Study guide

Official Domain Weights and an 8-12 Week Study Plan

CompTIA Network+ N10-009

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

Current Exam Facts and Applied Networking Judgment Official Domain Weights and an 8-12 Week Study Plan How to Use Labs, Practice, and PBQ Workflow Missed-Question Notebook and Final Readiness Metrics

2 Domain 1: Networking Concepts (23%)

OSI and TCP/IP Models with Device and Protocol Mapping Networking Appliances and Where They Operate Ports and Protocol Decision Table Traffic Types and Encapsulation Flow

3 Domain 1: Media, Connectors, Transceivers, and Network Architectures

Copper, Fiber, Coax, and DAC Media Connector and Transceiver Selection Network Topologies and Design Patterns Cloud and Virtual Networking Concepts

4 Domain 1: IP Addressing and Subnetting Mastery

IPv4 Classes, Private/Public, APIPA, and Loopback CIDR, VLSM, and Subnet Math IPv6 Address Types and Notation Routing Basics and Longest Prefix Match

5 Domain 2: Network Implementation - Routing

Static vs Dynamic Routing and Route Selection OSPF, EIGRP, and BGP Basics at Network+ Depth NAT/PAT, VIP/FHRP, and Subinterfaces Routing PBQs and Troubleshooting Route Table Clues

6 Domain 2: Network Implementation - Switching

VLANs, Access Ports, Trunks, and Native VLAN STP/RSTP Loop Prevention and Bridge Roles Port Aggregation/LACP, MTU, Jumbo Frames, and Interface Settings Switch Implementation PBQs and Common Misconfigurations

7 Domain 2: Network Implementation - Wireless and Physical Implementation

Wi-Fi Standards, Bands, and Channels SSID Security, Guest Networks, and Authentication Antennas, Coverage, Roaming, Interference, and Site Surveys Physical Installation Implications

8 Domain 2: Network Implementation - Services Implementation

DNS Record Types and Troubleshooting Cues DHCP, DHCPv6, SLAAC, Scopes, Leases, and Relay NTP, PTP, NTS, and Time-Sensitive Networking Service Implementation PBQs: DNS, DHCP, VLANs, and Firewall Direction

9 Domain 3 Part A: Network Operations Documentation and Governance

Physical, Logical, Rack, Cable, Wireless Diagrams, and IPAM Asset Inventory, Baselines, SLAs, SOPs, and Runbooks Change Management and Request Tracking Lifecycle, EOL, EOS, Decommissioning, and Configuration Management

10 Domain 3 Part B: Monitoring, Remote Access, and Resilience

SNMP, Flow, Syslog, Packet Capture, Log Aggregation, APIs, and Port Mirroring Baselines and Performance Metrics Remote Access, Management Paths, and Secure Admin Habits DR and HA Concepts: RPO, RTO, MTTR, MTBF, Sites, Failover, and Testing

11 Domain 4: Logical Security and Secure Access (14%)

Encryption in Transit, Encryption at Rest, PKI, and Certificates IAM, MFA, SSO, Directory Services, and AAA Authorization, Least Privilege, RBAC, Geofencing, and Time-Based Access VPNs and Secure Management Design

12 Domain 4: Segmentation, Risk, and Network Attacks (14%)

Segmentation for Guest, BYOD, IoT, IIoT, SCADA, ICS, and OT Risk, Compliance, Audit, Data Locality, PCI, and GDPR Network Attacks and Scenario Cues Attack-to-Mitigation PBQ Tables

13 Domain 4: Security Controls and Hardening (14%)

Firewalls, IDS, IPS, Security Zones, and Screened Subnets ACLs, Filtering, NAC, Hardening, and Key Management Deception Technologies and Physical Security Zero Trust, SASE, and Trusted or Untrusted Zone Decisions

14 Domain 5: Troubleshooting Methodology and Tools (24%)

Official Troubleshooting Methodology and Evidence Handling Command-Line Tools: ping, traceroute, nslookup, dig, ipconfig, ifconfig, ip, arp, netstat, ss, and route Packet, Protocol, and Wi-Fi Analyzers Choosing the Right Tool by Symptom PBQs

