Network+ Practice Questions
Prepare for N10-009 with more than an answer.
Unlock the full exam and previous versions
- v1Version 1 313 questions Current
- N10-007Legacy Network+ 706 questions Locked
- Exam fee
- $369 USD
- Level
- Foundation
- Valid for
- 3 years
Domains covered on the exam 5
- Networking Concepts23%
- Network Implementations20%
- Network Operations19%
- Network Security14%
- Network Troubleshooting24%
- 1
A large enterprise with a global presence is adopting a SASE (Secure Access Service Edge) model to provide secure access for its remote workforce. A remote user in London needs to access a private application hosted in an AWS VPC in Virginia. According to SASE principles, what is the expected traffic path?
sequenceDiagram participant User in London participant SASE PoP (London) participant SASE Backbone participant SASE PoP (Virginia) participant App in AWS (Virginia) User in London->>SASE PoP (London): 1. Authenticate & Connect SASE PoP (London)->>SASE Backbone: 2. Apply Security Policies SASE Backbone->>SASE PoP (Virginia): 3. Optimized Routing SASE PoP (Virginia)-->>App in AWS (Virginia): 4. Secure Access App in AWS (Virginia)-->>SASE PoP (Virginia): 5. Response SASE PoP (Virginia)-->>SASE Backbone: 6. Encrypted Return SASE Backbone-->>SASE PoP (London): 7. Return to User PoP SASE PoP (London)-->>User in London: 8. Deliver ResponseShow answer details
Correct answer: C
The SASE model decentralizes security and networking, moving them to the cloud edge. A remote user connects to the nearest SASE PoP (in this case, London). At this PoP, the user is authenticated, and all security policies (ZTNA, SWG, CASB, FWaaS) are enforced. The traffic is then routed over the SASE provider's optimized and private backbone network to the PoP closest to the application's location (Virginia), which then provides secure access. This avoids the latency of backhauling traffic to a central data center and ensures consistent security for all users, regardless of location.
- 2
A hospital is deploying a new wireless network for medical devices that transmit patient data. Due to the sensitive nature of the information, the highest level of wireless security is required. Which security protocol should be implemented?
Show answer details
Correct answer: B
WPA3-Enterprise provides the highest level of security for wireless networks, making it the appropriate choice for a hospital environment handling sensitive patient data. WPA3 offers significant security enhancements over WPA2, including protection against offline dictionary attacks through Simultaneous Authentication of Equals (SAE). The 'Enterprise' mode utilizes 802.1X authentication with a RADIUS server, providing individual user authentication and centralized access control, which is essential for compliance and security in a healthcare setting. WPA2-PSK is vulnerable to dictionary attacks, while WEP and WPA are deprecated and insecure.
- 3
A network administrator needs to create a subnet that can support up to 60 host devices. Which of the following CIDR notations provides the required number of host addresses while minimizing wasted addresses?
Show answer details
Correct answer: B
To support 60 hosts, we need to find the smallest subnet that provides at least 60 usable addresses. The number of hosts is calculated as 2^n - 2, where n is the number of host bits. A /26 CIDR notation leaves 32 - 26 = 6 host bits. This provides 2^6 - 2 = 64 - 2 = 62 usable host addresses, which meets the requirement of 60 hosts with minimal waste. A /25 would provide 126 usable addresses (too many), and a /27 would only provide 30 usable addresses (not enough).
- 4
A network operations team is reviewing their disaster recovery plan. The business has stated that for a critical e-commerce application, the maximum tolerable downtime is 2 hours, and no more than 15 minutes of transaction data can be lost in the event of a failure. How should these requirements be documented in the DR plan?
Show answer details
Correct answer: C
The Recovery Time Objective (RTO) defines the target time within which a business process must be restored after a disaster to avoid unacceptable consequences. In this case, the maximum tolerable downtime of 2 hours is the RTO. The Recovery Point Objective (RPO) is the maximum targeted period in which data might be lost from an IT service due to a major incident. The requirement of losing no more than 15 minutes of transaction data defines the RPO. Therefore, the correct documentation is RTO = 2 hours and RPO = 15 minutes.
- 5
Case Study: Global Retail Co. Network Upgrade
Company Background:
Global Retail Co. is a multinational retailer with 200 stores across North America and Europe. Each store has a small local network for point-of-sale (POS) systems, inventory management, and guest Wi-Fi. The company is currently using a traditional hub-and-spoke WAN architecture, backhauling all store traffic through a central data center in New York via expensive MPLS circuits. This architecture is causing high latency for stores in Europe accessing cloud applications (SaaS) and significant operational costs.Current Situation & Requirements:
The company is embarking on a major network transformation project. The primary goals are to reduce operational costs, improve application performance, and enhance security. The IT team wants to enable direct, secure internet access from each store for trusted SaaS applications (like Office 365 and Salesforce) while still routing sensitive financial data through the central data center for inspection. The solution must be centrally manageable and provide visibility into application performance across all WAN links, including MPLS, broadband internet, and 5G backup links.Technical Constraints:
- The solution must integrate with the existing MPLS network during a phased rollout.
- Security policies must be applied consistently across all stores, regardless of how they access the internet or corporate resources.
- The new architecture must support application-aware routing to steer traffic based on performance requirements (e.g., VoIP traffic must use the lowest latency path).
Question:
Given the requirements, which network architecture should Global Retail Co. implement to achieve its goals?Show answer details
Correct answer: C
An SD-WAN solution directly addresses all of Global Retail Co.'s requirements. It allows for central management of WAN policies, supports multiple transport types (MPLS, broadband, 5G), and enables application-aware routing. The local internet breakout feature allows trusted SaaS traffic to go directly to the internet from the store, reducing latency and freeing up MPLS bandwidth. Sensitive traffic can still be routed back to the central data center. This approach reduces costs by leveraging cheaper broadband, improves performance, and provides the required visibility and control, making it the ideal architecture for this transformation.
- 6
What is the primary function of a reverse proxy server?
Show answer details
Correct answer: C
A reverse proxy sits in front of one or more web servers and intercepts requests from external clients. It then forwards these requests to the appropriate backend server. This provides several benefits, including load balancing across multiple servers, SSL termination, caching static content, and providing an additional layer of security by hiding the identity and IP addresses of the internal servers. In contrast, a forward proxy is used by clients to access the internet, hiding the client's identity.
- 7
Which of the following steps of the troubleshooting methodology would most likely include checking through each level of the OSI model after the problem has been identified?
Show answer details
Correct answer: A
- 8
While troubleshooting a VoIP handset connection, a technician's laptop is able to successfully connect to network resources using the same port. The technician needs to identify the port on the switch. Which of the following should the technician use to determine the switch and port?
Show answer details
Correct answer: A
- 9
A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?
Show answer details
Correct answer: B
- 10
Which of the following technologies are X.509 certificates most commonly associated with?
Show answer details
Correct answer: A
