CompTIA Network+ N10-009 — Readiness Assessment (Mastery)

By Mr Sparkles · Updated Jul 10, 2026

CertificationNetwork+ (N10-009)
Questions25
Passing Score90%
Format92% Multiple Choice
Sessions Logged1,618
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
5.0 (1)

Topics covered

This quiz

Network Troubleshooting8 (32%)
Networking Concepts5 (20%)
Network Implementation4 (16%)
Network Security4 (16%)
Network Operations4 (16%)

Exam blueprint

Official domain weights for this certification.

Networking Concepts23%
Network Implementation20%
Network Operations19%
Network Security14%
Network Troubleshooting24%
Network Troubleshooting8 questions
  • DHCP and VLAN Misconfiguration1 q
  • Physical Layer and Cabling1 q
  • MTU and Fragmentation1 q
  • DNS Resolution Order1 q
  • Routing Loops and Path Selection1 q
  • Structured Troubleshooting Methodology1 q
  • Duplicate IP and ARP Behavior1 q
  • Tool Selection and Evidence Interpretation1 q
Networking Concepts5 questions
  • DNS, NAT, and Split-Horizon Resolution1 q
  • IPv6 Addressing and Router Advertisements1 q
  • Ports and Protocol Behavior1 q
  • Cloud and Virtual Networking1 q
  • Load Balancing and Application Reachability1 q
Network Implementation4 questions
  • Wireless Design and Roaming1 q
  • Routing and Summarization1 q
  • High Availability and Redundancy1 q
  • Switching and STP1 q
Network Security4 questions
  • Segmentation and Access Control1 q
  • NAC and Device Posture1 q
  • Wireless Security1 q
  • Attack Detection and Mitigation1 q
Network Operations4 questions
  • Monitoring and Baselines1 q
  • Change Management1 q
  • Documentation and Asset Management1 q
  • Time Synchronization and Logging1 q

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A security appliance reports a sudden increase in outbound DNS queries from one workstation. The queries contain long random-looking subdomains, and the destination domain was registered yesterday. The user reports no browsing issues. Web proxy logs show very little corresponding HTTP or HTTPS traffic.

What should the network team suspect?

Answer choices

  • A. DNS tunneling or DNS-based data exfiltration.

  • B. Normal recursive DNS behavior caused by a low TTL.

  • C. ARP spoofing on the local VLAN.

  • D. A spanning tree topology change.

Question 2

A network engineer updates a core switch ACL to block a deprecated management protocol. Minutes later, monitoring shows that the network backup system can no longer reach any switches. The change was approved, but the implementation plan did not include a dependency check or backout command.

Which process weakness most directly caused the outage?

Answer choices

  • A. The ACL should have been applied only after disabling spanning tree.

  • B. The change lacked impact analysis, validation testing, and a documented rollback plan.

  • C. The monitoring system should have been removed from the network before the maintenance window.

  • D. The engineer should have used Telnet instead of SSH for the change.

Question 3

A security investigation requires correlating firewall, switch, VPN, and server logs. The logs show the same user's activity occurring in impossible sequences, with timestamps differing by 7 to 12 minutes across devices. No device shows packet loss or high CPU.

Which operational issue most directly undermines the investigation?

Answer choices

  • A. Devices are not synchronized to reliable NTP sources.

  • B. Syslog uses UDP, so all timestamps become untrusted.

  • C. The VPN concentrator is using split tunneling.

  • D. The switches are using SNMPv3 instead of SNMPv2c.

Question 4

A newly installed Cat6 cable run passes a basic continuity test, but connected devices negotiate only 100 Mbps instead of 1 Gbps. The cable path runs near elevator motors for part of the distance. A certifier reports high near-end crosstalk and intermittent pair errors under load.

Which TWO actions are most appropriate?

Answer choices

  • A. Re-terminate the cable while preserving pair twists as close as possible to the termination point.

  • B. Replace the patch cable with a crossover cable so gigabit negotiation can use all four pairs.

  • C. Reroute the cable away from EMI sources or replace the run with properly grounded shielded cabling.

  • D. Increase the switch port speed manually to 10 Gbps to force better negotiation.

  • E. Extend the DHCP scope to allow the endpoint to request a gigabit lease.

Question 5

A guest Wi-Fi network allows internet browsing but should not reach internal systems. During testing, a guest device can ping a printer VLAN and open the printer's web management page. The wireless controller shows the guest SSID is mapped to the guest VLAN. The firewall has an any-to-any rule between internal VLANs for legacy reasons.

What should be changed?

Answer choices

  • A. Enable WPA3 on the guest SSID because stronger encryption blocks internal routing.

  • B. Apply ACLs or firewall rules that deny guest VLAN access to internal RFC1918 networks while allowing required internet egress.

  • C. Disable DHCP on the guest VLAN so guest devices cannot discover internal subnets.

  • D. Change the printer VLAN subnet mask so it no longer overlaps with the guest VLAN.