Two access switches on different floors each have ports assigned to VLAN 10 (Sales) and VLAN 20 (Engineering). The switches are connected by a single fiber uplink. Neither Sales nor Engineering users on floor one can reach their counterparts on floor two, though users within the same switch communicate normally. What should the technician configure on the uplink ports?

Configure both uplink ports as 802.1Q trunk ports

Assign both uplink ports as access ports in VLAN 10

Enable port mirroring on the uplink

Set both uplink ports to half duplex to match the fiber link

Users on a VLAN report that web pages load slowly and some see certificate warnings. A packet capture shows repeated gratuitous ARP replies claiming that the default gateway's IP address maps to a MAC address that belongs to a workstation, not the router. Which attack is occurring, and which switch feature directly mitigates it?

ARP spoofing (on-path attack), mitigated by Dynamic ARP Inspection

DHCP starvation, mitigated by port security

MAC flooding, mitigated by storm control

VLAN hopping, mitigated by disabling Dynamic Trunking Protocol

Free Practice Test

Free Network+ Practice Test
for N10-009

Check your readiness for the CompTIA Network+ N10-009 exam with 50 exam-style questions across all five domains, each with an instant explanation. Free to take, timed to the pace of the real exam, and retake it as often as you want.

Start the Practice Test → Try a Question First

50Questions, or a 25-question quick test

50 minTimer, paced like the real exam

5N10-009 domains covered

A–DEvery answer choice explained, right and wrong

Try a question before you start

Pick an answer to see the reasoning. These are samples from the 50-question bank; the full test starts below.

Networking Concepts

A network administrator is writing a firewall rule that permits inbound traffic only when the destination TCP port is 443. The rule does not inspect the payload or the URL, only the port number in the segment header. At which layer of the OSI model does this rule operate?

Why not A? The Data Link layer deals with MAC addresses and frames. Port numbers are not part of a Layer 2 frame header, so a MAC-based filter would be a Layer 2 rule, not this one.

Why not B? Filtering on source or destination IP address alone would be a Network layer (Layer 3) rule. Port numbers live one layer higher.

Why not D? An Application layer rule would inspect the actual HTTP or TLS content, such as a URL or hostname. This rule stops at the port number and never examines the payload.

C is correct. TCP and UDP port numbers are fields in the Transport layer header, so a rule that matches on destination port 443 without looking at the application data is operating at Layer 4.

Network Operations

An organization is moving its email to a hosted provider. The provider asks the network team to update the public DNS zone so that other mail servers on the internet know where to deliver messages for the company's domain. Which DNS record type must be created or changed?

Why not B? An A record maps a hostname to an IPv4 address. The provider's mail hosts will need A records, but an A record alone does not tell sending servers which host accepts mail for the domain.

Why not C? CNAME records alias one hostname to another. They do not advertise a mail destination, and RFC 2181 says an MX record should not point at a CNAME.

Why not D? Reverse lookups use PTR records to map an IP address back to a name. That helps mail reputation checks but does not direct inbound delivery.

A is correct. A Mail Exchanger (MX) record specifies the hostnames, with priorities, that accept email for a domain. Sending mail servers query MX records to decide where to deliver.

The full test has 50 questions like these. Start it now →

Start Your Free Practice Test

Enter your details, then choose a 25-question Quick Test or the full 50-question, 50-minute practice test.

Prefer to talk to someone?

Phone800-698-5501

Emaillearn@trainingcamp.com

What you get at the end

Your overall score, a score for each exam domain, and the domains to work on next.

Example report77%

Networking Concepts83%

Network Implementation64%

Network Operations78%

Network Security71%

Network Troubleshooting90%

Below 80% is flagged as an area to work on.

What's on the N10-009 exam

5 weighted domains. The practice test draws questions from each in the same proportion.

23%
Networking Concepts
OSI model, addressing and subnetting, ports and protocols, appliances, topologies, cloud.
20%
Network Implementation
Routing, NAT, first-hop redundancy, VLANs, STP, PoE, wireless, and physical installs.
19%
Network Operations
SNMP, syslog, and flow monitoring, DNS/DHCP/NTP services, VPNs, documentation, DR.
14%
Network Security
IAM, network access control, segmentation, ACLs, common attacks, and hardening.
24%
Network Troubleshooting
Troubleshooting methodology plus cable, connectivity, and performance problems.

