How to use N10-009 flashcards effectively
Flashcards work through active recall — the process of retrieving information from memory rather than passively re-reading it. Research consistently shows that active recall produces stronger, longer-lasting memory than re-reading study guides. For N10-009 preparation, this means flashcards are one of the highest-return study tools available.
Attempt recall first
Read the N10-009 question on each card, pause, and attempt to formulate the answer in your own words before revealing. This retrieval attempt — even if wrong — dramatically strengthens memory compared to immediately reading the answer.
Review wrong cards again
When you get a card wrong, note it and add it back to your review pile. Spaced repetition — seeing difficult cards more frequently — is the mechanism that makes flashcard study far more efficient than linear reading.
Study by domain
Group your N10-009 flashcard sessions by domain for the first 3–4 weeks. Master one domain before moving to the next. In the final week, shuffle all cards together to test cross-domain recall — which is what the real N10-009 exam requires.
Short sessions beat marathon reviews
20–30 flashcard cards per session, done daily, produces better retention than a single 200-card marathon session. Five short daily sessions per week over 4 weeks gives you over 400 total card reviews — enough to reliably pass N10-009.
N10-009 flashcard preview
Sample cards from the N10-009 flashcard bank. Read the question, think of the answer, then read the explanation below.
A network administrator is troubleshooting a connectivity issue and suspects the problem is related to the physical cabling. At which layer of the OSI model should the administrator begin their investigation?
Physical layer
The Physical layer (Layer 1) of the OSI model deals with the physical connection between devices, including cabling, connectors, and signal transmission. Starting here is appropriate when the issue is suspected to be with cabling or physical hardware.
A network engineer needs to segment a single physical switch into multiple broadcast domains to improve security and reduce traffic. Which technology should be implemented?
Virtual LAN (VLAN)
VLANs (Virtual LANs) allow a switch to be logically divided into separate broadcast domains. Devices in different VLANs cannot communicate directly without a router, enhancing security and reducing unnecessary broadcast traffic.
A network operations center uses SNMP to monitor device health. An administrator needs to retrieve the current CPU utilization from a router. Which SNMP operation is most appropriate?
GET
The SNMP GET operation is used to retrieve the value of a specific OID from a managed device, such as CPU utilization. It is a request-response operation initiated by the manager.
A security analyst notices that an attacker is sending crafted packets with overlapping IP fragments to a target server, causing the server to crash. Which type of attack is described?
Teardrop attack
A Teardrop attack manipulates overlapping IP fragments to cause a denial of service. When the target reassembles the fragments, the overlapping data causes a crash or buffer overflow.
A user reports intermittent connectivity on a laptop that moves between floors. The signal strength fluctuates. Which tool would best help identify signal interference and dead zones?
Spectrum analyzer
A spectrum analyzer measures radio frequency signals, identifying interference, signal strength, and dead zones in a wireless environment. It is the appropriate tool for analyzing wireless signal issues.
A network engineer needs to connect two switches located 400 meters apart. The cable run includes high electromagnetic interference from nearby machinery. The engineer decides to use fiber optic cabling. Which transceiver type and fiber combination should be used to ensure the link reaches 400 meters while remaining cost-effective?
Multimode fiber with 1000BASE-SX transceivers
For distances up to 400 meters, multimode fiber (typically OM3/OM4) with an SFP transceiver such as 1000BASE-SX (850nm wavelength) is cost-effective and supports distances up to 550 meters. Single-mode fiber (1000BASE-LX) can go much longer but is more expensive and unnecessary for this distance.
A network engineer is designing a new switched network and needs to ensure that broadcast traffic from one department does not reach another department's workstations. The engineer plans to use VLANs. Which of the following must be configured on the switches to isolate broadcast domains as intended?
Assign each department's workstations to a unique VLAN and configure their switch ports as access ports in that VLAN.
VLANs create separate broadcast domains. To isolate traffic, each department's workstations should be placed in a distinct VLAN. Access ports are assigned to a specific VLAN and do not forward traffic from other VLANs. Trunk ports carry multiple VLANs, but the broadcast isolation is achieved by assigning ports to the correct VLAN.
A security engineer is configuring a site-to-site VPN between two branch offices. The requirement is to encrypt all traffic between the two networks using IPsec. Which IPsec mode should be used to encrypt the entire IP packet including the original header?
