CompTIA Network+ (2021 series) practice questions

1. Question 1 of 25

   A systems administrator needs to improve WiFi performance in a densely populated office tower and use the latest standard. There is a mix of devices that use 2.4 GHz and 5 GHz. Which of the following should the systems administrator select to meet this requirement?

   • A802.11ac
   • B802.11ax
   • C802.11g
   • D802.11n

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   For reference, the below is the list of the standards, associated bands and bandwidth in sequential order: 802.11a.............5 GHz..........54 Mbps 802.11b...........2.4 GHz.........11 Mbps 802.11g...........2.4 GHz.........54 Mbps 802.11n.......2.4 and 5 GHz...150/600 Mbps 802.11ac..........5 GHz...........3 Gbps 802.11ax.....2.4/5/6 GHz......9.6 Gbps

   Adapted from community discussion by BayOne · 2023-04-06 · 49 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. B

      BayOne

      2023-04-06

      49 upvotes

      For reference, the below is the list of the standards, associated bands and bandwidth in sequential order: 802.11a.............5 GHz..........54 Mbps 802.11b...........2.4 GHz.........11 Mbps 802.11g...........2.4 GHz.........54 Mbps 802.11n.......2.4 and 5 GHz...150/600 Mbps 802.11ac..........5 GHz...........3 Gbps 802.11ax.....2.4/5/6 GHz......9.6 Gbps

   2. K

      kinny4000

      2024-05-04

      16 upvotes

      Here's a list of all PBQs, good luck: 6 43 347 461 462 671 683 753 754

   3. K

      KJ44

      2022-03-23

      Selected B6 upvotes

      Wi-Fi 6 (802.11ax) can now divide a wireless channel into a large number of subchannels. Each of these subchannels can carry data intended for a different device. This is achieved through something called Orthogonal Frequency Division Multiple Access, or OFDMA. The Wi-Fi access point can talk to more devices at once. The new riderless standard also has improved MIMO—Multiple In/Multiple Out. This involves multiple antennas, which let the access point talk to multiple devices at once. With Wi-Fi 5, the access point could talk to devices at the same time, but those devices couldn’t respond at the same time. Wi-Fi 6 has an improved version of multi-user or MU-MIMO that lets devices respond to the wireless access point at the same time.

   4. J

      JakeCharles

      2023-01-30

      Selected B6 upvotes

      B. 802.11ax, also known as Wi-Fi 6, is the latest standard that should be selected to improve WiFi performance in a densely populated office tower with a mix of devices that use 2.4 GHz and 5 GHz. 802.11ax offers higher throughput, improved efficiency, and increased capacity compared to previous generations, making it well-suited for dense environments.

2. Question 2 of 25

   An administrator is writing a script to periodically log the IPv6 and MAC addresses of all the devices on a network segment. Which of the following switch features will MOST likely be used to assist with this task?

   • ASpanning Tree Protocol
   • BNeighbor Discovery Protocol
   • CLink Aggregation Control Protocol
   • DAddress Resolution Protocol

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   B is the correct answer. Neighbor Discovery Protocol is similar to ARP but retrieves the IPV6 address. ARP retrieves IPv4.

   Adapted from community discussion by RobJob · 2023-03-07 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. R

      RobJob

      2023-03-07

      17 upvotes

      B is the correct answer. Neighbor Discovery Protocol is similar to ARP but retrieves the IPV6 address. ARP retrieves IPv4.

   2. B

      Boulet_Dude

      2024-01-11

      7 upvotes

      You can always do your due diligence and research the correct possible answers.

   3. M

      Mehsotopes

      2024-11-14

      Selected B1 upvote

      Neighbor Discovery Protocol (NDP) = Used to learn the Layer 2 addresses that are on a given network. Router Solicitation Router Advertisement = Router IPv6 asking what other nodes are on the network, asking neighbors & other devices allowing interface to try to determine what layer 2 addresses are out there & figure out how to talk to them properly. Neighbor Solicitation = Clients using this indicate where they are offering service. Redirection = Routers can inform the hosts that there are better options out there to increase the efficiencies of network.

   4. G

      Ggonza3

      2024-04-04

      3 upvotes

      Give your 2cents and post a comment claiming the CORRECT answer. This website is ran by community and I don't think the website is allowed to post the actual correct answer.

3. Question 3 of 25

   A network administrator is required to ensure that auditors have read-only access to the system logs, while systems administrators have read and write access to the system logs, and operators have no access to the system logs. The network administrator has configured security groups for each of these functional categories. Which of the following security capabilities will allow the network administrator to maintain these permissions with the LEAST administrative effort?

   • AMandatory access control
   • BUser-based permissions
   • CRole-based access
   • DLeast privilege

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   C. Role-based access A. Mandatory access control Mandatory access control (MAC) is a security model that relies on a central authority to assign security labels to objects and subjects, and to determine the rules governing access to those objects. It is useful for highly sensitive systems and requires more administrative effort. B. User-based permissions User-based permissions assign permissions to individual users, it can be complex and more administrative effort to maintain when the number of users increases. D. Least privilege Least privilege is a security principle that limits users to the minimum set of permissions they need to perform their tasks. It is a good practice but it's not a security capability and it doesn't provide a way to manage permissions effectively.

   Adapted from community discussion by JakeCharles · 2024-01-28 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Oracle documentation

   View community discussion3

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. J

      JakeCharles

      2024-01-28

      Selected C11 upvotes

      C. Role-based access A. Mandatory access control Mandatory access control (MAC) is a security model that relies on a central authority to assign security labels to objects and subjects, and to determine the rules governing access to those objects. It is useful for highly sensitive systems and requires more administrative effort. B. User-based permissions User-based permissions assign permissions to individual users, it can be complex and more administrative effort to maintain when the number of users increases. D. Least privilege Least privilege is a security principle that limits users to the minimum set of permissions they need to perform their tasks. It is a good practice but it's not a security capability and it doesn't provide a way to manage permissions effectively.

   2. M

      May2022

      2023-09-20

      6 upvotes

      I believe what you are looking for is here: https://docs.oracle.com/cd/E19253-01/816-4557/rbac-1/index.html#:~:text=With%20RBAC%2C%20you%20can%20enforce,necessary%20to%20perform%20a%20job.

   3. M

      Mehsotopes

      2024-11-10

      Selected C1 upvote

      RBAC is an access model that is controlled by the system but focuses on a set of permissions versus an individual's permissions.

4. Question 4 of 25

   Which of the following describes the BEST device to configure as a DHCP relay?

   • ABridge
   • BRouter
   • CLayer 2 switch
   • DHub

   Show answer

   Correct answer: B

   How others answered

   • B98%

   Explanation

   A layer 3 switch would have received my vote but not a Data Link layer 2 switch. Routers, IP assignments (DHCP) occur at network layer.

   Adapted from community discussion by JAMBER · 2022-11-30 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. J

      JAMBER

      2022-11-30

      Selected B17 upvotes

      A layer 3 switch would have received my vote but not a Data Link layer 2 switch. Routers, IP assignments (DHCP) occur at network layer.

   2. A

      AntonioTech

      2022-12-28

      Selected B9 upvotes

      I was thinking that it was B - Router but actually the offered answer C is ok. Can you configure layer 2 switch as DHCP relay? Yes, it is possible to configure a layer 2 switch to act as a DHCP relay. In order to do this, you will need to configure the switch to forward DHCP requests from clients to a DHCP server on another network. This is typically done using the "ip helper-address" command. For example, if the IP address of the DHCP server is 10.0.0.1, you would configure the switch as follows: ip helper-address 10.0.0.1 This will cause the switch to forward any DHCP requests it receives from clients to the DHCP server at 10.0.0.1. The DHCP server will then respond to the request and provide the client with an IP address and other necessary configuration information. It's worth noting that this configuration will only work if the switch is connected to both the client and the DHCP server via separate network segments. If the switch is connected to both the client and the DHCP server on the same network segment, the DHCP request will not be forwarded.

