CompTIA Updated N10-009 Exam Questions and Answers by aleena

LDAP (Lightweight Directory Access Protocol) uses port 389 for standard connections and port 636 for LDAP over SSL (LDAPS), which secures directory service communication.

Breakdown of Options:

A. 22 – SSH port, not used for directory services.

B. 389 – Used for LDAP, but not encrypted.

C. 445 – Used for SMB file sharing, not LDAP.

D. 636 – Correct answer. LDAPS (LDAP over SSL/TLS) secures directory authentication.

ESP (Encapsulating Security Payload) is an IPsec protocol that provides encryption, integrity, and authentication for data inside a VPN tunnel. It ensures that all tunneled traffic is encrypted.

B. SSH secures remote terminal sessions, not site-to-site VPN tunnels.

C. GRE (Generic Routing Encapsulation) provides encapsulation but does not encrypt data.

D. IKE (Internet Key Exchange) negotiates keys and establishes the IPsec tunnel but does not encrypt the payload itself.

References (CompTIA Network+ N10-009):

Domain: Network Security — VPN protocols, IPsec (AH vs. ESP), encryption in transit.

SSO (Single Sign-On) allows an organization to use an identity provider (IdP) to centrally manage authentication and access across multiple SaaS applications. In the Network+ (N10-009) objectives, identity and access management concepts include federated authentication, centralized account control, and reducing password sprawl. With SSO, users authenticate once to the IdP, and the IdP then provides assertions/tokens to SaaS services (commonly using federation standards such as SAML or OIDC in real environments). This improves security (fewer reused passwords, easier MFA enforcement), streamlines user experience, and simplifies administration (provisioning/deprovisioning from one place).

PKI supports certificates and encryption/signing, but it is not the core mechanism for managing access across many SaaS apps via an IdP. TACACS+ is typically used for device administration (AAA) on network equipment, and RADIUS commonly supports network access (802.1X, VPN) AAA—both are important AAA protocols but do not describe the SaaS-wide “one login across many apps” capability. Therefore, SSO is the best answer.

===========

The MPO (Multi-fiber Push On) connector is designed to handle multiple fiber strands in a single connector, and it is commonly used with high-density transceivers like QSFP (Quad Small Form-factor Pluggable).

QSFP can support up to four channels (hence "quad"), and MPO connectors can interface multiple fibers (e.g., 8, 12, 24), making them ideal for 40Gbps or 100Gbps deployments.

RJ45 (A) is used for Ethernet over copper.

ST (B) and LC (C) are single-fiber connectors — they don't support the multi-fiber needs of QSFP setups.

✅ Therefore, MPO is the correct connector type for this use case.