An organization wants to deploy a security system that can automatically block malicious traffic in real time. Which system is designed to take such action?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

A network administrator is configuring a firewall to allow web traffic from the internet to reach an internal web server. Which firewall configuration element is used to specify the source and destination addresses and ports for this traffic?

Virtual local area network (VLAN)

Network address translation (NAT)

A company requires remote employees to authenticate to the VPN using a one-time password generated by a hardware token, in addition to their username and password. Which authentication method is being used?

Multifactor authentication (MFA)

Extensible Authentication Protocol (EAP)

A data center hosts critical servers and must prevent unauthorized physical access to the server racks. The facility also needs to maintain a record of who entered the server room and when. Which combination of physical security measures best meets these requirements?

A proximity card reader and a privacy screen on the server monitors

A mantrap with a security guard and a logbook

A simple key lock on the door and a sign-in sheet

Biometric scanner on the door and a security camera at the entrance

CompTIANetwork+

Domain 4Objective 8

Security Features and Defense N10-009 Practice Questions (Page 4)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

11concepts

Questions 16–20

16foundation · easy
An organization wants to deploy a security system that can automatically block malicious traffic in real time. Which system is designed to take such action?
Select an answer first
17foundation · easy
A network administrator is configuring a firewall to allow web traffic from the internet to reach an internal web server. Which firewall configuration element is used to specify the source and destination addresses and ports for this traffic?
Select an answer first
18application · medium
A company requires remote employees to authenticate to the VPN using a one-time password generated by a hardware token, in addition to their username and password. Which authentication method is being used?
Select an answer first
19application · medium
A data center hosts critical servers and must prevent unauthorized physical access to the server racks. The facility also needs to maintain a record of who entered the server room and when. Which combination of physical security measures best meets these requirements?
Select an answer first
20foundation · easy
Which type of security policy defines the acceptable use of an organization's IT resources, including internet and email usage?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.