Free Network+ N10-009 Practice Test — 25 Questions

Question 1 of 25Networking Concepts · Intermediate
A TLS library on a web server converts application data into an agreed transfer syntax and encrypts it before handing it down the stack. In the OSI reference model, which layer is responsible for this data-representation function?
Choose one answer for question 1ASession layer (Layer 5)BApplication layer (Layer 7)CTransport layer (Layer 4)DPresentation layer (Layer 6)
Question 2 of 25Networking Concepts · Intermediate
A technician must replace Telnet for remote command-line access to a server with an encrypted protocol listening on its standard well-known port. Which port should the firewall permit?
Choose one answer for question 2ATCP 22BTCP 23CTCP 21DTCP 25
Question 3 of 25Networking Concepts · Beginner
Which block is reserved for private internal use by RFC 1918?
Choose one answer for question 3A192.0.2.0/24B100.64.0.0/10C172.16.0.0/12D169.254.0.0/16
Question 4 of 25Networking Concepts · Intermediate
A data center must extend Layer 2 segments between two sites across a routed IP underlay. Which technology is designed for this?
Choose one answer for question 4A802.1Q trunkingBSD-WANCNAT64DVXLAN
Question 5 of 25Networking Concepts · Intermediate
An administrator must split 192.168.10.0/24 into exactly four equal subnets with the largest possible number of hosts in each. Which prefix length should each subnet use?
Choose one answer for question 5A/25, with 126 usable hosts eachB/27, with 30 usable hosts eachC/26, with 62 usable hosts eachD/28, with 14 usable hosts each
Question 6 of 25Networking Concepts · Advanced
A sensor placed inline in the traffic path must drop packets that match a known exploit signature before they reach the servers. Which device type should be deployed?
Choose one answer for question 6AIntrusion detection systemBIntrusion prevention systemCForward proxy serverDPassive network TAP
Question 7 of 25Network Implementation · Intermediate
A router has 10.1.0.0/16 from a static route (AD 1) and 10.1.5.0/24 from OSPF (AD 110). Which route forwards a packet destined to 10.1.5.20?
Choose one answer for question 7AThe static /16 route (lower administrative distance)BThe OSPF /24 route (longest prefix match)CBoth routes, using equal-cost load balancingDNeither route; the default route is used
Question 8 of 25Network Implementation · Beginner
IP phones and PCs share access ports. The phone must tag voice traffic into VLAN 110 while the PC behind it stays untagged in VLAN 10. What should be configured on each switch port?
Choose one answer for question 8A802.1Q trunk with native VLAN 110BAccess VLAN 10 with voice VLAN 110CAccess VLAN 110 with port mirroringDLACP channel with VLAN 10
Question 9 of 25Network Implementation · Intermediate
A company wants every employee to authenticate to Wi-Fi with individual credentials checked by a RADIUS server, so a departing user can be revoked without changing a shared password. Which configuration meets this?
Choose one answer for question 9AWPA3-Personal with a passphraseBOpen SSID with a captive portalCWPA3-Enterprise with 802.1XDHidden SSID with MAC filtering
Question 10 of 25Network Implementation · Advanced
Devices in VLAN 20 on Switch A cannot reach VLAN 20 devices on Switch B, but devices on each switch communicate locally. The inter-switch link is an 802.1Q trunk. What is the most likely cause?
Choose one answer for question 10AVLAN 20 is not in the trunk's allowed listBThe hosts have an incorrect default gatewayCThe hosts use mismatched subnet masksDPort security is enabled on the access ports
Question 11 of 25Network Implementation · Intermediate
Redundant links between access and distribution switches caused a broadcast storm. Which feature should run so that redundant links are blocked until needed?
Choose one answer for question 11ALink Aggregation Control Protocol (LACP)BSpanning Tree Protocol (STP)CSwitched Port Analyzer (SPAN)DJumbo frames (9000-byte MTU)
Question 12 of 25Network Operations · Intermediate
Before a core switch firmware upgrade, the team documents the change, analyzes its security impact, obtains approval, and schedules a rollback plan. Which organizational process is this?
Choose one answer for question 12AChange managementBCapacity planningCIncident responseDAsset inventory management
Question 13 of 25Network Operations · Advanced
A network management system must poll switch interface counters every five minutes and also receive unsolicited alerts when a link goes down. Which protocol supports both?
