📘 Free N10-009 Sample Questions
A network technician was recently onboarded to a company. A manager has tasked the technician with
documenting the network and has provided the technician with partial information from previous documentation.
INSTRUCTIONS -
Click on each switch to perform a network discovery by entering commands into the terminal. Type help to view a
list of available commands.
Fill in the missing information using the drop-down menus provided.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
A
Steps for Network Documentation:
1. Network Discovery:
o Use discovery commands on each switch to collect data about connected devices. Common
commands include show mac-address-table to view MAC addresses associated with the
ports and show ip interface brief to check the IP configuration of switch interfaces.
2. Document MAC and IP Addresses:
o From the MAC address table, document the MAC addresses linked to each port. In your
provided image, select the appropriate MAC address for each PC (e.g., PC1, PC2, PC3,
PC4) based on their connection to Access Switch 1 or 2.
o Assign and document IP addresses for each device from the range available in the
dropdown (e.g., 10.10.30.51 for PC1).
3. VLAN Assignment:
o Assign and document VLANs for each PC according to network segmentation policies. It
seems VLAN 10 and 20 are options; ensure each PC is assigned to the correct VLAN based
on their network usage (e.g., regular users, admin, guest network).
4. Interface Configuration:
o Document the interface each PC is connected to on their respective Access Switch. Ensure
the interface matches the physical connection lay out.
Final Verification:
. Use commands like show vlan to verify that VLAN assignments are correct across
devices.
. Use show running-config to verify the overall configuration and ensure it aligns with
security and operational policies.
Correct Answer:
A. Steps for Network Documentation:
1. Network Discovery:
o Use discovery commands on each switch to collect data about connected devices. Common
commands include show mac-address-table to view MAC addresses associated with the
ports and show ip interface brief to check the IP configuration of switch interfaces.
2. Document MAC and IP Addresses:
o From the MAC address table, document the MAC addresses linked to each port. In your
provided image, select the appropriate MAC address for each PC (e.g., PC1, PC2, PC3,
PC4) based on their connection to Access Switch 1 or 2.
o Assign and document IP addresses for each device from the range available in the
dropdown (e.g., 10.10.30.51 for PC1).
3. VLAN Assignment:
o Assign and document VLANs for each PC according to network segmentation policies. It
seems VLAN 10 and 20 are options; ensure each PC is assigned to the correct VLAN based
on their network usage (e.g., regular users, admin, guest network).
4. Interface Configuration:
o Document the interface each PC is connected to on their respective Access Switch. Ensure
the interface matches the physical connection lay out.
Final Verification:
. Use commands like show vlan to verify that VLAN assignments are correct across
devices.
. Use show running-config to verify the overall configuration and ensure it aligns with
security and operational policies.
Explanation:
Steps for Network Documentation
1. Network Discovery
Goal: Identify all devices connected to switches.
How:
Use CLI commands like:
show mac address-table: Lists MAC addresses and the switch ports they are learned on.
show ip interface brief: Shows IP addresses and statuses of switch interfaces.
Purpose: Helps correlate devices with ports and identify active connections.
2. Document MAC and IP Addresses
MAC Address Documentation:
Match each PC (e.g., PC1, PC2, PC3, PC4) to its MAC address using the MAC address table.
Determine which Access Switch each device is connected to.
IP Address Assignment:
Assign static IPs to each PC from the approved range (e.g., 10.10.30.51 for PC1).
Ensure these are recorded properly to maintain network manageability.
3. VLAN Assignment
Purpose: Enforce network segmentation and policy compliance.
How
Assign VLANs to PCs based on role:
VLAN 10: Possibly for admin or regular users.
VLAN 20: Possibly for guests or less trusted devices,
Helps manage broadcast domains and enhances security.
4. Interface Configuration
Document Switch Ports:
Note which physical port each PC is connected to on the access switch.
Confirm physical wiring matches documentation.
