CompTIA Updated N10-009 Exam Questions and Answers by moshe

The correct answer is D. DHCP reservation. In a network environment, printers are typically configured to use a consistent IP address so that client devices can reliably locate them. After a power outage, network devices such as printers may reboot and request a new IP address from the DHCP server. If the printer was previously assigned a dynamic IP address, it may now receive a different address, causing users’ systems to lose connectivity because they are still trying to print to the old IP.

A DHCP reservation ensures that a specific device (identified by its MAC address) always receives the same IP address from the DHCP server. This combines the convenience of DHCP with the stability of static addressing, which is ideal for shared resources like printers.

The other options are incorrect for this scenario. DoH (DNS over HTTPS) secures DNS queries and is unrelated to IP address assignment. SLAAC (Stateless Address Autoconfiguration) is used for IPv6, not IPv4 environments. APIPA (Automatic Private IP Addressing) assigns a link-local address when DHCP fails, but it does not provide consistent or routable addressing suitable for shared printers.

Therefore, configuring a DHCP reservation ensures consistent network access to the printer after power disruptions.

Definition of MAC Flooding:

MAC flooding is an attack where a malicious actor sends numerous fake MAC addresses to a switch, overwhelming its CAM table. The CAM table stores MAC addresses and their associated ports for efficient traffic forwarding.

Impact of MAC Flooding:

CAM Table Overflow: When the CAM table is full, the switch cannot learn new MAC addresses and is forced to broadcast traffic to all ports, leading to a degraded network performance and potential data interception.

Switch Behavior: The switch operates in a fail-open mode, treating the network as a hub, which can be exploited for eavesdropping on traffic.

Comparison with Other Attacks:

ARP Spoofing: Involves sending false ARP (Address Resolution Protocol) messages to associate the attacker ' s MAC address with the IP address of another device.

Evil Twin: Involves creating a rogue wireless access point that mimics a legitimate one to intercept data.

DNS Poisoning: Involves corrupting the DNS cache with false information to redirect traffic to malicious sites.

Preventive Measures:

Port Security: Configure port security on switches to limit the number of MAC addresses per port, preventing CAM table overflow.

Network Segmentation: Use VLANs to segment network traffic and limit the impact of such attacks.

OSPF (Open Shortest Path First) is a link-state routing protocol that uses the Dijkstra algorithm, also known as the shortest path first (SPF) algorithm, to determine the most efficient routes.

From Andrew Ramdayal’s guide:

“OSPF is a link-state routing protocol that provides fast, efficient path selection using the shortest path first (SPF) algorithm.”

802.1Q tagging, also known as VLAN tagging, is used to identify VLANs on a trunk link between switches. This allows the switches to transfer data for multiple VLANs (or networks) over a single physical connection. This method ensures that traffic from different VLANs is properly separated and managed across the network.References: CompTIA Network+ study materials.