An employee receives an urgent email from the 'IT Help Desk' stating that their password will expire in 30 minutes and they must click a link to verify their credentials immediately. The link points to a domain that is not the company's official domain. Which type of attack is this, and what is the best immediate defense?

Phishing; the employee should report the email and delete it

A man-in-the-middle attack; the employee should enable their VPN

A brute-force attack; the employee should change their password to a longer one

A distributed denial-of-service (DDoS) attack; the employee should reboot their computer

A university wants to allow students to connect their personal devices to the campus network, but must ensure that compromised devices cannot infect other systems. The IT team also needs to support a wide variety of devices, including those that cannot run an agent. Which approach best meets these requirements?

Implement a NAC solution that uses agentless posture assessment and places non-compliant devices on a quarantine VLAN

Disable all network access for personal devices

Use a firewall to block all traffic from unknown MAC addresses

Require all students to install a specific antivirus agent before accessing the network

A company allows employees to use their personal smartphones to access corporate email. The security team wants to ensure that if a phone is lost or stolen, the corporate data on it can be wiped remotely. Which solution should be implemented?

A network access control (NAC) system

A company is designing a new server room. The security team wants to prevent unauthorized physical access while also ensuring that the room remains accessible in case of an emergency. Which combination of physical security measures best meets both requirements?

A biometric lock with a fail-safe mechanism that unlocks during a fire alarm

A mantrap with a turnstile that requires a badge

A keypad lock with no emergency override

A security guard who checks IDs at all times

CompTIANetwork+

Domain 4Objective 8

Security Features and Defense N10-009 Practice Questions (Page 5)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

11concepts

Questions 21–25

21application · medium
An employee receives an urgent email from the 'IT Help Desk' stating that their password will expire in 30 minutes and they must click a link to verify their credentials immediately. The link points to a domain that is not the company's official domain. Which type of attack is this, and what is the best immediate defense?
Select an answer first
22foundation · easy
A firewall is configured with a rule that denies all inbound traffic from a specific IP address. What is the default action for traffic that does not match any explicitly defined rule?
Select an answer first
23expert · hard
A university wants to allow students to connect their personal devices to the campus network, but must ensure that compromised devices cannot infect other systems. The IT team also needs to support a wide variety of devices, including those that cannot run an agent. Which approach best meets these requirements?
Select an answer first
24application · medium
A company allows employees to use their personal smartphones to access corporate email. The security team wants to ensure that if a phone is lost or stolen, the corporate data on it can be wiped remotely. Which solution should be implemented?
Select an answer first
25expert · hard
A company is designing a new server room. The security team wants to prevent unauthorized physical access while also ensuring that the room remains accessible in case of an emergency. Which combination of physical security measures best meets both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Features and Defense N10-009 Practice Questions (Page 5)

Questions 21–25

A firewall is configured with a rule that denies all inbound traffic from a specific IP address. What is the default action for traffic that does not match any explicitly defined rule?

A company allows employees to use their personal smartphones to access corporate email. The security team wants to ensure that if a phone is lost or stolen, the corporate data on it can be wiped remotely. Which solution should be implemented?

A company is designing a new server room. The security team wants to prevent unauthorized physical access while also ensuring that the room remains accessible in case of an emergency. Which combination of physical security measures best meets both requirements?

Keep studying — Network security