N10-009 Exam Dumps - CompTIA Network+ Questions and Answers

Introduction to Administrative Distance

Administrative distance (AD) is a value used by routers to rank routes from different routing protocols. AD represents the trustworthiness of the source of the route. Lower AD values are more preferred. If a router has multiple routes to a destination from different sources, it will choose the route with the lowest AD.

Static Routes and Backup Routes

When a dynamic routing protocol is not used, static routes can be employed. Static routes are manually configured routes. To ensure a backup route, multiple static routes to the same destination can be configured with different AD values.

Configuring Static Routes with Administrative Distance

The primary route is configured with a lower AD value, making it the preferred route. The backup route is configured with a higher AD value. In the event of the primary route failure, the router will then use the backup route.

Example Configuration:

plaintext

Copy code

ip route 192.168.1.0 255.255.255.0 10.0.0.1 1

ip route 192.168.1.0 255.255.255.0 10.0.0.2 10

In the above example, 192.168.1.0/24 is the destination network.

10.0.0.1 is the next-hop IP address for the primary route with an AD of 1.

10.0.0.2 is the next-hop IP address for the backup route with an AD of 10.

Verification:

After configuration, use the show ip route command to verify that the primary route is in use and the backup route is listed as a candidate for use if the primary route fails.

APIPA (Automatic Private IP Addressing) assigns an IP address in the range 169.254.x.x when a DHCP server cannot be contacted, and it sets the default gateway to 0.0.0.0 because APIPA is designed only for local communication within the same subnet. The document states:

“APIPA allows for automatic, ad hoc network communication within a single subnet when a DHCP server is not available. In this state, the default gateway is typically set to 0.0.0.0 because APIPA does not provide routing to other networks.”

The correct answer is Active-active because a stock exchange broker requires extremely high availability, minimal downtime, and near-zero data loss. According to CompTIA Network+ (N10-009) objectives under high availability and disaster recovery concepts, an active-active configuration involves multiple systems or sites operating simultaneously and sharing the workload. If one system fails, the other continues processing traffic without service interruption.

This model provides the lowest Recovery Time Objective (RTO) and Recovery Point Objective (RPO), which is critical in financial trading environments where even seconds of downtime can result in major financial loss. Active-active architectures also support load balancing, redundancy, and continuous synchronization between systems.

A warm site (Option A) contains preconfigured hardware but may require data restoration and configuration before becoming fully operational, resulting in some downtime. A full mesh (Option C) is a network topology design and does not specifically address disaster recovery at the service level. In-band (Option D) refers to management traffic sharing the production network and is unrelated to DR strategy.

Therefore, an active-active approach is the most suitable solution for mission-critical financial operations.

Ascreened subnet, also known as aDMZ (Demilitarized Zone), is aboundary networkthat separates an organization ' s internal network from external-facing systems. It is used to host public services like web or email servers while protecting internal systems from exposure.

The correct answer is SaaS (Software as a Service). According to the CompTIA Network+ N10-009 objectives, SaaS is the most cost-efficient cloud model for hosting common business applications such as email, collaboration tools, and productivity suites. With SaaS, the cloud provider manages all infrastructure, operating systems, application software, security updates, and maintenance, significantly reducing administrative overhead and operational costs.

Email services are a prime example of workloads that benefit from SaaS solutions such as Microsoft 365 or Google Workspace. Organizations pay a subscription-based fee, typically per user, and avoid expenses related to server hardware, licensing, patching, backups, redundancy, and disaster recovery. This makes SaaS far more economical than deploying and maintaining email servers internally or in lower-level cloud models.

IaaS requires the organization to manage virtual machines, operating systems, email server software, and security configurations, which increases both cost and complexity. PaaS simplifies application development but is not designed for hosting ready-made services like email platforms. A VPC (Virtual Private Cloud) is a networking construct, not a service model, and does not inherently provide email hosting functionality.

The Network+ objectives emphasize selecting cloud service models based on cost, management responsibility, and operational efficiency. For standardized services like email, SaaS offers the lowest total cost of ownership and the least administrative burden, making it the best and most cost-effective choice.

To prioritize traffic and utilize a constrained link more effectively, the engineer should implement QoS (Quality of Service). QoS is a set of mechanisms that classifies and marks traffic (for example, voice, video, business-critical apps) and then applies queuing and scheduling behaviors to ensure important traffic receives preferential treatment during congestion. Network+ objectives commonly connect QoS to supporting real-time applications (VoIP/video) by reducing latency, jitter, and packet loss, while preventing less critical traffic (bulk transfers, updates) from consuming all available bandwidth. Techniques can include traffic classification, DSCP marking, priority queuing, and traffic shaping/policing.

A CDN improves content delivery by caching closer to users, but it doesn’t provide link-level prioritization for all traffic types. A VPN provides secure tunneling/encryption, not prioritization. TTL (Time To Live) is an IP header value used to prevent routing loops by limiting packet lifespan; it does not manage bandwidth or prioritize flows. QoS is the standard solution when the goal is to control how bandwidth is allocated under load and to ensure critical services remain performant.

===========

The giveaway here is the 169.254.x.x address. That is an APIPA address, which Windows assigns to itself when it asks for an IP address from DHCP and does not get one. Since there is also no default gateway and no DHCP server listed, the laptop clearly failed to obtain normal network settings.

