Free N10-009 practice test: 30 questions with answers

An unknown unicast frame is flooded to all other ports in the VLAN so the destination can respond and the switch can learn its location. Dropping, gateway-only forwarding, and returning frames are not default switch behaviour.

The network layer handles logical addressing such as IP and routing between networks. Layer 2 handles MAC addressing on a local link, layer 4 handles end-to-end transport, and layer 7 provides application services.

A /26 has 6 host bits, giving 64 addresses, minus the network and broadcast addresses, which leaves 62 usable hosts. The other counts ignore the reserved addresses or use the wrong host-bit count.

10.0.0.0/8 is private under RFC 1918, so 10.20.30.40 is private. 8.8.8.8 is public, 169.254.0.0/16 is link-local, and 203.0.113.0/24 is a documentation range.

TCP provides reliable, ordered delivery using acknowledgments and retransmission. UDP is connectionless and unreliable, ICMP carries control messages, and ARP resolves IP addresses to MAC addresses.

HTTPS uses TCP port 443 for encrypted web traffic. HTTP uses port 80, DNS uses port 53, and SMTP uses port 25 or submission ports, so the other pairings are incorrect.

Allowing only the specific traffic needed applies least privilege, which limits exposure. Full access, open-by-default rules, and broadcast flooding are contrary to this principle.

A stateful firewall tracks connection state and allows return traffic for established sessions. Stateless filters evaluate packets individually, a proxy handles application requests, and a hub has no filtering.

An IPS inspects traffic against signatures and behaviour and can block attacks in-line. DHCP servers assign addresses, DNS forwarders resolve names, and load balancers distribute traffic.

Zero trust network access evaluates identity and device posture for each access request. Open VPN with no checks, shared admin passwords, and public Wi-Fi do not provide that control.

A DoS attack overwhelms a service so legitimate users cannot use it. Phishing tricks users into giving data, shoulder surfing watches credentials, and tailgating gains physical entry.

A man-in-the-middle attack intercepts or alters traffic between two parties. Port scanning maps services, brute-force attacks guess passwords, and rootkits hide malware.

If local traffic works but external does not, the default gateway is a common cause. Monitor brightness, keyboard layout, and printer drivers are unrelated to routing.

Addresses in 169.254.0.0/16 are self-assigned when DHCP fails. They do not indicate internet connectivity, static public addressing, or server roles.

Name resolution is a DNS function, so a failure to resolve names while IP access works points to DNS. DHCP assigns addresses, NTP handles time, and SNMP manages devices.

ipconfig /all displays detailed IP configuration, including gateway and DNS settings. The other commands perform different functions or are not configuration displays.

arp -a displays the ARP cache, which maps IP addresses to MAC addresses on the local network. Nslookup resolves names, tracert shows hops, and netstat shows connections.

A cable tester checks continuity, wiring, and faults in copper cables. Protocol analyzers inspect traffic, spectrum analyzers examine radio frequencies, and multimeters measure electrical values.

Network diagrams and cable maps show physical and logical connections, which are essential for troubleshooting. Sales reports, rotas, and licence sheets do not show connections.

NTP synchronizes device clocks, which matters for accurate log correlation. TFTP transfers files, SNMP traps report events, and PPP is a point-to-point encapsulation protocol.

SNMP lets managers poll devices and receive traps for status and performance data. DHCP assigns addresses, DNS resolves names, and ARP maps addresses on a local network.

Central backups with restoration tests protect against device failure and confirm that recovery works. Single copies, discarded printouts, and memory do not provide reliable recovery.

Change management is the process of reviewing, approving, scheduling, and documenting changes to reduce risk. Packet capture, subnetting, and port mirroring are technical tasks.

Flow monitoring summarizes traffic patterns and top talkers without the storage burden of full capture. Full capture is heavy, printing logs is impractical, and disabling monitoring removes visibility.

An IPsec VPN encrypts traffic across the internet between sites. Unencrypted tunnels provide no confidentiality, Wi-Fi bridging is local, and a serial console is for management.

OSPF is a link-state interior gateway protocol that computes shortest paths using Dijkstra's algorithm. BGP is an exterior protocol, RIP is distance-vector, and static routing is not a dynamic protocol.

BGP is the exterior gateway protocol used between autonomous systems. OSPF and RIP are interior protocols, and EIGRP is designed for use within an enterprise.

NAT overload maps many private addresses to one public address using ports. DHCP snooping filters DHCP traffic, VLAN tagging separates broadcast domains, and spanning tree prevents loops.

WPA3 is the modern Wi-Fi security standard, with stronger protections than earlier options. WEP is obsolete and insecure, WPS is a setup feature with known weaknesses, and open authentication has no encryption.

Multiple APs with planned overlap and sensible channel and power settings provide coverage and roaming. A single AP, maximum power on one device, and disabled roaming do not meet the requirement.