Exactprep N10-009 Questions

The user’s inability to access the marketing department’s shared drives, despite having internet access, suggests a network segmentation issue. The most likely cause is an incorrect VLAN assignment. The computer is physically located on the accounting department floor, and the switchport is likely configured for the accounting VLAN, not the marketing VLAN. VLANs segment network traffic, and if the computer is in the wrong VLAN, it cannot communicate with the marketing department’s resources.

Why not Mismatched switchport duplex? Duplex mismatches cause performance issues (e.g., packet loss) but not specific access denials to shared drives.

Why not Misconfigured gateway settings? Incorrect gateway settings would prevent internet access, which the user has.

Why not SVI is assigned to the wrong IP address? A Switch Virtual Interface (SVI) with an incorrect IP address affects inter-VLAN routing, but this would likely impact multiple users, not just one.

NAT (Network Address Translation) allows multiple private IP addresses to share a single public IP when accessing the internet. This conserves public IPs and provides basic security by hiding internal addresses.

B. BGP is a routing protocol.

C. OSPF is a link-state IGP.

D. FHRP provides redundant gateways, not IP sharing.

References (CompTIA Network+ N10-009):

Domain: Networking Concepts — NAT, PAT, private-to-public IP mapping.

Comprehensive and Detailed Explanation (paraphrased, aligned to N10-009):

An evil twin is a malicious wireless access point that impersonates a legitimate SSID. Once victims connect, the attacker can intercept and manipulate traffic, performing an on-path (man-in-the-middle) attack—capturing credentials, injecting content, or downgrading encryption.

B. DDoS overwhelms services with traffic; it’s not the typical follow-on from clients joining a rogue AP.

C. ARP spoofing is another way to become on-path on wired segments, but with an evil twin, the wireless association itself enables the on-path position.

D. Phishing is social engineering; while an evil twin could be used to present fake portals, the primary technical posture after connection is on-path.

References (CompTIA Network+ N10-009):

Domain: Network Security — Wireless threats (rogue APs/evil twins), traffic interception, on-path attacks.

===========

When dealing with troubleshooting and change management, the plan of action outlines the steps, risks, and mitigation strategies. A change advisory board (CAB) uses this documented plan to decide whether to approve the change.

A. Identify the problem is the first step in troubleshooting, not decision-making for CAB.

B. Develop a theory is diagnostic work, not planning.

C. Test the theory confirms causes but doesn’t provide actionable planning information.

References (CompTIA Network+ N10-009):

Domain: Network Operations — Change management, troubleshooting methodology, CAB processes.