[Q23-Q42] 認証トレーニングN10-008日本語試験問題集テストエンジン [2024]

認証トレーニングN10-008日本語試験問題集テストエンジン [2024]

2024年10月24日ガイド準備でN10-008日本語試験合格

質問 # 23
ユーザーが 192.168.2.101 ネットワークのコマンドプロンプトから 192.168.1.100 に ping を実行しようとしましたが、次の応答が返されました。

A. ルーティングプロトコル
B. ネットワークアドレス変換
C. デフォルトゲートウェイ
D. ループバック

正解：C

解説：
Explanation
A default gateway is a device that routes traffic from one network to another network, such as the Internet. A default gateway is usually configured on each host device to specify the IP address of the router that connects the host's network to other networks. In this case, the user's device and the destination device are on different networks (192.168.1.0/24 and 192.168.2.0/24), so the user needs to configure a default gateway on their device to reach the destination device. References:
https://partners.comptia.org/docs/default-source/resources/comptia-network-n10-008-exam-objectives-(2-0),
https://www.techopedia.com/definition/25761/default-gateway

質問 # 24
ネットワーク管理者はネットワーク内の 2 つのレイヤ 2 スイッチを接続しています。これらのスイッチは複数のネットワークでデータを転送する必要があります。この要件を満たすのは次のうちどれですか?

A. リンクアグリゲーション
B. ジャンボフレーム
C. 802. IQ タグ付け
D. ネイティブ VLAN

正解：C

解説：
The technique that would fulfill the requirement of transferring data in multiple networks is 802.1Q tagging.
802.1Q tagging is a method of adding a tag or identifier to Ethernet frames that indicate which VLAN (Virtual Local Area Network) they belong to. VLANs are logical subdivisions of a network that allow devices in different physical locations or segments to communicate as if they were in the same network. VLANs improve network performance, security, and management by reducing broadcast traffic, isolating sensitive data, and grouping devices by function or department. By using 802.1Q tagging, two Layer 2 switches can exchange data from multiple VLANs over a single trunk link, without mixing or losing the VLAN information. References: CompTIA Network+ N10-008 Certification Study Guide, page 64; The Official CompTIA Network+ Student Guide (Exam N10-008), page 2-12.

質問 # 25
ネットワーク管理者は、これまではローカルネットワーク上にあったが、現在は SaaS ソリューションとしてホストされているネットワークリソースをリダイレクトする方法を作成する必要があります。タスクを完了するには次のレコードのうちどれを使用する必要がありますか?

A. CNAME
B. AAA
C. TXT
D. PTR

正解：A

解説：
CNAME stands for Canonical Name, and it is a type of DNS record that creates an alias for another domain name. A CNAME record can be used to redirect a network resource that has been moved to a different location, such as a SaaS solution. For example, if a web server that was previously hosted on the local network with the domain name www.example.com is now hosted by a SaaS provider with the domain name www.saasprovider.com, a CNAME record can be created to point www.example.com to www.saasprovider.com. This way, the users can still access the web server using the original domain name, and the DNS server will resolve it to the new domain name.
Reference
CNAME is one of the common DNS record types covered in Objective 1.6 of the CompTIA Network+ N10-008 certification exam1.
CNAME can be used to redirect a network resource that has been moved to a different location23.
CNAME creates an alias for another domain name23.
1: CompTIA Network+ Certification Exam Objectives, page 4 2: DNS Record Types - N10-008 CompTIA Network+ : 1.6 3: The Official CompTIA Network+ Student Guide (Exam N10-008), Chapter 1, page 32

質問 # 26
管理者はルーティングポリシーを調整して、本社所在地が BGP 経由で州外の新しい支社に接続できるようにしています。説明されているネットワークのタイプは次のうちどれですか?

A. MAN
B. LAN
C. PAN
D. WAN

正解：D

解説：
The type of network being described here is a WAN (Wide Area Network). BGP (Border Gateway Protocol) is commonly used for routing between different autonomous systems (ASes) over large geographical distances, such as connecting branch offices across states or countries.
WAN (Wide Area Network): A WAN spans a large geographic area and connects multiple LANs (Local Area Networks) or other networks. It allows communication between distant locations, such as connecting branch offices, data centers, or remote sites. BGP is often used in WANs to exchange routing information between different ASes.
BGP (Border Gateway Protocol): BGP is an exterior gateway protocol used for routing between autonomous systems (ASes). It enables routers in different ASes to exchange information about network reachability and select optimal paths for data transmission.

質問 # 27
2 つのキャンパスネットワークを接続するファイバーリンクが壊れています。エンジニアがファイバリンクの正確なブレークポイントを検出するために使用する必要があるツールは次のうちどれですか?

