Network technician at monitors showing network diagrams in a server room
Free practice set · Original questions

All exams/Professional Certifications/CompTIA Network+ (N10-009)/Free questions

Free CompTIA Network+ (N10-009) practice questions

Tap an answer to see if you are right, and why. 20 questions across 5 topics, mostly Concepts (8).

Start the set Take a timed mock examPrintable cheat sheet
Passing score: 80% (target)
Format: N10-009
Bank: 300 Qs (20 free)
100% Sourced explanations

Questions last updated October 7, 2026 · Questions written from the published CompTIA Network+ N10-009 exam objectives; not official or recalled CompTIA items.

0 of 20 answeredTap an answer to check it

  1. Concepts1 of 20

    A network technician is configuring a device that operates at Layer 3 of the OSI model and makes forwarding decisions based on IP addresses. Which device is the technician most likely configuring?

    The answer

    Answer: B. Routers operate at Layer 3 (Network) of the OSI model and use IP addresses to make forwarding decisions. Switches work at Layer 2 using MAC addresses, hubs repeat signals at Layer 1, and bridges filter traffic at Layer 2.

    Source: CompTIA Network+ N10-009 — Networking Concepts: OSI Model, 23%

  2. Concepts2 of 20

    A network administrator needs to assign a private IP address to a workstation on a LAN. Which of the following addresses falls within the RFC 1918 private range for Class B networks?

    The answer

    Answer: C. RFC 1918 defines private Class B ranges as 172.16.0.0 through 172.31.255.255. The 192.168.x.x range is Class C private, 10.x.x.x is Class A private, and 128.0.0.1 is a public address.

    Source: CompTIA Network+ N10-009 — Networking Concepts: IPv4 Addressing, 23%

  3. Concepts3 of 20

    A user reports they can reach internal servers but not external websites. Which default gateway issue would cause this symptom?

    The answer

    Answer: C. If the default gateway firewall blocks all outbound traffic, internal communication works (same subnet) but external traffic is dropped. A wrong subnet gateway or DNS failure would affect all resolution or routing.

    Source: CompTIA Network+ N10-009 — Networking Concepts: IPv4 Addressing, 23%

  4. Concepts4 of 20

    A company deploys a cloud environment where the network administrator manages virtual switches and subnets but not the underlying physical hosts. Which cloud service model is being used?

    The answer

    Answer: D. IaaS provides virtualized networking, compute, and storage where the customer manages OS and network configuration but not the physical hardware. SaaS delivers applications, PaaS provides a development platform, and FaaS is serverless compute.

    Source: CompTIA Network+ N10-009 — Networking Concepts: Cloud Computing, 23%

  5. Concepts5 of 20

    An administrator is troubleshooting a host that received an IP address of 169.254.12.8. What does this indicate?

    The answer

    Answer: C. APIPA (Automatic Private IP Addressing) assigns a 169.254.x.x address when a DHCP server is unreachable. This allows local-link communication only and indicates a DHCP failure.

    Source: CompTIA Network+ N10-009 — Networking Concepts: IPv4 Addressing, 23%

  6. Concepts6 of 20

    A network engineer needs to connect two buildings 300 meters apart using fiber. Which fiber type is the most cost-effective choice for this distance?

    The answer

    Answer: B. Multimode fiber supports distances up to about 550 meters and is cheaper than single-mode for short-to-medium runs. Single-mode supports longer distances but requires more expensive transceivers.

    Source: CompTIA Network+ N10-009 — Networking Concepts: Transmission Media, 23%

  8. Concepts7 of 20

    A technician runs a command that shows a default route of 0.0.0.0/0 pointing to 10.0.0.1. What is the purpose of this route?

    The answer

    Answer: A. A default route (0.0.0.0/0) matches any destination not explicitly in the routing table and forwards packets to the next-hop gateway. It acts as a catch-all for all outbound traffic.

    Source: CompTIA Network+ N10-009 — Infrastructure: Routing Technologies, 20%

  9. Infrastructure8 of 20

    A network administrator configures a switch port so that devices on VLAN 10 and VLAN 20 can communicate through a single router interface. What is this configuration called?

    The answer

    Answer: B. Router on a stick uses subinterfaces on a single router port to route between VLANs. The trunk link carries tagged frames, and each subinterface handles one VLAN's traffic.

    Source: CompTIA Network+ N10-009 — Infrastructure: Switching Technologies, 20%

  10. Infrastructure9 of 20

    A company needs to ensure that if one uplink fails, the remaining links still carry traffic between two switches. Which technology should the administrator implement?

    The answer

    Answer: D. LACP bundles multiple physical links into a logical channel, providing increased bandwidth and failover. If one link fails, traffic redistributes across remaining members.

    Source: CompTIA Network+ N10-009 — Infrastructure: Switching Technologies, 20%

  11. Operations10 of 20

    A network administrator wants to capture all traffic passing through a switch port for forensic analysis without interrupting production traffic. Which feature should be enabled?

    The answer

    Answer: C. Port mirroring (SPAN) copies traffic from one port to another for monitoring. A connected analysis tool captures packets passively without disrupting the original traffic flow.

    Source: CompTIA Network+ N10-009 — Network Operations: Network Monitoring, 19%

  12. Operations11 of 20

    A disaster recovery plan requires that after a failure, the network must be restored within four hours with data no more than one hour old. Which metrics define these requirements?

