N10-009 Exam Dumps - CompTIA Network+ Questions and Answers

The correct answer is BNC. A Bayonet Neill-Concelman connector, commonly called a BNC connector, is used with coaxial cable. Coaxial cabling has historically been used in Ethernet networks, cable broadband, CCTV systems, and radio frequency applications. BNC connectors use a twist-lock bayonet mechanism that provides a secure connection and helps maintain signal integrity over coaxial media.

The CompTIA Network+ N10-009 objectives include recognizing common cable types and connectors used in networking. SC and MPO are fiber-optic connectors, not coaxial connectors. SC connectors are commonly used for fiber connections and have a push-pull design. MPO connectors are multi-fiber push-on connectors often used in high-density fiber environments. RJ11 is commonly associated with telephone cabling and DSL connections, not coaxial Ethernet or RF-style network cabling. Since coaxial cable uses a central conductor, insulation, shielding, and an outer jacket, it requires connectors designed specifically for coaxial signaling. Among the listed options, BNC is the connector type associated with transmitting network data over coaxial cable.

DNS filtering blocks access to known malicious websites by comparing domain requests against a list of allowed or blocked URLs. It is an effective defense against phishing and other web-based attacks.

From Andrew Ramdayal’s guide:

“URL filtering restricts access to specific websites or web content by comparing URLs against a predefined list of allowed or blocked sites…commonly used to prevent users from accessing malicious sites.”

Definition of RPO:

Recovery Point Objective (RPO) is a disaster recovery metric that describes the maximum acceptable amount of data loss measured in time. It indicates the point in time to which data must be recovered to resume normal operations after a disaster.

For example, if the RPO is set to 24 hours, then the business could tolerate losing up to 24 hours ' worth of data in the event of a disruption.

Why RPO is Important:

RPO is critical for determining backup frequency and helps businesses decide how often they need to back up their data. A lower RPO means more frequent backups and less potential data loss.

Comparison with Other Metrics:

MTTR (Mean Time to Repair): Refers to the average time required to repair a system or component and return it to normal operation.

RTO (Recovery Time Objective): The maximum acceptable length of time that a computer, system, network, or application can be down after a failure or disaster occurs.

MTBF (Mean Time Between Failures): The predicted elapsed time between inherent failures of a system during operation.

How RPO is Used in Disaster Recovery:

Organizations establish RPOs to ensure that they can recover data within a timeframe that is acceptable to business operations. This involves creating a backup plan that meets the RPO requirements.

The most likely cause of buffering issues when moving outdoors is signal degradation. Wireless signals weaken as they travel through obstacles such as walls, glass, and air, leading to weaker connections and reduced data rates.

Breakdown of Options:

A. Network congestion – While congestion can slow down network speeds, it affects all users, not just those moving outdoors.

B. Wireless interference – Interference is possible but is more likely caused by other wireless signals rather than outdoor movement.

C. Signal degradation – Correct answer. Wireless signals weaken with distance and obstacles such as walls, reducing performance.

D. Client disassociation – Disassociation occurs when clients lose connection to the AP, but the question states that users experience buffering, indicating they are still connected but with a weak signal.

When high-bandwidth services like videoconferencing are introduced, two primary factors may degrade performance:

Incorrect QoS Settings (E):QoS (Quality of Service) is used to prioritize traffic. If not configured correctly, critical services like video may not get the necessary bandwidth and prioritization.

Network Congestion (F):Video services consume large amounts of data. If the network doesn’t have sufficient bandwidth or is not segmented properly, congestion will slow down all services.

DNS misconfiguration (A) would affect name resolution, not bandwidth.

Malware (C) could degrade performance, but is not tied to the described scenario.

Outdated software (D) may affect performance in some cases, but not directly linked to network congestion in this case.

Inadequate network security (B) isn ' t likely to cause general slowness related to video traffic.

✅ So, the most likely culprits are E. Incorrect QoS settings and F. Network congestion.

