N10-009 Exam Dumps - CompTIA Network+ Certification Exam

An evil twin is a rogue Wi-Fi access point that mimics a legitimate network. Attackers use it to intercept and manipulate traffic, making it an on-path (formerly MITM) attack opportunity.

Breakdown of Options:

A. Phishing – Tries to steal credentials through fake emails/websites but does not intercept network traffic.

B. Dumpster diving – Involves physical security breaches, not network interception.

C. Evil twin – ✅ Correct answer. A rogue Wi-Fi AP impersonates a real network, allowing traffic interception.

D. Tailgating – Involves physical access security, not network interception.

Definition of GDPR:

General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

Scope and Objectives:

GDPR aims to give individuals control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

It enforces rules about data protection, requiring companies to protect the personal data and privacy of EU citizens for transactions that occur within EU member states.

Comparison with Other Options:

SCADA (Supervisory Control and Data Acquisition): Refers to control systems used in industrial and infrastructure processes, not related to personal data protection.

SAML (Security Assertion Markup Language): A standard for exchanging authentication and authorization data between parties, not specifically for personal data protection.

PCI DSS (Payment Card Industry Data Security Standard): A set of security standards designed to ensure that all companies that accept, process, store or transmit credit card information maintain a secure environment, not specific to personal data protection in Europe.

Key Provisions:

GDPR includes provisions for data processing, data subject rights, obligations of data controllers and processors, and penalties for non-compliance.

A captive portal is a web page that users must view and interact with before being granted access to a network. It is commonly used in guest networks to enforce terms of use agreements. When a user connects to the network, they are redirected to this portal where they must accept the terms of use before proceeding. This method ensures that users are aware of and agree to the network's policies, making it the best choice for this scenario. References: CompTIA Network+ Exam Objectives and official study guides.

•Cable termination issues (e.g., improper crimping, loose connectors) can cause connectivity failures.

•Power budget (A) applies to PoE devices, not general cabling issues.

•Device requirements (B) relate to software/hardware compatibility, not wiring faults.

•Port status (C) would help if the issue was switch-related, but since moving devices didn’t help, it’s likely a cabling issue.

📖Reference: CompTIA Network+ N10-009 Official Documentation – Cabling & Physical Layer Troubleshooting.

A honeynet is a network of honeypots designed to attract and study attackers. Honeypots are decoy systems set up to lure cyber attackers and analyze their activities. A honeynet, being a collection of these systems, provides a broader view of attack methods and patterns, helping organizations improve their security measures. References: CompTIA Network+ Exam Objectives and official study guides.

It is common for an access port to have both a voice VLAN and a data VLAN. A voice VLAN separates voice traffic from regular data traffic, ensuring better quality and security for voice communications.

=================