[2025年01月10日] あなたを合格させるN10-008無料最新問題集でCompTIA練習テスト
無料でゲット！高評価CompTIA N10-008試験問題集を今すぐダウンロード！
質問 # 212
An administrator is writing a script to periodically log the IPv6 and MAC addresses of all the devices on a network segment. Which of the following switch features will MOST likely be used to assist with this task?
- A. Address Resolution Protocol
- B. Link Aggregation Control Protocol
- C. Spanning Tree Protocol
- D. Neighbor Discovery Protocol
正解：D
質問 # 213
A technician is implementing a new wireless network to serve guests at a local office. The network needs to provide Internet access but disallow associated stations from communicating with each other. Which of the following would BEST accomplish this requirement?
- A. DHCP snooping
- B. Device geofencing
- C. Port security
- D. Wireless client isolation
正解：D
解説：
Wireless Client Isolation is a security feature that prevents wireless clients from communicating with one another. This feature is useful for guest and BYOD SSIDs adding a level of security to limit attacks and threats between devices connected to the wireless networks.
質問 # 214
A help desk technician discovers the following note while reviewing tickets in a customer's account:
Which of the following describes what the technician was documenting with this note?
- A. The technician was testing a theory to determine the cause.
- B. The technician was establishing a plan of action and identifying potential effects.
- C. The technician was identifying the problem by gathering information.
- D. The technician was approaching multiple problems individually.
正解：C
解説：
Explanation
The technician was identifying the problem by gathering information with this note. This is the first step of the troubleshooting methodology, which is a systematic process of finding and resolving issues in a network or system. By gathering information, the technician can understand the symptoms, scope, and impact of the problem, as well as collect relevant data from various sources, such as users, logs, tools, or documentation.
The note shows that the technician was asking questions to the user, checking the network status and configuration, and reviewing previous tickets to gather information about the problem. References: [CompTIA Network+ Certification Exam Objectives], Troubleshooting Methodology - CompTIA Network+ N10-007 -
1.4 | Professor Messer IT Certification Training Courses
質問 # 215
A network manager is configuring switches in IDFs to ensure unauthorized client computers are not connecting to a secure wired network. Which of the following is the network manager MOST likely performing?
- A. Configuring DHCP snooping
- B. Changing the default VLAN
- C. Disabling unneeded switchports
- D. Writing ACLs to prevent access to the switch
正解：A
質問 # 216
A network administrator is reviewing the following metrics from a network management system regarding a switchport. The administrator suspects an issue because users are calling in regards to the switchport's performance:
Based on the information in the chart above, which of the following fs the cause of these performance issues?
- A. The connected device is receiving too many packets.
- B. The switchport has been up for too long
- C. The connected device is sending too many packets
- D. The connected device is exceeding the configured MTU.
- E. The switchport does not have enough CRCs
正解：D
質問 # 217
A network requirement calls for segmenting departments into different networks. The campus network is set up with users of each department in multiple buildings. Which of the following should be configured to keep the design simple and efficient?
- A. Port tagging
- B. Flow control
- C. MDIX
- D. Jumbo frames
正解：A
解説：
Explanation
Port tagging is a technique that involves adding a tag or identifier to the frames or packets that belong to a certain VLAN. A VLAN is a logical segment of a network that isolates traffic between different groups of devices. Port tagging allows devices on different physical ports or switches to communicate with each other as if they were on the same port or switch. Port tagging can help keep the design simple and efficient by reducing the number of physical ports and switches needed to segment departments into different networks. References:
https://www.comptia.org/blog/what-is-port-tagging
質問 # 218
A user reports being unable to access network resources after making some changes in the office. Which of the following should a network technician do FIRST?
- A. Ask what changes were made
- B. Check the system's IP address
- C. Do a ping test against the servers
- D. Reseat the cables into the back of the PC
正解：A
解説：
Explanation
When a user reports being unable to access network resources after making some changes, the network technician should first ask the user what changes were made. This information can help the technician identify the cause of the issue and determine the appropriate course of action.
References: CompTIA Network+ Certification Study Guide, Sixth Edition by Glen E. Clarke
質問 # 219
A company that uses VoIP telephones is experiencing intermittent issues with one-way audio and dropped conversations The manufacturer says the system will work if ping times are less than 50ms. The company has recorded the following ping times:
Which of the following is MOST likely causing the issue?
