CompTIA Network+ Practice Test for Subdomain 1.4 #02

Welcome to today’s CompTIA Network+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 1.4 (Explain common networking ports, protocols, services, and traffic types) from the CompTIA Network+ N10-009 objectives.

This beginner-level practice test is inspired by the CompTIA Network+ (N10-009) exam and is designed to help you reinforce key networking concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Network+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Network+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Network+ practice tests based on specific domains/subdomains, click that link.

CompTIA Network+ Practice Test for Subdomain 1.4 #02

10 questions • Single best answer

Question 1

A help desk analyst at a logistics company is reviewing outbound firewall rules and notices that traffic on ports 20 and 21 is being blocked by an ACL. A remote vendor reports that file uploads to the company's on-premises FTP server are failing. Which statement correctly describes how ports 20 and 21 are used by the FTP protocol?

A. Port 20 is used for FTP control connections and port 21 is used for FTP data transfer. B. Port 20 is used for FTP data transfer and port 21 is used for FTP control connections. C. Both ports 20 and 21 are used for FTP data transfer in active mode. D. Port 20 is used for encrypted FTP authentication and port 21 is used for plaintext file transfer.

Question 2

A systems administrator needs to configure a firewall to allow a remote team to securely transfer configuration backup files to an off-site server. The solution must use encryption in transit and must operate on the same well-known port as the protocol used for encrypted remote command-line administration. Which protocol and port should be permitted?

A. FTP over TCP port 21 B. TFTP over UDP port 69 C. SFTP over TCP port 22 D. HTTP over TCP port 80

Question 3

A network technician is examining packet captures on a corporate workstation and observes that name resolution queries are being sent from the workstation to the local DNS resolver. The technician needs to verify the correct firewall rule for this traffic. Which port is used for standard DNS query traffic?

A. TCP port 80 B. UDP port 53 C. UDP port 69 D. TCP port 389

Question 4

A junior network engineer is troubleshooting a subnet where newly connected workstations are failing to receive IP address assignments automatically. A packet capture shows that DHCP Discover messages are leaving the workstations but are not receiving responses. Which source and destination UDP ports are used by the DHCP client and DHCP server respectively?

A. Source port 67, destination port 68 B. Source port 68, destination port 67 C. Source port 53, destination port 68 D. Source port 69, destination port 67

Question 5

The network operations team at a manufacturing company uses a centralized monitoring platform to actively poll managed switches and routers for performance data. The platform is also configured to receive unsolicited threshold alert messages pushed directly from those devices. Which ports must be permitted on the management VLAN to support both polling and alert delivery for this protocol?

A. UDP ports 161 and 162 B. UDP ports 514 and 515 C. TCP ports 389 and 636 D. UDP ports 123 and 124

Question 6

A helpdesk technician at a regional bank needs to remotely connect to a teller's Windows workstation in a branch office to troubleshoot a software configuration problem. The existing firewall policy is blocking the connection. The technician's tool requires full graphical desktop control of the remote machine. Which TCP port must the firewall permit to enable this session?

A. TCP port 22 B. TCP port 443 C. TCP port 5060 D. TCP port 3389

Question 7

A developer is building a real-time video conferencing application for use across a corporate WAN. The application requires minimal latency and can tolerate occasional packet loss without impacting user experience. The overhead of connection setup, acknowledgments, and retransmission would degrade performance unacceptably. Which IP transport protocol should the application use?

A. TCP, because it provides ordered delivery and retransmission to ensure video quality. B. GRE, because it encapsulates other protocols and eliminates connection overhead. C. ICMP, because it is optimized for low-latency diagnostic and control messaging. D. UDP, because it is connectionless and does not introduce retransmission or handshake overhead.

Question 8

A security engineer is configuring a site-to-site IPSec VPN between two office locations. The requirements state that the payload of each IP packet must be encrypted to prevent interception, but integrity protection and authentication of the IP header is not explicitly required. Which IPSec protocol component should be implemented to meet this encryption requirement?

A. Internet Key Exchange (IKE) B. Authentication Header (AH) C. Encapsulating Security Payload (ESP) D. Generic Routing Encapsulation (GRE)

Question 9

A network engineer at a media company is designing the distribution network for a live internal town hall video stream that will be delivered simultaneously to 800 employee workstations. The design must be bandwidth-efficient, must not send individual streams to each recipient, and must not flood the entire network with traffic destined for all devices. Which traffic type should be used for this deployment?

A. Unicast B. Broadcast C. Anycast D. Multicast

Question 10

A network administrator at a hospital is reviewing firewall logs and notices that internal servers are failing to synchronize their clocks with an external time source. Incorrect timestamps on servers are causing mismatches in security log correlation within the SIEM platform. Which protocol and port must be permitted outbound through the firewall to restore accurate time synchronization?

A. SNMP over UDP port 161 B. Syslog over UDP port 514 C. NTP over UDP port 123 D. LDAP over TCP port 389

CompTIA Network+ Practice Test for Subdomain 1.4 #02

Related Posts

Leave a Comment Cancel Reply