CompTIA Network+ N10-009 Network Appliances Applications And Functions Practice Test

 

Objective 1.2 • 20 original questions

This CompTIA Network+ N10-009 practice test focuses on network appliances, applications, and functions. All questions are original ExamSnap scenarios aligned to the current N10-009 blueprint; they are not copied from CompTIA exam content. Use the complete N10-009 collection for broader practice across all five domains. For broader exam preparation, review the CompTIA Network+ N10-009 Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

At Litware Manufacturing, a systems administrator is reviewing a network change. The requirement is to connect multiple IP networks and forward packets between them. Which option is the best fit? The decision applies to a branch-office rollout.

1. QoS
2. Router
3. Wireless access point
4. TTL
5. Proxy

Correct answer: B

Why: Forwards Layer 3 traffic between different IP networks and selects next hops. This directly satisfies the requirement: connect multiple IP networks and forward packets between them.

Option review:

A: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. However, it does not most directly satisfy the requirement in this scenario: connect multiple IP networks and forward packets between them.

B: Forwards Layer 3 traffic between different IP networks and selects next hops. This directly satisfies the requirement: connect multiple IP networks and forward packets between them.

C: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: connect multiple IP networks and forward packets between them.

D: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: connect multiple IP networks and forward packets between them.

E: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: connect multiple IP networks and forward packets between them.

Learning point: Use Router when the key requirement is to connect multiple IP networks and forward packets between them.

Question 2

A ticket at Woodgrove Bank says the team must provide efficient Layer 2 connectivity among devices in the same LAN. Which technology or concept most directly addresses this requirement? The decision applies to a campus refresh.

1. Proxy
2. Switch
3. Wireless access point
4. SAN
5. TTL

Correct answer: B

Why: Forwards Ethernet frames primarily by destination MAC address within a LAN. This directly satisfies the requirement: provide efficient Layer 2 connectivity among devices in the same LAN.

Option review:

A: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: provide efficient Layer 2 connectivity among devices in the same LAN.

B: Forwards Ethernet frames primarily by destination MAC address within a LAN. This directly satisfies the requirement: provide efficient Layer 2 connectivity among devices in the same LAN.

C: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: provide efficient Layer 2 connectivity among devices in the same LAN.

D: Provides block-level storage networking, often using Fibre Channel or iSCSI. However, it does not most directly satisfy the requirement in this scenario: provide efficient Layer 2 connectivity among devices in the same LAN.

E: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: provide efficient Layer 2 connectivity among devices in the same LAN.

Learning point: Use Switch when the key requirement is to provide efficient Layer 2 connectivity among devices in the same LAN.

Question 3

During a design meeting at Blue Yonder Airlines, the junior network administrator needs to enforce security policy between network zones or segments. What should be selected? The decision applies to a data-center segment.

1. SAN
2. Firewall
3. Router
4. IPS
5. NAS

Correct answer: B

Why: Enforces traffic policy by allowing, denying, and inspecting network connections. This directly satisfies the requirement: enforce security policy between network zones or segments.

Option review:

A: Provides block-level storage networking, often using Fibre Channel or iSCSI. However, it does not most directly satisfy the requirement in this scenario: enforce security policy between network zones or segments.

B: Enforces traffic policy by allowing, denying, and inspecting network connections. This directly satisfies the requirement: enforce security policy between network zones or segments.

C: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: enforce security policy between network zones or segments.

D: Inspects traffic inline and can block or prevent detected malicious activity. However, it does not most directly satisfy the requirement in this scenario: enforce security policy between network zones or segments.

E: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: enforce security policy between network zones or segments.

Learning point: Use Firewall when the key requirement is to enforce security policy between network zones or segments.

Question 4

Contoso Health is updating its network standard. Which option best meets the need to monitor for malicious patterns while leaving traffic flow unchanged? The decision applies to a remote-site migration.