   3. N

      NICKJONRIPPER

      2022-10-29

      6 upvotes

      should be layer 3 switch, how can a layer 2 switch get information from another broadcast domain?

   4. T

      tahs

      2022-09-15

      Selected B2 upvotes

      Normally, routers do not forward broadcast traffic. This means that each broadcast domain must be served by its own DHCP server. On a large network with multiple subnets, this would mean provisioning and configuring many DHCP servers. To avoid this scenario, a DHCP relay agent can be configured to provide forwarding of DHCP traffic between subnets. Routers that can provide this type of forwarding are described as RFC 1542 compliant. The DHCP relay intercepts broadcast DHCP frames, applies a unicast address for the appropriate DHCP server, and forwards them over the interface for the subnet containing the server. The DHCP server can identify the original IP subnet from the packet and offer a lease from the appropriate scope. The DHCP relay also performs the reverse process of directing responses from the server to the appropriate client subnet.

5. Question 5 of 25

   A technician is trying to determine whether an LACP bundle is fully operational. Which of the following commands will the technician MOST likely use?

   • Ashow interface
   • Bshow config
   • Cshow route
   • Dshow arp

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   A. show interface Link Aggregation Control Protocol (LACP) is a standard protocol used to bundle multiple physical links together to form a single logical link. To determine whether an LACP bundle is fully operational, the technician will likely use the "show interface" command. This command is used to display the status of network interfaces on a device, such as a switch or router. When the technician runs the "show interface" command, the output will include the status of the LACP bundle, such as whether it is up or down and whether all of the physical links in the bundle are active and working properly. The technician can also use the command "show interfaces ethernet [interface-number] lacp" to display the LACP information for a specific bundle.

   Adapted from community discussion by JakeCharles · 2024-01-12 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. J

      JakeCharles

      2024-01-12

      Selected A6 upvotes

      A. show interface Link Aggregation Control Protocol (LACP) is a standard protocol used to bundle multiple physical links together to form a single logical link. To determine whether an LACP bundle is fully operational, the technician will likely use the "show interface" command. This command is used to display the status of network interfaces on a device, such as a switch or router. When the technician runs the "show interface" command, the output will include the status of the LACP bundle, such as whether it is up or down and whether all of the physical links in the bundle are active and working properly. The technician can also use the command "show interfaces ethernet [interface-number] lacp" to display the LACP information for a specific bundle.

   2. M

      May2022

      2023-09-14

      7 upvotes

      This seems correct per: https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_3/command/reference/cpt93_cr/cpt93_cr_chapter_01000.html

   3. M

      MitchF

      2024-08-26

      1 upvote

      GPT picks (A) show interface: "The "show interface" command provides detailed information about the status and configuration of network interfaces on a device, including LACP bundles. By using this command, the technician can view the operational status, speed, duplex mode, VLAN information, and any errors or counters related to the LACP bundle. LACP is used for link aggregation, often referred to as "EtherChannel" or "port-channel" in Cisco terminology. It allows multiple physical links to be combined into a single logical link to increase bandwidth and redundancy. The other options are less likely to provide information specifically about the operational status of an LACP bundle: (B) show config: This command typically shows the current configuration settings on the device but may not provide real-time operational status information. (C) show route: This command displays the routing table and routing information but doesn't directly relate to LACP bundle status. (D) show arp: This command shows the Address Resolution Protocol (ARP) table, which maps IP addresses to MAC addresses, but it's not directly related to LACP bundle status."

   4. M

      Mehsotopes

      2024-11-17

      Selected A3 upvotes

      Show interface command displays information about the interfaces on a switch, including their operational status, utilization, error statistics, and other key performance metrics. Show config isn't directly asking the router detailed information, but checks the client's port connections that run through your firewall.

6. Question 6 of 25

   A systems operator is granted access to a monitoring application, configuration application, and timekeeping application. The operator is denied access to the financial and project management applications by the system's security configuration. Which of the following BEST describes the security principle in use?

   • ANetwork access control
   • BLeast privilege
   • CMultifactor authentication
   • DSeparation of duties

   Show answer

   Correct answer: B

   How others answered

   • B65%
   • D35%

   Only 65% agreed on this answer — treat it as contested rather than settled.

   Explanation

   The answer should be B. Separation of duties has to do with splitting tasks among employees to reduce the chance of one employee committing fraud. Least privilege is when you only provide employees with the account privileges they need to complete their work.

   Adapted from community discussion by May2022 · 2022-09-05 · 35 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • nist.gov documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. M

      May2022

      2022-09-05

      35 upvotes

      The answer should be B. Separation of duties has to do with splitting tasks among employees to reduce the chance of one employee committing fraud. Least privilege is when you only provide employees with the account privileges they need to complete their work.

   2. [

      [Removed]

      2023-03-18

      Selected B3 upvotes

      B is the correct answer. Least privilege is a security principle which states that users should receive only the necessary rights and permissions needed to do their job. In this question, the systems operator has access to only what he needs to his job. A is incorrect because network access control is a security model that authenticates users before allowing them to connect to the network. It has nothing to do with providing rights and permissions once they have accessed the network. In this question, the systems operator is already authenticated into the network. C is incorrect because multifactor authentication is forcing a user to authenticate themselves with more than one factor. Again, like answer A, the systems operator is already authenticated, which means that he should have gone through multifactor authentication already. D is incorrect because separation of duties is a defense in depth concept in which no individual has complete knowledge of a task/project or complete control to a system; individuals are given "parts" of the solution. This question does not mention splitting assignments between individuals, so answer D is incorrect.

   3. J

      JakeCharles

      2023-01-09

      Selected B3 upvotes

      B. Least privilege is the correct answer. The principle of least privilege (POLP) is a security principle that requires users to be granted the minimum level of access necessary to perform their job duties. In the scenario described, the systems operator is granted access to certain applications, but denied access to others, in accordance with the principle of least privilege. Network access control refers to the process of granting or denying access to a network based on certain criteria, such as user credentials or device type. Multifactor authentication is a security process that requires users to provide multiple pieces of evidence (factors) to verify their identity before being granted access to a system or application. Separation of duties is a security principle that requires different individuals or groups to be responsible for different aspects of a process, in order to prevent fraud or errors.

   4. D

      desmondprice

      2023-04-08

      2 upvotes

      I asked ChatGPT and its response was Least privilege even though I thought it was Separation of duties, so I decided to argue a little bit. Me: Why is it not separation of duties? Since the operator is not allowed to access to the financial and project management applications, it means that financial applications can be accessed, for example, by the finance department or payroll department, while project management applications are accessible by only the project managers. Isn't it right? ChatGPT: You are correct in your understanding of the separation of duties principle, which involves dividing responsibilities among different individuals or departments to prevent a single person or group from having too much power or control over certain functions. However, the given scenario emphasizes the access control for a single systems operator, focusing on the specific applications they are granted or denied access to, which aligns more with the principle of least privilege. So, I guess it is a Least Privilege after all :/

7. Question 7 of 25

   According to troubleshooting methodology, which of the following should the technician do NEXT after determining the most likely probable cause of an issue?

   • AEstablish a plan of action to resolve the issue and identify potential effects
   • BVerify full system functionality and, if applicable, implement preventive measures
   • CImplement the solution or escalate as necessary
   • DTest the theory to determine the cause

   Show answer

   Correct answer: D

   How others answered

   • D57%
   • A43%

   Only 57% agreed on this answer — treat it as contested rather than settled.

