CompTIA Updated N10-009 Exam Questions and Answers by hadley

VLAN hopping is an attack where an attacker crafts packets with multiple VLAN tags, allowing them to traverse VLAN boundaries improperly. This can result in gaining unauthorized access to network segments that are supposed to be isolated. The other options do not involve the use of multiple network tags. MAC flooding aims to overwhelm a switch’s MAC address table, DNS spoofing involves forging DNS responses, and ARP poisoning involves sending fake ARP messages.

Comprehensive and Detailed Explanation:

The key difference is that anIntrusion Prevention System (IPS)isinstalled in linewith network traffic, allowing it toactively block threats. In contrast, anIntrusion Detection System (IDS)onlymonitorsandalertswithout actively blocking traffic.

Breakdown of Options:

A. An IPS needs to be installed in line with traffic and an IDS does not.✅Correct answer.IPSactively prevents threats, while IDSonly detectsthem.

B. An IPS is signature-based and an IDS is not.–False, bothcanusesignature-based detection.

C. An IPS is less susceptible to false positives than an IDS.–False, both can producefalse positives, depending on configurations.

D. An IPS requires less administrative overhead than an IDS.–False, IPS requiresmoreadministrative effort due toreal-time blocking decisions.