CompTIA Updated N10-009 Exam Questions and Answers by catherine

The loopback address (127.0.0.1) is used to test a host’s local TCP/IP stack, ensuring that the networking components of the operating system are functioning properly.

This test does not require network connectivity because it only checks if the local machine ' s TCP/IP stack is operational.

If the loopback test fails, it indicates a misconfigured TCP/IP stack, corrupt drivers, or an issue with the OS networking components.

Option B (ping 169.254.1.1) – This is an APIPA (Automatic Private IP Addressing) address, which is assigned when DHCP fails. It does not test the local TCP/IP stack.

Option C (ping 172.16.1.1) and Option D (ping 192.168.1.1) – These are private network addresses and test connectivity to other devices, not the local TCP/IP stack.

? Reference: CompTIA Network+ (N10-009) Official Study Guide – Section: Troubleshooting Network Connectivity

Multi-factor authentication (MFA) requires two or more different categories of authentication factors:

Something you know (password, PIN)

Something you have (smart card, hardware token)

Something you are (biometric)

The only valid second factor here is a hard token (e.g., a key fob generating one-time codes).

A. PIN is still “something you know,” the same category as a password.

B. Favorite color is a weak knowledge-based factor, not a true second factor.

D. Mother’s maiden name is also “something you know” and insecure.

References (CompTIA Network+ N10-009):

Domain: Network Security — Authentication methods, MFA factor categories.

A Site-to-site VPN (Virtual Private Network) is the most cost-effective solution for establishing a persistent, secure connection between two facilities. It uses the public internet to create an encrypted tunnel, leveraging existing internet connections without requiring expensive dedicated infrastructure. This makes it ideal for organizations looking to securely connect remote sites while minimizing costs.

Why not GRE tunnel? Generic Routing Encapsulation (GRE) tunnels encapsulate traffic but do not provide encryption natively, requiring additional protocols (e.g., IPsec) for security. This adds complexity and is less cost-effective than a site-to-site VPN, which integrates encryption.

Why not VXLAN? Virtual Extensible LAN (VXLAN) is used for overlay networks in data centers to extend Layer 2 networks, not for secure site-to-site connectivity.

Why not Dedicated line? A dedicated line (e.g., leased line or MPLS) provides high reliability but is significantly more expensive due to the need for dedicated infrastructure.

VLAN hopping allows an attacker to send traffic into another VLAN without authorization, often by impersonating a switch and negotiating a trunk link. This lets the attacker traverse into normally inaccessible VLANs.

A. MAC flooding disrupts switch operations but does not cross VLANs.

B. DNS poisoning corrupts name resolution.

D. ARP spoofing reroutes local traffic but doesn’t grant VLAN traversal.

References (CompTIA Network+ N10-009):

Domain: Network Security — VLAN attacks, unauthorized lateral movement.