- A. Jitter
- B. Latency
- C. Attenuation
- D. VLAN mismatch
正解：A
解説：
Explanation
Jitter is most likely causing the issue of intermittent one-way audio and dropped conversations for the company that uses VoIP telephones. Jitter is a variation in delay of packets arriving at the destination. It can cause choppy or distorted audio quality for VoIP applications, especially over WAN links that have limited bandwidth and high latency. The recommended jitter for VoIP is less than 10ms1. The company has recorded ping times that exceed 50ms, which indicates high jitter and latency on their network. References:
https://www.voip-info.org/voip-jitter/ 1
質問 # 220
Which of the following routing protocols is used to exchange route information between public autonomous systems?
- A. BGP
- B. OSPF
- C. EGRIP
- D. RIP
正解：A
解説：
Explanation
BGP (Border Gateway Protocol) is a routing protocol used to exchange route information between public autonomous systems (AS). OSPF (Open Shortest Path First), EGRIP (Enhanced Interior Gateway Routing Protocol), and RIP (Routing Information Protocol) are all used for internal routing within a single AS.
Therefore, BGP is the correct option to choose for this question.
References:
Network+ N10-007 Certification Exam Objectives, Objective 3.3: Given a scenario, configure and apply the appropriate routing protocol.
Cisco: Border Gateway Protocol (BGP) Overview
質問 # 221
Which of the following is used to limit the amount of bandwidth used on a link for different applications to improve overall performance?
- A. Load balancing
- B. QoS
- C. Traffic shaping
- D. Fault tolerance
正解：C
質問 # 222
A company is moving to a new building designed with a guest waiting area that has existing network ports. Which of the following practices would BEST secure the network?
- A. Disable unneeded switchports in the area.
- B. Ensure all guests sign an NDA.
- C. Enable MAC filtering to block unknown hardware addresses.
- D. Lower the radio strength to reduce Wi-Fi coverage in the waiting area.
正解：C
質問 # 223
An IT technician is working on a support ticket regarding an unreachable web-site. The technician has utilized the ping command to the website, but the site is still unreachable. Which of the following tools should the technician use NEXT?
- A. arp
- B. netstat
- C. ipconfig
- D. tracert
正解：D
解説：
Explanation
tracert is a command-line tool that can trace the route of a packet from the source to the destination. It can show the number of hops, the IP address and hostname of each router, and the round-trip time for each hop.
tracert can help the technician troubleshoot the unreachable website by identifying where the packet is dropped or delayed along the path. ipconfig is a command-line tool that can display and configure the IP settings of a network interface. arp is a command-line tool that can display and manipulate the Address Resolution Protocol (ARP) cache, which maps IP addresses to MAC addresses. netstat is a command-line tool that can display network connections, routing tables, and statistics.
References: CompTIA Network+ Certification Exam Objectives Version 7.0 (N10-007), Objective 2.4: Given a scenario, use appropriate software tools to troubleshoot connectivity issues.
質問 # 224
Which of the following compromises internet-connected devices and makes them vulnerable to becoming part of a botnet? (Select TWO)
- A. Use of default credentials
- B. Malware infection
- C. Dictionary attack
- D. IP spoofing
- E. Firmware corruption
- F. Deauthentication attack
正解：B、C
質問 # 225
A network administrator views a network pcap and sees a packet containing the following:
Which of the following are the BEST ways for the administrator to secure this type of traffic?
(Choose two.)
- A. Use SNMPv3.
- B. Set a private community string.
- C. Utilize IPSec tunneling.
- D. Migrate the network to IPv6.
- E. Incorporate SSL encryption.
- F. Implement 802.1 X authentication.
正解：A、B
解説：
The packet contains a community string of "public," which is the default community string for SNMPv1 and SNMPv2c. The administrator should set a private community string, which is a custom string used for SNMP authentication and authorization, to replace the default string.
質問 # 226
A network device needs to discover a server that can provide it with an IPv4 address. Which of the following does the device need to send the request to?