   Explanation

   1. Identify the problem 2. Establish a theory of probable cause ***The question is here. 3. Test the theory to determine the cause 4. Establish a plan of action to resolve the problem and identify potential effects 5. Implement the solution or escalate as necessary 6. Verify full system functionality and, if applicable, implement preventive measures 7. Document findings, actions, and outcomes and lessons learned

   Adapted from community discussion by Pongsathorn · 2022-01-26 · 69 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • comptia.org documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. P

      Pongsathorn

      2022-01-26

      69 upvotes

      1. Identify the problem 2. Establish a theory of probable cause ***The question is here. 3. Test the theory to determine the cause 4. Establish a plan of action to resolve the problem and identify potential effects 5. Implement the solution or escalate as necessary 6. Verify full system functionality and, if applicable, implement preventive measures 7. Document findings, actions, and outcomes and lessons learned

   2. 5

      5PbixcbaRWkHFtJ2

      2023-02-23

      21 upvotes

      Mnemonic for the troubleshooting steps: I Eat Tasty Eggs In Various Dishes

   3. I

      I_Know_Everything_KY

      2023-09-14

      7 upvotes

      1. Identify the problem 2. Establish a theory of probable cause 3. Test the theory to DETRMINE the cause ***No, The question is here. 4. Establish a plan of action to resolve the problem and identify potential effects 5. Implement the solution or escalate as necessary 6. Verify full system functionality and, if applicable, implement preventive measures 7. Document findings, actions, and outcomes and lessons learned ** The question states he has "DETERMINED" the probable cause.

   4. C

      ca4e1f5

      2024-11-06

      2 upvotes

      The correct answer is: A. Establish a plan of action to resolve the issue and identify potential effects Explanation: According to the troubleshooting methodology, after determining the most likely probable cause of an issue, the next step is to establish a plan of action. This includes deciding on a specific course of action to resolve the issue and considering any potential effects that the solution might have on the system or network. Why the Other Options Are Not the Correct Next Step: B. Verify full system functionality and, if applicable, implement preventive measures: This step comes after implementing the solution to confirm that the issue has been fully resolved. C. Implement the solution or escalate as necessary: Before implementing the solution, you should have a clear plan of action. This option comes after establishing the plan. D. Test the theory to determine the cause: Testing the theory is the previous step, before you identify the most likely cause.

8. Question 8 of 25

   A network engineer developed a plan of action to resolve an ongoing issue. Which of the following steps should the engineer take NEXT?

   • AVerify full system functionality and implement preventative measures.
   • BImplement the solution to resolve the problem.
   • CDocument findings, actions, outcomes, and lessons learned.
   • DEstablish a theory of probable cause.

   Show answer

   Correct answer: B

   How others answered

   • B94%

   Explanation

   Network troubleshooting is a repeatable process, which means that you can break it down into clear steps that anyone can follow. Identify the Problem. ... Develop a Theory. ... Test the Theory. ... Plan of Action. ... Implement the Solution. ... Verify System Functionality. ... Document the Issue. Theory of probable cause is before Plan of action. https://www.comptia.org/content/guides/a-guide-to-network-troubleshooting

   Adapted from community discussion by Nishkurup · 2024-07-09 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • comptia.org documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. N

      Nishkurup

      2024-07-09

      Selected B8 upvotes

      Network troubleshooting is a repeatable process, which means that you can break it down into clear steps that anyone can follow. Identify the Problem. ... Develop a Theory. ... Test the Theory. ... Plan of Action. ... Implement the Solution. ... Verify System Functionality. ... Document the Issue. Theory of probable cause is before Plan of action. https://www.comptia.org/content/guides/a-guide-to-network-troubleshooting

   2. S

      StellarSteve

      2024-09-22

      4 upvotes

      my dude. its not D. Plz... i know you pluged it into chat gpt but if you copy paste the comptia seven-step process for network troubleshooting THEN chat gpt it.. it will tell u its B not D.

   3. P

      pedrwc7

      2024-07-26

      Selected B3 upvotes

      Its B! The question stated that the "Network Engineer developed a plan of action to resolve an ongoing issue", therefore, the next steps is to Implement it.

   4. S

      StellarSteve

      2024-09-22

      Selected B2 upvotes

      the next step is to implement the solution to resolve the problem. without a doubt. Lock it in.... final answer and win the million dollers folk.

9. Question 9 of 25

   Which of the following is used to elect an STP root?

   • AA bridge ID
   • BA bridge protocol data unit
   • CInterface port priority
   • DA switch's root port

   Show answer

   Correct answer: A

   How others answered

   • A71%
   • B29%

   Only 71% agreed on this answer — treat it as contested rather than settled.

   Explanation

   ▪ Root bridge ● Switch elected to act as a reference point for a spanning tree ● Switch with the lowest bridge ID (BID) is elected as the root bridge ● BID is made up of a priority value and a MAC address (with the lowest value considered root) -Jason Dion-

   Adapted from community discussion by pedrwc7 · 2023-08-03 · 10 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

   1. P

      pedrwc7

      2023-08-03

      Selected A10 upvotes

      ▪ Root bridge ● Switch elected to act as a reference point for a spanning tree ● Switch with the lowest bridge ID (BID) is elected as the root bridge ● BID is made up of a priority value and a MAC address (with the lowest value considered root) -Jason Dion-

   2. L

      LeonardSnart

      2023-05-22

      7 upvotes

      Mike Meyers "Using special STP frames known as bridge protocol data units (BPDUs), switches communicate with other switches to prevent loops from happening in the first place. Configuration BPDUs establish the topology, where one switch is elected root bridge and acts as the center of the STP universe. Each switch then uses the root bridge as a reference point to maintain a loop-free topology."

   3. J

      JakeCharles

      2023-06-17

      Selected A3 upvotes

      The STP (Spanning Tree Protocol) root is elected based on the bridge ID (option A).

   4. [

      [Removed]

      2023-06-02

      Selected A2 upvotes

      The root bridge is the bridge with the lowest Bridge ID. All the decisions like which ports are the root ports (the port with the best path to the root bridge) are made from the perspective of the root bridge.

10. Question 10 of 25

    An employee reports to a network administrator that internet access is not working. Which of the following should the administrator do FIRST?

    • AEstablish a theory of probable cause.
    • BIdentify symptoms.
    • CDetermine if anything has changed.
    • DAsk the user to restart the computer.

    Show answer

    Correct answer: C

    How others answered

    • C51%
    • B49%

    Only 51% agreed on this answer — treat it as contested rather than settled.

    Explanation

    BROTHERS..... HEAR THEEEE. ITS LITERALLY on comptia website. Comptia.ORG. HERE https://www.comptia.org/blog/troubleshooting-methodology Specific steps here may include: Gathering information from log files and error messages Questioning users Identifying symptoms Determining recent changes Duplicating the problem Approaching multiple problems one at a time Narrowing the scope of the problem ITS RIGHT THERE. U ask the users first before identify symptoms. HOW ARE PEOPLE PUTTING B. the correct answer is C

    Adapted from community discussion by StellarSteve · 2023-03-22 · 23 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • comptia.org documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. S

       StellarSteve

       2023-03-22

       Selected C23 upvotes

       BROTHERS..... HEAR THEEEE. ITS LITERALLY on comptia website. Comptia.ORG. HERE https://www.comptia.org/blog/troubleshooting-methodology Specific steps here may include: Gathering information from log files and error messages Questioning users Identifying symptoms Determining recent changes Duplicating the problem Approaching multiple problems one at a time Narrowing the scope of the problem ITS RIGHT THERE. U ask the users first before identify symptoms. HOW ARE PEOPLE PUTTING B. the correct answer is C

    2. H

       HesWhatNow

       2023-03-31

       12 upvotes

       ? "Identifying symptoms Determining recent changes" So... It's B.

    3. P

       PatrickH

       2023-03-31

       6 upvotes

       Both are parts of Step one. In step one no part has higher priority than another. Its actually a bad question because B and C are technically correct

    4. S

       salah112

       2023-11-30

       Selected C2 upvotes

       C. Determine if anything has changed. Identifying if there have been any recent changes or events that might be related to the reported issue can provide valuable information for troubleshooting. It helps the administrator understand the context of the problem and narrow down potential causes. Once any recent changes are identified, the administrator can then proceed to establish a theory of probable cause (Option A) and further investigate the symptoms (Option B). Asking the user to restart the computer (Option D) might be a subsequent step in the troubleshooting process, but understanding recent changes is crucial for efficient and effective problem resolution.

