N10-009 Free Practice Questions — Page 8 (2026)

Question 67

Which of the following is the step that a troubleshooter should take immediately after implementing a solution?

A. Review lessons learned during the process.

B. Establish a plan of action.

C. Verify full system functionality.

D. Document actions and outcomes.

Show Answer

Correct Answer: C

Explanation:
In standard troubleshooting methodology (e.g., CompTIA), the step immediately after implementing a solution is to verify full system functionality to ensure the issue is resolved and no new problems were introduced. Documentation and lessons learned come afterward.

Question 68

Which of the following, in addition to a password, can be asked of a user for MFA?

A. PIN

B. Favorite color

C. Hard token

D. Mother’s maiden name

Show Answer

Correct Answer: C

Explanation:
MFA requires factors from different categories (something you know, have, or are). A hard token is something you have and can be used in addition to a password. The other options are knowledge-based and do not add a separate factor.

Question 69

A network engineer configures an application server so that it automatically adjusts resource allocation as demand changes. This server will host a new application and demand is not predictable. Which of the following concepts does this scenario demonstrate?

A. Scalability

B. Software as a service

C. Hybrid cloud

D. Elasticity

Show Answer

Correct Answer: D

Explanation:
The scenario describes automatic, real-time adjustment of resources as demand fluctuates and is unpredictable. This is the definition of elasticity, where computing resources scale up or down dynamically to match workload demand. Scalability refers more generally to the ability to grow, but not necessarily automatically or in real time.

Question 70

During a VoIP call, a user notices inconsistent audio and logs an incident ticket. A network administrator notices inconsistent delays in arrival of the RTP packets. Which of the following troubleshooting tools should the network administrator use to determine the issue?

A. Toner and probe

B. Protocol analyzer

C. Cable tester

D. Spectrum reader

Show Answer

Correct Answer: B

Explanation:
The problem describes inconsistent delays in RTP packet arrival, which is jitter affecting VoIP quality. A protocol analyzer (such as Wireshark) can capture RTP streams and analyze packet timing, delay variation, and packet loss, making it the correct tool for diagnosing this issue. Other tools focus on physical cabling or RF issues and cannot analyze packet-level timing.

Question 71

Which of the following is an example of a split-tunnel VPN?

A. Only public resources are accessed through the user’s internet connection.

B. Encrypted resources are accessed through separate tunnels.

C. All corporate and public resources are accessed through routing to on-site servers.

D. ACLs are used to balance network traffic through different connections.

Show Answer

Correct Answer: A

Explanation:
A split-tunnel VPN sends only selected traffic (typically corporate or private resources) through the VPN, while other traffic such as general internet access goes directly over the user’s local internet connection. Option A describes this behavior, whereas the other options describe full tunneling, multiple tunnels, or traffic management mechanisms unrelated to split tunneling.

Question 72

A government entity wants to implement technology that can block websites based on country code. Which of the following will best enable this requirement?

A. URL filtering

B. Content filtering

C. DNS poisoning

D. MAC filtering

Show Answer

Correct Answer: A

Explanation:
Blocking websites based on country code relies on identifying and filtering domain names or top-level domains (TLDs) such as .ru, .cn, or .uk. URL filtering is specifically designed to allow or deny access based on URLs, domain names, and TLDs, making it the best fit. Content filtering focuses on page content, DNS poisoning is an attack technique rather than a policy control, and MAC filtering controls device access, not website access.

Question 73

A company's VoIP phone connection is cutting in and out. A senior network engineer is recommending the implementation of a voice VLAN. Which of the following should be configured?

A. 802.1Q tagging

B. Jumbo frames

C. Native VLAN

D. Link aggregation

Show Answer

Correct Answer: A

Explanation:
A voice VLAN separates VoIP traffic from data traffic so it can be prioritized and protected from delay, jitter, and packet loss. To carry both the data VLAN and the voice VLAN on the same switch port (common with IP phones and attached PCs), IEEE 802.1Q tagging must be configured so frames are marked with the correct VLAN ID. The other options do not directly enable voice VLAN separation or prioritization.

Question 74

A network administrator needs to create a way to redirect a network resource that has been on the local network but is now hosted as a SaaS solution. Which of the following records should be used to accomplish the task?

A. TXT

B. AAA

C. PTR

D. CNAME

Show Answer

Correct Answer: D

Explanation:
A CNAME (Canonical Name) record creates an alias that redirects one hostname to another. This is ideal when a resource moves from an on‑premises server to a SaaS provider, because the original name can point to the SaaS-hosted domain without changing client configurations. TXT, AAA(A), and PTR records do not provide hostname redirection.

Question 75

An administrator needs to configure an IoT device with a /21 subnet mask, but the device will only accept dotted decimal notation. Which of the following subnet masks should the administrator use?

A. 255.255.224.0

B. 255.255.240.0

C. 255.255.248.0

D. 255.255.252.0

Show Answer

Correct Answer: C

Explanation:
A /21 subnet mask has 21 bits set to 1: 11111111.11111111.11111000.00000000. Converting to dotted decimal gives 255.255.248.0. The other options correspond to /19, /20, and /22 respectively.

Question 76

Which of the following tools uses ICMP to help determine whether a network host is reachable?

A. tcpdump

B. netstat

C. nslookup

D. ping

Show Answer

Correct Answer: D

Explanation:
The ping tool uses ICMP Echo Request and Echo Reply messages to test whether a remote host is reachable and responding on the network. The other options do not rely on ICMP for basic reachability testing.