N10-009 Exam Dumps - CompTIA Network+ Certification Exam

Switch 1

spanning-tree vlan 10 root primary

spanning-tree vlan 20 root secondary

Switch 2

spanning-tree vlan 20 root primary

spanning-tree vlan 10 root secondary

This PBQ is pointing to a switching loop / MAC flapping problem. The biggest clues are the high CPU utilization and the fact that the MAC table is continuously changing. That behavior is classic for a Layer 2 loop when redundant links exist between switches and no proper spanning-tree root role has been established.

The available commands shown in the screenshots are limited to spanning-tree vlan, so this is not an interface shutdown question. The fix is to use STP per VLAN and make one switch the preferred root for one VLAN and the other switch the preferred root for the other VLAN. That prevents both uplinks from forwarding in an uncontrolled loop while still giving redundancy.

A clean design is:

Switch 1 root primary for VLAN 10

Switch 2 root primary for VLAN 20

Make each opposite switch root secondary for failover

That stabilizes Layer 2 forwarding, stops MAC address flapping, reduces CPU load, and restores normal connectivity. After applying the STP root settings, the user should be able to ping 192.168.1.31 from PC 1 successfully. If your simulator asks for validation, run the ping again from PC 1 to the database server.

A jump box is a hardened, isolated system that provides secure access to critical infrastructure devices like routers and firewalls.

Tailgating is a physical security breach where someone follows an authorized person into a restricted area without proper credentials. Once inside, the attacker can install rogue devices like unauthorized APs.

A. Evil twin is a wireless attack where an attacker sets up a fake AP.

B. Honeytrap is used to attract attackers for analysis.

C. Wardriving involves scanning for unsecured Wi-Fi networks while driving, not physical intrusion.

📘 Reference:

CompTIA Network+ N10-009 Official Objectives: 4.2 – Identify common security threats and vulnerabilities.

A /23 subnet provides 512 total addresses, of which 510 are usable (subtracting 2 for network and broadcast addresses). This would satisfy the need for 255 additional addresses.

The most likely issue is transposed TX/RX. Fiber connections require the transmit strand on one side to connect to the receive strand on the other side, and vice versa. If transmit is connected to transmit and receive is connected to receive, the physical termination may be correct, but the link will not come online because the devices cannot properly send and receive optical signals.

The CompTIA Network+ N10-009 objectives include fiber media, transceivers, connectors, cabling issues, and troubleshooting physical connectivity. A visual fault locator can confirm continuity and help identify breaks, bends, or termination problems, but it does not always prove that the transmit and receive strands are correctly crossed between endpoints.

An incorrect SFP could also cause a fiber link failure, but the question emphasizes that only one connection remains offline after most links came online and that the termination was verified. That makes a polarity issue, such as reversed transmit and receive strands, the strongest answer. Incompatible cable is less likely if similar connections are working. CRC errors usually indicate a link is active but experiencing frame errors, not completely offline. Therefore, transposed TX/RX is correct.

Port 443 is used by HTTPS (Hypertext Transfer Protocol Secure), a secure version of HTTP that uses SSL/TLS to encrypt the communication between a client and server. This ensures confidentiality and integrity of data in transit. The document states:

“Port 443 is the default port for HTTPS, which secures HTTP traffic using SSL/TLS, providing encryption and secure identification of web servers.”

Site-to-Site VPN: A site-to-site VPN is used to securely connect two networks, such as a company ' s headquarters and a branch location, over the internet. This type of VPN creates a secure tunnel for data transmission, ensuring confidentiality and integrity.

Split-tunnel VPN (A): Allows some traffic to bypass the VPN tunnel, which may not secure all communications.

Clientless VPN (B): Used for individual users to access the network without VPN client software.

Full-tunnel VPN (C): Typically used for individual user traffic rather than connecting two networks.