CompTIA Network+ N10-009 (V9) Exam Practice Test

1. A network monitoring platform wants to programmatically pull data from a cloud provider's infrastructure to include in its unified dashboard, rather than relying solely on traditional SNMP polling which the cloud provider may not fully support. What integration method should be used?

SNMP traps only

API integration, programmatically pulling data from the cloud provider's platform

Port mirroring

A syslog collector only

API integration allows a monitoring platform to programmatically pull data directly from a cloud provider's platform, which may not fully support traditional SNMP-based monitoring.

Explanation

API integration allows a monitoring platform to programmatically pull data directly from a cloud provider's platform, which may not fully support traditional SNMP-based monitoring.

2. A technician wants to verify the actual achievable download and upload throughput of an internet connection, comparing it against what the ISP has advertised. Which tool is designed specifically for this purpose?

A speed tester

Arp

LLDP

A visual fault locator

A speed tester measures the actual achievable download and upload throughput of a connection, allowing comparison against advertised ISP speeds.

Explanation

A speed tester measures the actual achievable download and upload throughput of a connection, allowing comparison against advertised ISP speeds.

3. Wireless clients on a network periodically and repeatedly disconnect from the wireless network entirely and have to manually reconnect, even when signal strength appears strong and stable. What category of wireless issue does this describe?

Signal degradation or loss due to distance

Client disassociation issues, where clients are being disconnected from the network despite otherwise adequate signal

Roaming misconfiguration, specific to moving between multiple access points

Channel overlap only

Client disassociation issues describe clients being repeatedly disconnected entirely, even with adequate signal, distinct from general signal degradation or roaming-specific issues.

Explanation

Client disassociation issues describe clients being repeatedly disconnected entirely, even with adequate signal, distinct from general signal degradation or roaming-specific issues.

4. A company's link between two offices has plenty of available bandwidth, but real-time video conferencing calls still feel delayed, with a noticeable lag between when someone speaks and when they're heard on the other end. What performance factor does this delay describe?

Bandwidth, since more available bandwidth would eliminate any delay

Latency, the time it takes data to travel from source to destination, which is separate from available bandwidth

Packet loss, since delay always indicates dropped packets

Jitter, since any delay is automatically classified as jitter

Latency refers to the time it takes data to travel from source to destination and is separate from available bandwidth; a link can have plenty of bandwidth while still suffering from high latency.

Explanation

Latency refers to the time it takes data to travel from source to destination and is separate from available bandwidth; a link can have plenty of bandwidth while still suffering from high latency.

5. A workstation can reach some devices on what should be its local subnet but not others, and cannot reach the default gateway either, despite having a valid IP address assigned. What misconfiguration commonly causes this specific partial connectivity pattern?

An incorrect subnet mask, causing the workstation to miscalculate which addresses are actually on its local subnet

A failed NTP server

An incorrect DNS server address

A disabled Wi-Fi radio

An incorrect subnet mask can cause a device to miscalculate which addresses fall within its local subnet, resulting in reaching some devices but not others, including the actual gateway.

Explanation

An incorrect subnet mask can cause a device to miscalculate which addresses fall within its local subnet, resulting in reaching some devices but not others, including the actual gateway.

6. A switch interface's counters show an increasing number of "runts," frames shorter than the minimum valid Ethernet frame size. What does this typically indicate?

A perfectly healthy, high-performing link

A possible duplex mismatch, faulty NIC, or physical layer issue causing malformed, undersized frames

Successful jumbo frame configuration

Correct VLAN tagging

Runts typically indicate a possible duplex mismatch, faulty NIC, or physical layer issue causing malformed frames.

Explanation

Runts typically indicate a possible duplex mismatch, faulty NIC, or physical layer issue causing malformed frames.

7. A technician receives reports of two seemingly unrelated issues at the same time: one user cannot print, and a different user cannot access a specific website. According to the troubleshooting methodology, how should these be approached?

As a single combined problem, since they were reported at the same time

As separate, individual problems, since combining unrelated issues can complicate identifying the actual root cause of each

By ignoring the printing issue entirely, since it is less important

By assuming they share the same root cause without investigation

The methodology recommends approaching multiple, seemingly unrelated problems individually, since combining unrelated issues can obscure the actual distinct root causes.

Explanation

The methodology recommends approaching multiple, seemingly unrelated problems individually, since combining unrelated issues can obscure the actual distinct root causes.

8. Which two statements correctly distinguish URL filtering from content filtering?

URL filtering blocks or allows access based on the specific web address requested

Content filtering inspects the actual content of a page, such as keywords or file types, regardless of the URL

URL filtering and content filtering are the exact same technique with different names

Content filtering can only be applied to encrypted traffic

URL filtering requires no defined list or category of addresses

URL filtering blocks or allows access based on the specific web address, while content filtering inspects actual page content regardless of URL.