Final Verification
show vlan:
Verifies VLAN membership across all interfaces.
Confirms each PC is assigned to the correct VLAN.
show running-config:
Displays current switch configuration.
Used to audit and ensure compliance with network security policies and best practices.
A network administrator has been tasked with configuring a network for a new corporate office. The office
consists of two buildings, separated by 50 feet with no physical connectivity. The configuration must meet the
following requirements:
Devices in both buildings should be able to access the Internet.
Security insists that all Internet traffic be inspected before entering the network.
Desktops should not see traffic destined for other devices.
INSTRUCTIONS -
Select the appropriate network device for each location. If applicable, click on the magnifying glass next to any
device which may require configuration updates and make any necessary changes.
Not all devices will be used, but all locations should be filled.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
A
Correct Answer:
A.
Explanation:
Central Device Connecting to the Internet (Top middle device)
Device: Firewall
Reason:
Acts as a security barrier between the internal network and the public internet.
Filters traffic based on configured rules (e.g., allows HTTP/HTTPS, blocks malicious traffic).
Ensures security compliance, preventing unauthorized access to internal resources.
Device Between Building A and the Internet (First question mark inside Building A)
Device: Router
Reason:
Directs network traffic between different networks, such as:
Internal LANs (Building A and B)
External network (Internet)
Works in conjunction with the firewall to route approved traffic to/from the internet.
Performs Network Address Translation (NAT) to allow multiple devices to share one public IP.
Devices Inside Building A (Two question marks linked to desktops and servers)
Device: Switch (x2)
Reason:
Connects multiple end-user devices (desktops, servers) into a single LAN.
Operates at Layer 2 (Data Link layer), forwarding traffic within the same subnet.
Provides internal communication without unnecessary traffic flooding.
Device Connecting Building A to Building B (Question mark between buildings)
Device: Wireless Range Extender
Reason:
Buildings are 50 feet apart with no wired connection.
Device: Switch
Reason:
Extender boosts or relays the wireless signal from Building A to Building B.
Facilitates wireless connectivity across physically separated areas without new cabling.
Ideal in temporary setups or where cabling is impractical.
Device Inside Building B (Question mark inside Building B)
Connects devices in Building B to the extended network.
Enables devices to communicate locally and reach services in Building A and the internet.
Works alongside the wireless extender to distribute the signal to multiple devices.
Which of the following steps of the troubleshooting methodology would most likely include checking through each
level of the OSI model after the problem has been identified?
A
Establish a theory.
B
Implement the solution.
C
Create a plan of action.
D
. Verify functionality.
Correct Answer:
A. Establish a theory.
Explanation:
A. Establish a theory
According to the CompTIA troubleshooting methodology, once the problem has been identified, the next step
is to establish a theory of probable cause. This involves systematically analyzing the problem and narrowing
down potential causes. Checking through each level of the OSI model is a common practice at this stage to
identify where the issue might be occurring.The OSI model (Open Systems Interconnection model) is a
conceptual framework used to understand and troubleshoot network issues layer by layer — from the
physical layer up to the application layer.
While troubleshooting a VolP handset connection, a technician's laptop is able to successfully connect to network
resources using the same port. The technician needs to identify the port on the switch. Which of the following
should the technician use to determine the switch and port?
A
LLDP
B
.IKE
C
VLAN
D
.netstat
Correct Answer:
A. LLDP
Explanation:
A: LLDP
LLDP is specifically designed to help network devices advertise information about themselves and discover
information about directly connected neighboring devices.
A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP
addresses. Which of the following is the best solution for the administrator to set up?
A
.A separate scope for the file server using a /32 subnet
B
A reservation for the server based on the MAC address
C
A static IP address within the DHCP IP range
D
A SLAAC for the server
Correct Answer:
B. A reservation for the server based on the MAC address
Explanation:
B. A reservation for the server based on the MAC address.
In a network where DHCP is used to assign IP addresses, the best way to ensure a file server always receives
the same IP address (so users can reliably connect to it) is to configure a DHCP reservation.
