Courseiva
Networking ConceptseasyMultiple ChoiceObjective-mapped

N10-009 Networking Concepts Practice Question

A network technician is explaining the function of a default gateway to a junior technician. Which of the following best describes the purpose of a default gateway?

⚠ Common exam trap

CompTIA often tests the misconception that the default gateway performs NAT or DHCP, but the trap here is that candidates confuse the default gateway's routing function with other network services like address translation or dynamic addressing.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

It routes traffic from the local network to external networks.

The default gateway is a router or Layer 3 device that serves as the next-hop destination for packets destined to IP addresses outside the local subnet. When a host determines that the destination IP is not on the same network, it forwards the frame to the default gateway's MAC address, which then routes the packet toward the external network. This is defined in RFC 1122 and is essential for any host that needs to communicate beyond its directly connected segment.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • It connects two different VLANs.

    Why it's wrong here

    Connecting two different VLANs, known as inter-VLAN routing, is a function performed by a Layer 3 device such as a router or a Layer 3 switch. While a default gateway is often configured on such a device, its specific role is to provide an exit point for a *single* VLAN's traffic to reach *any* other network, not inherently to facilitate communication *between* distinct internal VLANs. The default gateway defines the path *out* of a subnet, not necessarily the path *between* internal subnets.

    When this WOULD be correct

    In a question asking 'Which device connects two different VLANs?', the correct answer would be a router or Layer 3 switch, which can perform inter-VLAN routing.

  • It provides DHCP services to the local network.

    Why it's wrong here

    Providing DHCP services involves dynamically assigning IP addresses, subnet masks, default gateways, and DNS server information to network clients. This specific service is handled by a DHCP server, which is a distinct network application or role. While a router, which often acts as a default gateway, can host a DHCP server, the default gateway's fundamental function is packet forwarding, not IP address management.

    When this WOULD be correct

    In a question asking 'Which network service automatically assigns IP addresses to devices on a local network?', the correct answer would be DHCP, making 'It provides DHCP services to the local network' the right choice.

  • It routes traffic from the local network to external networks.

    Why this is correct

    The default gateway serves as the essential next-hop router for all network traffic originating from the local subnet and destined for any external network. When a device needs to communicate with an IP address outside its immediate local network segment, it forwards those packets to the default gateway. This critical function enables local devices to access the internet, remote corporate networks, or any other network beyond their direct broadcast domain.

  • It translates private IP addresses to public IP addresses.

    Why it's wrong here

    Translating private IP addresses to public IP addresses, commonly known as Network Address Translation (NAT), is a separate function that modifies packet headers to allow multiple private IPs to share a single public IP address for internet access. While NAT is frequently implemented on the same device that serves as the default gateway (e.g., a border router or firewall), it is not an inherent or defining characteristic of a default gateway's core routing responsibility. A default gateway's primary role is simply to forward traffic to the next hop towards its destination.

    When this WOULD be correct

    In a question asking 'Which device translates private IP addresses to public IP addresses for internet access?', the correct answer would be a router or firewall performing NAT, which could be described as 'It translates private IP addresses to public IP addresses.'

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

It routes traffic from the local network to external networks.Correct answer

Why this is correct

The default gateway serves as the essential next-hop router for all network traffic originating from the local subnet and destined for any external network. When a device needs to communicate with an IP address outside its immediate local network segment, it forwards those packets to the default gateway. This critical function enables local devices to access the internet, remote corporate networks, or any other network beyond their direct broadcast domain.

It connects two different VLANs.Wrong answer — click to see why

Why this is wrong here

A default gateway is not specifically for connecting VLANs; that is the role of a router or Layer 3 switch with inter-VLAN routing configured.

★ When this WOULD be the correct answer

In a question asking 'Which device connects two different VLANs?', the correct answer would be a router or Layer 3 switch, which can perform inter-VLAN routing.

Why candidates choose this

Candidates may confuse the default gateway's role in routing between networks with the concept of VLANs, thinking that connecting VLANs is a similar function.

It provides DHCP services to the local network.Wrong answer — click to see why

Why this is wrong here

The default gateway does not provide DHCP services; DHCP is handled by a dedicated DHCP server or a router configured with DHCP services, not the default gateway itself.

★ When this WOULD be the correct answer

In a question asking 'Which network service automatically assigns IP addresses to devices on a local network?', the correct answer would be DHCP, making 'It provides DHCP services to the local network' the right choice.

Why candidates choose this

Candidates may confuse the default gateway with a router that often also runs DHCP services, leading them to incorrectly associate the two functions.

It translates private IP addresses to public IP addresses.Wrong answer — click to see why

Why this is wrong here

The default gateway routes traffic between networks, but it does not perform NAT or IP address translation; that is typically the function of a router or firewall with NAT capabilities.

★ When this WOULD be the correct answer

In a question asking 'Which device translates private IP addresses to public IP addresses for internet access?', the correct answer would be a router or firewall performing NAT, which could be described as 'It translates private IP addresses to public IP addresses.'

Why candidates choose this

Candidates often associate the default gateway with internet access and mistakenly think that NAT is an inherent function of the default gateway, confusing routing with address translation.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

About these practice questions

Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.