers, leading to connectivity issues.

Breakdown of Options:

A. AAAA – This record maps a domain name to an IPv6 address. Since the issue is with DNS resolution, not IP versioning, this is incorrect.

B. CNAME – A CNAME (Canonical Name) record is used for domain aliasing, not for defining authoritative name servers.

C. MX – Mail Exchange (MX) records direct email traffic to the correct mail server, which does not impact general website accessibility.

D. NS – Correct answer. NS records must be updated to reflect the new authoritative DNS servers.

WPA2/WPA3 mixed mode provides compatibility for older devices (that only support WPA2) while allowing newer devices to take advantage of stronger WPA3 encryption. This ensures maximum compatibility and security in a mixed-device environment.

A. WPA3 only is most secure but not compatible with legacy devices.

B. WPA2 only is secure but does not future-proof against WPA3-capable devices.

D. WPA/WPA2 mixed mode is weaker due to WPA (deprecated, insecure).

References (CompTIA Network+ N10-009):

Domain: Network Security — Wi-Fi encryption standards, WPA2 vs WPA3, mixed-mode compatibility.

BNC (Bayonet Neill–Concelman) connectors are commonly used with coaxial cables in RF and wireless applications, including some older Wi-Fi antennas and specialized networking equipment. The document says:

“BNC (Bayonet Neill–Concelman) connectors are typically used with coaxial cables, especially in radio frequency (RF) and some Wi-Fi antenna applications, providing a secure and quick connect/disconnect.”

A UPS (Uninterruptible Power Supply) provides backup power to devices during a power outage, allowing for continuous operation and protecting against sudden shutdowns that could cause data loss or equipment damage. The document confirms:

“A UPS (Uninterruptible Power Supply) is essential for maintaining power to critical devices during an outage, protecting data and ensuring continuous operation until power is restored or a safe shutdown can be performed.”

The most likely reason an insurance brokerage would enforce VPN usage is to encrypt sensitive data in transit. VPNs (Virtual Private Networks) create a secure tunnel between the user's device and the corporate network, ensuring that data is encrypted and protected from interception.

Encryption: VPNs encrypt data, preventing unauthorized access and ensuring data privacy during transmission over public or unsecured networks.

Data Protection: Essential for industries handling sensitive information, such as insurance brokerages, to protect customer data and comply with regulatory requirements.

Security: Enhances overall network security by providing secure remote access for employees.

Network References:

CompTIA Network+ N10-007 Official Certification Guide: Discusses the role of VPNs in securing data in transit.

Cisco Networking Academy: Provides training on VPN technologies and their importance in data security.

Network+ Certification All-in-One Exam Guide: Explains VPN usage and its benefits in protecting sensitive information.

To validate routing between networks hosting Workstation A and File Server 2, follow these steps:

Review Routing Tables:

Check the routing tables of Router A, Router B, and Router C to identify any missing routes.

Identify Missing Routes:

Ensure that each router has routes to the networks on which Workstation A and File Server 2 are located.

Add Static Routes:

If a route is missing, add a static route to the relevant destination network via the correct interface.

Routing Table:

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S* 0.0.0.0/0 is directly connected, GigabitEthernet3

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks

C 10.0.4.0/22 is directly connected, GigabitEthernet2

C 10.0.6.0/24 is directly connected, GigabitEthernet2

L 10.0.6.1/32 is directly connected, GigabitEthernet2

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.27.0/30 is directly connected, GigabitEthernet3

L 172.16.27.1/32 is directly connected, GigabitEthernet3

Routing Table:

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S* 0.0.0.0/0 is directly connected, GigabitEthernet1

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks

C 10.0.0.0/22 is directly connected, GigabitEthernet1

L 10.0.0.1/32 is directly connected, GigabitEthernet1

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.27.4/30 is directly connected, GigabitEthernet1

L 172.16.27.5/32 is directly connected, GigabitEthernet1

Routing Table:

10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks

S 10.0.0.0/22 [1/0] via GigabitEthernet1

S 10.0.4.0/22 [1/0] via GigabitEthernet2

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.27.0/30 is directly connected, GigabitEthernet2

L 172.16.27.2/32 is directly connected, GigabitEthernet2

C 172.16.27.4/30 is directly connected, GigabitEthernet1

L 172.16.27.6/32 is directly connected, GigabitEthernet1

Install Static Route to 10.0.0.0/22 via 172.16.27.1 (assuming Router C's IP is 172.16.27.1):

Destination Prefix: 10.0.0.0

Destination Prefix Mask: 255.255.252.0

Interface: GigabitEthernet3

Install Static Route to 10.0.4.0/22 via 172.16.27.5 (assuming Router C's IP is 172.16.27.5):

Destination Prefix: 10.0.4.0

Destination Prefix Mask: 255.255.252.0

Interface: GigabitEthernet1

Install Static Route to 10.0.6.0/24 via 172.16.27.2 (assuming Router A's IP is 172.16.27.2):

Destination Prefix: 10.0.6.0

Destination Prefix Mask: 255.255.255.0

Interface: GigabitEthernet2

Install Static Route to 10.0.0.0/22 via 172.16.27.1 (assuming Router B's IP is 172.16.27.1):

Destination Prefix: 10.0.0.0

Destination Prefix Mask: 255.255.252.0

Interface: GigabitEthernet1

Summary of Static Routes:

Router A:

ip route 10.0.0.0 255.255.252.0 GigabitEthernet3

Router B:

ip route 10.0.4.0 255.255.252.0 GigabitEthernet1

Router C:

ip route 10.0.6.0 255.255.255.0 GigabitEthernet2

ip route 10.0.0.0 255.255.252.0 GigabitEthernet1

These configurations ensure that each router knows the correct paths to reach Workstation A and File Server 2, resolving the connectivity issue.

Troubleshooting Methodology:

Troubleshooting involves a systematic approach to diagnosing and resolving issues. It typically includes steps such as identifying symptoms, gathering information, formulating and testing theories, and implementing solutions.

Confirming a Theory:

Duplicate the Problem: To confirm a theory, the technician should reproduce the problem in a controlled environment. This helps verify that the identified cause actually leads to the observed issue.

Verification: By duplicating the problem, the technician can observe the issue firsthand, validate the hypothesis, and rule out other potential causes.

Comparison with Other Steps:

Identify the Symptoms: Initial step to understand what the problem is, not specifically for confirming a theory.

Gather Information: Involves collecting data and details about the issue, usually done before formulating a theory.

Determine Any Changes: Involves checking for recent changes that could have caused the issue, a part of the information-gathering phase.

Implementation:

Use similar equipment or software in a test environment to recreate the issue.

Observe the results to see if they match the original problem, thereby confirming the theory.