CompTIA Network+ N10-009 Updated Exam

BYOD (Bring Your Own Device) policies define rules for using personal devices on the company network. Since the new employee is using a personal laptop, this policy applies.

Breakdown of Options:

A. IAM (Identity and Access Management) – Governs user permissions, not device policies.

B. BYOD (Bring Your Own Device) – ✅ Correct answer. Covers using personal devices for work.

C. DLP (Data Loss Prevention) – Focuses on preventing sensitive data leaks, not device usage policies.

D. AUP (Acceptable Use Policy) – Covers internet and system usage, but not personal device rules.

Network Functions Virtualization (NFV): NFV is a technology that virtualizes network services like routing, firewalls, and load balancers. It allows these services to run on virtual machines rather than requiring dedicated hardware. This is ideal for remote branch locations where deploying physical devices is costly and complex.

VRF (B): Virtual Routing and Forwarding is used for segmenting routing tables but does not virtualize services.

VLAN (C): Virtual Local Area Networks help segregate broadcast domains but are unrelated to virtualizing network functions.

VPC (D): Virtual Private Cloud is used for cloud computing but does not pertain to virtualizing network services.

Multi-factor authentication (MFA) requires two or more different categories of authentication factors:

Something you know (password, PIN)

Something you have (smart card, hardware token)

Something you are (biometric)

The only valid second factor here is a hard token (e.g., a key fob generating one-time codes).

A. PIN is still “something you know,” the same category as a password.

B. Favorite color is a weak knowledge-based factor, not a true second factor.

D. Mother’s maiden name is also “something you know” and insecure.

References (CompTIA Network+ N10-009):

Domain: Network Security — Authentication methods, MFA factor categories.

The correct answer is B. PAT. Port Address Translation allows many internal devices that use private IP addresses to share a small number of public IP addresses when accessing the internet. In this case, the question says all users can access the internet using only two public IPs, which is exactly the kind of situation PAT is designed for. The device performing PAT keeps track of each connection by using source port numbers, so multiple internal sessions can be translated and maintained at the same time without requiring a unique public IP for every user.

The other options do not match this function. EIGRP and BGP are routing protocols used to exchange routing information, not to translate addresses for outbound internet traffic. VIP refers to a virtual IP address, commonly used in high availability or load-balancing scenarios, but it does not provide the many-to-one address translation behavior described in the question.

For Network+ exam purposes, when the scenario talks about conserving public IPv4 addresses and allowing many users to reach external networks through a very small number of public IPs, the expected answer is PAT. This is one of the most common real-world uses of NAT technology at the network edge.