A. PoE インジェクター
B. 音源
C. OTDR
D. ケーブルテスター
E. 融着接続機

正解：C

解説：
An Optical Time Domain Reflectometer (OTDR) is a device that tests the integrity of a fiber cable and is used for the building, certifying, maintaining, and troubleshooting fiber optic systems.
Fusion Splicing is a preferred way to join two fibers together by using heat. Whether the fiber was broken or not long enough, a fusion splicer will make your job easier. You would do this after finding where the break is.

質問 # 28
システム管理者は、IP アドレスとデフォルトゲートウェイを標準レイヤに割り当てています。
2スイッチ。これを行う主な目的は次のうちどれですか?

A. VLAN ルーティングを許可します
B. スイッチのリモート管理を許可します。
C. スイッチでパケットフィルタリングを有効にする
D. スイッチで MAC フィルタリングを有効にする

正解：B

質問 # 29
コンピュータエンジニアは、特定のワークステーションだけがスイッチのポート 1 に接続できるようにする必要があります。次の機能のうち、エンジニアがスイッチインターフェイスで設定する必要があるのはどれですか?

A. ポートのタグ付け
B. ポートアグリゲーション
C. ポートミラーリング
D. ポートセキュリティ

正解：D

解説：
Port security is a feature that can be configured on a switch interface to limit and identify the MAC addresses of workstations that are allowed to connect to that specific port. This can help ensure that only a specific workstation (or workstations) can connect to the interface. According to the CompTIA Network+ Study Manual, "Port security can be used to specify which MAC addresses are allowed to connect to a particular switch port. If a port security violation is detected, the switch can take a number of different actions, such as shutting down the port, sending an SNMP trap, or sending an email alert."

質問 # 30
技術者はバッジを使用して、企業キャンパスのセキュリティチェックポイントに入ります。見知らぬ人物が技術者の後ろに無言で素早く入ってきました。技術者が経験した攻撃の種類は次のうちどれですか?

A. オンパス
B. 悪の双子
C. おんぶ
D. 共連れ

正解：D

解説：
Explanation
Tailgating is a type of physical security attack where an unauthorized person follows an authorized person into a restricted area without their consent or knowledge. Tailgating can allow an attacker to bypass security measures and gain access to sensitive information or resources. In this scenario, the technician experienced tailgating when the unknown individual walked in behind the technician without speaking. Piggybacking is similar to tailgating, but it involves the consent or cooperation of the authorized person. Evil twin is a type of wireless network attack where an attacker sets up a rogue access point that mimics a legitimate one. On-path is a type of network attack where an attacker intercepts and modifies traffic between two parties.
References: CompTIA Network+ Certification Exam Objectives Version 7.0 (N10-007), Objective 3.2: Given a scenario, use appropriate network hardening techniques.

質問 # 31
企業の公的にアクセス可能なサーバーは、企業の ISP に接続されたルーターと企業ネットワークの前面にあるファイアウォールの間のスイッチに接続されています。ファイアウォールはステートフルであり、ルーターは ACL を実行しています。ルーターとファイアウォールの間のエリアを最もよく説明しているものは次のうちどれですか?

A. 信頼できないゾーン
B. プライベート VLAN
C. トラストゾーン
D. スクリーンされたサブネット

正解：D

解説：
Explanation
A screened subnet is a network segment that is isolated from both the internal and external networks by firewalls or routers. It is used to host publicly accessible servers that need some protection from external attacks, but also need to be separated from the internal network for security reasons.
References
1: Seven-Second Subnetting - N10-008 CompTIA Network+ : 1.4
2: CompTIA Network+ Study Guide: Exam N10-008, 5th Edition, page 56
3: CompTIA Network+ N10-008 Exam Subnetting Quiz, question 22

質問 # 32
ホストが別のサブネット上にあるサーバーから DHCP アドレスを受信するには、次のどれが必要ですか?

A. DHCP スコープ
B. DHCP リレー
C. DHCP スヌーピング
D. DHCP予約

正解：B

解説：
A DHCP relay is a network device that forwards DHCP requests from clients on one subnet to a DHCP server on another subnet. This allows the DHCP server to assign IP addresses and other network configuration parameters to clients across different subnets. A DHCP scope is a range of IP addresses that a DHCP server can assign to clients. A DHCP snooping is a security feature that filters and validates DHCP messages on a switch. A DHCP reservation is a way to assign a specific IP address to a specific client based on its MAC address. Reference: Part 2 of the current page talks about DHCP relay and its functions. You can also find more information about DHCP relay on [this page].

質問 # 33
ユーザーはメイン Web アプリケーションにログインする必要があります。これにより、ジョブ関連のタスクを完了するために必要な他のすべてのプログラムへのアクセスがユーザーに許可されます。この設定で説明されている認証方法は次のどれですか?

