Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
A network engineer is deploying switches at a new remote office. The switches have been preconfigured with hostnames and STP priority values. Based on the following table:
Switch Name
Priority
core-sw01
24576
access-sw01
28672
distribution-sw01
32768
access-sw02
36864
Which of the following switches will become the root bridge?
The switch with the lowest STP priority becomes the root bridge.In the given table, core-sw01 has the lowest priority value of 24576. Therefore, it will be elected as the root bridge in the Spanning Tree Protocol topology.
A technician is planning an equipement installation into a rack in a data center that practices hot aisle/cold aise ventilation. Which of the following directions should the equipement exhaust face when installed in the rack?
In a data center that practices hot aisle/cold aisle ventilation, equipment should be installed so that the exhaust faces the rear of the rack. This setup ensures that hot air is expelled into the hot aisle, maintaining proper airflow and cooling efficiency.
Hot Aisle/Cold Aisle Configuration: Equipment intake should face the cold aisle where cool air is supplied, and exhaust should face the hot aisle where hot air is expelled.
Cooling Efficiency: Proper orientation of equipment helps maintain an efficient cooling environment by segregating hot and cold air, preventing overheating and improving energy efficiency.
Network Reference:
CompTIA Network+ N10-007 Official Certification Guide: Discusses data center design principles, including hot aisle/cold aisle configurations.
Cisco Data Center Design Guide: Provides best practices for data center layout and equipment installation.
Network+ Certification All-in-One Exam Guide: Covers data center environmental controls and ventilation strategies.
A network engineer is completing a wireless installation in a new building. A requirement is that all clients be able to automatically connect to the fastest supported network. Which of the following best supports this requirement?
Band steering is a feature in wireless networks that encourages dual-band capable devices to connect to the 5GHz band instead of the 2.4GHz band.
Why Band Steering?
The 5GHz band supports higher speeds and less interference compared to 2.4GHz.
If a device supports both bands, the access point (AP) can 'steer' it to connect to 5GHz instead of 2.4GHz.
This helps ensure users always connect to the fastest available network.
Incorrect Options:
B . Disabling the 5GHz SSID: Would force devices onto 2.4GHz, which is slower and more congested.
C . Adding a Captive Portal: Used for guest authentication, not for speed optimization.
D . Configuring MAC Filtering: Used for security, not for optimizing network speed.
CompTIA Network+ N10-009 Official Study Guide -- Chapter on Wireless Technologies and Optimization
Which of the following connection methods allows a network engineer to automate configuration deployment for network devices across the environment?
Comprehensive and Detailed Explanation (paraphrased, aligned to N10-009):
SSH provides secure, scriptable remote access used by automation/orchestration tools (e.g., leveraging CLI, NETCONF over SSH, or Ansible modules) to push configurations at scale.
A . RDP is primarily for Windows GUI sessions and is not commonly used for network device automation.
B . Telnet can be scripted but is insecure (plaintext); modern best practice is to use SSH.
D . GUI access is typically manual and not ideal for scalable, repeatable automation.
Reference (CompTIA Network+ N10-009):
Domain: Network Operations --- Configuration management, automation/orchestration, secure management protocols (SSH vs. Telnet), change at scale.
A user connects to a corporate VPN via a web browser and is able to use TLS to access the internal financial system to input a time card. Which of the following best describes how the VPN is being used?
Which of the following ports is used for secure email?
Port 587 is used for secure email submission. This port is designated for message submission by mail clients to mail servers using the SMTP protocol, typically with STARTTLS for encryption.
Port 25: Traditionally used for SMTP relay, but not secure and often blocked by ISPs for outgoing mail due to spam concerns.
Port 110: Used for POP3 (Post Office Protocol version 3), not typically secured.
Port 143: Used for IMAP (Internet Message Access Protocol), which can be secured with STARTTLS or SSL/TLS.
Port 587: Specifically used for authenticated email submission (SMTP) with encryption, ensuring secure transmission of email from clients to servers.
Network Reference:
CompTIA Network+ N10-007 Official Certification Guide: Discusses email protocols and ports, including secure email transmission.
Cisco Networking Academy: Provides training on securing email communications and the use of appropriate ports.
Network+ Certification All-in-One Exam Guide: Explains email protocols, ports, and security considerations for email transmission.
Users in a new subnet segment are unable to get IP addresses from the DHCP server. A network administrator notices that the DHCP server is located on a remote segment. Which of the following should the administrator do to resolve the issue?
The administrator should configure an IP helper address on the network device. DHCP clients initially use broadcast messages to discover a DHCP server. Routers do not forward broadcasts by default, so if the DHCP server is located on a different subnet, clients in the new subnet will not be able to reach it unless DHCP relay is configured. An IP helper address allows the router or Layer 3 switch interface to forward DHCP requests from the client subnet to the remote DHCP server as unicast traffic.
The CompTIA Network+ N10-009 objectives include DHCP, IP addressing, VLANs, routing, and troubleshooting network services. DHCP relay is a common requirement in networks with multiple VLANs or subnets that use centralized DHCP servers.
EAPoL is related to 802.1X authentication and does not solve DHCP relay across routed segments. Changing DHCP lease time affects how long clients keep assigned addresses, but it does not help clients reach a remote DHCP server. DHCP uses standard ports UDP 67 and UDP 68, and changing to non-standard ports would create more problems. Therefore, configuring an IP helper is the correct solution.
Exam domains verified against: Official CompTIA N10-009 exam guide, last checked October 2026.
Covers the OSI reference model, network components and their roles, cloud-based solutions and connectivity, and essential networking protocols and port numbers. Study the layers of the OSI model and how data flows through them, then move to real equipment like switches and routers and how they connect.
Focuses on routing fundamentals, switching technology configuration, and wireless networking equipment selection and setup. Understand routing protocols and how routers forward packets, then practice configuring VLANs and wireless networks in lab environments.
Sample question from this domain above: Q7
Addresses organizational workflows and protocols, network monitoring tools, and techniques to ensure optimal system performance. Learn what monitoring tools do and how to read their output, then understand how documentation and change management keep networks running.
Emphasizes fundamental network security principles, analyzes network threats and their impacts, and explores implementation of security measures and defense strategies. Start with basic concepts like confidentiality and authentication, then study common attacks and the countermeasures that stop them.
Outlines systematic problem-solving approaches, covers common issues related to network cabling and physical interfaces, tackles frequent network service disruptions, and guides selection of diagnostic tools and protocols. This is the heaviest domain on the exam. Master the troubleshooting methodology first, then practice identifying the root cause of connectivity issues and service outages under time pressure.
Common questions about the exam itself
