CompTIA Updated N10-009 Exam Questions and Answers by nala

Twinaxial (Direct Attach Copper / DAC) cables can plug directly into QSFP ports without needing separate optical transceivers. They are cost-effective for short-distance, high-speed connections (commonly in data centers).

A. Multimode fiber requires SFP/QSFP transceivers to convert electrical signals to optical.

C. RG11 is coaxial cable for broadband/cable TV, not used in QSFP ports.

D. Category 6 is twisted-pair Ethernet cabling, not directly compatible with QSFP ports.

References (CompTIA Network+ N10-009):

Domain: Network Infrastructure — Cable types, QSFP, DAC (Twinaxial), transceiver requirements.

Full duplex mode allows devices to send and receive data simultaneously, improving network performance and reducing congestion, which is critical for VoIP and video conferencing.

Breakdown of Options:

A. A VLAN with 100Mbps speed limits – VLANs segment traffic but limiting speeds to 100Mbps would worsen video performance.

B. An IP helper to direct VoIP traffic – IP helper is used for DHCP relay, not for VoIP optimization.

C. A smaller subnet mask – A smaller subnet reduces IP address availability but does not improve network performance.

D. Full duplex on all user ports – Correct answer. Full duplex eliminates collisions, allowing better VoIP and video performance.

Content filtering blocks access to restricted or malicious websites. When a user attempts to visit a site that violates company policies, they are redirected to a restriction page.

This is a common security measure to prevent employees from accessing phishing or malware-infected sites.

Content filters work by scanning URLs, keywords, or categories and blocking inappropriate or harmful content.

Option A (DLP - Data Loss Prevention): Focuses on preventing sensitive data leaks rather than blocking web access.

Option B (Captive portal): Used mainly in public Wi-Fi to authenticate users before granting access, not to restrict sites.

Option D (DNS sinkholing): Redirects malicious domain requests to a safe address but is not responsible for policy-based restrictions on general content.

? Reference: CompTIA Network+ (N10-009) Official Study Guide – Section: Security Solutions

802.1X is a port-based Network Access Control (NAC) method that enforces authentication before allowing access to the network. It uses a RADIUS server for identity verification and policy enforcement, ensuring only authorized users/devices gain access.

A. Standard ACL filters traffic by IP, not identity.

B. MAC filtering controls devices by hardware address but can be spoofed.

D. SSO (Single Sign-On) provides user convenience across services, not network-level access control.

References (CompTIA Network+ N10-009):

Domain: Network Security — NAC, 802.1X authentication, identity-based access.