A. TACACS+
B. 半径
C. SSO
D. 802.1X
E. 多要素認証

正解：C

解説：
The authentication method that this setup describes is SSO (Single Sign-On). SSO is a technique that allows a user to log in once to a main web application and then access multiple other applications or services without having to re-enter credentials. SSO simplifies the user experience and reduces the number of passwords to remember and manage. References: CompTIA Network+ N10-008 Certification Study Guide, page 371; The Official CompTIA Network+ Student Guide (Exam N10-008), page 14-5.

質問 # 34
指定された URL が正しい IP アドレスに解決されないため、ユーザーは Web サイトに移動できません。他のユーザーは問題なく目的の Web サイトに移動できます。この問題の原因として考えられる可能性が最も高いのは次のうちどれですか?

A. ネームサーバーレコード
B. ホストファイル
C. 自己署名証明書
D. IP ヘルパー

正解：B

質問 # 35
ネットワーク管理者がサーバーを廃止しています。ネットワーク管理者が相談する可能性が最も高いのは、次のうちどれですか?

A. パスワード要件
B. 変更管理文書
C. 事業継続計画
D. オンボーディングおよびオフボーディングポリシー

正解：B

解説：
A redundant cluster of devices is a group of devices that can provide backup or failover functionality in case of a hardware failure or a network attack.
Layer 2 devices operate at the data link layer of the OSI model and are responsible for forwarding frames based on MAC addresses. They include switches, bridges, and NICs.
Multiple routers are not Layer 2 devices, but Layer 3 devices that operate at the network layer of the OSI model and are responsible for forwarding packets based on IP addresses. Therefore, option A is incorrect.
Multiple switches are Layer 2 devices that can provide redundancy and scalability in the network by using protocols such as spanning tree, link aggregation, and VLANs. They can also support Layer 3 functions such as routing and inter-VLAN routing. Therefore, option B is the correct answer.
Multiple firewalls are not Layer 2 devices, but Layer 4 devices that operate at the transport layer of the OSI model and are responsible for filtering traffic based on ports and protocols. They can also provide security services such as NAT, VPN, and IDS. Therefore, option C is incorrect.
Multiple budges is a typo and should be multiple bridges. Bridges are Layer 2 devices that can divide a network into segments and reduce collisions. However, they are less efficient and less intelligent than switches, and they are rarely used in modern networks. Therefore, option D is incorrect.
Reference:
CompTIA Network+ N10-008 Study Guide, Chapter 2: Network Devices, pages 47-48, 51-52, 55-56, 59-60.
Professor Messer's Network+ Video Course, Section 1.1: Network Devices, videos 1.1.1 - 1.1.4, 1.1.6, 1.1.7.
Cisco Press: Fully Redundant Layer 2 and Layer 3 Designs

質問 # 36
ネットワーク管理者は、ユーザーがネットワーク上のリソースにアクセスできないことが通知されます。ネットワーク管理者は、User 3 というラベルの付いたワークステーションへの物理接続をチェックし、イーサネットが適切に接続されていることを確認します。ただし、コンピュータまたはスイッチのネットワークインターフェイスのインジケータライトは点滅しません。最も考えられる原因は次のうちどれですか?

A. VLANの割り当てが間違っています。
B. デフォルトゲートウェイが間違っています。
C. 切り替えに失敗しました。
D. ポートがシャットダウンされています。

正解：D

解説：
Explanation
If the port is shut down, it means that the switch has disabled the port and is not sending or receiving any traffic on it. This would explain why the network interface's indicator lights are not blinking on either the computer or the switch, and why the user cannot access resources on the network. The port could be shut down manually by the network administrator, or automatically by the switch due to security or error conditions.
References
Port shutdown is one of the common switch configuration options covered in Objective 2.3 of the CompTIA Network+ N10-008 certification exam1.
Port shutdown can cause the network interface's indicator lights to stop blinking2.
Port shutdown can prevent the user from accessing resources on the network3.
1: CompTIA Network+ Certification Exam Objectives, page 5 2: CompTIA Network+ N10-008: Switch not forwarding frames on trunked port3 3: Cable Management - N10-008 CompTIA Network+ : 1.3

質問 # 37
技術者がワイヤレスネットワークを構成しており、接続する前にユーザーが AUP に同意することを確認する必要があります。この目標を達成するには、次のうちどれを実装する必要がありますか?

A. ワイヤレスクライアントの分離
B. キャプティブポータル
C. 役割ベースのアクセス
D. ジオフェンシング

正解：B

質問 # 38
ネットワークエンジニアは、ビデオ会議アプリケーションのパフォーマンスが低下しているというレポートを調査しています。レポートを確認したところ、エンジニアは WAN 接続で使用可能な帯域幅が少ないことに気付きました。
この問題を処理するための最も適切なメカニズムは次のうちどれですか?

