A company's security team suspects that an attacker is scanning the network for open ports. They want a solution that can detect the scan and automatically block the source IP. Which technology should be implemented?

A firewall with a default-deny inbound rule

An intrusion detection system (IDS) that sends an alert to the security team

A SIEM that correlates firewall logs to identify scan patterns

An intrusion prevention system (IPS) configured to drop traffic from IPs that match a known scan signature

A company wants to ensure that only company-owned laptops with up-to-date antivirus and the latest patches can access the internal network. Guests and personal devices should be placed on a separate network with internet-only access. Which solution should be implemented?

Implement a SIEM to monitor for non-compliant devices

Configure a firewall to block all traffic from unknown MAC addresses

Use a VPN for all internal network access

Deploy a network access control (NAC) solution that checks device compliance and assigns devices to the appropriate VLAN based on the results

CompTIANetwork+

Domain 4Objective 1

Logical Security N10-009 Practice Questions (Page 8)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 36–38

36application · medium
A company's security team suspects that an attacker is scanning the network for open ports. They want a solution that can detect the scan and automatically block the source IP. Which technology should be implemented?
Select an answer first
37application · medium
A company wants to ensure that only company-owned laptops with up-to-date antivirus and the latest patches can access the internal network. Guests and personal devices should be placed on a separate network with internet-only access. Which solution should be implemented?
Select an answer first
38foundation · easy
A network administrator wants to isolate the guest Wi-Fi network from the corporate internal network to prevent unauthorized access to sensitive systems. Which technique should be used?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Logical Security N10-009 Practice Questions (Page 8)

Questions 36–38

A company's security team suspects that an attacker is scanning the network for open ports. They want a solution that can detect the scan and automatically block the source IP. Which technology should be implemented?

A company wants to ensure that only company-owned laptops with up-to-date antivirus and the latest patches can access the internal network. Guests and personal devices should be placed on a separate network with internet-only access. Which solution should be implemented?

A network administrator wants to isolate the guest Wi-Fi network from the corporate internal network to prevent unauthorized access to sensitive systems. Which technique should be used?

Keep studying — Network security