10 beginner questions on the Network+ N10-009 domains: networking concepts (UDP, private IPv4 ranges), implementation (VLANs, dynamic routing), operations (syslog, NTP), security (SSH, WPA3) and troubleshooting (DNS, tracert).

Ready to test yourself? Take the graded Beginner test (free; sign in with Google, one click) to get your score.

  1. A user can reach an internal web server by typing its IP address but not by typing its hostname. Which service is most likely failing?

    • A. DHCP
    • B. DNS ✔ correct
    • C. NTP
    • D. SNMP

    Answer: B. DNS translates hostnames into IP addresses. If the IP address works but the name does not, name resolution is the problem. DHCP assigns addresses, NTP syncs clocks and SNMP monitors devices.

    Source: www.rfc-editor.org/rfc/rfc1034 · Domain: Network troubleshooting

  2. Which transport-layer protocol is connectionless and sends data without a handshake or guaranteed delivery?

    • A. TCP
    • B. FTP
    • C. UDP ✔ correct
    • D. SMTP

    Answer: C. UDP sends datagrams with minimal protocol overhead: no handshake, and delivery and ordering are not guaranteed. TCP is connection-oriented, while FTP and SMTP are application-layer protocols.

    Source: www.rfc-editor.org/rfc/rfc768 · Domain: Networking concepts

  3. Which IPv4 address belongs to a private address range defined in RFC 1918?

    • A. 192.168.20.14 ✔ correct
    • B. 172.32.10.5
    • C. 11.0.0.25
    • D. 8.8.4.4

    Answer: A. RFC 1918 reserves 10.0.0.0/8, 172.16.0.0/12 (172.16.0.0 to 172.31.255.255) and 192.168.0.0/16 for private networks. 172.32.10.5 is just outside the 172.16.0.0/12 block, so it is a public address.

    Source: www.rfc-editor.org/rfc/rfc1918 · Domain: Networking concepts

  4. A company wants guest devices and staff devices that share the same physical switch to be in separate broadcast domains. Which switch feature should the administrator configure?

    • A. Port mirroring
    • B. Link aggregation
    • C. Power over Ethernet
    • D. VLANs ✔ correct

    Answer: D. A VLAN splits one physical LAN into separate, isolated broadcast domains at the data link layer. Port mirroring copies traffic for analysis, and link aggregation bundles links for more bandwidth.

    Source: csrc.nist.gov/glossary/term/virtual_local_area_network · Domain: Network implementation

  5. Which two of the following are dynamic routing protocols? (Select TWO)

    • A. OSPF ✔ correct
    • B. ARP
    • C. BGP ✔ correct
    • D. DHCP
    • E. STP

    Answer: A, C. OSPF (a link-state interior gateway protocol) and BGP (the routing protocol between autonomous systems on the internet) exchange routes between routers. ARP maps IPs to MAC addresses, DHCP assigns addresses and STP prevents switching loops.

    Source: www.rfc-editor.org/rfc/rfc2328 · Domain: Network implementation

  6. An administrator wants routers and switches to send their event messages to one central log server. Which protocol is designed for this?

    • A. TFTP
    • B. Syslog ✔ correct
    • C. RDP
    • D. LDAP

    Answer: B. Syslog is the standard protocol for sending event messages from devices to a central collector. TFTP transfers files, RDP provides remote desktop access and LDAP queries directory services.

    Source: www.rfc-editor.org/rfc/rfc5424 · Domain: Network operations

  7. Synchronizing device clocks with NTP makes it easier to correlate log entries from different network devices.

    • A. True ✔ correct
    • B. False

    Answer: A. True. NTP keeps clocks on routers, switches and servers in sync. With consistent timestamps, events from several devices can be lined up in the right order during monitoring and troubleshooting.

    Source: www.rfc-editor.org/rfc/rfc5905 · Domain: Network operations

  8. An engineer manages switches over Telnet and wants the command-line sessions to be encrypted. Which protocol should replace Telnet?

    • A. SSH ✔ correct
    • B. HTTP
    • C. SNMPv1
    • D. FTP

    Answer: A. SSH provides encrypted, authenticated remote command-line sessions. Telnet sends everything, including passwords, in clear text. HTTP, SNMPv1 and FTP are also unencrypted.

    Source: www.rfc-editor.org/rfc/rfc4251 · Domain: Network security

  9. A small business is setting up a new wireless network and wants the latest Wi-Fi Alliance security standard. Which option should it choose?

    • A. WEP
    • B. WPA with TKIP
    • C. WPA3 ✔ correct
    • D. Open with MAC filtering

    Answer: C. WPA3 is the current Wi-Fi Alliance security certification, with stronger authentication and encryption. WEP and WPA with TKIP are outdated, and MAC filtering on an open network is easily bypassed.

    Source: www.wi-fi.org/discover-wi-fi/security · Domain: Network security

  10. A user reports slow access to a remote site. The administrator wants to see each router hop on the path to the destination. Which Windows command should be used?

    • A. nslookup
    • B. arp -a
    • C. ipconfig /release
    • D. tracert ✔ correct

    Answer: D. tracert sends packets with increasing TTL values to show each hop on the path and its delay. nslookup queries DNS and arp -a shows the ARP cache.

    Source: learn.microsoft.com/en-us/windows-server/administration/windows-commands/tracert · Domain: Network troubleshooting

Original practice questions written by xOps School (DevOpsSchool Private Limited) from the public CompTIA exam objectives (Network+ V9 (N10-009) exam objectives, launched 2024-06-20), checked 2026-10-25. They are not actual exam questions. xOps School is not affiliated with or endorsed by CompTIA; exam names are trademarks of their owners. Official exam page: www.comptia.org/en-us/certifications/network/.

Last modified: Sunday, 25 October 2026, 9:57 PM