ExamFinch.com My Study

Study guide

Current Exam Facts and Applied Networking Judgment

Practice this exam

CompTIA Network+ N10-009

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

Current Exam Facts and Applied Networking Judgment Official Domain Weights and an 8-12 Week Study Plan How to Use Labs, Practice, and PBQ Workflow Missed-Question Notebook and Final Readiness Metrics

2 Domain 1: Networking Concepts (23%)

OSI and TCP/IP Models with Device and Protocol Mapping Networking Appliances and Where They Operate Ports and Protocol Decision Table Traffic Types and Encapsulation Flow

3 Domain 1: Media, Connectors, Transceivers, and Network Architectures

Copper, Fiber, Coax, and DAC Media Connector and Transceiver Selection Network Topologies and Design Patterns Cloud and Virtual Networking Concepts

4 Domain 1: IP Addressing and Subnetting Mastery

IPv4 Classes, Private/Public, APIPA, and Loopback CIDR, VLSM, and Subnet Math IPv6 Address Types and Notation Routing Basics and Longest Prefix Match

5 Domain 2: Network Implementation - Routing

Static vs Dynamic Routing and Route Selection OSPF, EIGRP, and BGP Basics at Network+ Depth NAT/PAT, VIP/FHRP, and Subinterfaces Routing PBQs and Troubleshooting Route Table Clues

6 Domain 2: Network Implementation - Switching

VLANs, Access Ports, Trunks, and Native VLAN STP/RSTP Loop Prevention and Bridge Roles Port Aggregation/LACP, MTU, Jumbo Frames, and Interface Settings Switch Implementation PBQs and Common Misconfigurations

7 Domain 2: Network Implementation - Wireless and Physical Implementation

Wi-Fi Standards, Bands, and Channels SSID Security, Guest Networks, and Authentication Antennas, Coverage, Roaming, Interference, and Site Surveys Physical Installation Implications

8 Domain 2: Network Implementation - Services Implementation

DNS Record Types and Troubleshooting Cues DHCP, DHCPv6, SLAAC, Scopes, Leases, and Relay NTP, PTP, NTS, and Time-Sensitive Networking Service Implementation PBQs: DNS, DHCP, VLANs, and Firewall Direction

9 Domain 3 Part A: Network Operations Documentation and Governance

Physical, Logical, Rack, Cable, Wireless Diagrams, and IPAM Asset Inventory, Baselines, SLAs, SOPs, and Runbooks Change Management and Request Tracking Lifecycle, EOL, EOS, Decommissioning, and Configuration Management

10 Domain 3 Part B: Monitoring, Remote Access, and Resilience

SNMP, Flow, Syslog, Packet Capture, Log Aggregation, APIs, and Port Mirroring Baselines and Performance Metrics Remote Access, Management Paths, and Secure Admin Habits DR and HA Concepts: RPO, RTO, MTTR, MTBF, Sites, Failover, and Testing

11 Domain 4: Logical Security and Secure Access (14%)

Encryption in Transit, Encryption at Rest, PKI, and Certificates IAM, MFA, SSO, Directory Services, and AAA Authorization, Least Privilege, RBAC, Geofencing, and Time-Based Access VPNs and Secure Management Design

12 Domain 4: Segmentation, Risk, and Network Attacks (14%)

Segmentation for Guest, BYOD, IoT, IIoT, SCADA, ICS, and OT Risk, Compliance, Audit, Data Locality, PCI, and GDPR Network Attacks and Scenario Cues Attack-to-Mitigation PBQ Tables

13 Domain 4: Security Controls and Hardening (14%)

Firewalls, IDS, IPS, Security Zones, and Screened Subnets ACLs, Filtering, NAC, Hardening, and Key Management Deception Technologies and Physical Security Zero Trust, SASE, and Trusted or Untrusted Zone Decisions

14 Domain 5: Troubleshooting Methodology and Tools (24%)

Official Troubleshooting Methodology and Evidence Handling Command-Line Tools: ping, traceroute, nslookup, dig, ipconfig, ifconfig, ip, arp, netstat, ss, and route Packet, Protocol, and Wi-Fi Analyzers Choosing the Right Tool by Symptom PBQs

15 Domain 5: Physical, Interface, and Wireless Troubleshooting (24%)

Cable Issues: Type, Attenuation, Crosstalk, Termination, and TX/RX Interface Issues: Errors, Discards, Duplex, Speed, Port Status, and PoE Transceiver, Fiber, and Signal Strength Troubleshooting Wireless Troubleshooting: Interference, Channels, Roaming, RSSI/SNR, Security, and Captive Portals

16 Domain 5: Network Services, Switching, Routing, and Performance Troubleshooting (24%)

DHCP, DNS, NTP, and IP Addressing Issues VLAN, STP, Trunk, Native VLAN, and ACL Issues Routing, Default Gateway, Route Table, and NAT Issues Congestion, Latency, Jitter, Packet Loss, and Application Performance Clues

17 Performance-Based Question Labs

Subnetting and VLSM Design Lab VLAN, Trunk, Router-on-a-Stick, and Firewall Rule Lab Wireless Deployment and Troubleshooting Lab Monitoring, Log Triage, and Route or Service Troubleshooting Lab

18 High-Yield Reference and Final Study Plan

High-Yield Ports and Protocols Table Wi-Fi, Cabling, Connectors, and Transceivers Quick Table Acronyms and Command-Line Tool Quick Table Final 7-Day Review Plan and Readiness Checklist

19 Final Synthesis: Strategy, Remediation, and Readiness

Mixed-Set Decision Strategy for Qualifiers and Close Answers Missed-Question Remediation Notebook by Error Type Exam-Day Time Management and PBQ Order 100-Question Readiness Simulation Blueprint Mapped to N10-009 Weights

Current Exam Facts and Applied Networking Judgment

Key Takeaways Explain This Topic AI

The current CompTIA Network+ exam is N10-009, launched June 20, 2024, and the prior N10-008 retired roughly one year later.