1. Wireless access point
2. IDS
3. QoS
4. NAS
5. Load balancer

Correct answer: B

Why: Detects suspicious activity and alerts without normally blocking traffic inline. This directly satisfies the requirement: monitor for malicious patterns while leaving traffic flow unchanged.

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: monitor for malicious patterns while leaving traffic flow unchanged.

B: Detects suspicious activity and alerts without normally blocking traffic inline. This directly satisfies the requirement: monitor for malicious patterns while leaving traffic flow unchanged.

C: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. However, it does not most directly satisfy the requirement in this scenario: monitor for malicious patterns while leaving traffic flow unchanged.

D: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: monitor for malicious patterns while leaving traffic flow unchanged.

E: Distributes client sessions across multiple backend servers to improve scale and availability. However, it does not most directly satisfy the requirement in this scenario: monitor for malicious patterns while leaving traffic flow unchanged.

Learning point: Use IDS when the key requirement is to monitor for malicious patterns while leaving traffic flow unchanged.

Question 5

A field technician at Litware Manufacturing is validating a proposed solution. The design must detect and actively stop malicious network traffic inline. Which answer is most appropriate? The decision applies to a operations lab.

1. Firewall
2. Switch
3. Router
4. NAS
5. IPS

Correct answer: E

Why: Inspects traffic inline and can block or prevent detected malicious activity. This directly satisfies the requirement: detect and actively stop malicious network traffic inline.

Option review:

A: Enforces traffic policy by allowing, denying, and inspecting network connections. However, it does not most directly satisfy the requirement in this scenario: detect and actively stop malicious network traffic inline.

B: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: detect and actively stop malicious network traffic inline.

C: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: detect and actively stop malicious network traffic inline.

D: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: detect and actively stop malicious network traffic inline.

E: Inspects traffic inline and can block or prevent detected malicious activity. This directly satisfies the requirement: detect and actively stop malicious network traffic inline.

Learning point: Use IPS when the key requirement is to detect and actively stop malicious network traffic inline.

Question 6

For a new deployment at Woodgrove Bank, the networking team wants to spread incoming application sessions across several healthy servers. Which choice most directly satisfies the goal? The decision applies to a production maintenance window.

1. Load balancer
2. Firewall
3. Switch
4. IPS
5. NAS

Correct answer: A

Why: Distributes client sessions across multiple backend servers to improve scale and availability. This directly satisfies the requirement: spread incoming application sessions across several healthy servers.

Option review:

A: Distributes client sessions across multiple backend servers to improve scale and availability. This directly satisfies the requirement: spread incoming application sessions across several healthy servers.

B: Enforces traffic policy by allowing, denying, and inspecting network connections. However, it does not most directly satisfy the requirement in this scenario: spread incoming application sessions across several healthy servers.

C: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: spread incoming application sessions across several healthy servers.

D: Inspects traffic inline and can block or prevent detected malicious activity. However, it does not most directly satisfy the requirement in this scenario: spread incoming application sessions across several healthy servers.

E: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: spread incoming application sessions across several healthy servers.

Learning point: Use Load balancer when the key requirement is to spread incoming application sessions across several healthy servers.

Question 7

At Blue Yonder Airlines, a systems administrator is reviewing a network change. The requirement is to have clients communicate through an intermediary rather than directly to the destination. Which option is the best fit? The decision applies to a new floor deployment.

1. Firewall
2. Proxy
3. Load balancer
4. CDN
5. IPS

Correct answer: B

Why: Intermediates client requests and can provide policy enforcement, caching, or identity separation. This directly satisfies the requirement: have clients communicate through an intermediary rather than directly to the destination.

Option review:

A: Enforces traffic policy by allowing, denying, and inspecting network connections. However, it does not most directly satisfy the requirement in this scenario: have clients communicate through an intermediary rather than directly to the destination.

B: Intermediates client requests and can provide policy enforcement, caching, or identity separation. This directly satisfies the requirement: have clients communicate through an intermediary rather than directly to the destination.

