A network analyst notices an unusual spike in outbound traffic from a single workstation to an external IP address on port 443. The traffic pattern is consistent and occurs every night at 2:00 AM. What should the analyst do first to determine if this is malicious?

Increase the logging level on the firewall

Block the external IP address immediately

Disable the workstation's network port

Review the workstation's process list and correlate with NetFlow data

After establishing a baseline, what should an administrator do when current network performance significantly deviates from the baseline?

Ignore the deviation if the network is still operational

Investigate the cause of the deviation

Immediately reset all network devices

Update the baseline to match the new performance

Which of the following is a best practice for effective network monitoring?

Establish a baseline for normal network behavior

Use only one monitoring tool for all needs

Monitor only during business hours

A security analyst notices that a router is generating a large volume of log messages, making it difficult to find important events. The analyst wants to centralize logs from multiple devices and ensure that critical events are not lost. What should the analyst configure?

Syslog forwarding with severity levels

SNMP traps to a network management system

Port mirroring to a packet analyzer

What is the primary purpose of interpreting network logs?

To replace the need for monitoring tools

To troubleshoot and resolve network issues

CompTIANetwork+

Domain 3Objective 5

Network Monitoring N10-009 Practice Questions (Page 6)

Part of the Network operations domain, which makes up ~22% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

Questions 26–30

26application · medium
A network analyst notices an unusual spike in outbound traffic from a single workstation to an external IP address on port 443. The traffic pattern is consistent and occurs every night at 2:00 AM. What should the analyst do first to determine if this is malicious?
Select an answer first
27foundation · easy
After establishing a baseline, what should an administrator do when current network performance significantly deviates from the baseline?
Select an answer first
28foundation · easy
Which of the following is a best practice for effective network monitoring?
Select an answer first
29application · medium
A security analyst notices that a router is generating a large volume of log messages, making it difficult to find important events. The analyst wants to centralize logs from multiple devices and ensure that critical events are not lost. What should the analyst configure?
Select an answer first
30foundation · easy
What is the primary purpose of interpreting network logs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.