CompTIA Network+ Practice Test: 10 Free N10-009 Questions

A CompTIA Network+ practice test is the quickest way to expose the gap between what you think you know and what the N10-009 exam actually asks. These free Network+ questions—10 original, exam-style items, two from each of the five domains—come with the correct answer and a one- to two-sentence explanation you reveal on demand. Treat this N10-009 practice test as a diagnostic: benchmark your readiness, then aim your study at the objectives where you slip. First, the format.

CompTIA Network+ N10-009 exam format

Per CompTIA, the Network+ N10-009 exam contains a maximum of 90 questions and gives you 90 minutes to finish. It mixes multiple-choice questions with performance-based questions (PBQs) that drop you into simulated consoles to configure or troubleshoot. Passing requires a scaled score of 720 on a 100–900 scale. Because scoring is scaled and PBQs weigh more than single multiple-choice items, 720 does not translate to a flat 80% of questions correct. CompTIA sets no mandatory prerequisites but recommends the A+ certification and 9–12 months of hands-on networking experience. You can sit the exam at a Pearson VUE test center or online with a proctor, and the certification stays valid for three years, renewable through CompTIA’s continuing-education program. N10-009 launched in June 2024 and emphasizes current priorities: SDN, SASE, zero trust, IPv6, and cloud connectivity.

The exam splits into five weighted domains, per CompTIA:

What each domain covers:

• Networking Concepts (23%): the OSI model, ports and protocols, IP addressing and subnetting, topologies, transceivers, and cloud connectivity.
• Network Implementation (20%): configuring routers, switches, and firewalls; VLANs and routing; wireless standards; and structured cabling.
• Network Operations (19%): documentation, monitoring with SNMP and logs, high availability, and disaster-recovery metrics such as RTO and RPO.
• Network Security (14%): the CIA triad, common attacks, access control (802.1X, NAC), and device hardening.
• Network Troubleshooting (24%): the CompTIA methodology plus cable, wireless, and connectivity tools like TDRs and protocol analyzers.

Troubleshooting (24%) and Networking Concepts (23%) carry the most weight, so budget study time toward them. The quiz below draws two questions from each domain.

Free CompTIA Network+ practice test: 10 N10-009 questions

Read each item, choose A–D, then expand the answer to verify. These Network+ practice questions mirror the phrasing and reasoning of the real objectives—no login, no fluff.

1. 1. A router forwards traffic between two different IP subnets. At which OSI layer does it make that forwarding decision?

   A) Layer 1 – Physical
   B) Layer 2 – Data Link
   C) Layer 3 – Network
   D) Layer 4 – Transport

   Reveal answer & explanation

   Correct: C. Routers forward based on logical IP addresses, which live at the Network layer (Layer 3). Switches, by contrast, forward frames using MAC addresses at Layer 2.

2. 2. A host is configured with 192.168.10.100 and a subnet mask of 255.255.255.192 (/26). What is its network (subnet) address?

   A) 192.168.10.0
   B) 192.168.10.64
   C) 192.168.10.96
   D) 192.168.10.128

   Reveal answer & explanation

   Correct: B. A /26 mask has a block size of 64, so subnets fall at .0, .64, .128, and .192. The address .100 sits in the .64–.127 range, making 192.168.10.64 the network address.

3. 3. Two switches share redundant links, forming a physical loop. Which protocol blocks the redundant path to prevent a Layer 2 broadcast storm?

   A) LACP
   B) VRRP
   C) STP
   D) OSPF

   Reveal answer & explanation

   Correct: C. Spanning Tree Protocol (802.1D) detects loops and puts redundant ports into a blocking state. LACP aggregates links, VRRP provides gateway redundancy, and OSPF is a Layer 3 routing protocol.

4. 4. An organization wants access points that can use the 6 GHz band to escape congestion. Which wireless standard supports 6 GHz?

   A) 802.11n (Wi-Fi 4)
   B) 802.11ac (Wi-Fi 5)
   C) 802.11ax (Wi-Fi 6E)
   D) 802.11a

   Reveal answer & explanation

   Correct: C. 802.11ax operating as Wi-Fi 6E adds the 6 GHz band. Wi-Fi 5 (ac) tops out at 5 GHz, and Wi-Fi 4 (n) uses only the 2.4 and 5 GHz bands.

5. 5. In a business continuity plan, which metric defines the maximum amount of data—expressed as a point in time—an organization can afford to lose?