C: Distributes client sessions across multiple backend servers to improve scale and availability. However, it does not most directly satisfy the requirement in this scenario: have clients communicate through an intermediary rather than directly to the destination.

D: Caches and serves content from distributed edge locations closer to users. However, it does not most directly satisfy the requirement in this scenario: have clients communicate through an intermediary rather than directly to the destination.

E: Inspects traffic inline and can block or prevent detected malicious activity. However, it does not most directly satisfy the requirement in this scenario: have clients communicate through an intermediary rather than directly to the destination.

Learning point: Use Proxy when the key requirement is to have clients communicate through an intermediary rather than directly to the destination.

Question 8

A ticket at Contoso Health says the team must provide shared file storage directly over an IP network. Which technology or concept most directly addresses this requirement? The decision applies to a service-recovery review.

1. Wireless access point
2. Wireless controller
3. Switch
4. NAS
5. SAN

Correct answer: D

Why: Provides file-level storage over the network, commonly using SMB or NFS. This directly satisfies the requirement: provide shared file storage directly over an IP network.

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: provide shared file storage directly over an IP network.

B: Centralizes management and coordination of multiple lightweight access points. However, it does not most directly satisfy the requirement in this scenario: provide shared file storage directly over an IP network.

C: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: provide shared file storage directly over an IP network.

D: Provides file-level storage over the network, commonly using SMB or NFS. This directly satisfies the requirement: provide shared file storage directly over an IP network.

E: Provides block-level storage networking, often using Fibre Channel or iSCSI. However, it does not most directly satisfy the requirement in this scenario: provide shared file storage directly over an IP network.

Learning point: Use NAS when the key requirement is to provide shared file storage directly over an IP network.

Question 9

During a design meeting at Litware Manufacturing, the junior network administrator needs to provide servers with shared block-storage connectivity. What should be selected? The decision applies to a branch-office rollout.

1. Wireless access point
2. QoS
3. IPS
4. SAN
5. Proxy

Correct answer: D

Why: Provides block-level storage networking, often using Fibre Channel or iSCSI. This directly satisfies the requirement: provide servers with shared block-storage connectivity.

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: provide servers with shared block-storage connectivity.

B: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. However, it does not most directly satisfy the requirement in this scenario: provide servers with shared block-storage connectivity.

C: Inspects traffic inline and can block or prevent detected malicious activity. However, it does not most directly satisfy the requirement in this scenario: provide servers with shared block-storage connectivity.

D: Provides block-level storage networking, often using Fibre Channel or iSCSI. This directly satisfies the requirement: provide servers with shared block-storage connectivity.

E: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: provide servers with shared block-storage connectivity.

Learning point: Use SAN when the key requirement is to provide servers with shared block-storage connectivity.

Question 10

Woodgrove Bank is updating its network standard. Which option best meets the need to connect Wi-Fi clients to the wired network? The decision applies to a campus refresh.

1. Wireless access point
2. Router
3. Proxy
4. Switch
5. NAS

Correct answer: A

Why: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. This directly satisfies the requirement: connect Wi-Fi clients to the wired network.

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. This directly satisfies the requirement: connect Wi-Fi clients to the wired network.

B: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: connect Wi-Fi clients to the wired network.

C: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: connect Wi-Fi clients to the wired network.

D: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: connect Wi-Fi clients to the wired network.

E: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: connect Wi-Fi clients to the wired network.

Learning point: Use Wireless access point when the key requirement is to connect Wi-Fi clients to the wired network.

Question 11

A field technician at Blue Yonder Airlines is validating a proposed solution. The design must centrally manage many enterprise access points. Which answer is most appropriate? The decision applies to a data-center segment.

1. TTL
2. IPS
3. QoS
4. Wireless controller
5. Router

Correct answer: D

Why: Centralizes management and coordination of multiple lightweight access points. This directly satisfies the requirement: centrally manage many enterprise access points.

Option review:

A: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: centrally manage many enterprise access points.

