CompTIA Network+ Practice Test for Subdomain 3.5 #03

Welcome to today’s CompTIA Network+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 3.5 (Compare and contrast network access and management methods) from the CompTIA Network+ N10-009 objectives.

This beginner-level practice test is inspired by the CompTIA Network+ (N10-009) exam and is designed to help you reinforce key networking concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Network+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Network+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Network+ practice tests based on specific domains/subdomains, click that link.

CompTIA Network+ Practice Test of the Day 260628

10 questions • Single best answer

Question 1

A network security architect at a global law firm needs to securely connect the main office to a new branch office across the internet. The solution must create a persistent encrypted tunnel between the two network perimeters without requiring client software on individual workstations. Which VPN type is most appropriate?

A. Clientless VPN B. Split tunnel VPN C. Client-to-site VPN D. Site-to-site VPN

Question 2

A corporate IT team must provide remote employees secure access to internal resources over the internet. Each teleworker installs VPN software on their device that establishes an encrypted connection back to the corporate network on demand. Which VPN solution is described?

A. Site-to-site VPN B. Client-to-site VPN C. Jump box access D. Out-of-band management tunnel

Question 3

A contractor at a financial company must access an internal web application from a personal device. The security team wants to avoid installing software on unmanaged devices. The solution provides access entirely through a web browser without any local client installation. Which access method is being used?

A. Client-to-site VPN B. Split tunnel C. Clientless VPN D. In-band management

Question 4

A remote worker's VPN is configured so that only traffic destined for internal corporate resources traverses the encrypted tunnel. All other internet traffic exits directly through the local ISP connection. Which VPN configuration does this describe?

A. Split tunnel B. Full tunnel C. Clientless VPN D. Site-to-site VPN

Question 5

A network administrator needs to remotely configure a Linux router in a branch office over an untrusted internet connection. The session must be encrypted and provide a CLI without transmitting credentials in cleartext. Which protocol should the administrator use?

A. Telnet B. Console cable C. HTTP-based GUI D. SSH

Question 6

A junior technician needs to configure firewall rules on a next-generation firewall. The technician is not comfortable with CLI commands and prefers a point-and-click interface accessible through a web browser. Which management method is being used?

A. API integration B. Graphical user interface (GUI) C. SSH session D. Console port

Question 7

A DevOps team is automating network device configuration changes as part of a CI/CD pipeline. Scripts must push configuration updates to devices programmatically without requiring human CLI interaction for each change. Which management method enables this automation?

A. API B. Console C. GUI D. SSH manual session

Question 8

A network engineer arrives at a data center to recover a misconfigured switch that is unreachable over the production network. The engineer connects a laptop directly to the dedicated serial management port on the switch using a rollover cable. Which access method is this?

A. Out-of-band SSH tunnel B. In-band GUI management C. Console D. Jump box relay

Question 9

A managed service provider enforces a policy that no technician may connect directly from the internet to production network devices. All remote sessions must first authenticate to a hardened intermediate server inside the network perimeter before reaching target devices. Which component enforces this control?

A. Site-to-site VPN gateway B. Out-of-band console server C. API management platform D. Jump box/host

Question 10

A network operations center needs to maintain management access to critical infrastructure even during a production network outage. The team provisions a physically separate dedicated management network that is isolated from the data plane. Which management approach is this?

A. In-band management B. Out-of-band management C. Split tunnel VPN D. Clientless VPN access

CompTIA Network+ Practice Test for Subdomain 3.5 #03

Related Posts

Leave a Comment Cancel Reply