Port security is a Layer 2 security feature that restricts the number of devices connecting to a network switch port. It helps prevent unauthorized devices, such as an unmanaged switch, from being connected to the network.
How Port Security Works:
Limits the number of MAC addresses that can connect to a port.
Can shut down or restrict the port if an unauthorized device is detected.
Prevents users from plugging in unauthorized networking equipment (e.g., unmanaged switches, hubs).
Incorrect Options:
A). Screened Subnet: A screened subnet (DMZ) is used for isolating external-facing servers, not for controlling unauthorized network connections.
B). 802.1X: Provides authentication for devices but requires a RADIUS server, which is a more complex solution than port security.
C). MAC Filtering: Controls which MAC addresses can connect but is difficult to manage and can be spoofed.
Reference:
CompTIA Network+ N10-009 Official Study Guide - Chapter on Network Security Controls

Voice VLANs rely on 802.1Q tagging to separate voice traffic from data traffic on the same physical link.
This separation allows QoS policies to prioritize VoIP, reducing jitter and packet loss.
B). Jumbo frames improve throughput for large data transfers, not voice.
C). Native VLAN is the untagged VLAN, not specifically for voice.
D). Link aggregation bundles links for bandwidth/redundancy, not QoS.
References (CompTIA Network+ N10-009):
Domain: Network Infrastructure - VLANs, voice VLANs, 802.1Q tagging, QoS.

A content filter blocks access to specific websites based on category, URL, or keywords. This is the best solution to restrict gambling websites.
Breakdown of Options:
A). ACLs - Control network access, not specific web content.
B). Content filter - # Correct answer. Used to block access to unwanted websites.
C). Port security - Prevents unauthorized device connections, not web traffic filtering.
D). Screened subnet - A DMZ isolates public-facing servers, not user restrictions.
Reference:
CompTIA Network+ (N10-009) Official Study Guide - Domain 3.3: Given a scenario, implement network security measures.

The correct answer is hub-and-spoke. In this design, the head office serves as the hub, and all satellite or branch offices (the spokes) connect directly to the hub using leased lines or VPNs. Communication between spokes typically passes through the hub, which centralizes connectivity and simplifies management.
A). Mesh involves every site connecting to every other site, which is more redundant but costly.
B). Point-to-point describes a single dedicated link between two sites, not a multi-site topology.
D). Star is often used in LAN switching, with all devices connecting to a central switch, but it's not the WAN architecture typically used here.
Hub-and-spoke is a cost-effective WAN design, as fewer circuits are needed compared to full mesh. However, its main disadvantage is reliance on the hub site: if the hub goes down, inter-spoke communication fails.
References (CompTIA Network+ N10-009):
Domain: Networking Concepts - WAN topologies (hub-and-spoke, mesh, point-to-point).

To change where the outside DNS records are hosted, the network administrator needs to update the NS (Name Server) records at the domain registrar. NS records specify the authoritative name servers for a domain, directing where DNS queries should be sent.
NS (Name Server) Records: These records indicate the servers that are authoritative for a domain. Changing the NS records at the registrar points DNS resolution to the new hosting provider.
SOA (Start of Authority): Contains administrative information about the domain, including the primary name server.
PTR (Pointer) Records: Used for reverse DNS lookups, mapping IP addresses to domain names.
CNAME (Canonical Name) Records: Used to alias one domain name to another, not relevant for changing DNS hosting.
Network References:
CompTIA Network+ N10-007 Official Certification Guide: Discusses DNS records, their purposes, and how to manage them.
Cisco Networking Academy: Provides training on DNS management and the role of different DNS record types.
Network+ Certification All-in-One Exam Guide: Explains DNS records and their configuration for domain management.