CompTIA Network+ Practice Test for Subdomain 4.3 #03

Welcome to today’s CompTIA Network+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.3 (Given a scenario, apply network security features, defense techniques, and solutions) from the CompTIA Network+ N10-009 objectives.

This beginner-level practice test is inspired by the CompTIA Network+ (N10-009) exam and is designed to help you reinforce key networking concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Network+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Network+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Network+ practice tests based on specific domains/subdomains, click that link.

CompTIA Network+ Practice Test of the Day 260703

10 questions • Single best answer

Question 1

A SOC analyst at a financial services firm is auditing newly deployed edge switches. Several unused physical ports are found active, and all devices retain factory credentials. Which action best reduces the attack surface on these devices?

A. Enable 802.1X on all active ports B. Apply inbound ACLs to all switch interfaces C. Disable unused ports and change default credentials D. Configure MAC filtering on all active ports

Question 2

A security engineer at a university needs devices to present valid credentials to an infrastructure switch before being granted LAN access. The solution must integrate with an existing RADIUS server. Which technology best meets this requirement?

A. 802.1X port-based authentication B. MAC address filtering C. Port security with sticky MAC D. URL content filtering

Question 3

A network administrator at a logistics company needs to permit only HTTP and HTTPS traffic from the branch office subnet to the internet while blocking all other outbound protocols. Which solution should be applied to the router's WAN interface?

A. VLAN segmentation B. NAC port security C. Content filtering appliance D. Access control list (ACL)

Question 4

A security architect at a healthcare provider is designing a zone to host public-facing web servers reachable from the internet while remaining isolated from the internal corporate network. Which network design provides this isolation?

A. VLAN trunking between internet and internal segments B. Screened subnet (DMZ) C. BYOD network segmentation D. Guest network with captive portal

Question 5

A wireless engineer at a small accounting firm wants to restrict the internal SSID to company-issued laptops only, without deploying enterprise authentication infrastructure. Which wireless security feature should be implemented?

A. WPA2-Enterprise with RADIUS B. SSID broadcast suppression C. MAC filtering D. Captive portal with user credentials

Question 6

A network security team at a school district must prevent students from accessing social media and gambling websites while keeping general internet access available for academic use. Which control best addresses this requirement?

A. URL filtering B. Firewall ACL by destination port C. NAC with port security D. VPN split tunneling

Question 7

A junior network engineer reviewing firewall policy observes that unsolicited inbound sessions from the untrusted internet zone are reaching internal hosts without inspection. The LAN is the trusted zone and the internet is the untrusted zone. What is the appropriate resolution?

A. This is expected behavior for NAT traversal B. Reconfigure the screened subnet zone assignment C. Apply inbound ACLs to the trusted zone interface D. Configure rules to deny unsolicited traffic from untrusted to trusted zones

Question 8

A PKI administrator at a government agency needs to ensure compromised certificates are systematically invalidated and that network devices can verify certificate validity before establishing encrypted sessions. Which key management mechanism should be implemented?

A. Quarterly pre-shared key rotation B. Certificate revocation via CRL or OCSP C. Replace all self-signed certificates with newly issued ones D. Deploy 802.1X on all managed network devices

Question 9

A network engineer at a retail chain is concerned about unauthorized devices being plugged into open Ethernet jacks at store locations. She wants each switch port to allow only a fixed number of known MAC addresses and block all others. Which feature should she configure?

A. Inbound ACLs on all access ports B. 802.1X authentication with RADIUS C. Port security with a maximum MAC address limit D. Disable native VLANs on all trunk ports

Question 10

A newly hired technician at a regional ISP discovers that managed switches throughout the distribution layer still use factory default usernames and passwords. Which device hardening action must be taken immediately to address this vulnerability?

A. Change default credentials on all managed devices B. Deploy NAC to identify unauthorized connections C. Configure port mirroring for traffic monitoring D. Apply ACLs to restrict management plane access

CompTIA Network+ Practice Test for Subdomain 4.3 #03

Related Posts

Leave a Comment Cancel Reply