N10-009 Network Operations Practice Question
A network operations center uses SNMP to monitor device health. An administrator needs to retrieve the current CPU utilization from a router. Which SNMP operation is most appropriate?
⚠ Common exam trap
Many exam-takers confuse event-driven notifications (TRAP/INFORM) with on-demand data retrieval, leading candidates to select TRAP because they associate it with CPU alerts, but the question asks for retrieving current utilization, not waiting for an alert.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GET
The SNMP GET operation is used by an NMS (Network Management System) to actively request a specific variable from a managed device, such as the current CPU utilization from a router's OID. This is a poll-based retrieval, making it the correct choice for an administrator who needs to read a single value on demand.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
GET
Why this is correct
The GET operation is fundamental for network monitoring as it allows an SNMP manager to actively query an agent for the current value of a specific managed object. When a Network Operations Center (NOC) needs to check device health, such as CPU utilization or interface status, the manager sends a GET request to the device's SNMP agent. The agent then retrieves the requested data from its Management Information Base (MIB) and returns it in a GET-RESPONSE message, providing real-time insight into the device's operational state.
- ✗
SET
Why it's wrong here
The SET operation is used by an SNMP manager to modify the value of a managed object on an SNMP agent, effectively configuring or controlling the device remotely. This command allows for changes to device parameters, such as enabling or disabling an interface, or adjusting a routing metric. It is a write operation, distinctly different from reading data for monitoring purposes, and requires appropriate write permissions.
When this WOULD be correct
An administrator needs to change the SNMP community string on a router to enhance security. In this case, SET would be the correct operation to apply the change.
- ✗
TRAP
Why it's wrong here
An SNMP TRAP is an unsolicited notification sent by an SNMP agent to the manager when a significant event occurs on the device, such as a link going down or an authentication failure. Unlike a GET request, a TRAP is not initiated by the manager seeking information; instead, it's an asynchronous alert from the agent. Its purpose is to inform the manager of critical, often urgent, situations without the manager having to constantly poll the device.
When this WOULD be correct
A question where the administrator needs to be notified automatically when CPU utilization exceeds a threshold, such as 'Which SNMP operation should be configured on the router to send an alert when CPU usage is high?'
- ✗
INFORM
Why it's wrong here
An SNMP INFORM is a manager-to-manager or agent-to-manager notification that, unlike a TRAP, requires an explicit acknowledgment from the receiving manager. This acknowledgment mechanism makes INFORM messages more reliable for critical event notifications where delivery assurance is paramount. While still an agent-initiated notification of an event, rather than a manager-initiated data retrieval, its guaranteed delivery makes it suitable for high-priority alerts that cannot be missed.
When this WOULD be correct
A question asking which SNMP operation ensures reliable delivery of alerts between two NMS systems, where the receiver sends an acknowledgment back to the sender.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓GETCorrect answer▾
Why this is correct
The GET operation is fundamental for network monitoring as it allows an SNMP manager to actively query an agent for the current value of a specific managed object. When a Network Operations Center (NOC) needs to check device health, such as CPU utilization or interface status, the manager sends a GET request to the device's SNMP agent. The agent then retrieves the requested data from its Management Information Base (MIB) and returns it in a GET-RESPONSE message, providing real-time insight into the device's operational state.
✗SETWrong answer — click to see why▾
Why this is wrong here
SET is used to modify configuration or write data to a device, not to retrieve information. The question asks for retrieving CPU utilization, which requires a read operation.
★ When this WOULD be the correct answer
An administrator needs to change the SNMP community string on a router to enhance security. In this case, SET would be the correct operation to apply the change.
Why candidates choose this
Candidates may confuse SNMP operations, thinking SET can be used to 'set up' monitoring or retrieve data, or they may not clearly distinguish between read and write operations.
✗TRAPWrong answer — click to see why▾
Why this is wrong here
TRAP is an unsolicited message sent by an SNMP agent to the manager to notify an event, not a request to retrieve data. The question asks for retrieving current CPU utilization, which requires a GET request from the manager.
★ When this WOULD be the correct answer
A question where the administrator needs to be notified automatically when CPU utilization exceeds a threshold, such as 'Which SNMP operation should be configured on the router to send an alert when CPU usage is high?'
Why candidates choose this
Candidates may confuse TRAP with a method to obtain data because traps are commonly used for monitoring, but they are event-driven notifications, not on-demand retrieval.
✗INFORMWrong answer — click to see why▾
Why this is wrong here
INFORM is used for acknowledged SNMP notifications between managers, not for retrieving data like CPU utilization from an agent.
★ When this WOULD be the correct answer
A question asking which SNMP operation ensures reliable delivery of alerts between two NMS systems, where the receiver sends an acknowledgment back to the sender.
Why candidates choose this
Candidates may confuse INFORM with GET, thinking it involves a request-response exchange, but INFORM is for notifications, not data retrieval.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
SNMP
SNMP (Simple Network Management Protocol) is an application-layer protocol used to collect and organize information about managed devices on IP networks and to modify that information to change device behavior.
Key term
Out-of-band
Out-of-band refers to a separate, dedicated network path used for managing and configuring IT devices, distinct from the main data traffic path.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.