The issue is that more students have arrived on campus, meaning the available IP addresses are exhausted. To fix this, the administrator should increase the DHCP scope size to allow more devices to obtain IP addresses.

Breakdown of Options:

A. Enable IP helper – IP helper is used to forward DHCP requests across different subnets. However, the problem here is that the DHCP scope is full, not that requests are not reaching the server.

B. Change the subnet mask – The subnet mask determines the number of available hosts, but changing it without increasing the IP pool does not help.

C. Increase the scope size – Correct answer. Expanding the DHCP scope provides more IP addresses for assignment.

D. Add address exclusions – Exclusions reserve IP addresses, which would further reduce available addresses instead of solving the issue.

If the company’s SSID is not visible in some areas while other networks are still visible, the most likely cause is insufficient wireless coverage. The wireless signal does not reach those areas, meaning additional access points or signal boosters may be required.

Breakdown of Options:

A. Interference or channel overlap – Would cause slow or unstable connections, but the SSID should still be visible.

B. Insufficient wireless coverage – ✅ Correct answer. If the SSID is not appearing, the signal is too weak in that area.

C. Roaming misconfiguration – Would cause devices to stay on weaker APs instead of switching, but the SSID should still be visible.

D. Client disassociation issues – This would disconnect users, but they should still see the network.

The right answer is A. Trap. In SNMP, a trap is an unsolicited notification sent from a managed device to the management system when a significant event happens. A switch detecting that an interface has gone up or down is a textbook example of the kind of event that can trigger this kind of message.

That is different from normal SNMP polling, where the monitoring server asks the device for status information on a schedule. With a trap, the device does not wait to be asked. It sends the alert immediately, which makes it useful for link failures, threshold violations, and other time-sensitive conditions.

The other choices are related to SNMP, but not in the same way. An object identifier (OID) points to a specific managed value. A string is commonly associated with SNMP community information in older versions. A MIB is the structured database of manageable objects. None of those are the actual alerting mechanism.

Because the question asks for an automatic alert when link status changes, the feature being described is clearly an SNMP trap.

Security groups in cloud environments act as virtual firewalls for VM instances, controlling inbound and outbound traffic based on specified rules.

From Andrew Ramdayal’s guide:

“Network security groups are used to control inbound and outbound traffic to cloud resources within a VPC. They act as a virtual firewall for associated instances...”

Introduction to Subinterfaces:

Subinterfaces are logical interfaces created on a single physical interface. They are used to enable a router to support multiple networks on a single physical interface.

Use Case for Subinterfaces:

Subinterfaces are commonly used in scenarios where VLANs are implemented. A router with a single physical LAN port can be configured with multiple subinterfaces, each associated with a different VLAN.

This setup allows the router to route traffic between different VLANs.

Example Configuration:

Consider a router with a single physical interface GigabitEthernet0/0 and two VLANs, 10 and 20.

interface GigabitEthernet0/0.10

encapsulation dot1Q 10

ip address 192.168.10.1 255.255.255.0

!

interface GigabitEthernet0/0.20

encapsulation dot1Q 20

ip address 192.168.20.1 255.255.255.0

The encapsulation dot1Q command specifies the VLAN ID.

Explanation of the Options:

A. A router with only one available LAN port: This is correct. Subinterfaces allow a single physical interface to manage multiple networks, making it essential for routers with limited physical interfaces.

B. A firewall performing deep packet inspection: Firewalls can use subinterfaces, but it is not a requirement for deep packet inspection.

C. A hub utilizing jumbo frames: Hubs do not use subinterfaces as they operate at Layer 1 and do not manage IP addressing.

D. A switch using Spanning Tree Protocol: STP is a protocol for preventing loops in a network and does not require subinterfaces.

Conclusion:

Subinterfaces provide a practical solution for routing between multiple VLANs on a router with limited physical interfaces. They allow network administrators to optimize the use of available hardware resources efficiently.