   A) RTO
   B) RPO
   C) MTTR
   D) MTBF

   Reveal answer & explanation

   Correct: B. The Recovery Point Objective (RPO) sets how far back your last usable recovery point can be, which drives backup frequency. RTO defines how fast service must return; MTTR and MTBF measure repair time and reliability.

6. 6. A monitoring server must receive an immediate, unsolicited alert when a switch’s CPU crosses a threshold. Which SNMP mechanism sends it?

   A) SNMP GET
   B) SNMP trap
   C) MIB walk
   D) Syslog facility

   Reveal answer & explanation

   Correct: B. An SNMP trap is an agent-initiated, asynchronous notification pushed to the management station. A GET is a manager-initiated poll, and the MIB is the structured database of managed objects.

7. 7. An attacker on the LAN sends forged ARP replies mapping the default gateway’s IP to the attacker’s MAC address, intercepting traffic. What is this attack?

   A) DNS poisoning
   B) VLAN hopping
   C) ARP spoofing (on-path)
   D) Rogue DHCP

   Reveal answer & explanation

   Correct: C. ARP spoofing (poisoning) binds the attacker’s MAC to a legitimate IP, enabling an on-path (man-in-the-middle) attack. Dynamic ARP Inspection (DAI) is a standard mitigation on managed switches.

8. 8. Which IEEE standard provides port-based network access control, requiring a supplicant to authenticate through an authenticator to a RADIUS server before the switchport forwards traffic?

   A) 802.1Q
   B) 802.3af
   C) 802.1X
   D) 802.11i

   Reveal answer & explanation

   Correct: C. 802.1X defines port-based network access control using a supplicant, authenticator, and authentication (RADIUS) server. 802.1Q is VLAN tagging, and 802.3af is Power over Ethernet.

9. 9. Per CompTIA’s troubleshooting methodology, what is the first step when addressing a network issue?

   A) Establish a theory of probable cause
   B) Identify the problem
   C) Test the theory to determine the cause
   D) Document findings and outcomes

   Reveal answer & explanation

   Correct: B. CompTIA’s methodology begins with “identify the problem”—gather information, question users, and note recent changes. Establishing a theory of probable cause is step two; documentation is the final step.

10. 10. A technician must find the distance to a break in a copper cable run buried inside a wall. Which tool reports that distance to the fault?

    A) Tone generator and probe
    B) Time-domain reflectometer (TDR)
    C) Loopback plug
    D) Light meter

    Reveal answer & explanation

    Correct: B. A TDR sends a signal down the cable and measures reflections to calculate the distance to a break or impedance fault. A tone generator traces cables, while a loopback plug tests a single port.

Tally your score. Eight or more correct signals solid readiness; five to seven means you should target specific weak domains; below five means it’s time for structured study before you book the exam.

How to use practice tests to pass N10-009

A practice test is a diagnostic, not a memorization drill. Score it, then let the results steer weeks of focused study:

• Sort every miss by domain. Map each wrong answer to its N10-009 objective and rebuild the underlying concept before you retest, rather than memorizing the specific question.
• Read every explanation—even for correct answers. Confirm you chose the right option for the right reason, not a lucky guess that will fail on a reworded item.
• Space your repetitions. Short, frequent sessions across several weeks beat one long cram; spaced retrieval moves facts into durable memory.
• Do the labs. Subnetting, VLANs, and troubleshooting are muscle memory. Configure a switch, capture packets, and break things in a lab so performance-based questions feel routine.
• Simulate exam day. Once you clear roughly 90% on domain quizzes, take a full-length, timed run to build the stamina that 90 questions in 90 minutes demands.

Keep the scaled 720/900 pass mark in mind: answer confidently across all five domains rather than mastering one and neglecting another, because a single overall score decides the result.

Train for N10-009 with Boost eLearning

Practice questions expose gaps; structured training closes them. Boost eLearning’s CompTIA Network+ (N10-009) course pairs objective-by-objective instruction with hands-on Live Labs, so you configure real routers, switches, and firewalls instead of only reading about them. Every enrollment is backed by our money-back Pass Guarantee, and you choose the format that fits your schedule—online self-paced, live virtual, or on-site for teams. Instructors tie each lesson to the five exam domains and drill the performance-based tasks that trip up most candidates. Ready to turn practice questions into a pass? Explore the CompTIA Network+ course.