    The answer

    Answer: B. RTO (Recovery Time Objective) specifies the maximum acceptable downtime, and RPO (Recovery Point Objective) defines the maximum tolerable data loss in time. MTBF is mean time between failures.

    Source: CompTIA Network+ N10-009 — Network Operations: Disaster Recovery, 19%

  13. Operations12 of 20

    A technician needs to verify that all network device clocks are synchronized to within a few milliseconds for log correlation and security event analysis. Which protocol should be configured?

    The answer

    Answer: B. PTP provides sub-millisecond clock synchronization, far more precise than NTP which typically achieves millisecond accuracy. SNMP monitors devices, TFTP transfers files, and Syslog collects logs.

    Source: CompTIA Network+ N10-009 — Network Operations: Network Services, 19%

  14. Security13 of 20

    A security analyst notices that a user is attempting to access resources by repeatedly trying different username and password combinations. Which attack type is this?

    The answer

    Answer: D. A brute force attack systematically tries numerous credential combinations to gain unauthorized access. Phishing uses deceptive emails, VLAN hopping exploits trunk configurations, and ARP spoofing redirects traffic.

    Source: CompTIA Network+ N10-009 — Network Security: Common Attack Types, 14%

  15. Security14 of 20

    A network administrator deploys a device that analyzes traffic patterns and alerts when it detects potential intrusions but does not actively block them. What type of device was deployed?

    The answer

    Answer: A. An IDS monitors traffic and generates alerts for suspicious activity but does not take action to block it. An IPS sits inline and can actively prevent threats. Firewalls filter based on rules.

    Source: CompTIA Network+ N10-009 — Networking Concepts: Networking Appliances, 23%

  16. Security15 of 20

    A company wants to ensure that only authorized devices can connect to the corporate network, regardless of whether they connect via wired or wireless. Which security framework should be implemented?

    The answer

    Answer: D. NAC enforces security policies by verifying device compliance before granting network access. It works across wired and wireless connections, checking posture, credentials, and device health.

    Source: CompTIA Network+ N10-009 — Network Security: Security Features and Defense, 14%

  17. Troubleshooting16 of 20

    Users on VLAN 10 report intermittent connectivity while users on VLAN 20 are unaffected. The switch log shows frequent MAC address table changes on ports assigned to VLAN 10. What is the most likely cause?

    The answer

    Answer: B. Frequent MAC table changes suggest STP topology reconvergence, which causes temporary connectivity loss. Broadcast storms affect all VLANs, DHCP exhaustion produces no-connectivity, and duplicate IPs cause specific host conflicts.

    Source: CompTIA Network+ N10-009 — Troubleshooting: Network Services Issues, 24%

  19. Troubleshooting17 of 20

    A technician uses the ping command and receives replies with a TTL value of 254. The destination is five hops away. What does the TTL value indicate about the packets?

    The answer

    Answer: A. TTL starts at 255 (or 128 on Windows) and decrements by one at each router hop. A TTL of 254 from a 255 starting point means one hop was traversed. TTL 0 would indicate the limit was exceeded.

    Source: CompTIA Network+ N10-009 — Troubleshooting: Command Line Tools, 24%

  20. Concepts18 of 20

    A company needs to load balance incoming web traffic across three servers. Which device or technology is best suited for this task?

    The answer

    Answer: D. A load balancer distributes incoming connections across multiple servers, monitoring health and maintaining session persistence. DNS round-robin distributes queries but cannot monitor server health or manage sessions.

    Source: CompTIA Network+ N10-009 — Networking Concepts: Networking Appliances, 23%

  21. Infrastructure19 of 20

    A network administrator needs to configure a wireless access point for a high-density conference hall. Which band should be primarily used to minimize interference from Bluetooth devices?

    The answer

    Answer: A. The 5 GHz band offers more channels and is less congested than 2.4 GHz, which shares spectrum with Bluetooth, microwaves, and other devices. 60 GHz is mmWave with very limited range.

    Source: CompTIA Network+ N10-009 — Infrastructure: Wireless Devices, 20%

  22. Operations20 of 20

    A company is decommissioning an aging switch. Which step should be completed first before removing it from the rack?

    The answer

    Answer: B. Documentation of current configuration, VLANs, port assignments, and connections is critical before decommissioning. This preserves institutional knowledge and assists with troubleshooting if issues arise later.

    Source: CompTIA Network+ N10-009 — Network Operations: Life-cycle Management, 19%

Official Test Specs & Sourced Summary

The official CompTIA Network+ (N10-009) knowledge examination covers N10-009 with a passing threshold of 80%. Questions written from the published CompTIA Network+ N10-009 exam objectives; not official or recalled CompTIA items. Every question on this page is original, with an explanation and a note citing its source.

Passing Score80% target
FormatN10-009 · maximum of 90 items
Question Bank300 questions (20 free)
Verified SourceCompTIA Network+ N10-009 Certification Exam Objectives

That’s the free set. The full bank has 300.

More original practice questions across the listed topics, a 90-question timed exam simulator, and saved mistake review. Internal QuizCram practice target. CompTIA scores Network+ as a scaled 720 on a 100–900 scale, which is not a raw percentage and cannot be converted into one. One payment of $19.99, yours forever.

Practice the free set