N10-009 Exam Questions

Free CompTIA Network+ Exam Questions and Answers

Updated October 13, 2026  |  20 questions with full answers

The short answer

Network+ N10-009 is up to 90 questions in 90 minutes and you need 720 out of 900 to pass. The questions below are drawn from our 937-question N10-009 bank and cover all five domains, printed with the answer and the explanation so you can check your reasoning rather than just your result.

N10-009 exam facts

QuestionsUp to 90 (multiple choice, multiple response, PBQs)
Time limit90 minutes
Passing score720 / 900 (scaled)
Cost$369 USD (voucher)
DeliveryPearson VUE test centre or OnVUE online proctored
PrerequisitesNone, but CompTIA recommends A+ and 9-12 months of networking experience

What the exam covers, domain by domain

Domain Weight What it tests
1.0 Networking Concepts23%OSI model, TCP/IP, ports and protocols, IP addressing, subnetting, topologies.
2.0 Network Implementation20%Routing, switching, VLANs, wireless, cabling and network device configuration.
3.0 Network Operations19%Monitoring, documentation, high availability, disaster recovery, cloud networking.
4.0 Network Security14%Hardening, access control, wireless security, common network attacks.
5.0 Network Troubleshooting24%Diagnostics, cable issues, protocol analysis, and a structured troubleshooting method.

20 free N10-009 exam questions with answers

Real questions from our 937-question N10-009 bank, spread across every domain. The correct answer is marked and every question carries an explanation, so you can check the reasoning and not just the result. The interactive mocks serve the full bank, timed and scaled-scored.

Question 1 1.0 Networking Concepts

A security audit reveals that a server is listening on port 1433. Which database service is most likely running?

  • ○ MySQL
  • ○ PostgreSQL
  • ✓ Microsoft SQL Server
  • ○ Oracle DB
Answer: C. Microsoft SQL Server
Port 1433 is the default TCP port for Microsoft SQL Server. MySQL uses port 3306, PostgreSQL uses 5432, and Oracle DB traditionally uses 1521 (or 2483/2484 for newer versions). Knowing well-known ports is essential for network troubleshooting and security assessments.
Question 2 1.0 Networking Concepts / 3.0 Network Operations

Which network service directory services authentication?

  • ○ DHCP
  • ○ DNS
  • ○ NTP
  • ✓ LDAP
Answer: D. LDAP
LDAP: Directory services authentication.
Question 3 2.0 Network Implementation

Which switching concept is defined as: "Power over Ethernet, delivers power via data cable"?

  • ○ Trunk
  • ○ EtherChannel
  • ○ VLAN
  • ✓ PoE
Answer: D. PoE
PoE: Power over Ethernet, delivers power via data cable.
Question 4 2.0 Network Implementation / 3.0 Network Operations

Which virtualization networking term virtual network interface card?

  • ✓ vNIC
  • ○ Port group
  • ○ vSwitch
  • ○ VLAN tagging
Answer: A. vNIC
vNIC: Virtual network interface card.
Question 5 2.0 Network Implementation / 4.0 Network Security

Which segmentation method granular per-workload security?

  • ○ VLAN
  • ✓ Microsegmentation
  • ○ DMZ
  • ○ Subnetting
Answer: B. Microsegmentation
Microsegmentation: Granular per-workload security.
Question 6 3.0 Network Operations

Which network doc shows IP addressing?

  • ○ Asset inventory
  • ○ Cable map
  • ✓ Logical diagram
  • ○ Physical diagram
Answer: C. Logical diagram
Logical diagram is correct.
Question 7 3.0 Network Operations / 5.0 Network Troubleshooting

Which network documentation records all network changes?

  • ✓ Change log
  • ○ Physical network diagram
  • ○ Logical network diagram
  • ○ Cable map
Answer: A. Change log
Change log: Records all network changes.
Question 8 4.0 Network Security

Which attack is described as: "Corrupts DNS cache to redirect users"?

  • ○ DDoS
  • ○ Man-in-the-middle
  • ○ Rogue AP
  • ✓ DNS poisoning
Answer: D. DNS poisoning
DNS poisoning: Corrupts DNS cache to redirect users.
Question 9 5.0 Network Troubleshooting

A technician is sent to a wiring closet to trace a specific Cat 6 cable from a wall jack to its termination point on a patch panel among hundreds of cables. Which tool should the technician use FIRST to accomplish this task?

  • ○ Multimeter
  • ○ Cable tester
  • ✓ Tone generator and probe
  • ○ Protocol analyzer
Answer: C. Tone generator and probe
A tone generator and probe (also called a fox and hound) is specifically designed to trace a single copper cable through walls, conduits, or patch panels by sending an audible tone. The technician would connect the tone generator to the wall jack and use the inductive probe to follow the tone to the correct termination point on the patch panel. A multimeter (A) can test for continuity or voltage but is inefficient for tracing. A cable tester (B) verifies cable integrity and pinout but does not help identify one cable among many. A protocol analyzer (D) examines network traffic, not physical cable paths.
Question 10 1.0 Networking Concepts

A network administrator needs to configure a temporary test environment that requires 12 subnets, with the largest subnet needing 28 host addresses. Using VLSM with the base network 192.168.50.0/24, what is the most efficient subnet mask that should be applied to accommodate this requirement?