B: Inspects traffic inline and can block or prevent detected malicious activity. However, it does not most directly satisfy the requirement in this scenario: centrally manage many enterprise access points.

C: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. However, it does not most directly satisfy the requirement in this scenario: centrally manage many enterprise access points.

D: Centralizes management and coordination of multiple lightweight access points. This directly satisfies the requirement: centrally manage many enterprise access points.

E: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: centrally manage many enterprise access points.

Learning point: Use Wireless controller when the key requirement is to centrally manage many enterprise access points.

Question 12

For a new deployment at Contoso Health, the networking team wants to reduce latency by delivering static or cacheable content from distributed edge sites. Which choice most directly satisfies the goal? The decision applies to a remote-site migration.

1. SAN
2. TTL
3. IDS
4. Proxy
5. CDN

Correct answer: E

Why: Caches and serves content from distributed edge locations closer to users. This directly satisfies the requirement: reduce latency by delivering static or cacheable content from distributed edge sites.

Option review:

A: Provides block-level storage networking, often using Fibre Channel or iSCSI. However, it does not most directly satisfy the requirement in this scenario: reduce latency by delivering static or cacheable content from distributed edge sites.

B: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: reduce latency by delivering static or cacheable content from distributed edge sites.

C: Detects suspicious activity and alerts without normally blocking traffic inline. However, it does not most directly satisfy the requirement in this scenario: reduce latency by delivering static or cacheable content from distributed edge sites.

D: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: reduce latency by delivering static or cacheable content from distributed edge sites.

E: Caches and serves content from distributed edge locations closer to users. This directly satisfies the requirement: reduce latency by delivering static or cacheable content from distributed edge sites.

Learning point: Use CDN when the key requirement is to reduce latency by delivering static or cacheable content from distributed edge sites.

Question 13

At Litware Manufacturing, a systems administrator is reviewing a network change. The requirement is to secure private communications across the public internet. Which option is the best fit? The decision applies to a operations lab.

1. Wireless access point
2. VPN
3. Switch
4. CDN
5. TTL

Correct answer: B

Why: Creates an encrypted logical tunnel over an untrusted network. This directly satisfies the requirement: secure private communications across the public internet.

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: secure private communications across the public internet.

B: Creates an encrypted logical tunnel over an untrusted network. This directly satisfies the requirement: secure private communications across the public internet.

C: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: secure private communications across the public internet.

D: Caches and serves content from distributed edge locations closer to users. However, it does not most directly satisfy the requirement in this scenario: secure private communications across the public internet.

E: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: secure private communications across the public internet.

Learning point: Use VPN when the key requirement is to secure private communications across the public internet.

Question 14

A ticket at Woodgrove Bank says the team must give voice or other latency-sensitive traffic preferential treatment. Which technology or concept most directly addresses this requirement? The decision applies to a production maintenance window.

1. IDS
2. Proxy
3. QoS
4. NAS
5. Wireless access point

Correct answer: C

Why: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. This directly satisfies the requirement: give voice or other latency-sensitive traffic preferential treatment.

Option review:

A: Detects suspicious activity and alerts without normally blocking traffic inline. However, it does not most directly satisfy the requirement in this scenario: give voice or other latency-sensitive traffic preferential treatment.

B: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: give voice or other latency-sensitive traffic preferential treatment.

C: Classifies and prioritizes traffic to protect delay-sensitive applications during congestion. This directly satisfies the requirement: give voice or other latency-sensitive traffic preferential treatment.

D: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: give voice or other latency-sensitive traffic preferential treatment.

E: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: give voice or other latency-sensitive traffic preferential treatment.

Learning point: Use QoS when the key requirement is to give voice or other latency-sensitive traffic preferential treatment.

Question 15

During a design meeting at Blue Yonder Airlines, the junior network administrator needs to prevent an IP packet from circulating indefinitely through routing loops. What should be selected? The decision applies to a new floor deployment.