N10-009 includes a maximum of 90 questions, mixes multiple-choice and performance-based questions (PBQs), and runs 90 minutes.

The passing score is 720 on a 100-900 scaled scale, so you do not need a fixed percentage correct.

CompTIA recommends A+ certification and 9-12 months of hands-on networking experience; the US voucher lists at about $369.

Network+ tests practical judgment: identify the symptom, map it to an OSI layer or service, and choose the least-disruptive next action.

Last updated: June 2026

CompTIA Network+ N10-009 at a Glance

The CompTIA Network+ is a vendor-neutral, ANSI/ISO 17024-accredited networking certification. It expects you to know terms, protocols, cable and transceiver types, wireless standards, network services, cloud concepts, and security controls, but the harder items test applied judgment. You must decide where a problem lives, which tool confirms it, which configuration is least disruptive, and which design best fits a stated constraint such as cost, security, or uptime.

The exam in force is N10-009 (Version 9) , which launched June 20, 2024 . CompTIA typically supports the previous version for about a year after a new release, so candidates should not study the retired N10-008 objectives. Study the published N10-009 exam objectives PDF, because each domain bullet is a testable line item.

  • Official exam fact N10-009 detail
  • Current series code N10-009 (V9)
  • Launch date June 20, 2024
  • Maximum questions 90
  • Question styles Multiple-choice (single + multi-select) and performance-based questions (PBQs)
  • Time limit 90 minutes
  • Passing score 720 on a 100-900 scaled scale
  • Voucher price (US) About US $369
  • Recommended background CompTIA A+ plus 9-12 months of hands-on networking experience
  • Recertification Valid 3 years; renew via CompTIA continuing education (CEUs)
  • What the Scaled Score Means

Because scoring is scaled (100-900) , the 720 threshold is not "720 out of 900" and not a flat percentage of items correct. Items are weighted by difficulty, and unscored pilot questions may appear. The practical takeaway: aim to answer confidently across all five domains rather than betting everything on one strong topic. PBQs are typically weighted more heavily than single multiple-choice items, so a few mishandled PBQs hurt more than a few missed recall questions.

Eligibility is open: there are no mandatory prerequisites enforced at registration, so the A+ recommendation and the 9-12 months of experience are guidance, not gates. You schedule through Pearson VUE and may sit the exam at a physical testing center or online with OnVUE remote proctoring. Results are reported as pass or fail immediately at the end, along with your scaled score and a breakdown by domain that you should photograph or save, because that breakdown is your most honest signal for any retake.

CompTIA's retake policy allows a second attempt with no waiting period, but a third or later attempt requires a 14-day wait between tries, and each attempt requires a new voucher.

What Network+ Means by "Best"

Many options will be technically related to a scenario. The best answer is the one that fits the evidence, the affected OSI layer, the business constraint, and the correct order of operations. Train yourself to translate the question stem's verb into a search filter:

  • Question wording What to focus on
  • "Most likely cause" The symptom pattern and where the failure appears in the stack
  • "Best next step" Troubleshooting order, confirmation before action, least-disruptive move
  • "Most appropriate device" Layer, forwarding behavior, segmentation, and inspection needs
  • "Best protocol" Port, transport (TCP/UDP), security, manageability, and use case
  • "Minimum change" / "least disruptive" The smallest configuration adjustment that fixes the stated problem
  • "MOST secure" Encrypted alternative, least privilege, current standard (e.g., SSH over Telnet)
  • Mini Scenario: One Symptom, Several Layers

A user connects to Wi-Fi, receives an IP address by DHCP, but cannot browse internal websites by name. Other users on the same SSID browse normally.

  • Candidate cause Layer or service Why it matters
  • Weak radio signal Layer 1/2 wireless Unlikely once association and DHCP succeeded
  • Wrong default gateway Layer 3 Possible, but the stated symptom is name resolution, not reachability
  • Wrong client DNS server Application service over IP Strong fit: names fail while IP connectivity exists
  • Firewall outage Security control Unlikely if only one user is affected

The exam rewards narrowing . Do not replace hardware when the clue points to a single client's DNS setting. If you can ping a public IP (for example 8.8.8.8 ) but not resolve a hostname, suspect DNS, not cabling.

Applied Judgment Checklist

Step Ask

1 What works and what does not work right now?

2 Is the issue physical, data link, network, transport, or application/service?

3 What is the scope: one host, one VLAN, one site, one service, or everyone?

4 Which command, log, or status page confirms the cause before I act?

5 Which fix addresses the root cause with the least unnecessary change?

A common trap is treating every plausible option as equally valid. On Network+, two answers can both be "true" facts about networking, yet only one fits the evidence and order of operations in the stem. For example, both "reseat the cable" and "check the DNS server" are real troubleshooting steps, but if the stem says the user already pings a public IP successfully, the cable is clearly fine and DNS is the supported next move. Read the stem for what already works before you choose.

A second recurring trap is ignoring the constraint clause. Stems often end with a qualifier such as "with the least downtime," "using the most secure option," or "with the minimum configuration change." That clause is frequently the entire reason one answer beats another. If two protocols both solve the task but one is encrypted, the constraint "most secure" selects the encrypted one (for instance SSH over Telnet, or HTTPS over HTTP). Underline the constraint mentally before scanning the options.

This guide uses original practice scenarios mapped to the official N10-009 objectives and explanation-driven review. It avoids shortcuts that would not help you operate a real network, because the exam was redesigned to reward exactly that operational thinking.