N10-009 Networking Concepts Practice Question
A network technician is explaining the function of a default gateway to a junior technician. Which of the following best describes the purpose of a default gateway?
⚠ Common exam trap
CompTIA often tests the misconception that the default gateway performs NAT or DHCP, but the trap here is that candidates confuse the default gateway's routing function with other network services like address translation or dynamic addressing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It routes traffic from the local network to external networks.
The default gateway is a router or Layer 3 device that serves as the next-hop destination for packets destined to IP addresses outside the local subnet. When a host determines that the destination IP is not on the same network, it forwards the frame to the default gateway's MAC address, which then routes the packet toward the external network. This is defined in RFC 1122 and is essential for any host that needs to communicate beyond its directly connected segment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It connects two different VLANs.
Why it's wrong here
Connecting two different VLANs, known as inter-VLAN routing, is a function performed by a Layer 3 device such as a router or a Layer 3 switch. While a default gateway is often configured on such a device, its specific role is to provide an exit point for a *single* VLAN's traffic to reach *any* other network, not inherently to facilitate communication *between* distinct internal VLANs. The default gateway defines the path *out* of a subnet, not necessarily the path *between* internal subnets.
When this WOULD be correct
In a question asking 'Which device connects two different VLANs?', the correct answer would be a router or Layer 3 switch, which can perform inter-VLAN routing.
- ✗
It provides DHCP services to the local network.
Why it's wrong here
Providing DHCP services involves dynamically assigning IP addresses, subnet masks, default gateways, and DNS server information to network clients. This specific service is handled by a DHCP server, which is a distinct network application or role. While a router, which often acts as a default gateway, can host a DHCP server, the default gateway's fundamental function is packet forwarding, not IP address management.
When this WOULD be correct
In a question asking 'Which network service automatically assigns IP addresses to devices on a local network?', the correct answer would be DHCP, making 'It provides DHCP services to the local network' the right choice.
- ✓
It routes traffic from the local network to external networks.
Why this is correct
The default gateway serves as the essential next-hop router for all network traffic originating from the local subnet and destined for any external network. When a device needs to communicate with an IP address outside its immediate local network segment, it forwards those packets to the default gateway. This critical function enables local devices to access the internet, remote corporate networks, or any other network beyond their direct broadcast domain.
- ✗
It translates private IP addresses to public IP addresses.
Why it's wrong here
Translating private IP addresses to public IP addresses, commonly known as Network Address Translation (NAT), is a separate function that modifies packet headers to allow multiple private IPs to share a single public IP address for internet access. While NAT is frequently implemented on the same device that serves as the default gateway (e.g., a border router or firewall), it is not an inherent or defining characteristic of a default gateway's core routing responsibility. A default gateway's primary role is simply to forward traffic to the next hop towards its destination.
When this WOULD be correct
In a question asking 'Which device translates private IP addresses to public IP addresses for internet access?', the correct answer would be a router or firewall performing NAT, which could be described as 'It translates private IP addresses to public IP addresses.'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓It routes traffic from the local network to external networks.Correct answer▾
Why this is correct
The default gateway serves as the essential next-hop router for all network traffic originating from the local subnet and destined for any external network. When a device needs to communicate with an IP address outside its immediate local network segment, it forwards those packets to the default gateway. This critical function enables local devices to access the internet, remote corporate networks, or any other network beyond their direct broadcast domain.
✗It connects two different VLANs.Wrong answer — click to see why▾
Why this is wrong here
A default gateway is not specifically for connecting VLANs; that is the role of a router or Layer 3 switch with inter-VLAN routing configured.
★ When this WOULD be the correct answer
In a question asking 'Which device connects two different VLANs?', the correct answer would be a router or Layer 3 switch, which can perform inter-VLAN routing.
Why candidates choose this
Candidates may confuse the default gateway's role in routing between networks with the concept of VLANs, thinking that connecting VLANs is a similar function.
✗It provides DHCP services to the local network.Wrong answer — click to see why▾
Why this is wrong here
The default gateway does not provide DHCP services; DHCP is handled by a dedicated DHCP server or a router configured with DHCP services, not the default gateway itself.
★ When this WOULD be the correct answer
In a question asking 'Which network service automatically assigns IP addresses to devices on a local network?', the correct answer would be DHCP, making 'It provides DHCP services to the local network' the right choice.
Why candidates choose this
Candidates may confuse the default gateway with a router that often also runs DHCP services, leading them to incorrectly associate the two functions.
✗It translates private IP addresses to public IP addresses.Wrong answer — click to see why▾
Why this is wrong here
The default gateway routes traffic between networks, but it does not perform NAT or IP address translation; that is typically the function of a router or firewall with NAT capabilities.
★ When this WOULD be the correct answer
In a question asking 'Which device translates private IP addresses to public IP addresses for internet access?', the correct answer would be a router or firewall performing NAT, which could be described as 'It translates private IP addresses to public IP addresses.'
Why candidates choose this
Candidates often associate the default gateway with internet access and mistakenly think that NAT is an inherent function of the default gateway, confusing routing with address translation.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
Learn chapter
Network Virtualization and VXLAN
Key term
Frame
A frame is a unit of data at the Data Link layer of networking, containing header, payload, and trailer information for local network delivery.
Key term
Default gateway
A default gateway is a network device, typically a router, that acts as the exit point for traffic from a local network to other networks, including the internet.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.