Out of the choices, address pool exhaustion makes the most sense. If the DHCP scope has run out of available addresses, the client cannot lease one, so it falls back to an automatic private address. At that point, the device may still think its network adapter is working, but it will not be able to reach internal resources like the company intranet because it does not have valid Layer 3 settings for that network.

The other answers do not fit the output. A short lease duration could cause frequent renewals, but it would not normally explain an APIPA address by itself. An IIS problem would affect the web server, not the client’s local IP configuration. An IDS issue also would not cause the workstation to self-assign 169.254.0.5. This is a DHCP addressing problem, and the best answer is C .

Acold disaster recovery (DR) siteis a backup facility equipped withminimal infrastructure, often lacking active systems or real-time data replication. Itsgreatest advantage is cost-efficiency. Cold sites aremuch cheaperto maintain than warm or hot sites, which require continuous synchronization and operational readiness. They are used when low cost is more important than recovery speed.

Content filtering blocks access to restricted or malicious websites. When a user attempts to visit a site that violates company policies, they are redirected to a restriction page.

This is a common security measure to prevent employees from accessing phishing or malware-infected sites.

Content filters work by scanning URLs, keywords, or categories and blocking inappropriate or harmful content.

Option A (DLP - Data Loss Prevention): Focuses on preventing sensitive data leaks rather than blocking web access.

Option B (Captive portal): Used mainly in public Wi-Fi to authenticate users before granting access, not to restrict sites.

Option D (DNS sinkholing): Redirects malicious domain requests to a safe address but is not responsible for policy-based restrictions on general content.

? Reference: CompTIA Network+ (N10-009) Official Study Guide – Section: Security Solutions

The correct answer is Documenting findings, outcomes, and lessons learned because proper documentation and closure are the final steps in the ticket management and troubleshooting process. According to CompTIA Network+ (N10-009) objectives under network operations and troubleshooting methodology, once an issue is resolved, technicians must verify full system functionality, implement preventive measures if needed, and document the entire process before closing the ticket.

Documentation ensures that all relevant information—such as the root cause, corrective actions taken, configuration changes made, and lessons learned—is recorded for future reference. This supports knowledge base updates, trend analysis, compliance requirements, and improved response times for similar incidents.

Escalation (Option A) occurs earlier if the issue cannot be resolved at the current support tier. Establishing an action plan (Option D) is part of the remediation phase, not the final step. Functional and non-functional testing (Option B) occurs during verification before closure.

Therefore, comprehensive documentation and formal ticket closure represent the final step in the ticket management lifecycle.

When signal strength is poor, mobile devices constantly boost their transmission power in an attempt to maintain a stable connection. This results in dropped calls/data and rapid battery drain. Since a repeater was installed, misalignment or misconfiguration could be degrading the signal strength.

A. WPS applies to Wi-Fi, not cellular repeaters.

C. Channel frequency might matter for interference, but signal strength is the most direct cause of the described symptoms.

D. Power budget applies to PoE and wired devices, not mobile phones.

References (CompTIA Network+ N10-009):

Domain: Network Troubleshooting — Wireless/cellular troubleshooting, signal strength impact, user symptoms (battery drain, poor connectivity).

ESP (Encapsulating Security Payload) is an IPsec protocol that provides encryption, integrity, and authentication for data inside a VPN tunnel. It ensures that all tunneled traffic is encrypted.

B. SSH secures remote terminal sessions, not site-to-site VPN tunnels.

C. GRE (Generic Routing Encapsulation) provides encapsulation but does not encrypt data.

D. IKE (Internet Key Exchange) negotiates keys and establishes the IPsec tunnel but does not encrypt the payload itself.

References (CompTIA Network+ N10-009):

Domain: Network Security — VPN protocols, IPsec (AH vs. ESP), encryption in transit.

A captive portal is designed to present terms, conditions, or usage rules to users and require them to acknowledge/accept those rules before granting network or internet access. In Network+ (N10-009) security and access control concepts, captive portals are commonly associated with guest wireless or public access scenarios, where users are redirected to a web page that displays acceptable-use language and requires a click-through acceptance (and sometimes authentication). This provides a technical enforcement point: users must actively accept the rules to proceed, which supports organizational policy compliance and creates a recordable control in many implementations.

An Acceptable Use Policy (AUP) is the document that defines the rules, but by itself it does not technically force a user to acknowledge them at the time of access. NAC controls who/what can connect and can enforce posture and segmentation, but it does not inherently ensure users “accept” usage rules unless paired with a portal workflow. DNS filtering blocks or allows domain access categories (malware, adult content, etc.), which enforces browsing restrictions but does not guarantee user acceptance of rules. Therefore, the best answer to ensure users accept the rules is captive portal.

===========

Border Gateway Protocol (BGP) is the primary protocol used to route traffic on the public internet. It allows ISPs and large networks to exchange routing information, making it an Exterior Gateway Protocol (EGP).

Breakdown of Options:

A. BGP – Correct answer. Used for internet routing and exchanges routing information between ISPs.

B. OSPF – An Interior Gateway Protocol (IGP) used for routing within an autonomous system (not the public internet).

C. EIGRP – Cisco’s proprietary IGP, used within private networks, not the public internet.

D. RIP – An older distance-vector protocol, not scalable for the internet.

Temperature and humidity controlis the best way to reduce the risk of electrostatic discharge (ESD). Dry environments significantly increase the likelihood of static buildup, which can discharge and damage sensitive components. By controlling humidity, the environment becomes less prone to static electricity.