Choose one answer for question 13ANetFlowBSNMPCSyslogDNTP
Question 14 of 25Network Operations · Intermediate
Clients on a new VLAN get no DHCP lease; the DHCP server is on another subnet. What must be configured on the VLAN's router interface?
Choose one answer for question 14ASLAACBDNS forwarderCDHCP relayDDHCP reservation
Question 15 of 25Network Operations · Intermediate
A branch LAN will use SLAAC so that IPv6 hosts generate their own interface identifiers. Which prefix length should the LAN subnet use?
Choose one answer for question 15A/48B/64C/56D/127
Question 16 of 25Network Operations · Beginner
A company is comparing disaster recovery site options. Which statement correctly compares a hot site with a cold site?
Choose one answer for question 16AHot sites activate almost immediately but cost more; cold sites cost less but take longerBHot sites cost less but take longer; cold sites activate almost immediately but cost moreCHot sites provide only space and power; cold sites include running, current systemsDHot and cold sites differ only in their distance from the primary facility
Question 17 of 25Network Security · Intermediate
A user on hotel Wi-Fi reports that a banking session was relayed through an unknown gateway that could read and alter traffic between the user and the bank. Which attack is this?
Choose one answer for question 17AOn-path (man-in-the-middle) attackBPhishing attackCDistributed denial-of-service attackDSQL injection attack
Question 18 of 25Network Security · Intermediate
A laptop missing required patches is automatically placed in a quarantine VLAN until it is remediated. Which control performed this action?
Choose one answer for question 18ADHCP snoopingBPort mirroringCIntrusion detection systemDNetwork access control (NAC)
Question 19 of 25Network Security · Intermediate
Clients on an access VLAN start receiving an unauthorized default gateway and DNS server from an unknown device. Which attack is occurring, and which switch feature mitigates it?
Choose one answer for question 19ARogue DHCP server; DHCP snoopingBARP poisoning; port mirroringCMAC flooding; jumbo framesDVLAN hopping; spanning tree
Question 20 of 25Network Troubleshooting · Intermediate
Several users report an outage. Before forming any theory, the technician questions users, identifies symptoms, and checks whether anything changed. Which step of the troubleshooting methodology is this?
Choose one answer for question 20AEstablish a theory of probable causeBTest the theory to determine the causeCEstablish a plan of actionDIdentify the problem
Question 21 of 25Network Troubleshooting · Intermediate
Port counters on two connected switches show steadily rising CRC errors, and a cable test reports an impedance mismatch partway along the copper run. What is the most likely cause?
Choose one answer for question 21AA damaged or badly terminated cableBAn incorrect VLAN on the trunk uplinkCA duplicate IP address on a hostDA port security violation
Question 22 of 25Network Troubleshooting · Intermediate
An administrator must capture and decode traffic between two servers to investigate a suspected security threat. Which tool should be used?
Choose one answer for question 22AWi-Fi spectrum analyzerBCopper cable testerCToner and probe kitDProtocol analyzer
Question 23 of 25Network Troubleshooting · Intermediate
An employee is unable to connect to a remote server. The IT team needs to determine whether the server is reachable and identify any potential points of failure along the path. Which tools should be used?
Choose one answer for question 23AUse a network analyzer to capture traffic.BPing or traceroute.CCheck the server's firewall configuration.DVerify the DNS settings on the user's device.
Question 24 of 25Network Troubleshooting · Advanced
A network administrator must capture packets over SSH on a server with no GUI and minimal free resources. Which tool is most appropriate?
Choose one answer for question 24ANmapBIperfCTcpdumpDWireshark
Question 25 of 25Network Troubleshooting · Intermediate
After implementing a fix, a technician confirms that users can print again and adds a monitoring alert so the same fault is caught early next time. Which methodology step is this?
Choose one answer for question 25AIdentify the problem and its symptomsBImplement the solution or escalateCVerify and implement preventive measuresDDocument findings and lessons learned