Explanation

URL filtering blocks or allows access based on the specific web address, while content filtering inspects actual page content regardless of URL.

Submit

9. An attacker intercepts a specific DNS query in transit and sends a forged response back to the client before the legitimate DNS server's real response arrives, tricking the client into visiting a malicious site. What best describes this specific technique?

DNS poisoning, since it always involves corrupting a DNS server's cache long-term

A DDoS attack

MAC flooding

DNS spoofing involves forging a DNS response to a specific query, racing to answer before the legitimate response arrives. DNS poisoning more broadly refers to corrupting a cache long-term.

Explanation

DNS spoofing involves forging a DNS response to a specific query, racing to answer before the legitimate response arrives. DNS poisoning more broadly refers to corrupting a cache long-term.

10. A company wants employees to log into a third-party cloud application using their existing corporate credentials, without the cloud application ever directly storing or handling those corporate passwords, using an XML-based standard for exchanging authentication data. Which standard supports this?

RADIUS

SAML (Security Assertion Markup Language), an XML-based standard for exchanging authentication data between an identity provider and a service

TACACS+

LDAP alone, with no additional standard needed

SAML is an XML-based standard for exchanging authentication data between an identity provider and a service, enabling federated single sign-on without the service handling the password directly.

Explanation

SAML is an XML-based standard for exchanging authentication data between an identity provider and a service, enabling federated single sign-on without the service handling the password directly.

11. A network administrator needs to remotely access a router's command-line interface and wants the session, including any credentials entered, to be encrypted in transit. Which connection method should be used?

Telnet, since it is the traditional method

SSH, which encrypts the remote command-line session

An unencrypted console cable over a long distance

HTTP, accessed via a web browser

SSH encrypts the entire remote command-line session, including credentials. Telnet and unencrypted HTTP both transmit data in plaintext.

Explanation

SSH encrypts the entire remote command-line session, including credentials. Telnet and unencrypted HTTP both transmit data in plaintext.

12. A network is running IPv6-only internally but needs its IPv6-only devices to be able to communicate with legacy IPv4-only services still present on the internet. Which technology enables this translation?

SLAAC

NAT64, translating between IPv6 and IPv4

DNSSEC

A hosts file

NAT64 translates between IPv6 and IPv4 addressing, allowing IPv6-only devices to communicate with IPv4-only destinations during the ongoing IPv6 transition.

Explanation

NAT64 translates between IPv6 and IPv4 addressing, allowing IPv6-only devices to communicate with IPv4-only destinations during the ongoing IPv6 transition.

13. A vendor's datasheet reports that a specific piece of hardware fails on average once every 50,000 hours of operation, and when it does fail, it typically takes 4 hours to repair. Which two metrics do these two numbers represent, respectively?

MTTR of 50,000 hours, and MTBF of 4 hours

MTBF (Mean Time Between Failures) of 50,000 hours, and MTTR (Mean Time To Repair) of 4 hours

RPO of 50,000 hours, and RTO of 4 hours

Both numbers represent the same metric

MTBF measures the average time between failures, matching the 50,000-hour figure, while MTTR measures the average time to repair, matching the 4-hour figure.

Explanation

MTBF measures the average time between failures, matching the 50,000-hour figure, while MTTR measures the average time to repair, matching the 4-hour figure.

14. A company wants centralized file-level storage that multiple users can access over the network using standard file sharing protocols, as opposed to block-level storage presented to servers as if it were a local disk. Which solution fits the file-level need?

A storage area network (SAN), providing block-level storage

Network-attached storage (NAS), providing file-level storage accessible over the network

A content delivery network (CDN)

A load balancer

NAS provides file-level storage accessible over the network using standard file sharing protocols. A SAN provides block-level storage, a CDN caches content, and a load balancer distributes traffic.

Explanation

NAS provides file-level storage accessible over the network using standard file sharing protocols. A SAN provides block-level storage, a CDN caches content, and a load balancer distributes traffic.

15. A company wants its asset inventory system to track not just what hardware it owns, but also when each device's manufacturer warranty expires, to plan for replacements before support runs out. What category of information should be included in the asset inventory for this purpose?

Wireless survey/heat map data

Warranty support information

IP address management (IPAM) data only

Rack diagram data only

Including warranty support information in an asset inventory allows a company to track when manufacturer warranty coverage expires, supporting proactive replacement planning.

Explanation

Including warranty support information in an asset inventory allows a company to track when manufacturer warranty coverage expires, supporting proactive replacement planning.

