A company requires remote employees to authenticate to the VPN before accessing internal resources. The security team wants to ensure that even if a user's password is compromised, an attacker cannot gain access without also possessing a physical device. Which authentication method should be implemented?

Require a one-time passcode generated by a hardware token in addition to the password

Implement a fingerprint scanner on the user's laptop

Require the user to answer security questions after entering the password

Use a longer, more complex password policy

A company wants to implement NAC to enforce security policies on devices accessing the network. They have a mix of company-owned and personal devices. The company wants to allow personal devices to access the internet but not internal resources, and they want to log all access attempts for compliance. Which NAC configuration best meets these requirements?

Configure NAC to block all personal devices from the network

Use a SIEM to monitor access attempts and manually block non-compliant devices

Configure NAC to check device posture and assign compliant company devices to the internal VLAN, non-compliant or personal devices to a guest VLAN with internet-only access, and log all authentication and authorization events

Use a firewall to block personal devices from the internal network

CompTIANetwork+

Domain 4Objective 1

Logical Security N10-009 Practice Questions (Page 1)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 1–5

1foundation · easy
A remote employee needs to securely access the corporate network over the internet. Which technology creates an encrypted tunnel for this purpose?
Select an answer first
2foundation · easy
A security team needs a centralized platform to collect logs from firewalls, servers, and applications, and to correlate events for incident response. Which system should they use?
Select an answer first
3application · medium
A company requires remote employees to authenticate to the VPN before accessing internal resources. The security team wants to ensure that even if a user's password is compromised, an attacker cannot gain access without also possessing a physical device. Which authentication method should be implemented?
Select an answer first
4expert · hard
A company wants to implement NAC to enforce security policies on devices accessing the network. They have a mix of company-owned and personal devices. The company wants to allow personal devices to access the internet but not internal resources, and they want to log all access attempts for compliance. Which NAC configuration best meets these requirements?
Select an answer first
5foundation · easy
An organization wants to prevent employees from sending emails that contain credit card numbers. Which technology can inspect outbound email content and block such transmissions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Logical Security N10-009 Practice Questions (Page 1)

Questions 1–5

A remote employee needs to securely access the corporate network over the internet. Which technology creates an encrypted tunnel for this purpose?

A security team needs a centralized platform to collect logs from firewalls, servers, and applications, and to correlate events for incident response. Which system should they use?

An organization wants to prevent employees from sending emails that contain credit card numbers. Which technology can inspect outbound email content and block such transmissions?

Keep studying — Network security