Ready to see your score?0 of 25 questions answered

Free CompTIA Network+ N10-009 Practice Test

A balanced sample of the current N10-009 objectives

Test your Network+ readiness

A TLS library on a web server converts application data into an agreed transfer syntax and encrypts it before handing it down the stack. In the OSI reference model, which layer is responsible for this data-representation function?

A technician must replace Telnet for remote command-line access to a server with an encrypted protocol listening on its standard well-known port. Which port should the firewall permit?

Which block is reserved for private internal use by RFC 1918?

A data center must extend Layer 2 segments between two sites across a routed IP underlay. Which technology is designed for this?

An administrator must split 192.168.10.0/24 into exactly four equal subnets with the largest possible number of hosts in each. Which prefix length should each subnet use?

A sensor placed inline in the traffic path must drop packets that match a known exploit signature before they reach the servers. Which device type should be deployed?

A router has 10.1.0.0/16 from a static route (AD 1) and 10.1.5.0/24 from OSPF (AD 110). Which route forwards a packet destined to 10.1.5.20?

IP phones and PCs share access ports. The phone must tag voice traffic into VLAN 110 while the PC behind it stays untagged in VLAN 10. What should be configured on each switch port?

A company wants every employee to authenticate to Wi-Fi with individual credentials checked by a RADIUS server, so a departing user can be revoked without changing a shared password. Which configuration meets this?

Devices in VLAN 20 on Switch A cannot reach VLAN 20 devices on Switch B, but devices on each switch communicate locally. The inter-switch link is an 802.1Q trunk. What is the most likely cause?

Redundant links between access and distribution switches caused a broadcast storm. Which feature should run so that redundant links are blocked until needed?

Before a core switch firmware upgrade, the team documents the change, analyzes its security impact, obtains approval, and schedules a rollback plan. Which organizational process is this?

A network management system must poll switch interface counters every five minutes and also receive unsolicited alerts when a link goes down. Which protocol supports both?

Clients on a new VLAN get no DHCP lease; the DHCP server is on another subnet. What must be configured on the VLAN's router interface?

A branch LAN will use SLAAC so that IPv6 hosts generate their own interface identifiers. Which prefix length should the LAN subnet use?

A company is comparing disaster recovery site options. Which statement correctly compares a hot site with a cold site?

A user on hotel Wi-Fi reports that a banking session was relayed through an unknown gateway that could read and alter traffic between the user and the bank. Which attack is this?

A laptop missing required patches is automatically placed in a quarantine VLAN until it is remediated. Which control performed this action?

Clients on an access VLAN start receiving an unauthorized default gateway and DNS server from an unknown device. Which attack is occurring, and which switch feature mitigates it?

Several users report an outage. Before forming any theory, the technician questions users, identifies symptoms, and checks whether anything changed. Which step of the troubleshooting methodology is this?

Port counters on two connected switches show steadily rising CRC errors, and a cable test reports an impedance mismatch partway along the copper run. What is the most likely cause?

An administrator must capture and decode traffic between two servers to investigate a suspected security threat. Which tool should be used?

An employee is unable to connect to a remote server. The IT team needs to determine whether the server is reachable and identify any potential points of failure along the path. Which tools should be used?

A network administrator must capture packets over SSH on a server with no GUI and minimal free resources. Which tool is most appropriate?

After implementing a fix, a technician confirms that users can print again and adds a monitoring alert so the same fault is caught early next time. Which methodology step is this?

Turn your result into a study plan

Network+ practice test questions