Tunnel mode
In IPsec, tunnel mode encrypts the entire original IP packet (including the original header) and adds a new IP header for transit. This is used for site-to-site VPNs. Transport mode only encrypts the payload, leaving the original IP header intact, which is typically used for end-to-end connections. AH provides authentication only, not encryption. ESP can be used in both modes but with different scope. Therefore, tunnel mode is correct.
A network administrator is connecting two switches to increase bandwidth and provide redundancy. Which technology should be used to combine multiple physical links into a single logical link?
Link Aggregation Control Protocol
LACP (IEEE 802.3ad) allows multiple physical Ethernet links to be combined into a single logical link, providing increased throughput and redundancy. STP would block redundant links rather than aggregate them.
A network administrator is experiencing issues where unauthorized devices are offering IP addresses to clients, causing connectivity problems. Which security feature should be enabled on switches to prevent this?
DHCP Snooping
DHCP Snooping filters DHCP messages on untrusted ports and prevents rogue DHCP servers from offering IP addresses. Dynamic ARP Inspection and IP Source Guard rely on DHCP Snooping binding table. Port Security limits MAC addresses but does not prevent rogue DHCP servers.
A network administrator is troubleshooting a connectivity issue and suspects the problem is related to the physical cabling. At which layer of the OSI model should the administrator begin their investigation?
Physical layer
The Physical layer (Layer 1) of the OSI model deals with the physical connection between devices, including cabling, connectors, and signal transmission. Starting here is appropriate when the issue is suspected to be with cabling or physical hardware.
A network administrator needs to generate a report of all MAC addresses learned on each switch port to assist with inventory management. Which command-line utility can be used to view the MAC address table on a switch?
show mac address-table
The 'show mac address-table' command displays the MAC address table, showing which MAC addresses are learned on which ports. 'show running-config' shows configuration, 'show ip interface' shows IP interface status, and 'show vlan' shows VLAN information.
A network engineer is designing a network for a large organization. The engineer needs to ensure that broadcast traffic from one VLAN does not propagate to other VLANs while still allowing inter-VLAN communication. Which of the following devices is required to route between VLANs?
Router
A router or a Layer 3 switch is required to route traffic between VLANs. A switch alone only forwards within the same VLAN. A firewall can also route but is primarily security-focused. The question emphasizes routing between VLANs, which is done by a router (or Layer 3 switch). A bridge operates at Layer 2 and does not route between VLANs.
A network administrator needs to identify which application protocols are consuming the most bandwidth on the company WAN link. Which of the following tools should the administrator use?
NetFlow analyzer
NetFlow (or similar flow-based monitoring) collects metadata about network flows, including source/destination IP, ports, and protocol. This allows analysis of traffic patterns and application usage.
A network administrator needs to identify which devices are generating the most traffic on a WAN link. The administrator requires detailed flow data including source and destination IP addresses, ports, and protocols. Which technology should be deployed?
NetFlow
NetFlow (or similar flow technologies) exports metadata about traffic flows, allowing analysis of top talkers, applications, and bandwidth usage.
A network engineer is configuring a Link Aggregation Group (LAG) between two switches. Switch A is set to LACP active mode. Which mode should be configured on Switch B to form the LAG?
Passive
LACP active mode initiates negotiation by sending LACP packets. The peer must be configured as passive (responds to negotiation) or active (initiates as well) to form the link aggregation. 'on' mode is static and does not use LACP, so it will not form a LAG with an active port. 'auto' is a PAgP mode. LACP modes are active and passive.
A network administrator needs to replace a core switch that is nearing end-of-life. According to change management best practices, which step should the administrator perform FIRST?
D
Formal change management requires that a change request be submitted and approved before any work begins. This ensures that all stakeholders are aware, risks are assessed, and a rollback plan is documented. Checking network diagrams, notifying users, and creating a rollback plan are important subsequent steps that depend on the approved change request.
A network engineer is implementing OSPF on a router. All directly connected neighbors are listed with state FULL, but routes from another area are not appearing in the routing table. Which of the following is the most likely cause?
The router has an ACL blocking inbound OSPF updates
When OSPF neighbors reach FULL state, the link-state database is synchronized. However, if routes from another area are missing, the issue is likely with the propagation of inter-area routes (Type 3 LSAs). An ACL configured to filter OSPF updates can block these LSAs. The router ID is required for OSPF operation but would prevent neighbor formation if missing. Virtual-links are only needed if an area is not directly connected to area 0. A corrupted link-state database is less likely than a simple ACL filter.
A network administrator needs to schedule a firmware update for several switches during a maintenance window. Which of the following documents should be updated immediately after the changes are complete?