1. Switch
2. TTL
3. VPN
4. IDS
5. Wireless controller

Correct answer: B

Why: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. This directly satisfies the requirement: prevent an IP packet from circulating indefinitely through routing loops.

Option review:

A: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: prevent an IP packet from circulating indefinitely through routing loops.

B: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. This directly satisfies the requirement: prevent an IP packet from circulating indefinitely through routing loops.

C: Creates an encrypted logical tunnel over an untrusted network. However, it does not most directly satisfy the requirement in this scenario: prevent an IP packet from circulating indefinitely through routing loops.

D: Detects suspicious activity and alerts without normally blocking traffic inline. However, it does not most directly satisfy the requirement in this scenario: prevent an IP packet from circulating indefinitely through routing loops.

E: Centralizes management and coordination of multiple lightweight access points. However, it does not most directly satisfy the requirement in this scenario: prevent an IP packet from circulating indefinitely through routing loops.

Learning point: Use TTL when the key requirement is to prevent an IP packet from circulating indefinitely through routing loops.

Question 16

During a data-center segment, Contoso Health is comparing several networking concepts. Which option is accurately characterized by this statement: Forwards Layer 3 traffic between different IP networks and selects next hops.

1. Wireless access point
2. Router
3. Load balancer
4. SAN
5. Switch

Correct answer: B

Why: Forwards Layer 3 traffic between different IP networks and selects next hops. This directly satisfies the requirement: Forwards Layer 3 traffic between different IP networks and selects next hops..

Option review:

A: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: Forwards Layer 3 traffic between different IP networks and selects next hops..

B: Forwards Layer 3 traffic between different IP networks and selects next hops. This directly satisfies the requirement: Forwards Layer 3 traffic between different IP networks and selects next hops..

C: Distributes client sessions across multiple backend servers to improve scale and availability. However, it does not most directly satisfy the requirement in this scenario: Forwards Layer 3 traffic between different IP networks and selects next hops..

D: Provides block-level storage networking, often using Fibre Channel or iSCSI. However, it does not most directly satisfy the requirement in this scenario: Forwards Layer 3 traffic between different IP networks and selects next hops..

E: Forwards Ethernet frames primarily by destination MAC address within a LAN. However, it does not most directly satisfy the requirement in this scenario: Forwards Layer 3 traffic between different IP networks and selects next hops..

Learning point: Use Router when the key requirement is to connect multiple IP networks and forward packets between them.

Question 17

During a remote-site migration, Litware Manufacturing is comparing several networking concepts. Which option is accurately characterized by this statement: Forwards Ethernet frames primarily by destination MAC address within a LAN.

1. NAS
2. CDN
3. Switch
4. Wireless controller
5. Wireless access point

Correct answer: C

Why: Forwards Ethernet frames primarily by destination MAC address within a LAN. This directly satisfies the requirement: Forwards Ethernet frames primarily by destination MAC address within a LAN..

Option review:

A: Provides file-level storage over the network, commonly using SMB or NFS. However, it does not most directly satisfy the requirement in this scenario: Forwards Ethernet frames primarily by destination MAC address within a LAN..

B: Caches and serves content from distributed edge locations closer to users. However, it does not most directly satisfy the requirement in this scenario: Forwards Ethernet frames primarily by destination MAC address within a LAN..

C: Forwards Ethernet frames primarily by destination MAC address within a LAN. This directly satisfies the requirement: Forwards Ethernet frames primarily by destination MAC address within a LAN..

D: Centralizes management and coordination of multiple lightweight access points. However, it does not most directly satisfy the requirement in this scenario: Forwards Ethernet frames primarily by destination MAC address within a LAN..

E: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: Forwards Ethernet frames primarily by destination MAC address within a LAN..

Learning point: Use Switch when the key requirement is to provide efficient Layer 2 connectivity among devices in the same LAN.

Question 18

During a operations lab, Woodgrove Bank is comparing several networking concepts. Which option is accurately characterized by this statement: Enforces traffic policy by allowing, denying, and inspecting network connections.

