The 802.11n standard supports MIMO (Multiple Input Multiple Output), which allows multiple antennas to increase data throughput and improve reliability. Additionally, it uses non-overlapping channels in the 5 GHz band (and optionally the 2.4 GHz band), making it a good choice for high-speed, interference-resistant wireless connections. (Reference: CompTIA Network+ Study Guide, Chapter on Wireless Technologies)

The correct choice is B. Captive portal. This is the common setup used in places like libraries, hotels, airports, and cafés. A user first joins the wireless network, opens a browser, and is redirected to a web page where they must log in, accept terms, or enter provided credentials. Since the question specifically mentions authentication through HTTPS, that matches the behavior of a captive portal very closely.

The other options do not line up with the scenario. WPA3 is a wireless encryption and authentication standard, but it is not the same as a browser-based login page after connection. Single sign-on and SAML are identity and federation technologies used to simplify authentication across applications or services, not to provide the typical guest Wi-Fi web login experience.

The important clue is the sequence described in the question: first connect to Wi-Fi, then authenticate through a web page. That is exactly how a captive portal works. In many public-access wireless environments, the portal sits between the client and normal internet access until the user successfully authenticates or accepts the usage policy. For Network+ exam purposes, browser-based guest wireless authentication is most directly associated with a captive portal.

Plugging each switch into a different UPS provides the most uptime during a power outage. A UPS, or uninterruptible power supply, provides temporary battery power when utility power fails. Using separate UPS units also improves redundancy because a failure of one UPS does not necessarily affect both switches. This design helps maintain network availability and supports fault tolerance during electrical outages.

The CompTIA Network+ N10-009 objectives include network availability, redundancy, power management, UPS usage, and environmental considerations. Network switches are critical infrastructure devices, and loss of switch power can disconnect users, servers, wireless access points, VoIP phones, and other dependent systems. A UPS gives administrators time to maintain operations during short outages or shut systems down gracefully during longer outages.

Plugging both switches into the same PDU creates a single point of failure. Plugging each switch into a different circuit improves electrical redundancy, but it does not provide backup power if both circuits lose utility power. Plugging each switch into a different PDU can help with power distribution, but a PDU alone does not provide battery backup unless connected to a UPS. Therefore, different UPS units provide the best uptime.

The most likely reason an insurance brokerage would enforce VPN usage is to encrypt sensitive data in transit. VPNs (Virtual Private Networks) create a secure tunnel between the user ' s device and the corporate network, ensuring that data is encrypted and protected from interception.

Encryption: VPNs encrypt data, preventing unauthorized access and ensuring data privacy during transmission over public or unsecured networks.

Data Protection: Essential for industries handling sensitive information, such as insurance brokerages, to protect customer data and comply with regulatory requirements.

Security: Enhances overall network security by providing secure remote access for employees.

Network References:

CompTIA Network+ N10-007 Official Certification Guide: Discusses the role of VPNs in securing data in transit.

Cisco Networking Academy: Provides training on VPN technologies and their importance in data security.

Network+ Certification All-in-One Exam Guide: Explains VPN usage and its benefits in protecting sensitive information.

VLANs (Virtual Local Area Networks) segment network traffic by department, allowing ACLs (Access Control Lists) to be applied based on VLAN membership, improving security and resource isolation.

Breakdown of Options:

A. VLAN – Correct answer. VLANs enable logical network segmentation, allowing ACLs per department.

B. DHCP – Assigns IP addresses but does not control access.

C. VPN – Provides remote access, not segmentation within a network.

D. STP – Prevents switching loops, not related to ACL implementation.

BGP (Border Gateway Protocol) is the only dynamic routing protocol used across the internet. It ' s classified as an Exterior Gateway Protocol (EGP), responsible for routing between different autonomous systems (ASes).

A. EIGRP and D. OSPF are Interior Gateway Protocols (IGPs), used within organizations.

C. RIP is an outdated IGP with limited use, unsuitable for internet-scale routing.

???? Reference:

CompTIA Network+ N10-009 Official Objectives: 3.1 – Compare and contrast various routing technologies.

The correct answer is Platform as a Service (PaaS). PaaS provides developers with a ready-to-use platform that includes runtime environments, developer tools, middleware, and database services. Developers can focus on writing code while the provider handles security patches, updates, and infrastructure management.

A. CaaS (Containers as a Service) focuses on deploying and managing containerized applications, not providing full developer platforms.

B. IaaS delivers virtual machines, storage, and networking, but administrators must install and maintain the OS, middleware, and updates.

