CompTIA Updated N10-009 Exam Questions and Answers by yusha

Shoulder surfing is a social engineering attack where attackers observe someone’s private information by looking over their shoulder or using tools like cameras to capture input.

From Andrew Ramdayal’s guide:

“Shoulder surfing is the act of watching someone enter confidential information, such as PINs or passwords, often using direct line-of-sight or surveillance equipment.”

The correct answer is The port ' s VLAN assignment on the switch because the symptoms indicate a Layer 2 segmentation issue. According to CompTIA Network+ (N10-009) troubleshooting methodology and VLAN concepts, if the IP configuration is correct and the TCP/IP stack is functioning, but the default gateway is unreachable, the issue often involves improper VLAN configuration.

In a switched environment, devices must be assigned to the correct VLAN to communicate with the appropriate default gateway interface (often configured on a router or Layer 3 switch). If the user’s switch port is assigned to the wrong VLAN, the workstation may have a valid IP address but will not be able to reach the gateway because it is logically separated into a different broadcast domain.

Option A is unlikely since the IP configuration is already confirmed correct. Option C is not relevant because the issue is localized to a specific user, not a widespread DHCP failure. Option D refers to switch management configuration, which does not affect user traffic routing to the gateway.

Therefore, verifying the switch port’s VLAN assignment is the most appropriate next troubleshooting step.

The correct metric is RTO (Recovery Time Objective). RTO defines the maximum acceptable time to restore services after a disruption, ensuring business continuity. For example, if the RTO is 4 hours, systems must be back online within that timeframe after an outage.

B. MTBF (Mean Time Between Failures) measures reliability by calculating the average time between hardware failures.

C. RPO (Recovery Point Objective) defines how much data loss (in terms of time, such as last backup point) is acceptable.

D. MTTR (Mean Time to Repair) measures the average time taken to fix a failure but is not a predefined business requirement like RTO.

Organizations define RTOs during disaster recovery planning to align IT recovery capabilities with business needs.

References (CompTIA Network+ N10-009):

Domain: Networking Concepts — Business continuity metrics (RTO, RPO, MTBF, MTTR).

A golden configuration is a baseline configuration file that contains approved, standardized settings for network devices. The purpose is to ensure configuration consistency across the environment. This prevents misconfigurations, supports compliance with organizational or regulatory standards, and accelerates recovery if a device needs reconfiguration.

B. Reducing file size is not the goal of golden configs.

C. Golden configs can include security settings, but they are not inherently encrypted — they are simply a baseline template.

D. While configs can be backed up, golden configs are more about standardization, not device-specific backups.

By maintaining a golden configuration, administrators can quickly detect unauthorized changes (by comparing running configs against the golden file) and enforce consistency across devices. This improves network stability, reduces troubleshooting complexity, and enhances security posture.

References (CompTIA Network+ N10-009):

Domain: Network Operations — Configuration management, golden images/configurations.