Built on what our boot camp teaches

Every question maps to the same exam objectives we teach in the Network+ boot camp, and every answer choice has its own explanation, so a wrong answer still teaches you something. Questions last reviewed September 29, 2026.

Real exam: a maximum of 90 questions in 90 minutes.
To pass: a scaled score of 720 on a scale of 100 to 900.
This test: 50 questions on a 50-minute timer, or a 25-question quick test.

Read the full Network+ exam guide

This free CompTIA Network+ practice test checks your readiness for the N10-009 exam with 50 exam-style scenario questions across all five domains, each with an explanation for every answer choice. Built by Training Camp, an authorized CompTIA partner, and drawn from the same objectives we teach in our Network+ Boot Camp. New to the exam? Learn more about the Network+ certification.

What's on the CompTIA Network+ (N10-009) exam?

N10-009 is organized into five weighted domains: Networking Concepts (23%), Network Implementation (20%), Network Operations (19%), Network Security (14%), and Network Troubleshooting (24%). The real exam has a maximum of 90 questions, a 90-minute time limit, and a passing score of 720 on a scale of 100 to 900. It mixes multiple-choice items with performance-based questions that ask you to configure or troubleshoot a simulated network.

CompTIA recommends CompTIA A+ and 9 to 12 months of hands-on networking experience before sitting the exam. This practice test pulls questions from every domain in roughly the same proportions as the live exam, so your domain breakdown at the end is a fair signal of where to spend your study time.

How to use this practice test

Take it once without notes to get an honest baseline. Read the explanation for every answer, including the ones you got right, because the incorrect-choice explanations are where the distinctions between similar technologies (OSPF versus BGP, RPO versus RTO, PoE versus PoE+) get spelled out. Then focus your study on the weakest domain and retake the test in a week. The 50-minute timer gives you one minute per question, the same pace as the real N10-009 exam, which allows 90 minutes for a maximum of 90 questions.

Training Camp instructor teaching network security at a whiteboard

How to get the most from it

Three steps, in this order.

Student working through practice questions at a laptop

Step 1

Take a baseline

Take the full test once without notes, so the score shows where you really stand.

Step 2

Read every explanation

Including the ones you got right. The notes on the wrong choices explain the differences between similar concepts, like tokenization and encryption.

Students working on laptops in a Training Camp lab

Step 3

Fix one domain, then retake

Your results break down by domain. Study the weakest one for a week, then retake. Each Quick Test draws a fresh mix of questions.

Network+ Practice Test

Frequently Asked Questions

Quick answers about the test, the CompTIA Network+ (N10-009) exam, and how to prepare.

Is this Network+ practice test free?

Yes. Training Camp's Network+ practice test is free to take, with exam-style questions across all five CompTIA Network+ N10-009 domains and a written explanation for every answer choice.

How does this practice test work?

It is 50 multiple-choice scenario questions drawn from all five N10-009 domains, with an instant explanation after each answer and a 50-minute timer, which matches the one-minute-per-question pace of the real exam. You can retake it as often as you want. It is a readiness check, not a substitute for full preparation.

How many questions are on the real Network+ exam?

The CompTIA Network+ N10-009 exam has a maximum of 90 questions and a 90-minute time limit, including multiple-choice and performance-based questions.

What score do I need to pass Network+?

You need a scaled score of 720 on a scale of 100 to 900 to pass the CompTIA Network+ N10-009 exam.

What domains does the Network+ N10-009 exam cover?

N10-009 covers five domains: Networking Concepts (23%), Network Implementation (20%), Network Operations (19%), Network Security (14%), and Network Troubleshooting (24%).

How hard is the Network+ exam?

Network+ is an entry-level to intermediate certification. CompTIA recommends CompTIA A+ and 9 to 12 months of networking experience. The subnetting, troubleshooting, and performance-based questions are where most candidates lose points, so practice those areas hands-on.

How should you prepare for the Network+ exam?

Work through the N10-009 objectives, get hands-on time with switches, routers, and a subnet calculator, and use practice questions to find weak domains. For a structured path, our accelerated Network+ Boot Camp covers every objective with an exam voucher included.

Ready to pass it for real?

The Network+ boot camp covers every exam domain with a live instructor, online or in person.

Exam voucher included
Free retake
180 days of unlimited 1-on-1 coaching after class

View the Network+ Boot Camp →

Popular Searches