- A. Unicast address
- B. Broadcast address
- C. Default gateway
- D. Link local address
正解：C
解説：
A network device needs to discover a DHCP server in order to obtain an IP address, it will send a broadcast message called DHCPDISCOVER. This broadcast message is sent to the broadcast address (255.255.255.255) on the local network segment. DHCP servers listen for these broadcast messages, and the first server to respond will provide the device with an IP address.
The default gateway, unicast address and link-local address are not the destination address to send DHCP request.
質問 # 227
A company's publicly accessible servers are connected to a switch between the company's ISP-connected router and the firewall in front of the company network. The firewall is stateful, and the router is running an ACL. Which of the following best describes the area between the router and the firewall?
- A. Untrusted zone
- B. Trusted zone
- C. Private VLAN
- D. Screened subnet
正解：D
解説：
Explanation
A screened subnet is a network segment that is isolated from both the internal and external networks by firewalls or routers. It is used to host publicly accessible servers that need some protection from external attacks, but also need to be separated from the internal network for security reasons.
References
1: Seven-Second Subnetting - N10-008 CompTIA Network+ : 1.4
2: CompTIA Network+ Study Guide: Exam N10-008, 5th Edition, page 56
3: CompTIA Network+ N10-008 Exam Subnetting Quiz, question 22
質問 # 228
Which of the following would be BEST suited for a long cable run with a 40Gbps bandwidth?
- A. Cat 5e
- B. Cat 8
- C. Cat 7
- D. Cat 6a
正解：B
質問 # 229
A network administrator is reviewing the following metrics from a network management system regarding a switchport. The administrator suspects an issue because users are calling in regards to the switchport's performance:
Based on the information in the chart above, which of the following fs the cause of these performance issues?
- A. The connected device is receiving too many packets.
- B. The switchport has been up for too long
- C. The connected device is sending too many packets
- D. The connected device is exceeding the configured MTU.
- E. The switchport does not have enough CRCs
正解：D
質問 # 230
Given the following output:
Which of the following attacks is this MOST likely an example of?
- A. Rogue access point
- B. Amplified DoS
- C. VLAN hopping
- D. ARP poisoning
正解：D
解説：
Explanation
The output is most likely an example of an ARP poisoning attack. ARP poisoning, also known as ARP spoofing, is a type of attack that exploits the ARP protocol to associate a malicious device's MAC address with a legitimate IP address on a local area network. This allows the attacker to intercept, modify, or redirect network traffic between two devices without their knowledge. The output shows that there are multiple entries for the same IP address (192.168.1.1) with different MAC addresses in the ARP cache of the device. This indicates that an attacker has sent fake ARP replies to trick the device into believing that its MAC address is associated with the IP address of another device (such as the default gateway). References:
https://www.cisco.com/c/en/us/about/security-center/arp-spoofing.html
質問 # 231
The following configuration is applied to a DHCP server connected to a VPN concentrator:
There are 300 non-concurrent sales representatives who log in for one hour a day to upload reports, and 252 of these representatives are able to connect to the VPN without any Issues. The remaining sales representatives cannot connect to the VPN over the course of the day. Which of the following can be done to resolve the issue without utilizing additional resources?
- A. Reboot the DHCP server
- B. Decrease the lease duration
- C. Install a new VPN concentrator
- D. Configure a new router
正解：B
解説：
Explanation
Decreasing the lease duration on the DHCP server will cause clients to renew their IP address leases more frequently, freeing up IP addresses for other clients to use. References: CompTIA Network+ Certification Study Guide, Chapter 3: IP Addressing.
質問 # 232
Which of the following is the most accurate NTP time source that is capable of being accessed across a network connection?
- A. Stratum 0 device
- B. Stratum 7 device
- C. Stratum 16 device
- D. Stratum 1 device
正解：D
解説：
NTP (Network Time Protocol) is a protocol that synchronizes the clocks of network devices with a reference time source. NTP uses a hierarchical system of time sources, called strata, to distribute the time information. A stratum 0 device is the most accurate time source, such as an atomic clock or a GPS receiver, but it is not directly accessible across a network connection. A stratum 1 device is a network device that is directly connected to a stratum 0 device, such as a dedicated NTP server or a router with a GPS antenna, and it acts as a primary time server for other network devices. A stratum 2 device is a network device that synchronizes its time with a stratum 1 device, and so on. The higher the stratum number, the lower the accuracy and reliability of the time source. A stratum 16 device is a network device that has no valid time source and is considered unsynchronized.