D. SaaS provides end-user applications (e.g., email, CRM), not platforms for development.

By using PaaS, the developers can build applications quickly and cost-effectively without worrying about underlying infrastructure or system maintenance.

References (CompTIA Network+ N10-009):

Domain: Networking Concepts — Cloud service models (IaaS, PaaS, SaaS, CaaS).

When installing equipment in a building, environmental factors are critical to ensure the safety and longevity of the equipment. A fire suppression system is essential to protect the equipment from fire hazards. Humidity control is crucial to prevent moisture-related damage, such ascorrosion and short circuits, which can adversely affect electronic components. Both factors are vital for maintaining an optimal environment for networking equipment.References: CompTIA Network+ study materials.

A hot site is a fully operational backup facility with hardware, network, and data synchronization already in place. It allows for immediate failover in the event of a disaster, minimizing downtime.

B. DCI (Data Center Interconnect) connects data centers but doesn’t guarantee availability unless built redundantly.

C. Direct Connect refers to a private link to cloud providers, not disaster recovery.

D. Active-passive can help with failover but may involve delay unless combined with hot site principles.

???? Reference:

CompTIA Network+ N10-009 Official Objectives: 4.4 – Summarize business continuity and disaster recovery concepts.

To support 75 hosts per subnet, you must choose a subnet size that provides at least 75 usable IP addresses. In IPv4, usable hosts per subnet equals 2^(host bits) − 2 (subtracting network and broadcast). A /25 leaves 7 host bits (32–25 = 7), giving 2^7 − 2 = 128 − 2 = 126 usable hosts, which meets the requirement and is the smallest (most efficient) option listed that does so. A /26 leaves 6 host bits, giving 62 usable hosts, which is insufficient. A /27 gives 30 usable, and a /28 gives 14 usable, both far below 75. Network+ subnetting objectives emphasize selecting the smallest subnet that satisfies the host requirement to conserve address space while meeting growth and design constraints. Therefore, 192.168.13.0/25 is the most efficient option that accommodates at least 75 hosts per subnet.

Multi-factor authentication (MFA) requires two or more different categories of authentication factors:

Something you know (password, PIN)

Something you have (smart card, hardware token)

Something you are (biometric)

The only valid second factor here is a hard token (e.g., a key fob generating one-time codes).

A. PIN is still “something you know,” the same category as a password.

B. Favorite color is a weak knowledge-based factor, not a true second factor.

D. Mother’s maiden name is also “something you know” and insecure.

References (CompTIA Network+ N10-009):

Domain: Network Security — Authentication methods, MFA factor categories.

IPv4 addresses are divided into classes:

Class A: Supports 16,777,214 hosts (large enterprises).

Class B: Supports 65,534 hosts (medium to large networks).

Class C: Supports 254 hosts (small to medium networks).

Class D: Used for multicast, not for assigning IPs to hosts.

Step-by-step Calculation:

The network will have 150 users initially, with a projected growth of 10 users, totaling 160 users.

Each user has two devices, so 160 × 2 = 320 IP addresses needed.

A Class C subnet has 254 usable IPs by default, which is not sufficient.

A Class B subnet can support thousands of hosts, making it the most appropriate option.

Incorrect Options:

A. Class D: Reserved for multicast, not for host assignments.

C. Class A: Overkill for a network of this size.

D. Class C: Cannot support 320 hosts without subnetting, making Class B the best choice.

Single-mode fiber is best suited for long-distance communication, often exceeding 10 km (6.2 miles). It ' s immune to EMI and offers high bandwidth — making it the ideal choice for connecting buildings across a city.

Coaxial (A) and Twinaxial (B) are used for shorter distances and specific use cases (e.g., storage or legacy systems).

Cat 5 (D) is limited to 100 meters and is not suitable for city-level interconnects.

✅ For long-distance, high-speed, and reliable communication between buildings, Single-mode fiber is the professional choice.

MAC flooding overwhelms a switch’s CAM (Content Addressable Memory) table by sending a flood of frames with spoofed MAC addresses. Once the CAM table overflows, the switch cannot learn legitimate MAC addresses and defaults to flooding all frames out all ports, effectively turning it into a hub. This allows an attacker to capture traffic not originally destined for their port.

A. ARP poisoning corrupts ARP tables to redirect traffic but does not overflow the CAM table.

B. Evil twin is a wireless rogue AP attack, unrelated to switch behavior.

D. DNS spoofing redirects domain queries, not Layer 2 switching.

References (CompTIA Network+ N10-009):

Domain: Network Security — Switch security, CAM table attacks, MAC flooding.