15 Domain 5: Physical, Interface, and Wireless Troubleshooting (24%)

Cable Issues: Type, Attenuation, Crosstalk, Termination, and TX/RX Interface Issues: Errors, Discards, Duplex, Speed, Port Status, and PoE Transceiver, Fiber, and Signal Strength Troubleshooting Wireless Troubleshooting: Interference, Channels, Roaming, RSSI/SNR, Security, and Captive Portals

16 Domain 5: Network Services, Switching, Routing, and Performance Troubleshooting (24%)

DHCP, DNS, NTP, and IP Addressing Issues VLAN, STP, Trunk, Native VLAN, and ACL Issues Routing, Default Gateway, Route Table, and NAT Issues Congestion, Latency, Jitter, Packet Loss, and Application Performance Clues

17 Performance-Based Question Labs

Subnetting and VLSM Design Lab VLAN, Trunk, Router-on-a-Stick, and Firewall Rule Lab Wireless Deployment and Troubleshooting Lab Monitoring, Log Triage, and Route or Service Troubleshooting Lab

18 High-Yield Reference and Final Study Plan

High-Yield Ports and Protocols Table Wi-Fi, Cabling, Connectors, and Transceivers Quick Table Acronyms and Command-Line Tool Quick Table Final 7-Day Review Plan and Readiness Checklist

19 Final Synthesis: Strategy, Remediation, and Readiness

Mixed-Set Decision Strategy for Qualifiers and Close Answers Missed-Question Remediation Notebook by Error Type Exam-Day Time Management and PBQ Order 100-Question Readiness Simulation Blueprint Mapped to N10-009 Weights

Official Domain Weights and an 8-12 Week Study Plan

Key Takeaways Explain This Topic AI

N10-009 has five domains: Networking Concepts, Network Implementation, Network Operations, Network Security, and Network Troubleshooting.

Network Troubleshooting is the largest domain at 24%, followed closely by Networking Concepts at 23%; together they are nearly half the exam.

An 8-week plan suits candidates with regular hands-on exposure; a 12-week plan adds time for subnetting and command-output fluency.

Allocate study time by both official weight and personal weakness, especially subnetting, VLAN trunking, routing, and troubleshooting order.

The final third of study should emphasize mixed scenarios, PBQ-style practice, and timed review under the 90-minute clock.

Last updated: June 2026

Official N10-009 Domain Weighting

  • Domain Name Exam weight
  • 1.0 Networking Concepts 23%
  • 2.0 Network Implementation 20%
  • 3.0 Network Operations 19%
  • 4.0 Network Security 14%
  • 5.0 Network Troubleshooting 24%

Troubleshooting (5.0) is the single largest domain, but it depends on everything before it: you cannot diagnose VLANs, DHCP, routing, DNS, wireless, or cabling if those foundations are weak. Notice that Concepts (1.0) and Troubleshooting (5.0) together total 47% of the exam, so OSI/TCP-IP reasoning and methodical fault isolation are the highest-leverage skills.

Key content moved or added in N10-009 versus the retired N10-008 includes expanded software-defined networking (SDN) , SD-WAN , infrastructure as code (IaC) , zero trust and SASE concepts, and clearer cloud-networking coverage, while some legacy hardware detail was trimmed. Study from the current objectives so you do not over-invest in retired material.

When you skim the five domains, recognize that they are not independent silos but a stack of dependencies. Domain 1 defines the vocabulary (OSI model, encapsulation, IPv4/IPv6, ports, traffic types). Domain 2 puts that vocabulary into a topology (cabling, devices, VLANs, routing, cloud and WAN connectivity). Domain 3 keeps that topology healthy (monitoring, baselines, documentation, change control). Domain 4 protects it (segmentation, hardening, AAA, secure protocols). Domain 5 repairs it. A weakness in Domain 1 silently caps your score in every later domain, which is why the plans below front-load fundamentals.

