N10-009 sample questions

Question 1

Which of the following steps of the troubleshooting methodology would most likely include checking through each level of the OSI model after the problem has been identified?

Accepted Answer

Establish a theory.

Answer

Implement the solution.

Answer

Create a plan of action.

Answer

Verify functionality.

Question 2

While troubleshooting a VoIP handset connection, a technician's laptop is able to successfully connect to network resources using the same port. The technician needs to identify the port on the switch. Which of the following should the technician use to determine the switch and port?

Accepted Answer

LLDP

Answer

IKE

Answer

VLAN

Answer

netstat

Question 3

A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

Accepted Answer

A reservation for the server based on the MAC address

Answer

A separate scope for the file server using a /32 subnet

Answer

A static IP address within the DHCP IP range

Answer

A SLAAC for the server

Question 4

Which of the following technologies are X.509 certificates most commonly associated with?

Accepted Answer

PKI

Answer

VLAN tagging

Answer

LDAP

Answer

MFA

Question 5

A financial services firm is migrating to a Zero Trust security model. A network engineer is tasked with implementing microsegmentation for a new application environment hosted in a virtualized data center. The application consists of a web tier, an application tier, and a database tier, each on its own subnet. The security policy dictates that the web tier should only accept traffic from the internet on port 443 and initiate connections to the application tier on port 8443. The application tier should only accept traffic from the web tier and initiate connections to the database tier on port 3306. Which technology would be MOST effective for enforcing these granular, east-west traffic policies between virtual machines?

Accepted Answer

A distributed firewall integrated with the hypervisor

Answer

VLANs with router-on-a-stick and standard ACLs

Answer

A perimeter next-generation firewall (NGFW)

Answer

Switch port security with MAC address filtering

Question 6

A company is deploying a new SD-WAN solution to connect its headquarters to 50 branch offices. The solution uses a centralized controller for policy management and two redundant data centers for traffic aggregation. For the overlay network, the administrator needs a routing protocol that is highly scalable, supports complex policy-based routing, and is an open standard to ensure compatibility with future hardware from different vendors. Which routing protocol should be used for the SD-WAN overlay?

Accepted Answer

BGP

Answer

OSPF

Answer

EIGRP

Answer

RIPv2

Question 7

A network administrator is troubleshooting an issue where virtual machines in a data center cannot communicate with each other, despite being in the same Layer 2 segment (VLAN 100). The data center uses VxLAN to extend Layer 2 segments across the physical Layer 3 infrastructure. The administrator checks two VMs on different physical hosts and confirms their IP and VLAN settings are correct. What is the MOST likely cause of the communication failure between the VMs?
```mermaid
graph TD
subgraph Host1
VM1(VM1 - VLAN 100) --> VTEP1[VTEP 1]
end
subgraph Host2
VM2(VM2 - VLAN 100) --> VTEP2[VTEP 2]
end
VTEP1 |VxLAN Tunnel| VTEP2
VTEP1 & VTEP2 -- Layer 3 Network -- L3Router(Underlay Network)
```

Accepted Answer

The VxLAN Network Identifier (VNI) is misconfigured on one of the VTEPs.

Answer

A mismatched VLAN ID on the virtual machine vNICs.

Answer

The Spanning Tree Protocol is blocking the ports on the physical switches.

Answer

The MTU on the underlay network is too small, but ICMP is not blocked.

Question 8

A network technician is tasked with documenting the physical network layout of a new three-story building. The main telecommunications room, where the ISP connection and core router are located, is on the second floor. Each floor has its own wiring closet with switches that serve the users on that floor. According to TIA/EIA structured cabling standards, what are the correct terms for the main telecommunications room and the wiring closets on each floor? (Select TWO).

Accepted Answer

The main room is the Main Distribution Frame (MDF).

Accepted Answer

The floor wiring closets are Intermediate Distribution Frames (IDFs).

Answer

The main room is the Intermediate Distribution Frame (IDF).

Answer

The floor wiring closets are Horizontal Cross-Connects (HCC).

Answer

The main room is the Demarcation Point.

Question 9

A DevOps engineer is using an Infrastructure as Code (IaC) tool to automate the deployment of network security groups in a cloud environment. The engineer writes a declarative configuration file specifying the desired state for a set of firewall rules. When the configuration is applied, the IaC tool compares the file to the current state of the cloud resources and only makes the necessary changes to achieve the desired state. This property, where running the same configuration multiple times results in the same state without causing errors or additional changes, is known as:

Accepted Answer

Idempotence

Answer

Immutability

Answer

Orchestration

Answer

Abstraction

Question 10

True or False: In a Secure Access Service Edge (SASE) architecture, both network traffic routing decisions and security policy enforcement are primarily handled by on-premises appliances located at each branch office.

Accepted Answer

False

Answer

True

Top vendors

Top exams

Free N10-009 sample questions

Which of the following steps of the troubleshooting methodology would most likely include checking through each level of the OSI model after the problem has been identified?

While troubleshooting a VoIP handset connection, a technician's laptop is able to successfully connect to network resources using the same port. The technician needs to identify the port on the switch. Which of the following should the technician use to determine the switch and port?

A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

Which of the following technologies are X.509 certificates most commonly associated with?

True or False: In a Secure Access Service Edge (SASE) architecture, both network traffic routing decisions and security policy enforcement are primarily handled by on-premises appliances located at each branch office.

11 more free samples are waiting