1. Proxy
2. Wireless access point
3. CDN
4. Wireless controller
5. Firewall

Correct answer: E

Why: Enforces traffic policy by allowing, denying, and inspecting network connections. This directly satisfies the requirement: Enforces traffic policy by allowing, denying, and inspecting network connections..

Option review:

A: Intermediates client requests and can provide policy enforcement, caching, or identity separation. However, it does not most directly satisfy the requirement in this scenario: Enforces traffic policy by allowing, denying, and inspecting network connections..

B: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: Enforces traffic policy by allowing, denying, and inspecting network connections..

C: Caches and serves content from distributed edge locations closer to users. However, it does not most directly satisfy the requirement in this scenario: Enforces traffic policy by allowing, denying, and inspecting network connections..

D: Centralizes management and coordination of multiple lightweight access points. However, it does not most directly satisfy the requirement in this scenario: Enforces traffic policy by allowing, denying, and inspecting network connections..

E: Enforces traffic policy by allowing, denying, and inspecting network connections. This directly satisfies the requirement: Enforces traffic policy by allowing, denying, and inspecting network connections..

Learning point: Use Firewall when the key requirement is to enforce security policy between network zones or segments.

Question 19

During a production maintenance window, Blue Yonder Airlines is comparing several networking concepts. Which option is accurately characterized by this statement: Detects suspicious activity and alerts without normally blocking traffic inline.

1. IDS
2. Router
3. TTL
4. Wireless controller
5. Wireless access point

Correct answer: A

Why: Detects suspicious activity and alerts without normally blocking traffic inline. This directly satisfies the requirement: Detects suspicious activity and alerts without normally blocking traffic inline..

Option review:

A: Detects suspicious activity and alerts without normally blocking traffic inline. This directly satisfies the requirement: Detects suspicious activity and alerts without normally blocking traffic inline..

B: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: Detects suspicious activity and alerts without normally blocking traffic inline..

C: Limits the lifetime or hop count of an IP packet to prevent indefinite forwarding loops. However, it does not most directly satisfy the requirement in this scenario: Detects suspicious activity and alerts without normally blocking traffic inline..

D: Centralizes management and coordination of multiple lightweight access points. However, it does not most directly satisfy the requirement in this scenario: Detects suspicious activity and alerts without normally blocking traffic inline..

E: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: Detects suspicious activity and alerts without normally blocking traffic inline..

Learning point: Use IDS when the key requirement is to monitor for malicious patterns while leaving traffic flow unchanged.

Question 20

During a new floor deployment, Contoso Health is comparing several networking concepts. Which option is accurately characterized by this statement: Inspects traffic inline and can block or prevent detected malicious activity.

1. VPN
2. Wireless access point
3. IPS
4. IDS
5. Router

Correct answer: C

Why: Inspects traffic inline and can block or prevent detected malicious activity. This directly satisfies the requirement: Inspects traffic inline and can block or prevent detected malicious activity..

Option review:

A: Creates an encrypted logical tunnel over an untrusted network. However, it does not most directly satisfy the requirement in this scenario: Inspects traffic inline and can block or prevent detected malicious activity..

B: Bridges wireless clients onto a wired LAN and provides an 802.11 basic service area. However, it does not most directly satisfy the requirement in this scenario: Inspects traffic inline and can block or prevent detected malicious activity..

C: Inspects traffic inline and can block or prevent detected malicious activity. This directly satisfies the requirement: Inspects traffic inline and can block or prevent detected malicious activity..

D: Detects suspicious activity and alerts without normally blocking traffic inline. However, it does not most directly satisfy the requirement in this scenario: Inspects traffic inline and can block or prevent detected malicious activity..

E: Forwards Layer 3 traffic between different IP networks and selects next hops. However, it does not most directly satisfy the requirement in this scenario: Inspects traffic inline and can block or prevent detected malicious activity..

Learning point: Use IPS when the key requirement is to detect and actively stop malicious network traffic inline.