Quality of Service (QoS) prioritizes delay-sensitive traffic such as VoIP by assigning higher priority in queues, reducing jitter, latency, and packet loss. Implementing QoS policies ensures stable and clear voice communication.
B). STP (Spanning Tree Protocol) prevents switching loops, but it does not address jitter or real-time traffic performance.
References (CompTIA Network+ N10-009):
Domain: Network Infrastructure - QoS, traffic shaping, prioritization of voice/video.

URL filtering can block access to websites based on their domain or country code TLDs (e.g., .cn, .ru). This is the correct method to block by location identifiers in URLs.
B . Content filtering blocks based on keywords or categories within websites, not country code.
C . DNS poisoning is an attack, not a control mechanism.
D . MAC filtering restricts devices, not websites.
Reference (CompTIA Network+ N10-009):
Domain: Network Security - Filtering technologies, URL vs content filtering.

* Introduction to Administrative Distance
* Administrative distance (AD) is a value used by routers to rank routes from different routing protocols. AD represents the trustworthiness of the source of the route. Lower AD values are more preferred. If a router has multiple routes to a destination from different sources, it will choose the route with the lowest AD.
* Static Routes and Backup Routes
* When a dynamic routing protocol is not used, static routes can be employed. Static routes are manually configured routes. To ensure a backup route, multiple static routes to the same destination can be configured with different AD values.
* Configuring Static Routes with Administrative Distance
* The primary route is configured with a lower AD value, making it the preferred route. The backup route is configured with a higher AD value. In the event of the primary route failure, the router will then use the backup route.
* Example Configuration:
plaintext
Copy code
ip route 192.168.1.0 255.255.255.0 10.0.0.1 1
ip route 192.168.1.0 255.255.255.0 10.0.0.2 10
* In the above example, 192.168.1.0/24 is the destination network.
* 10.0.0.1 is the next-hop IP address for the primary route with an AD of 1.
* 10.0.0.2 is the next-hop IP address for the backup route with an AD of 10.
* Verification:
* After configuration, use the show ip route command to verify that the primary route is in use and the backup route is listed as a candidate for use if the primary route fails.

A honeypot is specifically designed to attract, isolate, and observe malicious activity so defenders can learn how an attacker is operating and determine attack techniques. In the context of Network+ (N10-009) security objectives, honeypots (and broader deception technologies) are defensive controls used to detect reconnaissance and exploitation attempts by presenting a decoy system or service that appears legitimate.
Because a honeypot should not receive normal production traffic, any interaction is suspicious, making it valuable for identifying threat actors, collecting indicators of compromise, and analyzing the attacker's tools, commands, and behavior patterns. This supports the goal of understanding the type of attack used (for example, credential stuffing, exploitation attempts, lateral movement probes) while keeping the attacker away from real assets.
MFA strengthens authentication but does not provide a controlled environment to observe attacker techniques.
A screened subnet (DMZ) is for segmentation of public-facing services and reducing exposure of internal systems, but it is not primarily used to "bait" and analyze attackers. A captive portal enforces user acknowledgement/authentication for network access; it is not a deception/analysis system. Therefore, honeypot is the best match.