A company's security policy requires that malicious traffic be stopped immediately at the network perimeter, not just logged for later review. The network team is evaluating inline security devices. Which device should they deploy?

A network TAP connected to a logging server

An IPS appliance placed inline between the firewall and the core switch

A passive IDS sensor connected to a SPAN port

A firewall configured with a default-deny rule for all inbound traffic

A company has a remote workforce that uses a mix of company-issued laptops and personal devices. The security team wants to provide secure access to internal applications while minimizing the attack surface. They are considering a full-tunnel VPN versus a split-tunnel VPN. What is the primary security trade-off?

Split-tunnel VPN routes only corporate traffic through the VPN, which is faster but leaves other traffic unprotected

Full-tunnel VPN routes all traffic through the corporate gateway, providing more visibility but potentially slowing down internet access

Full-tunnel VPN is always more secure than split-tunnel VPN

Split-tunnel VPN is always faster than full-tunnel VPN

A company is creating a security policy that defines acceptable use of company devices, rules for handling sensitive data, and consequences for violations. What is the primary purpose of this policy?

To automatically enforce security settings on all devices

To establish a formal set of rules and expectations for employees

To provide a legal defense against all cybersecurity lawsuits

To replace the need for technical security controls

Which tool is commonly used to protect individual devices from malware and is a key component of endpoint security?

Intrusion detection system (IDS)

CompTIANetwork+

Domain 4Objective 8

Security Features and Defense N10-009 Practice Questions (Page 2)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

11concepts

Questions 6–10

6application · medium
A company's security policy requires that malicious traffic be stopped immediately at the network perimeter, not just logged for later review. The network team is evaluating inline security devices. Which device should they deploy?
Select an answer first
7expert · hard
A company has a remote workforce that uses a mix of company-issued laptops and personal devices. The security team wants to provide secure access to internal applications while minimizing the attack surface. They are considering a full-tunnel VPN versus a split-tunnel VPN. What is the primary security trade-off?
Select an answer first
8foundation · easy
A company wants to ensure that only devices that meet security requirements, such as having up-to-date antivirus software, can connect to the corporate network. Which technology enforces this policy?
Select an answer first
9application · medium
A company is creating a security policy that defines acceptable use of company devices, rules for handling sensitive data, and consequences for violations. What is the primary purpose of this policy?
Select an answer first
10foundation · easy
Which tool is commonly used to protect individual devices from malware and is a key component of endpoint security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Features and Defense N10-009 Practice Questions (Page 2)

Questions 6–10

A company's security policy requires that malicious traffic be stopped immediately at the network perimeter, not just logged for later review. The network team is evaluating inline security devices. Which device should they deploy?

A company wants to ensure that only devices that meet security requirements, such as having up-to-date antivirus software, can connect to the corporate network. Which technology enforces this policy?

A company is creating a security policy that defines acceptable use of company devices, rules for handling sensitive data, and consequences for violations. What is the primary purpose of this policy?

Which tool is commonly used to protect individual devices from malware and is a key component of endpoint security?

Keep studying — Network security