CompTIA Network+ Practice Questions: Security (N10-009)

Question 1

What does DHCP Snooping help prevent?

Accepted Answer

Rogue DHCP servers

Answer

ARP spoofing

Answer

DDoS attacks

Answer

DNS poisoning

Question 2

Which firewall type operates at Layer 7 of the OSI model?

Accepted Answer

Proxy

Answer

Packet-filtering

Answer

Stateful

Answer

NAT

Question 3

What is the primary purpose of 802.1X authentication?

Accepted Answer

Provide port-based network access control

Answer

Encrypt wireless traffic

Answer

Assign IP addresses

Answer

Filter MAC addresses

Question 4

Which security concept uses deception techniques to detect attackers?

Accepted Answer

Honeypot

Answer

VLAN hopping

Answer

MAC filtering

Answer

Port security

Question 5

A network administrator wants to implement a security measure that inspects network traffic content and blocks known malware signatures. Which type of device is BEST suited for this?

Accepted Answer

Next-Generation Firewall (NGFW) / UTM

Answer

Layer 2 Switch

Answer

Router

Answer

VPN Concentrator

Question 6

A company wants to provide secure remote access for its employees to the corporate network. Which technology is commonly used for this purpose?

Accepted Answer

VPN

Answer

VLAN

Answer

NAT

Answer

DMZ

Question 7

Which of the following is an example of a denial-of-service (DoS) attack?

Accepted Answer

Sending a flood of requests to a server to overwhelm it.

Answer

Intercepting and modifying data in transit.

Answer

Guessing a user's password through repeated attempts.

Answer

Installing malware that steals sensitive information.

Question 8

Which of the following is a common use case for a DMZ (Demilitarized Zone) in a network architecture?

Accepted Answer

To place publicly accessible servers, like web or email servers.

Answer

To host internal file servers containing sensitive company data.

Answer

To segment IoT devices from the corporate LAN.

Answer

To create a highly secure area for domain controllers.

Question 9

A company is experiencing slow internet performance. A network technician checks the firewall logs and notices a very high number of connection attempts from a single external IP address to multiple ports on their web server. This is MOST likely an indication of what?

Accepted Answer

A port scanning attack.

Answer

A misconfigured DNS server.

Answer

An IP address conflict.

Answer

A broadcast storm on the internal network.

CompTIA Network+ Practice Questions: Security

Q1. What does DHCP Snooping help prevent?

Q2. Which firewall type operates at Layer 7 of the OSI model?

Q3. What is the primary purpose of 802.1X authentication?

Q4. Which security concept uses deception techniques to detect attackers?

Q5. A network administrator wants to implement a security measure that inspects network traffic content and blocks known malware signatures. Which type of device is BEST suited for this?

Q6. A company wants to provide secure remote access for its employees to the corporate network. Which technology is commonly used for this purpose?

Q7. Which of the following is an example of a denial-of-service (DoS) attack?

Q8. Which of the following is a common use case for a DMZ (Demilitarized Zone) in a network architecture?

Q9. A company is experiencing slow internet performance. A network technician checks the firewall logs and notices a very high number of connection attempts from a single external IP address to multiple ports on their web server. This is MOST likely an indication of what?

More CompTIA Network+ practice topics