16. A multi-floor office building has a central location where all external and internal cabling converges, and separate smaller wiring closets on each individual floor that connect back to that central location. What are the smaller per-floor wiring closets called?

Main distribution frames (MDFs)

Intermediate distribution frames (IDFs)

Screened subnets

Patch panels only, with no other designation

IDFs are the smaller, per-floor wiring closets that connect back to the central main distribution frame (MDF), the primary convergence point.

Explanation

IDFs are the smaller, per-floor wiring closets that connect back to the central main distribution frame (MDF), the primary convergence point.

17. Fill in the blank: the unique MAC address identifying one specific access point's radio, distinguishing it from other APs broadcasting the same network name, is called the ____.

The BSSID is the unique MAC address of a specific access point's radio, distinguishing it from other access points even when they broadcast the same SSID.

Explanation

The BSSID is the unique MAC address of a specific access point's radio, distinguishing it from other access points even when they broadcast the same SSID.

Submit

18. A large outdoor venue wants multiple wireless access points to communicate with each other directly, dynamically routing traffic between nodes to provide flexible coverage without every node needing a direct wired connection back to a central switch. Which wireless network type fits this need?

Infrastructure mode with a single access point

A mesh network, where multiple nodes communicate with each other to relay traffic

Point to point mode

Ad hoc mode between two client devices only

A mesh network allows multiple nodes to communicate directly with each other, dynamically relaying traffic without every node needing its own dedicated wired connection.

Explanation

A mesh network allows multiple nodes to communicate directly with each other, dynamically relaying traffic without every node needing its own dedicated wired connection.

19. Two routers configured with an FHRP present a single shared IP address to hosts on the local subnet as their default gateway, even though the underlying physical routers each retain their own separate individual IP addresses too. What is this shared, presented address called?

A loopback address

A virtual IP (VIP)

An APIPA address

A subinterface address

The shared address presented to hosts by an FHRP configuration is called a virtual IP (VIP), separate from each physical router's own individual address.

Explanation

The shared address presented to hosts by an FHRP configuration is called a virtual IP (VIP), separate from each physical router's own individual address.

20. A network administrator wants to assign an IP address to a VLAN itself on a Layer 3 switch, allowing that switch to route traffic between VLANs. What should be configured?

A native VLAN with no IP address

A switch virtual interface (SVI), giving the VLAN a logical Layer 3 interface with an IP address

A trunk port only

Port security

An SVI creates a logical Layer 3 interface for a VLAN on a Layer 3 switch, giving it an IP address so the switch can route traffic between VLANs.

Explanation

An SVI creates a logical Layer 3 interface for a VLAN on a Layer 3 switch, giving it an IP address so the switch can route traffic between VLANs.

21. A network engineer sees an IP address of 10.4.2.1 and needs to identify which classful address range it originally belonged to, for historical context. Which class does this address fall under?

Class A, since addresses starting with a first octet from 1 to 126 fall into this range

Class B

Class C

Class D

Class A addresses have a first octet ranging from 1 to 126, and 10.4.2.1 falls within that range, though classful addressing has largely been replaced by CIDR in modern practice.

Explanation

Class A addresses have a first octet ranging from 1 to 126, and 10.4.2.1 falls within that range, though classful addressing has largely been replaced by CIDR in modern practice.

22. A network engineer is reviewing documentation and sees a reference to the 802.3 standard governing a particular type of connection. What type of connection does the 802.3 standard family govern?

Wireless connections

Wired Ethernet connections

Cellular connections

Satellite connections

The 802.3 standard family governs wired Ethernet connections. The 802.11 standard family, by contrast, governs wireless networking.

Explanation

The 802.3 standard family governs wired Ethernet connections. The 802.11 standard family, by contrast, governs wireless networking.

23. Match each three-tier hierarchical model layer to its correct function.

Core layer

Distribution layer

Access layer

The core layer provides backbone connectivity, the distribution layer aggregates traffic and applies policy, and the access layer connects end-user devices to the network.

Explanation

The core layer provides backbone connectivity, the distribution layer aggregates traffic and applies policy, and the access layer connects end-user devices to the network.

Submit

24. Which two statements about VXLAN are correct?

VXLAN encapsulates Layer 2 Ethernet frames within Layer 3 UDP packets

VXLAN allows a Layer 2 segment to be extended across separate physical data centers connected by a Layer 3 network

VXLAN operates exclusively at Layer 1

VXLAN eliminates the need for any IP addressing entirely

VXLAN is a wireless-only technology

VXLAN encapsulates Layer 2 frames within Layer 3 UDP packets, allowing a Layer 2 segment to be extended across a Layer 3 network between physically separate data centers.