11. Question 11 of 25

    A technician is configuring a static IP address on a new device in a newly created subnet. The work order specifies the following requirements: • The IP address should use the highest address available in the subnet. • The default gateway needs to be set to 172.28.85.94. • The subnet mask needs to be 255.255.255.224. Which of the following addresses should the engineer apply to the device?

    • A172.28.85.93
    • B172.28.85.95
    • C172.28.85.254
    • D172.28.85.255

    Show answer

    Correct answer: A

    How others answered

    • A96%

    Explanation

    Here is how I get my answer: 255.255.255.224 /27 256 - 224= Block Size 32 Block Size Subnet Range: 172.28.85.0 172.28.85.32 172.28.85.64 172.28.85.96 172.28.85.128 Broadcast Range: -1 the Block size 172.28.85.31 172.28.85.63 172.28.85.95 172.28.85.127 Usable IP Range: 172.28.85.1 - 172.28.85.30 172.28.85.33 - 172.28.85.62 172.28.85.65 - 172.28.85.94 172.28.85.97 - 172.28.85.126

    Adapted from community discussion by PaytoPlay · 2024-04-14 · 31 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. P

       PaytoPlay

       2024-04-14

       Selected A31 upvotes

       Here is how I get my answer: 255.255.255.224 /27 256 - 224= Block Size 32 Block Size Subnet Range: 172.28.85.0 172.28.85.32 172.28.85.64 172.28.85.96 172.28.85.128 Broadcast Range: -1 the Block size 172.28.85.31 172.28.85.63 172.28.85.95 172.28.85.127 Usable IP Range: 172.28.85.1 - 172.28.85.30 172.28.85.33 - 172.28.85.62 172.28.85.65 - 172.28.85.94 172.28.85.97 - 172.28.85.126

    2. C

       Cohort07

       2024-04-24

       Selected A10 upvotes

       The answer is A. The subnet ranges for /27 are: 0-31 32-63 64-95 96-127 etc... Normally the default gateway is the first usable IP in that subnet range however in this question it is setting the default gateway to 172.28.85.94. This means that 172.28.85.94 and 172.28.85.95 are the default gateway and broadcast addresses. That means the only correct IP from the answer choices is A. 172.28.85.93.

    3. G

       ghosting

       2024-03-02

       5 upvotes

       The broadcast is the .95 The gateway is the .94 Last available IP is .93

    4. M

       max319

       2024-02-25

       3 upvotes

       Correct me if I'm wrong, but I believe it is B. Considering the IP's assigned give us 30 nodes with the reserved network address being .93 and broadcast being .125. The gateway is typically put on the first IP being .94 which it is. Then the first available host address would be .95. The only reason I am not fully confident is because I don't know whether or not the IP range starts on .93 or .64.

12. Question 12 of 25

    A network technician is selecting a replacement for a damaged fiber cable that goes directly to an SFP transceiver on a network switch. Which of the following cable connectors should be used?

    • ARJ45
    • BLC
    • CMT
    • DF-type

    Show answer

    Correct answer: B

    How others answered

    • B60%
    • C27%

    Only 60% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Hey man, I want us all to do great, we deserve it homie. I covered a lot of the exam objectives and had to lose myself in the rabbit hole for transceivers, media converters, bridges because it was confusing me A TON. I hope you do well for your exam marmarhar1980!

    Adapted from community discussion by Xigema · 2023-05-20 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. X

       Xigema

       2023-05-20

       17 upvotes

       Hey man, I want us all to do great, we deserve it homie. I covered a lot of the exam objectives and had to lose myself in the rabbit hole for transceivers, media converters, bridges because it was confusing me A TON. I hope you do well for your exam marmarhar1980!

    2. X

       Xigema

       2023-05-18

       9 upvotes

       marmarhar1980, cover transceiver and connector types again, it can be a little tricky. The question mentions Fiber connector types and transceivers. "all SFP and SFP+ optics require LC connectors so the question becomes when you need single mode fiber or multi mode fiber but the connectot type is clear. SC square connectors are too big to fit in a SFP or SFP+." https://community.cisco.com/t5/routing/determine-whether-an-sfp-needs-lc-or-sc-fibre-interface/td-p/4459075#:~:text=all%20SFP%20and%20SFP%2B%20optics,in%20a%20SFP%20or%20SFP%2B.

    3. S

       StellarSteve

       2023-09-23

       Selected B4 upvotes

       B. LC connectors should be used. LC connectors are small, easy to handle, and designed for high-density installations. They are commonly used with SFP transceivers on network switches and other network equipment. LC connectors are designed for single-mode and multimode fiber and provide low insertion loss and excellent repeatability.

    4. U

       Ugo2023

       2024-05-09

       3 upvotes

       B. LC The LC (Lucent Connector) is a small, high-performance fiber optic connector commonly used for connecting directly to SFP (Small Form-factor Pluggable) transceivers on network switches and other networking equipment.

13. Question 13 of 25

    A network engineer is investigating issues on a Layer 2 switch. The department typically shares a switchport during meetings for presentations, but after the first user shares, no other users can connect. Which of the following is MOST likely related to this issue?

    • ASpanning Tree Protocol is enabled on the switch.
    • BVLAN trunking is enabled on the switch.
    • CPort security is configured on the switch.
    • DDynamic ARP inspection is configured on the switch.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    C. Port security is configured on the switch. The most likely issue related to this scenario is that port security is configured on the switch. Port security is a Layer 2 security feature that restricts access to a switch port based on the MAC address of the device that is connected to it. When a port reaches its maximum number of allowed MAC addresses, it will prevent any further connections to that port. If the department is sharing a switchport during meetings for presentations, then it is possible that the maximum number of allowed MAC addresses has already been reached by the first user, and therefore no other users can connect.

    Adapted from community discussion by StellarSteve · 2024-03-24 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. S

       StellarSteve

       2024-03-24

       Selected C3 upvotes

       C. Port security is configured on the switch. The most likely issue related to this scenario is that port security is configured on the switch. Port security is a Layer 2 security feature that restricts access to a switch port based on the MAC address of the device that is connected to it. When a port reaches its maximum number of allowed MAC addresses, it will prevent any further connections to that port. If the department is sharing a switchport during meetings for presentations, then it is possible that the maximum number of allowed MAC addresses has already been reached by the first user, and therefore no other users can connect.

    2. K

       konanna

       2024-02-15

       4 upvotes

       C. Port security is configured on the switch. The issue described in the scenario suggests that the switchport is being shut down after the first user connects. This is a common behavior when port security is enabled on a switchport, which limits the number of MAC addresses that can connect to the port. Once the limit is reached, the switchport is shut down to prevent unauthorized devices from connecting.

    3. S

       salah112

       2024-11-30

       Selected C2 upvotes

       C. Port security is configured on the switch. Explanation: Port Security: Port security is a feature that allows a network administrator to restrict the number of MAC addresses allowed on a switch port. When port security is configured, the switch will learn the MAC address of the first device connected to the port and allow only that specific MAC address. Subsequent devices attempting to connect to the same port may be blocked

    4. L

       LiamAzure

       2024-07-17

       Selected C3 upvotes

       Port Security, the port was disabled when the first user connected

14. Question 14 of 25

    A company's primary ISP is experiencing an outage. However, the network administrator notices traffic continuing to flow through a secondary connection to the same ISP. Which of the following BEST describes this configuration?

    • ADiverse paths
    • BLoad balancing
    • CMultipathing
    • DVirtual Router Redundancy Protocol

    Show answer

    Correct answer: A

    How others answered

    • A67%
    • C22%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Mike Meyers "It’s very common for ISPs to share common lines and such, especially when they are servicing the same physical location. It’s therefore critically important to ensure path diversity, where the lines out of your ISP follow diverse paths to other routers. A common method for path diversity in smaller centers, for example, uses a fiber connection for the primary path and a very fast cellular connection as a failover. Use of both a fiber ISP and a different cable ISP can also lead to path diversity."