  • ○ /26
  • ✓ /27
  • ○ /28
  • ○ /29
Answer: B. /27
To accommodate the largest subnet needing 28 host addresses, we need to calculate the required host bits. The formula is 2^n - 2 >= hosts. For 28 hosts, 2^5 - 2 = 30, so 5 host bits are needed, leaving 32 - 5 = 27 network bits, giving a /27 mask. This provides 30 usable addresses per subnet, which meets the requirement while being efficient. Option A (/26) provides 62 hosts but is less efficient for this specific need. Option C (/28) provides only 14 hosts, which is insufficient. Option D (/29) provides only 6 hosts, also insufficient.
Question 11 1.0 Networking Concepts / 3.0 Network Operations

Which service directory access protocol?

  • ✓ LDAP
  • ○ SFTP
  • ○ TACACS+
  • ○ SYSLOG
Answer: A. LDAP
LDAP: Directory access protocol.
Question 12 2.0 Network Implementation

Which routing concept manually configured?

  • ✓ Static route
  • ○ Dynamic route
  • ○ Route table
  • ○ Default route
Answer: A. Static route
Static route: Manually configured.
Question 13 2.0 Network Implementation / 3.0 Network Operations

Which SDN/virtualization term is defined as: "Generic Routing Encapsulation, tunneling protocol"?

  • ✓ GRE
  • ○ IPsec
  • ○ VXLAN
  • ○ NFV
Answer: A. GRE
GRE: Generic Routing Encapsulation, tunneling protocol.
Question 14 2.0 Network Implementation / 4.0 Network Security

Which segmentation method ip-based segmentation at layer 3?

  • ○ Microsegmentation
  • ○ DMZ
  • ○ VLAN
  • ✓ Subnetting
Answer: D. Subnetting
Subnetting: IP-based segmentation at Layer 3.
Question 15 3.0 Network Operations

Which SNMP version auth and encryption?

  • ✓ SNMPv3
  • ○ SNMPv1
  • ○ SNMPv2c
Answer: A. SNMPv3
SNMPv3: Auth and encryption.
Question 16 3.0 Network Operations / 5.0 Network Troubleshooting

Which network documentation shows physical layout and connections?

  • ○ Logical network diagram
  • ○ Change log
  • ○ Cable map
  • ✓ Physical network diagram
Answer: D. Physical network diagram
Physical network diagram: Shows physical layout and connections.
Question 17 4.0 Network Security

A company hosts a critical web application that is frequently targeted by application-layer attacks, including SQL injection and cross-site scripting (XSS). The security team needs a network security device that specializes in inspecting HTTP/HTTPS traffic and blocking these types of attacks. Which type of firewall is best suited for this purpose?

  • ○ Stateless firewall
  • ○ Stateful firewall
  • ○ Next-generation firewall (NGFW)
  • ✓ Web application firewall (WAF)
Answer: D. Web application firewall (WAF)
A Web Application Firewall (WAF) is specifically designed to protect web applications by filtering and monitoring HTTP/HTTPS traffic between the web application and the internet. It can detect and block common application-layer attacks such as SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats. Next-generation firewalls (NGFWs) also provide application-level inspection and can include WAF capabilities, but a dedicated WAF is the best choice when the primary concern is web application security because it is purpose-built with deep inspection of HTTP traffic and specialized rule sets. Stateless and stateful firewalls operate at lower layers (L3-L4) and cannot effectively inspect application payloads for SQL injection or XSS.
Question 18 5.0 Network Troubleshooting

Which network issue is loose connection?

  • ○ Slow network
  • ✓ Intermittent connectivity
  • ○ No internet
  • ○ High latency
Answer: B. Intermittent connectivity
Intermittent connectivity is correct.
Question 19 1.0 Networking Concepts

Which IPv6 address type uses prefix 2000::/3 and routable internet address?

  • ○ Unique local
  • ○ Link-local
  • ○ Multicast
  • ✓ Global unicast
Answer: D. Global unicast
Global unicast: 2000::/3. Routable internet address.
Question 20 1.0 Networking Concepts / 3.0 Network Operations

Which service remote authentication dial-in user service?

  • ○ LDAP
  • ○ NTP
  • ✓ RADIUS
  • ○ TACACS+
Answer: C. RADIUS
RADIUS: Remote Authentication Dial-In User Service.

How to use these questions

Subnetting is unavoidable and it is worth more than the marks it appears to carry, because it underpins questions in three domains. Get fluent at converting between CIDR notation, subnet mask and host range before you touch anything else.

Domain 5 (Troubleshooting) is 24% and it is scenario-based. Learn the CompTIA troubleshooting method as a sequence - identify, establish a theory, test, plan, implement, verify, document - because questions often ask which step comes next rather than what the fault is.

N10-009 added real weight to cloud and virtual networking. If you are studying from older material, top up on VPCs, SDN, and cloud connectivity models or you will lose marks in Domains 2 and 3.

Practise reading simulated command output. PBQs on N10-009 include console-style tasks, so recognising `ipconfig /all`, `tracert` and `nslookup` output at a glance saves real time.

Frequently asked questions

What is the passing score for Network+ N10-009?

720 out of 900 on a scaled score, which works out at roughly 75-80% of questions correct. The exact raw score varies by exam version because of scaling.

How many questions are on the Network+ N10-009 exam?

Up to 90 questions in 90 minutes, a mix of multiple choice, multiple response and performance-based questions (PBQs).

How much does the Network+ exam cost?

$369 USD for a standard voucher. CompTIA sometimes bundles a retake, which is worth considering given the 90-minute time pressure.

Is Network+ harder than A+?

They test different things. A+ is broader and more hardware-focused; Network+ goes deeper on addressing, routing and troubleshooting. Most people find Network+ the harder of the two because subnetting is unforgiving.

Ready to test yourself under exam conditions?

937 questions across 6 timed mock exams, domain-wise drills, and the same scaled scoring as the real thing. Free, no signup.

Related CompTIA Network+ guides