Explanation

VXLAN encapsulates Layer 2 frames within Layer 3 UDP packets, allowing a Layer 2 segment to be extended across a Layer 3 network between physically separate data centers.

Submit

25. A company needs to transfer files to a remote server securely, with the transfer encrypted in transit, replacing an older unencrypted file transfer method. Which protocol should be used?

FTP

SFTP (Secure File Transfer Protocol), which encrypts the transfer

TFTP

Telnet

SFTP encrypts file transfers in transit, unlike traditional FTP which transmits data in plaintext. TFTP is an even more basic unauthenticated protocol, and Telnet is unencrypted remote access.

Explanation

SFTP encrypts file transfers in transit, unlike traditional FTP which transmits data in plaintext. TFTP is an even more basic unauthenticated protocol, and Telnet is unencrypted remote access.

CompTIA Network+ N10-009 (V9) Exam Practice Test 5

1. A network monitoring platform wants to programmatically pull data from a cloud provider's infrastructure to include in its unified dashboard, rather than relying solely on traditional SNMP polling which the cloud provider may not fully support. What integration method should be used?

2.

What first name or nickname would you like us to use?

2. A technician wants to verify the actual achievable download and upload throughput of an internet connection, comparing it against what the ISP has advertised. Which tool is designed specifically for this purpose?

3. Wireless clients on a network periodically and repeatedly disconnect from the wireless network entirely and have to manually reconnect, even when signal strength appears strong and stable. What category of wireless issue does this describe?

4. A company's link between two offices has plenty of available bandwidth, but real-time video conferencing calls still feel delayed, with a noticeable lag between when someone speaks and when they're heard on the other end. What performance factor does this delay describe?

5. A workstation can reach some devices on what should be its local subnet but not others, and cannot reach the default gateway either, despite having a valid IP address assigned. What misconfiguration commonly causes this specific partial connectivity pattern?

6. A switch interface's counters show an increasing number of "runts," frames shorter than the minimum valid Ethernet frame size. What does this typically indicate?

7. A technician receives reports of two seemingly unrelated issues at the same time: one user cannot print, and a different user cannot access a specific website. According to the troubleshooting methodology, how should these be approached?

8. Which two statements correctly distinguish URL filtering from content filtering?

9. An attacker intercepts a specific DNS query in transit and sends a forged response back to the client before the legitimate DNS server's real response arrives, tricking the client into visiting a malicious site. What best describes this specific technique?

11. A network administrator needs to remotely access a router's command-line interface and wants the session, including any credentials entered, to be encrypted in transit. Which connection method should be used?

12. A network is running IPv6-only internally but needs its IPv6-only devices to be able to communicate with legacy IPv4-only services still present on the internet. Which technology enables this translation?

13. A vendor's datasheet reports that a specific piece of hardware fails on average once every 50,000 hours of operation, and when it does fail, it typically takes 4 hours to repair. Which two metrics do these two numbers represent, respectively?

14. A company wants centralized file-level storage that multiple users can access over the network using standard file sharing protocols, as opposed to block-level storage presented to servers as if it were a local disk. Which solution fits the file-level need?

15. A company wants its asset inventory system to track not just what hardware it owns, but also when each device's manufacturer warranty expires, to plan for replacements before support runs out. What category of information should be included in the asset inventory for this purpose?

16. A multi-floor office building has a central location where all external and internal cabling converges, and separate smaller wiring closets on each individual floor that connect back to that central location. What are the smaller per-floor wiring closets called?

17. Fill in the blank: the unique MAC address identifying one specific access point's radio, distinguishing it from other APs broadcasting the same network name, is called the ____.

18. A large outdoor venue wants multiple wireless access points to communicate with each other directly, dynamically routing traffic between nodes to provide flexible coverage without every node needing a direct wired connection back to a central switch. Which wireless network type fits this need?

19. Two routers configured with an FHRP present a single shared IP address to hosts on the local subnet as their default gateway, even though the underlying physical routers each retain their own separate individual IP addresses too. What is this shared, presented address called?

20. A network administrator wants to assign an IP address to a VLAN itself on a Layer 3 switch, allowing that switch to route traffic between VLANs. What should be configured?

21. A network engineer sees an IP address of 10.4.2.1 and needs to identify which classful address range it originally belonged to, for historical context. Which class does this address fall under?

22. A network engineer is reviewing documentation and sees a reference to the 802.3 standard governing a particular type of connection. What type of connection does the 802.3 standard family govern?

23. Match each three-tier hierarchical model layer to its correct function.

24. Which two statements about VXLAN are correct?

25. A company needs to transfer files to a remote server securely, with the transfer encrypted in transit, replacing an older unencrypted file transfer method. Which protocol should be used?