Objective 4.3

N10-009

Given a scenario, apply network security features, defense techniques, and solutions.

Objective 4.3 sits in Network Security, which carries 14% of the Network+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

4-3Network Security

A technician configures a switch port connected to one desktop as a static-access port in VLAN 20 rather than a dynamic trunk. What security benefit results from this configuration?

The port blocks all traffic tagged as multicastVLAN membership does not filter by traffic type such as multicast.
The port encrypts all outbound Ethernet framesVLAN assignment has no effect on frame encryption; that is a separate control.
The port authenticates users through RADIUSStatic-access configuration is a Layer 2 setting and performs no RADIUS authentication.
The port forwards traffic for only VLAN 20Correct · your answerThis is correct: static-access assignment restricts the port to VLAN 20 traffic only.

Correct.

Checked against cisco.com, August 2026

Concept

Device hardening reduces attack surface by limiting what a switch port is permitted to carry.

Why D

A static-access port assigned to VLAN 20 forwards only that VLAN's traffic, unlike a trunk that could carry many VLANs and be manipulated.

Source

A static-access port can belong to one VLAN and is manually assigned to that VLAN.

Cisco: Configuring VLANs, checked August 2026
#device hardening#vlan#static-access port

Now you: objective 4.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

4-3Network Security

You enable ESP rather than AH on a site to site tunnel carrying payroll data between two offices. Which set of services does ESP provide to the protected payload?

Sample question 2 of 3

4-3Network Security

An engineer inspects an IPsec packet and finds the ESP header sitting before an encapsulated IP header. Which mode is in use?

Sample question 3 of 3

4-3Network Security

A configuration enables ESP encryption with no integrity mechanism alongside it. Against which attacker does RFC 4303 say this generally still defends?

Full Network+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Network Security