    Adapted from community discussion by LeonardSnart · 2022-11-26 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. L

       LeonardSnart

       2022-11-26

       14 upvotes

       Mike Meyers "It’s very common for ISPs to share common lines and such, especially when they are servicing the same physical location. It’s therefore critically important to ensure path diversity, where the lines out of your ISP follow diverse paths to other routers. A common method for path diversity in smaller centers, for example, uses a fiber connection for the primary path and a very fast cellular connection as a failover. Use of both a fiber ISP and a different cable ISP can also lead to path diversity."

    2. F

       famco

       2023-04-19

       8 upvotes

       Multipath is about SAN and Wifi Diverse paths or Path diversity about redundant connections for example to the ISP

    3. S

       StellarSteve

       2023-03-24

       Selected A3 upvotes

       A. Diverse paths is the BEST description of this configuration. Diverse paths, also known as path diversity, refers to the use of multiple network paths to ensure redundancy and high availability in case of network failures or outages. In this scenario, the company has set up a secondary connection to the same ISP to provide an alternate path for traffic when the primary connection fails. This allows the traffic to continue to flow without interruption, minimizing downtime and maximizing network uptime.

    4. J

       JB1705

       2024-06-22

       Selected A3 upvotes

       Multipathing refers to using multiple physical paths between two endpoints. Diverse paths refer to physically separate routes or connections between two points in a network infrastructure

15. Question 15 of 25

    Which of the following is MOST appropriate for enforcing bandwidth limits when the performance of an application is not affected by the use of buffering but is heavily impacted by packet drops?

    • ATraffic shaping
    • BTraffic policing
    • CTraffic marking
    • DTraffic classification

    Show answer

    Correct answer: A

    How others answered

    • A69%
    • B28%

    Only 69% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The answer is definitely A, see below, or tldr policing = dropped packets, shaping = buffering, the question says to avoid drops and buffering is ok so shaping is correct Anthony Sequeira "Instead of making a minimum amount of bandwidth available for specific traffic types, you might want to limit available bandwidth. Both traffic policing and traffic shaping tools can accomplish this objective. Collectively, these tools are called traffic conditioners. Policing can be used in either the inbound or the outbound direction, and it typically discards packets that exceed the configured rate limit, which you can think of as a speed limit for specific traffic types. Because policing drops packets, resulting in re-transmissions, it is recommended for higher-speed interfaces. Shaping buffers (and therefore delays) traffic exceeding a configured rate. Therefore, shaping is recommended for slower-speed interfaces."

    Adapted from community discussion by LeonardSnart · 2022-11-29 · 13 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. L

       LeonardSnart

       2022-11-29

       Selected A13 upvotes

       The answer is definitely A, see below, or tldr policing = dropped packets, shaping = buffering, the question says to avoid drops and buffering is ok so shaping is correct Anthony Sequeira "Instead of making a minimum amount of bandwidth available for specific traffic types, you might want to limit available bandwidth. Both traffic policing and traffic shaping tools can accomplish this objective. Collectively, these tools are called traffic conditioners. Policing can be used in either the inbound or the outbound direction, and it typically discards packets that exceed the configured rate limit, which you can think of as a speed limit for specific traffic types. Because policing drops packets, resulting in re-transmissions, it is recommended for higher-speed interfaces. Shaping buffers (and therefore delays) traffic exceeding a configured rate. Therefore, shaping is recommended for slower-speed interfaces."

    2. T

       Thejphall

       2022-12-08

       8 upvotes

       Based on the question's wording I would assume that "heavily impacted" means you want to avoid something that would drop packets. Traffic shaping fits in that case as it doesn't drop the excess packets while traffic policing does.

    3. X

       Xigema

       2022-11-17

       8 upvotes

       Traffic policing is the correct concept according to: https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-policing/19645-policevsshape.html however, is not on the Exam Objectives...

    4. A

       AntonioTech

       2022-12-28

       Selected A1 upvote

       To enforce bandwidth limits when the performance of an application is heavily impacted by packet drops but not affected by the use of buffering, it is most appropriate to use a traffic shaping solution. Traffic shaping is a technique used to control the flow of network traffic by regulating the amount of bandwidth that is available to different types of traffic. It can be used to enforce bandwidth limits by setting limits on the amount of bandwidth that can be used by specific types of traffic or by specific users or devices. Traffic shaping can be implemented using a variety of tools, such as network switches, routers, or dedicated traffic shaping appliances. These tools typically allow the administrator to set bandwidth limits and priorities for different types of traffic, and to monitor and control the flow of traffic on the network. By using traffic shaping, the administrator can ensure that the network bandwidth is used efficiently and that the performance of critical applications is not impacted by packet drops. This can help to improve the overall performance of the network and ensure a consistent user experience.

16. Question 16 of 25

    Due to concerns around single points of failure, a company decided to add an additional WAN to the network. The company added a second MPLS vendor to the current MPLS WAN and deployed an additional WAN router at each site. Both MPLS providers use OSPF on the WAN network, and EIGRP is run internally. The first site to go live with the new WAN is successful, but when the second site is activated significant network issues occur. Which of the following is the MOST likely cause for the WAN instability?

    • AA CDP neighbor has changed
    • BAsymmetrical routing
    • CA switching loop
    • DAn incorrect IP address

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Asymmetrical routing is the most likely cause for the WAN instability. When two different routing protocols are used, like OSPF and EIGRP, it can cause asymmetrical routing, which results in traffic being routed differently in each direction. This can lead to instability in the WAN. A CDP neighbor change, a switching loop, or an incorrect IP address are not likely causes for WAN instability.

    Adapted from community discussion by JakeCharles · 2024-05-29 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. J

       JakeCharles

       2024-05-29

       9 upvotes

       Asymmetrical routing is the most likely cause for the WAN instability. When two different routing protocols are used, like OSPF and EIGRP, it can cause asymmetrical routing, which results in traffic being routed differently in each direction. This can lead to instability in the WAN. A CDP neighbor change, a switching loop, or an incorrect IP address are not likely causes for WAN instability.

    2. L

       LeonardSnart

       2024-05-29

       4 upvotes

       Anthony Sequeira "Asymmetrical routing: Sometimes packets take very different paths back to you than they took toward the destination. This situation, called asymmetrical routing, is not always a bad thing, and sometimes you even engineer it to happen for some specific reason. Often, however, asymmetrical routing is not wanted and can cause issues."

    3. S

       StellarSteve

       2024-09-24

       Selected B2 upvotes

       B. Asymmetrical routing The most likely cause for the WAN instability in this scenario is asymmetrical routing. Asymmetrical routing occurs when traffic from one network is sent through one path to reach another network, while the return traffic is sent through a different path. This can result in dropped packets, slow performance, and other network issues.

    4. P

       PaytoPlay

       2024-10-08

       Selected B1 upvote

       https://www.cisco.com/web/services/news/ts_newsletter/tech/chalktalk/archives/200903.html#:~:text=What%20is%20Asymmetric%20Routing%3F,it%20returns%20to%20the%20source.

17. Question 17 of 25

    A corporation is looking for a method to secure all traffic between a branch office and its data center in order to provide a zero-touch experience for all staff members who work there. Which of the following would BEST meet this requirement?

    • ASite-to-site VPN
    • BVNC
    • CRemote desktop gateway
    • DVirtual LANs

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    A. Site-to-site VPN (Virtual Private Network) A site-to-site VPN establishes a secure, encrypted connection between the branch office and the data center over the internet or another untrusted network. This solution ensures that all traffic between the branch office and the data center is secure and confidential. It's a suitable choice for providing a zero-touch experience for staff members, as once the VPN connection is established, users can access resources in the data center as if they were on the same local network. This allows for a seamless and secure connectivity experience.