A. リンクアグリゲーション
B. トラフィックシェーピング
C. フロー制御
D. ネットフロー

正解：B

解説：
Traffic shaping is a congestion management method that regulates network data transfer by delaying the flow of less important or less desired packets1. Traffic shaping can help to improve the performance of a videoconferencing application by prioritizing its packets over other types of traffic and smoothing out traffic bursts. Traffic shaping can also help to avoid packet loss and ensure fair allocation of bandwidth among different applications or users.
Flow control is a mechanism that prevents a sender from overwhelming a receiver with more data than it can handle. Flow control can help to avoid buffer overflow and data loss, but it does not prioritize different types of traffic or smooth out traffic bursts. Flow control operates at the data link layer or the transport layer, while traffic shaping operates at the network layer or above.
NetFlow is a protocol that collects and analyzes network traffic data for monitoring and troubleshooting purposes2. NetFlow can help to identify the sources, destinations, volumes, and types of traffic on a network, but it does not regulate or shape the traffic flow. NetFlow operates at the network layer or above.
Link aggregation is a technique that combines multiple physical links into one logical link for increased bandwidth, redundancy, and load balancing. Link aggregation can help to improve the performance of a videoconferencing application by providing more available bandwidth at the WAN connection, but it does not prioritize different types of traffic or smooth out traffic bursts. Link aggregation operates at the data link layer.

質問 # 39
ネットワーククライアントが間違った TCP ポートに接続しようとしています。次の応答のうち、クライアントが受け取る可能性が最も高いのはどれですか?

A. リダイレクト
B. RST
C. フィン
D. ICMP 時間超過

正解：B

解説：
If a network client is trying to connect to the wrong TCP port, the most likely response it would receive is a RST (reset) packet from the server. A RST packet is used to terminate a TCP connection abruptly, either because the server does not recognize the port number, or because the server has no application listening on that port, or because the server detects an error or an attack on the connection. A RST packet tells the client to stop sending any more data and close the connection immediately12 The other options are not as likely to be the responses for connecting to the wrong TCP port. A FIN (finish) packet is used to gracefully end a TCP connection, after both parties have exchanged all the data they need. A FIN packet indicates that the sender has no more data to send and is ready to close the connection. A FIN packet does not imply an error or a rejection, but rather a normal termination of the connection12 An ICMP (Internet Control Message Protocol) Time Exceeded message is used to inform the sender that a packet has been discarded because its time to live (TTL) value has reached zero. A TTL value is a counter that decrements by one every time a packet passes through a router. When the TTL value reaches zero, the packet is dropped and an ICMP Time Exceeded message is sent back to the sender. This message is used to prevent packets from looping endlessly in the network, and also to implement the traceroute tool, which shows the path and the hops that a packet takes to reach a destination. An ICMP Time Exceeded message is not related to the TCP port number, but rather to the IP routing and the TTL value3 A Redirect message is another type of ICMP message that is used to inform the sender that there is a better route to the destination. A Redirect message is sent by a router when it receives a packet from a host on the same network, and forwards the packet to another router on the same network. A Redirect message tells the sender to use the second router as the next hop, instead of the first router, to optimize the routing and avoid unnecessary hops. A Redirect message is also not related to the TCP port number, but rather to the IP routing and the network topology3 Reference:
What causes a TCP/IP reset (RST) flag to be sent?
RFC 792: Internet Control Message Protocol

質問 # 40
技術者はタブレット、スマートフォン、およびラップトップを備えており、電話によるサポートを利用してスイッチのトラブルシューティングを行います。ただし、技術者は、スイッチのトラブルシューティングでこれらすべてのツールを相互接続する際に問題を抱えています。技術者が接続を確立するために使用する必要があるのは、次のうちどれですか?

A. WAN
B. MAN
C. PAN
D. LAN

正解：C

解説：
A PAN stands for Personal Area Network and it is a type of network that connects devices within a small range, such as a few meters. A PAN can use wireless technologies such as Bluetooth or Wi-Fi to interconnect devices such as tablets, smartphones, and laptops. A technician can use a PAN to gain connectivity among these tools and troubleshoot the switch.
References: Network+ Study Guide Objective 1.2: Explain devices, applications, protocols and services at their appropriate OSI layers.

質問 # 41
遠隔地で野生生物を監視するカメラへの接続を提供するために、ネットワークスイッチが設置されました。組織は、侵入者が遠隔地にある無人の機器を利用して不正なデバイスを接続し、組織のリソースにアクセスできる可能性があることを懸念しています。次の手法のうち、懸念事項に最もよく対処するのはどれですか?