N10-009: CompTIA Network+ Certification ExamDemo

Increasing the MTU (Maximum Transmission Unit) enables the use of jumbo frames, typically 9000 bytes instead of the standard 1500 bytes. This reduces the number of packets required to transfer the same amount of data, decreasing CPU overhead and significantly improving throughput—especially beneficial for backup operations. QoS prioritizes traffic, SDN is an architectural approach, VXLAN creates overlays, and TTL controls hop count.

Microwave ovens operate in the same 2.4GHz band as the WAP and cause strong intermittent interference only while running, which matches symptoms that appeared specifically after the access point was relocated near one. Reflection, general noise, or channel overlap tend to produce a more constant degradation rather than the on-again/off-again pattern described.

Channel interference triggers APs to automatically switch to less congested channels to maintain performance. When users remain stationary but the connection drops and reconnects every 20-30 seconds with channel changes logged, automatic interference-driven channel selection is the cause, not roaming issues or coverage gaps.

An unauthorized person installing a rogue access point in a secure facility requires physical access to that facility. Tailgating (following an authorized person through a secure entrance) is the social engineering technique that bypasses physical security controls. Evil twin, honeytrap, and wardriving are attack methods that do not explain facility entry.

Incorrect ACLs (Access Control Lists) on a Layer 3 switch can block traffic to specific destinations if misconfigured during configuration updates. Since the issue is specific to one file server after switch configuration changes, ACL misconfiguration is the most likely cause.

The tracert command produces output showing the hops along the path to a destination IP address, with response times and addresses for each hop. This output format is distinctive to tracert/traceroute tools used for diagnosing routing path failures. Netstat displays connection statistics, tcpdump captures packets, and nmap performs port scanning—none produce hop-by-hop routing path output.

In the crowded 2.4GHz band there are only three non-overlapping 20MHz channels (1, 6, and 11); using the narrower 20MHz channel width keeps access points confined to these non-overlapping channels and minimizes co-channel and adjacent-channel interference in a dense, overlapping-coverage deployment. Wider channels (40MHz and above) would consume multiple of the available channels and force heavy overlap between neighboring APs, increasing interference rather than reducing it.

Verifying full system functionality is the step where a technician compares current performance metrics—such as throughput, latency, and error rates—against established baselines to confirm that the implemented solution has restored normal operation. This verification ensures that the fix was successful and the system is working as expected.

Software as a Service (SaaS) delivers provider-hosted applications for customers to use, while the provider manages the underlying platform and infrastructure.

Inconsistent arrival delay between RTP packets is jitter, and diagnosing it requires capturing and inspecting the actual packet stream to measure inter-arrival timing, loss, and delay — the job of a protocol analyzer such as Wireshark. A toner and probe or cable tester check physical continuity, and a spectrum analyzer detects RF interference, neither of which reveals packet-level timing behavior.

A hub-and-spoke topology routes every spoke's traffic through one central hub, matching the description of all traffic passing through a single point. Point-to-point only links two endpoints directly to each other and does not describe multiple nodes funneling traffic through one central location.

First Hop Redundancy Protocols (FHRP)—including HSRP, VRRP, and GLBP—use a Virtual IP (VIP) address shared between two or more routers. When the active router fails, the standby automatically assumes the VIP, providing seamless gateway redundancy without client reconfiguration.

The TTL (time to live) specifies how long DNS resolvers may cache a record. Reducing it shortens the caching interval, so resolvers retrieve the updated record sooner.

VLANs segment the network into separate broadcast domains, allowing each department to be assigned its own logical subnet with non-overlapping resources. ACLs can then be applied to control inter-VLAN traffic and enforce access restrictions. DHCP assigns IP addresses; VPN creates encrypted tunnels; STP prevents network loops.

A network tap is a passive hardware device placed inline between two network devices. It has three ports: two network ports that pass traffic unimpeded and one monitoring port that receives a copy. Because it is entirely passive, it does not alter or interrupt traffic flow. SPAN ports are switch-based software copying and can impact performance; protocol analyzers are for analysis only; link aggregation is for bandwidth bonding.

A switch that shows solid link and activity lights on ports that have nothing connected is a classic symptom of a failing switch, and the fact that the console can connect successfully when plugged directly into the individual modules (bypassing the switch entirely) confirms the modules themselves are healthy, ruling out a module failure. Rebooting the telephone system also had no effect, which is consistent with the fault being upstream in the switch rather than in the phone system or its modules.

Smishing is a form of phishing that delivers fraudulent messages through SMS or other text-message services to deceive recipients into revealing information or taking harmful actions.

TCP port 443 is the standard port for HTTPS, which layers HTTP traffic over TLS/SSL to provide encrypted, authenticated web communication. Telnet uses port 23, SMTP uses port 25, and SNMP uses ports 161/162.

The arp command examines IP-to-MAC address mappings. Conflicting or changing MAC-address entries for the same IP address can reveal the device responsible for an IP address conflict.

Static routes take precedence in the routing table due to their lower administrative distance (AD). Static routes have a default AD of 1, while dynamic routing protocols have higher ADs (EIGRP: 90, OSPF: 110, BGP: 20 for eBGP). The lower the AD value, the more trustworthy the routing source, so static routes are preferred when both static and dynamic routes exist for the same destination. Default routes are less specific and used only as a last resort.

The subnet mask 255.255.255.240 (/28) provides 14 usable IP addresses (2^4 - 2 = 14). While 255.255.255.248 would provide exactly 6 usable addresses, it is not an option. Among the choices given, /28 provides sufficient addresses for the requirement while being more efficient than larger subnets that would waste more address space.

An ICMP Redirect message tells a host to use a different, better next-hop gateway for a particular destination. RFC 792 defines this router-to-host notification behavior.

Client devices that lack Wi-Fi 6E or 6 GHz radio support will only associate on older, slower bands, so device compatibility caps the achievable speed regardless of the router's capabilities. The 6 GHz band and its channels are also subject to RF interference and channel congestion from other equipment and nearby networks, which further reduces throughput even for compatible clients.

Lockable cabinets provide physical access control for the switches, routers, and patch panels housed in an MDF, directly preventing unauthorized personnel from tampering with or modifying the hardware. A UPS addresses power continuity, port security addresses unauthorized network access at a switchport, and microsegmentation addresses logical traffic isolation — none of these prevent someone from physically touching the equipment.