    Adapted from community discussion by salah112 · 2024-12-02 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion3

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. S

       salah112

       2024-12-02

       Selected A2 upvotes

       A. Site-to-site VPN (Virtual Private Network) A site-to-site VPN establishes a secure, encrypted connection between the branch office and the data center over the internet or another untrusted network. This solution ensures that all traffic between the branch office and the data center is secure and confidential. It's a suitable choice for providing a zero-touch experience for staff members, as once the VPN connection is established, users can access resources in the data center as if they were on the same local network. This allows for a seamless and secure connectivity experience.

    2. M

       Mehsotopes

       2024-12-02

       Selected A1 upvote

       https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-architecture-implementation/200031-Zero-Touch-Deployment-ZTD-of-VPN-Remot.html

    3. Q

       questionreaper

       2024-09-18

       1 upvote

       For me, the no touch experience meant they would not need to interact with the VPN, so it was site to site, and not others like split tunnel or headend

18. Question 18 of 25

    Within the realm of network security, Zero Trust:

    • Aprevents attackers from moving laterally through a system.
    • Ballows a server to communicate with outside networks without a firewall.
    • Cblock malicious software that is too new to be found in virus definitions.
    • Dstops infected files from being downloaded via websites.

    Show answer

    Correct answer: A

    How others answered

    • A93%

    Explanation

    Zero Trust is a relatively new security model that many corporations are starting to use. As the name indicates, this model seeks to reduce or eliminate security breaches for an organization by trusting absolutely nothing by default. In fact, the credo of this approach is “never trust; always verify.” Zero Trust was created by John Kindervag of Forrester Research. He realized that traditional security models operate on the silly assumption that everything inside an organization’s network should be trusted. With models based on this assumption, once a network attacker has gained access, that user account is trusted. The Zero Trust model views trust as a vulnerability. Zero Trust is implemented using many different technologies in a network, including the following: - Segmenting the network - Preventing lateral movement - Providing Layer 7 threat prevention - Simplifying granular user access control

    Adapted from community discussion by Pongsathorn · 2022-01-14 · 49 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • comptia.org documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. P

       Pongsathorn

       2022-01-14

       49 upvotes

       Zero Trust is a relatively new security model that many corporations are starting to use. As the name indicates, this model seeks to reduce or eliminate security breaches for an organization by trusting absolutely nothing by default. In fact, the credo of this approach is “never trust; always verify.” Zero Trust was created by John Kindervag of Forrester Research. He realized that traditional security models operate on the silly assumption that everything inside an organization’s network should be trusted. With models based on this assumption, once a network attacker has gained access, that user account is trusted. The Zero Trust model views trust as a vulnerability. Zero Trust is implemented using many different technologies in a network, including the following: - Segmenting the network - Preventing lateral movement - Providing Layer 7 threat prevention - Simplifying granular user access control

    2. T

       Tyrial

       2022-02-13

       Selected A20 upvotes

       Answer should be A The definition of Zero trust mentions nothing about firewalls, viruses or stopping infected files from being downloaded. Lesson 13: Topic 13A: Privileged Access Management - Zero trust is based on the idea that perimeter security is unlikely to be completely robust. On a modern network, there are just too many opportunities for traffic to escape monitoring/filtering by perimeter devices. Zero trust uses systems such as continuous authentication and conditional access to mitigate privilege escalation and account compromise by threat actors. Another zero-trust technique is to apply microsegmentation. Microsegmentation is a security process that is capable of applying policies to a single node, as though it was in a zone of its own.

    3. V

       veli_117

       2023-03-07

       5 upvotes

       ChatGPT: A. prevents attackers from moving laterally through a system. Zero Trust is a security concept that assumes that all network traffic, both inside and outside the network perimeter, is untrusted until it is verified as legitimate. The Zero Trust model works on the principle of least privilege, where users are granted only the necessary level of access required to complete their tasks, and all access is continually monitored and verified. This approach is designed to prevent lateral movement by attackers, even if they have breached the perimeter security. With Zero Trust, every user, device, and application must be authenticated and authorized before being granted access to the network or resources. This approach greatly enhances security by reducing the attack surface and making it much harder for attackers to move around the network undetected.

    4. J

       Jaeide__X

       2024-03-15

       Selected A2 upvotes

       Zero Trust is a security model based on the principle of "never trust, always verify." In a Zero Trust architecture, all network traffic, regardless of its source or destination, is considered untrusted. Access controls are enforced based on strict identity verification and continuous authentication, rather than relying solely on perimeter defenses such as firewalls. The primary goal of Zero Trust is to prevent lateral movement by attackers within a system. This means that even if an attacker gains access to a specific part of the network, they are still subjected to authentication and access controls when attempting to access other resources or move laterally within the network. By eliminating implicit trust in any entity, Zero Trust helps organizations minimize the risk of data breaches and unauthorized access.

19. Question 19 of 25

    Which of the following routing protocols has routes that are classified with an administrative distance of 110?

    • ABGP
    • BOSPF
    • CEIGRP
    • DRIP

    Show answer

    Correct answer: B

    How others answered

    • B94%

    Explanation

    The routing protocol with routes classified with an administrative distance of 110 is B. OSPF (Open Shortest Path First). Here's a breakdown of administrative distances for common routing protocols: BGP (Border Gateway Protocol): 20 OSPF (Open Shortest Path First): 110 EIGRP (Enhanced Interior Gateway Routing Protocol): 90 RIP (Routing Information Protocol): 120

    Adapted from community discussion by Jay987654 · 2024-07-09 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. J

       Jay987654

       2024-07-09

       Selected B6 upvotes

       The routing protocol with routes classified with an administrative distance of 110 is B. OSPF (Open Shortest Path First). Here's a breakdown of administrative distances for common routing protocols: BGP (Border Gateway Protocol): 20 OSPF (Open Shortest Path First): 110 EIGRP (Enhanced Interior Gateway Routing Protocol): 90 RIP (Routing Information Protocol): 120

    2. T

       Therealjosh

       2024-03-12

       6 upvotes

       OSPF has a default distance of 110, RIP, has a default distance of 120.

    3. G

       Ghost713

       2024-05-18

       Selected B2 upvotes

       It's B) OSPF. BGP== has 20 EIGRP==has 170 RIP==has 120 please correct me if I'm wrong..

    4. S

       salah112

       2024-06-06

       Selected B2 upvotes

       B. OSPF (Open Shortest Path First) OSPF routes have an administrative distance of 110.

20. Question 20 of 25

    A network engineer is concerned about VLAN hopping happening on the network. Which of the following should the engineer do to address this concern?

    • AConfigure private VLANs.
    • BChange the default VLAN.
    • CImplement ACLs on the VLAN.
    • DEnable dynamic ARP inspection.

    Show answer

    Correct answer: B

    How others answered

    • B63%
    • A22%
    • D16%

    Only 63% agreed on this answer — treat it as contested rather than settled.

    Explanation

    By changing the native VLAN, the attacker would not be able to deceive the switch by sending double tagging frame, because in that case the switch would drop the frame since its outer tag would have a VLAN ID (native VLAN ID) that is not the same as the access VLAN configured on the attacker port. Source: https://learningnetwork.cisco.com/s/blogs/a0D3i000002SKPREA4/vlan1-and-vlan-hopping-attack

    Adapted from community discussion by maggie22 · 2024-05-27 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. M

       maggie22

       2024-05-27

       Selected B12 upvotes

       By changing the native VLAN, the attacker would not be able to deceive the switch by sending double tagging frame, because in that case the switch would drop the frame since its outer tag would have a VLAN ID (native VLAN ID) that is not the same as the access VLAN configured on the attacker port. Source: https://learningnetwork.cisco.com/s/blogs/a0D3i000002SKPREA4/vlan1-and-vlan-hopping-attack

    2. P

       PatrickH

       2024-08-16

       Selected B2 upvotes

       Double Tagging can only be exploited on switch ports configured to use native VLANs.[2]: 162  Trunk ports configured with a native VLAN don't apply a VLAN tag when sending these frames. This allows an attacker's fake VLAN tag to be read by the next switch. So its B. Change the Native/Default VLAN

    3. C

       cyberbaby

       2024-08-22

       2 upvotes

       Changing the default VLAN remains a more effective measure for preventing VLAN hopping compared to configuring private VLANs because it directly mitigates the risk of unauthorized access between VLANs caused by potential vulnerabilities or misconfigurations, providing a proactive defense strategy for overall network security. Plus due to the vague question, how do we know that the VLANs aren't already private? Answer is B.