8-Week Study Plan

Use this pace if you already work around switches, routers, wireless, cloud networks, or service-desk escalation.

  • Week Primary focus Output
  • 1 OSI/TCP-IP model, IPv4/IPv6 addresses, ports, traffic types Layer-and-protocol decision table
  • 2 Subnetting, routing, switching, wireless basics Daily subnetting drills and topology labels
  • 3 Network devices, cabling, transceivers, physical design Media-selection and appliance-placement drills
  • 4 VLANs, inter-VLAN routing, NAT, VPNs, cloud and data-center concepts Diagram three segmented networks

5 Operations: monitoring, documentation, change/configuration management Interpret logs, baselines, and diagrams

6 Security: segmentation, hardening, AAA, secure protocols, zero trust Replace insecure designs with safer alternatives

7 Troubleshooting methodology, tools, command output, common failures Fault-isolation scenarios by OSI layer

8 Mixed PBQ-style practice, timed sets, missed-question repair Two timed mixed reviews and a final readiness sheet

12-Week Study Plan

Use this pace if networking is new or if subnetting and command output still feel slow.

  • Weeks Focus What to practice slowly
  • 1-2 Domain 1 foundations OSI layers, TCP/IP, IPv4, IPv6, ports, traffic types
  • 3-4 Switching, routing, wireless, addressing VLANs, trunking, subnet math, route selection
  • 5-6 Domain 2 implementation Cables, optics, appliances, cloud networking, site connectivity
  • 7-8 Domain 3 operations Diagrams, monitoring, configuration management, backups, policies
  • 9 Domain 4 security AAA, secure protocols, segmentation, device hardening
  • 10 Domain 5 troubleshooting Tools, symptoms, root cause, command output
  • 11 Mixed scenarios and PBQ workflow Drag/drop mapping, configuration interpretation, topology repair
  • 12 Timed readiness Pacing, final weak areas, calm review of high-yield tables
  • Time Allocation Example

If you have 72 total study hours, seed the split from the official weights, then adjust after a diagnostic set. Because PBQs are heavy and live mostly in implementation and troubleshooting, lean slightly toward hands-on practice there.

  • Domain Weight Approximate hours
  • Networking Concepts 23% 17
  • Network Implementation 20% 14
  • Network Operations 19% 14
  • Network Security 14% 10
  • Network Troubleshooting 24% 17
  • Total 100% 72
  • Pacing Math You Should Internalize

With up to 90 questions in 90 minutes , your average budget is about one minute per item . Multiple-choice recall should take 20-40 seconds; bank that saved time for PBQs, which can each consume 3-5 minutes. A safe plan: clear straightforward items first, flag anything slow, and return to PBQs with the time you saved. Never leave an item blank, because there is no penalty for a wrong guess on a scaled exam.

Scenario: Adjust the Plan by Evidence

A candidate scores well on port memorization but misses subnetting, VLAN trunking, and "what changed" troubleshooting questions.

  • Weakness Better adjustment
  • Subnetting is slow Do 10 short subnet prompts daily until the process is automatic
  • VLAN questions are missed Draw access ports, trunks, native VLANs, and inter-VLAN routing paths
  • Troubleshooting feels vague Write symptom, affected scope, likely layer, and confirming tool before choosing
  • PBQs feel rushed Read the instructions first, then label known-good facts before moving items

Domain weights tell you where attention belongs in general; your missed-question evidence tells you where your next hour belongs specifically.

Take a short diagnostic before week one and again at the midpoint. A 40-50 question mixed set, scored by domain, exposes whether your real gaps match the official weights. If you already score above 80% on Concepts but below 50% on Troubleshooting, do not spread hours evenly; pour them into fault-isolation drills and command output. Conversely, if subnetting alone is dragging three different domains down (it appears in Concepts, Implementation, and Troubleshooting), fixing that one skill lifts your whole score.

Treat the diagnostic as the steering wheel and the weights as the map: the map shows the terrain, but the wheel responds to where you actually are.