Change management request
Change management procedures require that after any change, the change request be updated to reflect the completion, results, and any issues encountered. This maintains an accurate record and supports rollback or audit.
A network administrator needs to schedule a firmware upgrade for a critical router. Which document should be used to formally communicate the change, seek approval, and track the implementation?
A) Change management request
A change management request documents the proposed change, includes risk assessment and approval steps, and provides a record of implementation. Network diagrams show topology, SLAs define service levels, and baselines show normal performance.
A network administrator needs to schedule a firmware upgrade for a critical switch during a maintenance window. After the upgrade is completed and verified, which document should the administrator update to reflect the new firmware version?
Configuration baseline document
The configuration baseline or asset inventory should be updated to record the new firmware version for tracking and troubleshooting purposes. This helps maintain accurate records.
A network engineer has successfully established an IPsec site-to-site VPN tunnel between a branch office (10.0.1.0/24) and the main office (192.168.1.0/24). The tunnel status shows as active, and both sides can ping each other's tunnel interface IP addresses. However, users at the branch office cannot ping the main office server at 192.168.1.10, and the main office cannot ping the branch office server at 10.0.1.10. The firewall rules on both sides permit IPsec traffic and all internal traffic. What should the engineer check NEXT?
Verify routing entries on both routers to ensure the remote internal subnets are reachable via the tunnel.
Even if the IPsec tunnel is up and endpoints can ping the tunnel IPs, internal hosts may not be able to communicate if routing is not properly configured. The engineer must ensure that both routers have routes to the remote internal networks, either statically or dynamically, so that packets from internal hosts are sent through the tunnel. Additionally, Network Address Translation (NAT) policies should be checked to ensure they are not translating the internal traffic that should be encrypted.
A user reports slow network performance on their workstation. The technician checks the switch port and sees a high number of CRC errors. Which of the following is the MOST likely cause of this issue?
Duplex mismatch
CRC errors typically indicate physical layer problems, most commonly a duplex mismatch between the switch port and the NIC. When one side is set to full duplex and the other to half duplex, collisions and frame errors occur.
N10-009 flashcards by domain
The N10-009 flashcard bank covers all 5 official blueprint domains published by CompTIA. Cards are distributed proportionally, so domains with higher exam weight have more cards.
Domain Coverage
Networking Concepts
Network Implementation
Network Operations
Network Security
Network Troubleshooting
Flashcards vs practice tests: which is better for N10-009?
Both flashcards and practice questions are evidence-based study tools. The difference is in what they train:
Flashcards — concept retention
Best for memorising definitions, acronyms, protocol behaviours, command syntax, and conceptual distinctions. Use flashcards to build the foundational vocabulary that N10-009 questions assume you know.
Best in: weeks 1–3
Practice tests — application
Best for applying concepts to realistic scenarios, eliminating distractors, and building exam stamina.N10-009 questions test scenario reasoning — not just recall — so practice tests are essential.
Best in: weeks 3–6
The most effective N10-009 study plan combines both: use flashcards for the first 2–3 weeks to build conceptual foundations, then shift to practice tests and mock exams in the final 2–3 weeks to apply and benchmark that knowledge. Most candidates who pass on their first attempt use both tools.
N10-009 flashcards — frequently asked questions
Are the N10-009 flashcards free?
Yes — all N10-009 flashcards on Courseiva are completely free, no account required. Every card includes the question, correct answer, and a full explanation. Create a free account to track which cards you have studied and get spaced repetition recommendations.
How many N10-009 flashcards are on Courseiva?
Courseiva has 500+ original N10-009 flashcards across all 5 exam blueprint domains. New cards are added regularly as the question bank grows. All cards are written by certified engineers against the official CompTIA exam objectives.
How are Courseiva flashcards different from Anki or Quizlet?
Courseiva flashcards are purpose-built for IT certification exams. Unlike generic flashcard platforms where content quality varies, every Courseiva card is mapped to the official N10-009 exam blueprint, written by engineers who hold the certification, and includes a full explanation of the correct answer and why the distractors are wrong. This explanation quality is what separates genuine learning from rote memorisation.
Can I use N10-009 flashcards offline?
Courseiva is a web platform — an internet connection is required. For offline study, we recommend creating free Courseiva account, using the platform in your browser, and using your device's offline capabilities if your browser supports offline web apps.
Track your N10-009 flashcard progress
Save your results, see which domains need more work, and get spaced repetition recommendations — all free.
Sign Up FreeFree forever · Every certification included