References:
* Part 1 of current page talks about how Bing is your AI-powered copilot for the web and provides various examples of how it can help you with different tasks, such as writing a joke, creating a table, or summarizing research. However, it does not mention anything about NTP or time sources.
* Part 2 of current page shows the search results for "ai powered search bing chat", which include web, image, and news results. However, none of these results seem to be relevant to the question, as they are mostly about Bing's features, products, or announcements, not about NTP or time sources.
* Therefore, I cannot find the answer or the explanation from the current page. I have to use my own knowledge and information from other sources to verify the answer and provide a short but comprehensive explanation. I will cite these sources using numerical references.
* : CompTIA Network+ Certification Exam Objectives, Version 8.0, Domain 2.0: Infrastructure, Objective 2.5: Given a scenario, implement network time synchronization, Subobjective 2.5.1: NTP,
https://www.comptia.jp/pdf/comptia-network-n10-008-exam-objectives.pdf
* : Network Time Protocol (NTP),
https://www.cisco.com/c/en/us/about/press/internet-protocol-journal/back-issues/table-contents-58/154-ntp
* : How NTP Works, https://www.meinbergglobal.com/english/info/ntp.htm
質問 # 233
A network administrator is in the process of installing 35 PoE security cameras. After the administrator installed and tested the new cables, the administrator installed the cameras. However, a small number of the cameras do not work. Which of the following is the most likely reason?
- A. Incorrect wiring standard
- B. Wrong voltage
- C. Signal attenuation
- D. Power budget exceeded
正解：D
解説：
The power budget is the total amount of power that a PoE switch or injector can provide to the connected PoE devices. If the power budget is exceeded, some of the PoE devices may not receive enough power to function properly. To troubleshoot this issue, the network administrator should check the power consumption of each PoE device and the power capacity of the PoE switch or injector.
References:
* PoE Troubleshooting: The Common PoE Errors and Solutions1
* Security Camera Won't Work - Top 10 Solutions to Fix2
* CompTIA Network+ N10-008 Exam Objectives
https://www.comptia.org/certifications/network#examdetails
質問 # 234
Many IP security cameras use RTSP to control media playback. Which of the following default transport layer port numbers does RTSP use?
- A. 0
- B. 1
- C. 2
- D. 3
正解：D
解説：
RTSP stands for Real Time Streaming Protocol and is an application-level network protocol designed for controlling media playback on streaming media servers. RTSP uses the default transport layer port number
554 for both TCP and UDP1. Port 445 is used for SMB (Server Message Block), a protocol for file and printer sharing. Port 587 is used for SMTP (Simple Mail Transfer Protocol), a protocol for sending email messages.
Port 5060 is used for SIP (Session Initiation Protocol), a protocol for initiating and managing multimedia sessions.
References: 1 Real Time Streaming Protocol - Wikipedia
(https://en.wikipedia.org/wiki/Real_Time_Streaming_Protocol)
質問 # 235
A client who shares office space and an IT closet with another company recently reported connectivity issues throughout the network. Multiple third-party vendors regularly perform on-site maintenance in the shared IT closet. Which of the following security techniques would BEST secure the physical networking equipment?
- A. Disabling unneeded switchports
- B. Implementing role-based access
- C. Configuring an access control list
- D. Changing the default passwords
正解：A
質問 # 236
Which of the following commands can be used to display the IP address, subnet address, gateway address, and DNS address on a Windows computer?
- A. netstat -a
- B. ifconfig
- C. ipconfig /all
- D. ip addr
正解：C
解説：
ipconfig = IP address, Subnet, Gateway, and DNS PREFIX
ipconfig /all = IP address, Subnet, Gateway, AND DNS ADDRESS.
質問 # 237
......
一発合格の秘訣は無料でゲット！N10-008Certified 試験エンジンPDF：https://jp.fast2test.com/N10-008-premium-file.html
N10-008試験問題集合格には最新なテスト問題集：https://drive.google.com/open?id=1YER7qCbpQxe272VBUTo_gtazDsg4JadM