    4. M

       mcmillanje

       2024-06-12

       Selected B2 upvotes

       The question is about vlan hopping, not communication within vlans. PVLANS segregate devices within a VLAN. This is not the threat vector the question is asking about. Option B is correct.

21. Question 21 of 25

    A technician is investigating a SAN switch that has a high number of CRC errors. Which of the following is the MOST likely cause of the errors?

    • ABreak in the fiber
    • BBad switch port
    • CMismatched duplex
    • DMemory errors

    Show answer

    Correct answer: A

    How others answered

    • A69%
    • C15%
    • B15%

    Only 69% agreed on this answer — treat it as contested rather than settled.

    Explanation

    A. Break in the fiber Please reference link to Cisco page below. " Root Causes of CRC Errors The most common root cause of CRC errors is a damaged or malfunctioning component of a physical link between two devices. Examples include: vvvv 1. Failing or damaged physical medium (copper or fiber) or Direct Attach Cables (DACs). 2. Failing or damaged transceivers/optics. 3. Failing or damaged patch panel ports. 4. Faulty network device hardware (including specific ports, line card Application-Specific Integrated Circuits [ASICs], Media Access Controls [MACs], fabric modules, etc.), 5. Malfunctioning network interface card inserted in a host. " https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/nx-os-software/217554-understand-cyclic-redundancy-check-crc.html

    Adapted from community discussion by Popeyes_Chicken · 2024-01-14 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. P

       Popeyes_Chicken

       2024-01-14

       Selected A4 upvotes

       A. Break in the fiber Please reference link to Cisco page below. " Root Causes of CRC Errors The most common root cause of CRC errors is a damaged or malfunctioning component of a physical link between two devices. Examples include: vvvv 1. Failing or damaged physical medium (copper or fiber) or Direct Attach Cables (DACs). 2. Failing or damaged transceivers/optics. 3. Failing or damaged patch panel ports. 4. Faulty network device hardware (including specific ports, line card Application-Specific Integrated Circuits [ASICs], Media Access Controls [MACs], fabric modules, etc.), 5. Malfunctioning network interface card inserted in a host. " https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/nx-os-software/217554-understand-cyclic-redundancy-check-crc.html

    2. 0

       065b4fb

       2023-11-21

       2 upvotes

       A. Break in the fiber CRC (Cyclic Redundancy Check) errors in a Storage Area Network (SAN) switch are often indicative of physical layer issues, such as a break in the fiber optic cable. CRC errors occur when there is a mismatch or corruption in the data during transmission. In the context of a SAN switch, issues with the fiber optic cable, connectors, or transceivers can lead to CRC errors. While other issues like a bad switch port or mismatched duplex could potentially cause network errors, CRC errors specifically point to problems with the integrity of the data being transmitted, which is commonly associated with physical layer issues like a break in the fiber. Therefore, the most likely cause of the CRC errors in this scenario is A. Break in the fiber.

    3. S

       salah112

       2023-12-06

       Selected A2 upvotes

       A. Break in the fiber CRC (Cyclic Redundancy Check) errors on a SAN (Storage Area Network) switch are often associated with issues in the physical layer, such as breaks or issues in the fiber optic cables. A break in the fiber can lead to signal degradation and result in CRC errors. Therefore, the MOST likely cause of CRC errors in this scenario is A. Break in the fiber.

    4. E

       ETQ

       2024-10-14

       3 upvotes

       I thought the same but did some research and it's also possible to have severe degradation with a broken fiber cable. It's glass, so I can see how this could happen, if the fiber was cracked a certain way and not, for example, crushed. So, I would say the most likely is still probably cable related.

22. Question 22 of 25

    Following a fire in a data center, an executive is concerned about the amount of data that must be reentered. Which of the following describes the executive's concern?

    • ARTO
    • BMTBF
    • CMMTR
    • DRPO

    Show answer

    Correct answer: D

    How others answered

    • D70%
    • A30%

    Only 70% agreed on this answer — treat it as contested rather than settled.

    Explanation

    A recovery point objective (RPO) is the maximum length of time permitted that data can be restored from, which may or may not mean data loss. It is the age of the files or data in backup storage required to resume normal operations if a computer system or network failure occurs.

    Adapted from community discussion by salthehash · 2023-10-02 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • comptia.org documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. [

       [Removed]

       2023-12-10

       8 upvotes

       All i remember is that if it has to do with the amount of data loss it is RPO

    2. S

       salthehash

       2023-10-02

       Selected D4 upvotes

       A recovery point objective (RPO) is the maximum length of time permitted that data can be restored from, which may or may not mean data loss. It is the age of the files or data in backup storage required to resume normal operations if a computer system or network failure occurs.

    3. S

       salah112

       2023-12-06

       Selected D2 upvotes

       D. RPO (Recovery Point Objective) The executive's concern about the amount of data that must be reentered aligns with the concept of Recovery Point Objective (RPO). RPO defines the acceptable amount of data loss in the event of a disaster or disruption. It represents the point in time to which data must be restored after an outage. In this context, the executive is concerned about how much data might be lost and, consequently, how much needs to be reentered after the fire in the data center. Therefore, the correct answer is D. RPO.

    4. D

       dadba8c

       2024-08-12

       1 upvote

       D. RPO RTO Represents the maximum acceptable amount of time it should take to restore a system or service after a disruption. It is concerned with how quickly systems can be brought back online, not the amount of data lost. RPO (Recovery Point Objective): Refers to the maximum acceptable amount of data loss measured in time. It defines the point in time to which data must be recovered after a disruption. If the data center experiences a fire, RPO helps determine how much data might need to be reentered based on how frequently data backups are made.

23. Question 23 of 25

    Which of the following technologies would MOST likely be used to prevent the loss of connection between a virtual server and network storage devices?

    • AMultipathing
    • BVRRP
    • CPort aggregation
    • DNIC teaming

    Show answer

    Correct answer: A

    How others answered

    • A80%
    • B20%

    Explanation

    From VMWare https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-DD2FFAA7-796E-414C-84CE-1FCC14474D5B.html "To maintain a constant connection between a host and its storage, ESXi supports multipathing. With multipathing, you can use more than one physical path that transfers data between the host and an external storage device. If a failure of any element in the SAN network, such as an adapter, switch, or cable, occurs, ESXi can switch to another viable physical path. This process of path switching to avoid failed components is known as path failover. In addition to path failover, multipathing provides load balancing. Load balancing is the process of distributing I/O loads across multiple physical paths. Load balancing reduces or removes potential bottlenecks."

    Adapted from community discussion by Korrynne · 2024-04-07 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • docs.vmware.com documentation

    View community discussion2

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. S

       subaie503

       2024-03-16

       Selected A6 upvotes

       A. Multipathing Multipathing is the technology most likely used to prevent the loss of connection between a virtual server and network storage devices. It provides multiple physical pathways between the server and the storage infrastructure, ensuring that if one path fails, another can take over, maintaining the connection and preventing data access disruptions. This is especially important in environments relying heavily on virtual servers and network storage, where continuous access to data is critical.

    2. K

       Korrynne

       2024-04-07

       Selected A4 upvotes

       From VMWare https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-DD2FFAA7-796E-414C-84CE-1FCC14474D5B.html "To maintain a constant connection between a host and its storage, ESXi supports multipathing. With multipathing, you can use more than one physical path that transfers data between the host and an external storage device. If a failure of any element in the SAN network, such as an adapter, switch, or cable, occurs, ESXi can switch to another viable physical path. This process of path switching to avoid failed components is known as path failover. In addition to path failover, multipathing provides load balancing. Load balancing is the process of distributing I/O loads across multiple physical paths. Load balancing reduces or removes potential bottlenecks."

