CompTIA Updated N10-009 Exam Questions and Answers by aleena

Traffic analysis involves monitoring and inspecting network traffic flows to detect unusual patterns, such as a workstation sending large volumes of outbound SMTP (spam). This process enables identification of malware as the root cause.

B. Availability monitoring checks uptime but doesn’t diagnose spam traffic.

C. Baseline metrics show normal usage but don’t pinpoint infected hosts.

D. Network discovery identifies devices, not malicious traffic flows.

References (CompTIA Network+ N10-009):

Domain: Network Security — Traffic analysis, malware detection, identifying compromised hosts.

Network Address Translation (NAT) is a process that allows a device, typically a firewall or router, to map private IP addresses to public IP addresses. This enables internal network devices to communicate over the internet using a single or a limited number of public IP addresses.

Static NAT (One-to-One Mapping): Maps a single private IP address to a single public IP address, commonly used for servers that need to be accessible from the internet.

Dynamic NAT (Many-to-Many Mapping): Dynamically assigns a public IP from a pool to internal devices.

PAT (Port Address Translation): A type of NAT where multiple private IPs share a single public IP using different port numbers.

Incorrect Options:

B. VIP (Virtual IP Address): Used in load balancing and high-availability configurations, not for NAT.

C. PAT (Port Address Translation): A specific form of NAT, but the question refers to general NAT, making option A the best choice.

D. BGP (Border Gateway Protocol): A routing protocol used to exchange information between different networks, not related to NAT.

The correct solution is to configure the connecting ports as trunk ports. When connecting switches, the uplink ports must be configured to carry traffic for multiple VLANs (trunking), not just a single access VLAN. Without trunking, VLAN tags may be dropped, and traffic from hosts will not reach the rest of the network or internet.

B. STP cables is a misnomer — STP refers to Spanning Tree Protocol or Shielded Twisted Pair cables, neither of which solves this logical configuration issue.

C. PoE budget is irrelevant because switches and hosts in this context don’t require PoE.

D. Link aggregation (LACP, EtherChannel) is for increasing bandwidth/redundancy across multiple links, not required with a single cable.

By enabling trunking on the uplink ports, the switches can pass VLAN-tagged traffic, ensuring hosts connected to the new switch have access to the same resources as those on the existing switch.

References (CompTIA Network+ N10-009):

Domain: Network Troubleshooting — VLAN trunking, inter-switch connectivity.

The correct answer is Load balancer because it is specifically designed to distribute incoming network traffic across multiple backend servers that provide the same application or service. According to CompTIA Network+ (N10-009) objectives under network infrastructure, load balancing improves performance, scalability, and high availability by preventing any single server from becoming overwhelmed.

A load balancer can operate at Layer 4 (transport layer, based on IP address and port) or Layer 7 (application layer, based on content such as HTTP headers or URLs). It uses various algorithms such as round-robin, least connections, or weighted distribution to efficiently allocate client requests among servers. If one server fails, the load balancer can redirect traffic to healthy servers, ensuring service continuity.

A router (Option A) forwards packets between different networks but does not distribute traffic among servers running the same application. A switch (Option B) forwards frames within a local network based on MAC addresses. A firewall (Option C) filters traffic based on security rules but does not perform traffic distribution for load-sharing purposes.

Therefore, a load balancer is the correct solution for redistributing traffic among multiple servers.