N10-009 Free Practice Questions — Page 27 (2026)

Question 262

Which of the following dynamic routing protocols is used on the internet?

A. EIGRP

B. BGP

C. RIP

D. OSPF

Show Answer

Correct Answer: B

Explanation:
BGP (Border Gateway Protocol) is the inter-domain routing protocol used to exchange routing information between autonomous systems across the public Internet. EIGRP, RIP, and OSPF are interior gateway protocols primarily used within a single autonomous system.

Question 263

A technician is implementing a new SD-VVAN device with a default configuration. The technician receives a URL via email and connects the new device to the internet to complete the installation. Which of the following is this an example of?

A. SASE device installation

B. Zero-touch provisioning

C. Infrastructure as code

D. Configuration management

Show Answer

Correct Answer: B

Explanation:
This describes zero-touch provisioning (ZTP): a new device with a default configuration is connected to the internet, contacts a provisioning service (often via a provided URL or cloud onboarding process), and automatically downloads and applies its configuration without manual setup. SASE is a security/network architecture, infrastructure as code manages infrastructure through code, and configuration management refers more broadly to maintaining configurations rather than the initial automated onboarding.

Question 264

Which of the following would allow a network administrator to remotely access a secure subnet from a shared, secure workstation?

A. Enable SSH through the firewall.

B. Dial into an in-band modem.

C. Connect through a jump host.

D. Configure a site-to-site VPN.

Show Answer

Correct Answer: C

Explanation:
A jump host (jump server or bastion host) is specifically designed to provide controlled, audited remote administrative access into a secure subnet from another network or shared workstation. Enabling SSH through a firewall exposes direct access rather than mediating it, an in-band modem is outdated and less secure, and a site-to-site VPN connects networks rather than providing controlled administrator access from a workstation.

Question 265

Which of the following kinds of targeted attacks uses multiple computers or bots to request the same resource repeatedly?

A. On-path

B. DDoS

C. ARP spoofing

D. MAC flooding

Show Answer

Correct Answer: B

Explanation:
A Distributed Denial of Service (DDoS) attack uses many compromised computers or bots to repeatedly send requests to a target resource, overwhelming it and denying service to legitimate users. On-path attacks intercept communications, ARP spoofing poisons ARP caches, and MAC flooding targets switch CAM tables rather than repeatedly requesting the same resource.

Question 266

Which of the following is the most cost-effective way to safely expand outlet capacity in an IDF?

A. PDU

B. Surge protector

C. UPS

D. Power strip

Show Answer

Correct Answer: A

Explanation:
A power distribution unit (PDU) is designed to safely distribute power to multiple rack-mounted devices in network closets and IDFs, making it the appropriate and cost-effective way to expand outlet capacity. A surge protector primarily adds surge protection, a UPS adds battery backup at higher cost, and a basic power strip is generally not the appropriate choice for critical IT infrastructure.

Question 267

A network administrator is creating a subnet that will include 45 separate hosts on a small private network within a large network architecture. Which of the following options is the most efficient use of network addresses when assigning this network?

A. 10.0.50.128/25

B. 10.7.142.128/27

C. 10.152.4.192/26

D. 10.192.1.64/28

Show Answer

Correct Answer: C

Explanation:
A subnet supporting 45 hosts requires at least 47 addresses (including network and broadcast). A /26 provides 64 total addresses, 62 usable, making it the smallest subnet that fits. A /25 is larger than necessary, while /27 (30 usable) and /28 (14 usable) are too small.

Question 268

A network technician is troubleshooting an issue between a web server and computers within a LAN. The technician needs to gather information about the IP addresses, protocols, and content of the traffic. Which of the following will best help the technician troubleshoot the issue?

A. Flow data

B. SNMP traps

C. Packet capture

D. Server logs

Show Answer

Correct Answer: C

Explanation:
Packet capture provides detailed visibility into network traffic, including source and destination IP addresses, protocols, headers, and packet payload/content (where not encrypted). This makes it the most effective tool for troubleshooting communication between a web server and LAN clients. Flow data summarizes conversations without payloads, SNMP traps report device events rather than traffic details, and server logs only show server-side events rather than full network exchanges.

Question 269

Which of the following layers in the OSI model is responsible for establishing, maintaining, and terminating connections between nodes?

A. Physical

B. Network

C. Session

D. Transport

Show Answer

Correct Answer: C

Explanation:
The Session layer (Layer 5) of the OSI model is responsible for establishing, managing, and terminating sessions between communicating applications. The Transport layer provides end-to-end data transport and reliability, but session establishment and management are OSI Session layer functions.

Question 270

Which of the following protocols is commonly associated with TCP port 443?

A. Telnet

B. SMTP

C. HTTPS

D. SNMP

Show Answer

Correct Answer: C

Explanation:
TCP port 443 is the standard port for HTTPS, which provides encrypted HTTP communication using TLS/SSL. Telnet typically uses port 23, SMTP uses port 25 (or 587/465 for submission), and SNMP commonly uses ports 161/162.

Question 271

A network engineer configures the network settings in a new server as follows: IP address = 192.168.1.15 - Subnet mask = 255.255.255.0 - Gateway = 192.168.1.255 - The server can reach other hosts on the same subnet successfully, but it cannot reach hosts on different subnets. Which of the following is most likely configured incorrectly?

A. Subnet mask

B. Gateway

C. Default route

D. IP address

Show Answer

Correct Answer: B

Explanation:
The configured gateway (192.168.1.255) is the broadcast address for the 192.168.1.0/24 subnet, not a valid host address. Devices can still communicate with hosts on the local subnet using ARP, but traffic destined for other subnets requires a valid default gateway. The IP address and subnet mask are consistent for the subnet, so the incorrect gateway is the cause.