CompTIA Network+ Practice Test (N10-009)

The mesh topology is the most suitable because it provides each node in the network with a point-to-point connection to every other node. This design offers high fault tolerance and handles high traffic volumes efficiently by providing multiple pathways for data. The complexity and cost of cabling and maintenance are higher in a mesh topology compared to others, which is acceptable in scenarios where setup and maintenance costs are not prime concerns. Star topology, while popular for its simplicity, does not offer the same level of fault tolerance as mesh because each node connects to a central hub, creating a single point of failure. Spine and leaf architecture offers scalability and is used in data centers rather than general enterprise networks that prioritize fault tolerance. Point to point is best suited for small and direct connections and does not scale well.

Encapsulating Security Payload (ESP) is used within IPsec to provide confidentiality, along with integrity and authentication of the data. It encrypts the payload data and optional header to ensure that sensitive information remains confidential when sent over an insecure network. The other options do not specifically address data confidentiality. Authentication Header (AH) provides authenticity and integrity but does not encrypt data, thus does not guarantee confidentiality of the communication. Full-duplex transmission relates to the direction data can travel in a network and does not pertain to data confidentiality or encryption.

Switchport security configuration that disallows automatic trunking is an effective method to prevent VLAN hopping. By setting the switchport mode to 'access', it restricts the port to belong to a single VLAN and does not negotiate trunking. This control measure ensures that an attacker cannot exploit the automatic trunk configuration to perform VLAN hopping. Other options do not directly prevent VLAN hopping; port security and MAC filtering secure access at different layers but do not specifically restrict trunk formation which is how VLAN hopping is typically exploited.

The correct answer is '5 GHz'. This frequency band is less congested than the 2.4 GHz band and generally offers better performance in environments with many existing wireless networks. The 5 GHz band also supports a larger number of non-overlapping channels, which reduces the risk of interference. The other options, while they are valid frequency bands, would not be optimal. The 2.4 GHz is already noted as congested, and the technician is looking to avoid interference. The 3.6 GHz and 7 GHz band is not used by WiFi devices.

Configuring all user-access ports to fixed configurations via the switchport access vlan command effectively secures network switches against unauthorized inter-segment traffic manipulation, such as VLAN hopping. This technique reduces the chance of exploitation by forcing each port to carry traffic for a specified VLAN only, not allowing dynamic changes that could permit unauthorized access. In contrast, using the switchport nonegotiate command or dynamic VLAN assignments does not specifically aim at preventing this manipulation and thus is less effective in securing the switches adequately. Setting unused ports to a blackhole VLAN is a good security practice but does not directly prevent unauthorized inter-segment traffic manipulation.

Applying QoS policies to prioritize traffic ensures that critical applications, such as video conferencing, are given the required bandwidth even during high traffic periods. This is crucial for maintaining the quality and reliability of the video conferencing, which may be sensitive to bandwidth fluctuations. On the other hand, increasing bandwidth would not prioritize the specific needs of various types of traffic, traffic shaping alone might delay some packets to reduce burstiness without ensuring bandwidth availability, and traffic policing would limit the rate of traffic, potentially dropping packets when the bandwidth cap is exceeded.

A VLAN allows a network manager to logically segment a LAN into different broadcast domains. Since VLANs provide separation between devices, they effectively control broadcasts and increase the security by limiting who can see traffic on the VLAN. They're not primarily focused on encryption or linking devices but rather on segmenting a larger network into more manageable pieces.

Playbooks, in the context of Infrastructure as Code, allow network administrators to automate and reapply configurations across multiple devices efficiently. They are designed to execute a series of tasks, making them ideal for scalable and repetitive deployment scenarios. Other options, although useful in network management, do not directly align with the need for repeatable task automation in the same way that playbooks do.

Using an Optical Power Meter is the most accurate and direct method to measure the strength of the light signal in a fiber optic cable, providing quantifiable data on how much signal loss occurs between transmitter and receiver. Strength testers or adjusting wavelengths, although related to managing signal strength, do not provide specific measurements needed to diagnose issues and identify potential losses. Ensuring hardware compatibility relates to initial configuration rather than troubleshooting an existing problem.

The primary purpose of traceroute is to determine the path packets take to reach a specific destination across a network. It provides information on each point the packet touches, assisting in identifying issues like network latency and bottlenecks. The other answers either don't reflect the core function of traceroute or are unrelated to what the tool accomplishes.

MAC filtering is the correct method for controlling network access based on the hardware addresses (MAC addresses) of devices. This system allows the administrator to define a list of MAC addresses that are authorized to connect to the network, preventing unauthorized devices from accessing network resources, thereby offering a basic layer of security. Using IP addresses alone would not be as effective for this layer of network access control, since IP addresses can be dynamically assigned and may change. Modifying DNS settings impacts how domain names are resolved into IP addresses and does not control network access. Implementing an internal firewall is generally used to control traffic between different segments of the network and doesn't prevent unauthorized devices from connecting to the network.

The ARP cache shows the mapping between IP addresses and MAC addresses, making it the correct method to verify if a workstation's IP address correctly correlates to its hardware address. The command arp -a specifically displays these mappings.

Using shutdown /clear /force would restart the device but doesn't provide the IP-to-MAC correlation.

Examining the routing table with show ip route only shows paths between networks, not the local IP-to-MAC relationships.

ipconfig (or ifconfig on Linux) only shows local interface settings, but not the IP-to-MAC mappings needed to verify the ARP relationship.

Tunneling is a method used to encapsulate IPv6 packets within IPv4 packets to allow IPv6 packets to be sent over IPv4 networks. This mechanism is essential for the coexistence of new and existing network infrastructures during the transition period from IPv4 to IPv6. Dual stack involves running IPv4 and IPv6 in parallel on the same device and does not describe encapsulation through an IPv4 network. VLAN is a completely different technology used to segment networks into smaller parts within a Layer 2 network and does not facilitate IPv6 to IPv4 communication.

Honeynets are networks of honeypots designed to mimic legitimate systems to attract and analyze malicious activities, but they do not function as direct network perimeter security measures such as firewalls or intrusion prevention systems that filter traffic. Their main role is in research and understanding attack methodologies, not in actively blocking or filtering traffic.

Encapsulating protocols for tunneling across diverse networks is the primary application of GRE, making it useful for creating virtual point-to-point links over an IP internetwork. It enables the encapsulation of packets from one protocol suite within the datagram encapsulations of another protocol suite, facilitating connectivity across heterogeneous networks.