Border Gateway Protocol is the best answer when considering BGP’s internal administrative distance value. Administrative distance is used by routers to decide which route source is more trustworthy when multiple routing sources advertise a path to the same destination. Lower values are preferred. A static route normally has an administrative distance of 1, internal EIGRP is commonly 90, OSPF is 110, external EIGRP is 170, external BGP is 20, and internal BGP is 200.

The CompTIA Network+ N10-009 objectives include routing protocol behavior, dynamic routing, route selection, and administrative distance. Because internal BGP has an administrative distance of 200, BGP can have the highest administrative distance among the listed options.

This question is slightly tricky because BGP has different administrative distance values depending on whether the route is learned through external BGP or internal BGP. If a question specifically said external BGP, its value would be 20, which would not be the highest. However, among the listed technologies, BGP is the best exam-style answer because iBGP has the highest default administrative distance listed here.

URL filtering can block access to websites based on their domain or country code TLDs (e.g., .cn, .ru). This is the correct method to block by location identifiers in URLs.

B. Content filtering blocks based on keywords or categories within websites, not country code.

C. DNS poisoning is an attack, not a control mechanism.

D. MAC filtering restricts devices, not websites.

References (CompTIA Network+ N10-009):

Domain: Network Security — Filtering technologies, URL vs content filtering.

Quality of Service, or QoS, is used when implementing VoIP phones because voice traffic is sensitive to delay, jitter, and packet loss. QoS allows network administrators to classify and prioritize traffic so that real-time voice packets receive preferential treatment over less time-sensitive traffic such as file downloads, backups, or general web browsing. This helps maintain call quality, reduce dropped audio, and improve the user experience during periods of network congestion.

The CompTIA Network+ N10-009 objectives include traffic management, network performance, and services that require prioritization. VoIP is one of the most common examples of a service that benefits from QoS because voice communication must be delivered consistently and in sequence.

A VPN provides secure encrypted connectivity but does not inherently prioritize voice traffic. A CDN distributes content closer to users, typically for web or media delivery, and is not specifically used to implement VoIP phones. TTL, or Time to Live, is a packet field that helps prevent packets from circulating indefinitely in a network. Therefore, QoS is the correct answer for VoIP implementation.

The correct choice is B. Captive portal. This is the common setup used in places like libraries, hotels, airports, and cafés. A user first joins the wireless network, opens a browser, and is redirected to a web page where they must log in, accept terms, or enter provided credentials. Since the question specifically mentions authentication through HTTPS, that matches the behavior of a captive portal very closely.

The other options do not line up with the scenario. WPA3 is a wireless encryption and authentication standard, but it is not the same as a browser-based login page after connection. Single sign-on and SAML are identity and federation technologies used to simplify authentication across applications or services, not to provide the typical guest Wi-Fi web login experience.

The important clue is the sequence described in the question: first connect to Wi-Fi, then authenticate through a web page. That is exactly how a captive portal works. In many public-access wireless environments, the portal sits between the client and normal internet access until the user successfully authenticates or accepts the usage policy. For Network+ exam purposes, browser-based guest wireless authentication is most directly associated with a captive portal.

An API (Application Programming Interface) is the best choice when a development team needs to integrate a device’s reporting data directly into custom software. In Network+ (N10-009) objectives, network operations commonly include device management, monitoring, and automation, and APIs are a key method for programmatic access to operational data (often via REST/HTTPS with structured formats like JSON). This enables the internal support application to pull dashboards, health metrics, events, configuration details, and reporting outputs in a controlled, developer-friendly way.

SNMPv2c is primarily used for network monitoring and polling counters/alerts, but it is less secure (community strings) and is not as flexible for modern application integration as an API. A MIB is not a data-access “feature” by itself; it’s the schema/definitions SNMP uses to describe managed objects. A SIEM is a separate security analytics platform that collects and correlates logs/events—useful for security operations, but not the direct interface a custom support tool would typically call to retrieve device reporting data.