24. Question 24 of 25

    A network is experiencing a number of CRC errors during normal network communication. At which of the following layers of the OSI model will the administrator MOST likely start to troubleshoot?

    • ALayer 1
    • BLayer 2
    • CLayer 3
    • DLayer 4
    • ELayer 5
    • FLayer 6
    • GLayer 7

    Show answer

    Correct answer: B

    How others answered

    • B57%
    • A43%

    Only 57% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The data unit on Layer 2 is a frame. Each frame contains a frame header, body, and a frame trailer: Header: typically includes MAC addresses for the source and destination nodes. Body: consists of the bits being transmitted. Trailer: includes error detection information. When errors are detected, and depending on the implementation or configuration of a network or protocol, frames may be discarded or the error may be reported up to higher layers for further error correction. Examples of error detection mechanisms: Cyclic Redundancy Check (CRC) and Frame Check Sequence (FCS). Learn more about error detection techniques here. Answer is Layer 2 (B)

    Adapted from community discussion by princess_07 · 2022-09-09 · 36 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. P

       princess_07

       2022-09-09

       36 upvotes

       The data unit on Layer 2 is a frame. Each frame contains a frame header, body, and a frame trailer: Header: typically includes MAC addresses for the source and destination nodes. Body: consists of the bits being transmitted. Trailer: includes error detection information. When errors are detected, and depending on the implementation or configuration of a network or protocol, frames may be discarded or the error may be reported up to higher layers for further error correction. Examples of error detection mechanisms: Cyclic Redundancy Check (CRC) and Frame Check Sequence (FCS). Learn more about error detection techniques here. Answer is Layer 2 (B)

    2. O

       Orean

       2024-09-21

       Selected B30 upvotes

       I had this on my exam, and I answered A. Now, I believe that's incorrect in light of my score report, which included this objective: "1.1 Compare and contrast the Open Systems Interconnection (OSI) model layers and encapsulation concepts." I'm all but 100% certain it's because I misanswered this, which is the only OSI-related question I can remember. B is most likely the correct answer. CompTIA's rationale? I'll try to guess. First step in the troubleshooting methodology is to identify the problem. You would probably have to start at Layer 2 for the "identify symptoms" substep, where you'd check the CRC errors themselves on a data-link interface You wouldn't go to Layer 1 until step 2, when you "establish a theory of probable cause." Most likely the technician would theorize physical (cabling) issues and test it accordingly, but that's not during the FIRST troubleshooting step.

    3. L

       LanaK

       2023-06-24

       10 upvotes

       I agree with you. The question doesn’t ask where the problem is located. It asks where you’d start trouble shooting. Why would anyone start messing with cables before analyzing the data that would give them more information on what’s causing it?

    4. S

       stonegg

       2022-04-09

       Selected B3 upvotes

       http://automationwiki.com/index.php/OSI_model Layer 2 manages the ordering of bits, packets, to and from data segments. The ensuing result is called frames. Frames contain data that is already arranged in an orderly manner. The Data-link layer receives packets from the Network layer and structures these packets into frames. The frames are then moved to the Physical layer for sending. A cyclic redundancy check (CRC) is added to the data frame. The CRC detects damaged frames. The computer at the receiving end can request the cyclic redundancy check (CRC) so that it can verify that the frame is not damaged. The Data-link layer can determine when a frame is lost. It also requests any lost frames to be retransmitted. By performing these tasks, the Data-link layer makes it possible for data bits to be transmitted in an organized manner.

25. Question 25 of 25

    A technician is assisting a user who cannot connect to a network resource. The technician first checks for a link light. According to troubleshooting methodology, this is an example of:

    • Ausing a bottom-to-top approach.
    • Bestablishing a plan of action.
    • Cdocumenting a finding.
    • Dquestioning the obvious.

    Show answer

    Correct answer: D

    How others answered

    • D58%
    • A42%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Those questions aim to trick you - and to make you fail. It all about the money. _________ This stage may require significant research on your part. Vendor documentation, your organization’s own documentation and a good old-fashioned Google search may all be required to provide the basis for your theory. Specific steps here may include: Questioning the obvious Considering multiple approaches, including top-to-bottom or bottom-to-top for layered technologies (such as networks) One of the main issues that I’ve observed with newer troubleshooters is failing to question the obvious. In my classes, I rephrase this as “start simple and work toward the complex.” Yes, I am aware that operating systems, networks and cloud deployments are all very complex. However, that does not mean that your issue is complex. I have found over the years that careful note-taking is important at this point. Your notes can include data copied from websites, web URLs, suggestions from your team members, etc. ________ https://www.comptia.org/blog/troubleshooting-methodology

    Adapted from community discussion by veli_117 · 2023-03-07 · 22 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • comptia.org documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by N10-008 or CertExamHQ.

    1. V

       veli_117

       2023-03-07

       22 upvotes

       Those questions aim to trick you - and to make you fail. It all about the money. _________ This stage may require significant research on your part. Vendor documentation, your organization’s own documentation and a good old-fashioned Google search may all be required to provide the basis for your theory. Specific steps here may include: Questioning the obvious Considering multiple approaches, including top-to-bottom or bottom-to-top for layered technologies (such as networks) One of the main issues that I’ve observed with newer troubleshooters is failing to question the obvious. In my classes, I rephrase this as “start simple and work toward the complex.” Yes, I am aware that operating systems, networks and cloud deployments are all very complex. However, that does not mean that your issue is complex. I have found over the years that careful note-taking is important at this point. Your notes can include data copied from websites, web URLs, suggestions from your team members, etc. ________ https://www.comptia.org/blog/troubleshooting-methodology

    2. T

       TheMichael

       2024-06-05

       Selected D6 upvotes

       Bad question but let me break down my understanding. This isn't bottom to top because they don't reference how they are starting from the bottom of the osi model, or anything to do with the physical layer. They just casually mention that they take a quick peek at an obvious thing (the link light) and so apparently we are supposed to just know that it's question the obvious and not bottom-to-top. >.> my brain jumped at light = hardware = physical layer, physical layer = base of osi model. Base of osi model must mean bottom to top! lol but logically the first step is to question the obvious and then to do bottom to top, so it actually makes sense that D. is a better answer.

    3. F

       F0xByte

       2022-12-15

       Selected D4 upvotes

       Either D (questioning the obvious) and A (bottom-to-top) would be correct, both are part of the Comptia Troubleshooting steps. But I think the reason why D is the correct answer and not A, is because "bottom-to-top approach" is a SEQUENCE of actions (each next step is less obvious then the previous, or in a higher OSI layer, for example). The question only tell us one thing the technician did, but we don't really know what he did after, maybe he went and checked something even more obvious than link light. Maybe he checked something overly complex to then check again something more obvious. That would not be bottom-to-top approach. The key here is that we don't know for sure, we would need to know his next step in order to say with total confidence "Yes, this is an example of bottom-to-top"... But, on contrast, we know for sure that checking a link light is something obvious, it's also a way of knowing if there is power, or if there is a cable plugged. That's why I think is D.

    4. S

       StayInUrLane

       2023-12-27

       Selected D4 upvotes

       A=D and D=A You question the obvious by using the top to bottom approach by questioning the obvious using the top to bottom approach by questioning the obvious using the top to bottom approach by questioning th.....etc. The CompTIA troubleshooting methodology: https://www.comptia.org/blog/troubleshooting-methodology 1. Identify the problem. 2. Establish a theory of probable cause. Specific steps here may include: - Questioning the obvious. - Considering multiple approaches, including top-to-bottom or bottom-to-top for layered technologies (such as networks). 3. Test the theory to determine the cause. 4. Establish a plan of action to resolve the problem and implement the solution. 5. Verify full system functionality, and, if applicable, implement preventive measures. 6. Document findings, actions and outcomes.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 1 of 25