This binds a specific MAC address to a specific IP address, ensuring that the DHCP server always assigns the
same IP to the file server.
Why the other options are incorrect:
A. A separate scope for the file server using a /32 subnet
Also unnecessarily complex and restrictive.
C. A static IP address within the DHCP IP range
D. SLAAC for the server
/32 means only one IP address — not suitable for a DHCP scope, and overkill for a single server.
This can cause IP conflicts if the DHCP server tries to assign the same IP to another device.
Best practice is to assign static IPs outside the DHCP range — or use a reservation instead.
SLAAC (Stateless Address Autoconfiguration) is used in IPv6 environments, not common or best practice for
file servers that users must access via predictable IPv4 addresses.
Which of the following technologies are X.509 certificates most commonly associated with?
A
PKI
B
.VLAN tagging
C
LDAP
D
.MFA
Correct Answer:
A. PKI
Explanation:
A: PKI (Public Key Infrastructure)
The other options are less suitable because:
VLAN tagging (B): This is a networking concept unrelated to certificate-based security
LDAP (C): While LDAP can use certificates, it's primarily a directory service protocol
MFA (D): While certificates can be used in MFA, they are just one of many possible authentication factors
A network administrator wants to implement an authentication process for temporary access to an organization's
network. Which of the following technologies would facilitate this process?
A
Captive portal
B
Enterprise authentication
C
Ad hoc network
D
WPA3
Correct Answer:
A. Captive portal
Explanation:
A captive portal is a web page that users see before accessing a public network. Users typically need to
provide some form of authentication, such as logging in with temporary credentials, before they can access
the network. This is particularly useful for temporary access as it can be used to enforce network access
policies and gather user information.
A user is unable to navigate to a website because the provided URL is not resolving to the correct IP address. Other
users are able to navigate to the intended website without issue. Which of the following is most likely causing this
issue?
A
Hosts file
B
Self-signed certificate
C
Nameserver record
D
IP helper
Correct Answer:
A. Hosts file
Explanation:
The hosts file is a local system file that maps hostnames to IP addresses and can override normal DNS
resolution. When only one user is experiencing resolution issues while others can access the website
normally, this strongly suggests a local configuration problem rather than a network-wide DNS issue.
A network administrator is planning to host a company application in the cloud, making the application available
for all internal and third-party users. Which of the following concepts describes this arrangement?
A
.Multitenancy
B
.VPC
C
NFV
D
.SaaS
Correct Answer:
D. .SaaS
Explanation:
D. SaaS.
The scenario describes hosting a company application in the cloud and making it accessible to both internal
and third-party users. This fits the SaaS model.
Why the other options are incorrect:
A. Multitenancy
and external users directly.
B. VPC (Virtual Private Cloud)
This is a software architecture concept where a single instance of software serves multiple tenants (users or
organizations).
While SaaS often uses multitenancy, the concept itself doesn't describe hosting an application for internal
A networking concept — a logically isolated section of a cloud provider’s network.
Does not describe making an application available to users.
C. NFV (Network Functions Virtualization)
Refers to virtualizing network services (like firewalls, routers) on commodity hardware.
Not related to hosting applications for users.
Which of the following should be used to obtain remote access to a network appliance that has failed to start up properly?
A
Crash cart
B
Jump box
C
Secure Shell
D
Out-of-band management
Correct Answer:
D. Out-of-band management
Explanation:
D: Out-of-band management (OOB).OOB management provides access to devices even when they
are:Powered downUnresponsiveWithout an operating systemUnable to start properlyCrash cart (A): Requires
physical presence at the device locationJump box (B): While related to OOB, it's just one component and
requires a functioning network4Secure Shell (C): Requires the device to be operational and the OS to be
functioning.
Questions: 1-10 out of 724
Continue Full Practice..
GET ALL 724 QUESTIONS