N10-009 Network Operations Practice Question
A network technician needs to discover directly connected network devices and their capabilities for documentation purposes. Which protocol should be used?
⚠ Common exam trap
The N10-009 exam often tests the trap that candidates confuse LLDP with CDP (Cisco Discovery Protocol), but the question explicitly asks for a protocol to discover directly connected devices and their capabilities, and LLDP is the standards-based answer, while CDP is Cisco-proprietary and not always the correct choice in multi-vendor environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
LLDP
LLDP (Link Layer Discovery Protocol) is the correct choice because it is an IEEE 802.1AB standard protocol specifically designed to discover directly connected network devices and their capabilities, such as system name, port description, VLAN information, and management addresses. Unlike proprietary protocols, LLDP operates at Layer 2 and allows any vendor's equipment to advertise and learn about neighbors without requiring IP connectivity or a management station.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SNMP
Why it's wrong here
Simple Network Management Protocol (SNMP) is an application-layer protocol designed for managing and monitoring network devices from a central location. It requires prior knowledge of a device's IP address and a configured community string or credentials to query its Management Information Bases (MIBs) for operational data. SNMP is a pull-based management tool, not an autonomous discovery mechanism that automatically identifies and gathers detailed information about unknown, directly connected neighbors.
When this WOULD be correct
When the question asks for a protocol to monitor network performance, collect statistics, or manage device configurations across a network, SNMP is the correct choice.
- ✓
LLDP
Why this is correct
Link Layer Discovery Protocol (LLDP) is a vendor-neutral, Layer 2 protocol that allows network devices to advertise their identity, capabilities, and other information to directly connected neighbors. By sending periodic advertisements containing Type-Length-Value (TLV) elements, LLDP enables automatic discovery of device type, port ID, management IP, and VLAN information. This capability is crucial for network topology mapping and troubleshooting without requiring manual configuration.
- ✗
ICMP
Why it's wrong here
Internet Control Message Protocol (ICMP) operates at Layer 3 and is primarily used for diagnostic purposes and error reporting within an IP network. While tools like ping and traceroute utilize ICMP to check IP reachability and trace routes, it does not provide detailed information about the identity, capabilities, or specific port connections of directly attached hardware devices. ICMP's function is to report on the operational status of IP communications, not to discover neighbor attributes.
When this WOULD be correct
A question asking which protocol is used to test reachability or measure round-trip time between two hosts would make ICMP correct, e.g., 'Which protocol does the ping command use?'
- ✗
ARP
Why it's wrong here
Address Resolution Protocol (ARP) is a Layer 2 protocol responsible for resolving an IP address to its corresponding Media Access Control (MAC) address within a local broadcast domain. Its sole function is to facilitate communication by mapping IP addresses to physical hardware addresses for devices on the same subnet. ARP does not provide any information about the device's vendor, model, capabilities, or the specific port it's connected to, making it unsuitable for comprehensive neighbor discovery.
When this WOULD be correct
When the question asks for the protocol used to resolve a known IP address to its corresponding MAC address on a local network segment, ARP is the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓LLDPCorrect answer▾
Why this is correct
Link Layer Discovery Protocol (LLDP) is a vendor-neutral, Layer 2 protocol that allows network devices to advertise their identity, capabilities, and other information to directly connected neighbors. By sending periodic advertisements containing Type-Length-Value (TLV) elements, LLDP enables automatic discovery of device type, port ID, management IP, and VLAN information. This capability is crucial for network topology mapping and troubleshooting without requiring manual configuration.
✗SNMPWrong answer — click to see why▾
Why this is wrong here
SNMP is used for monitoring and managing network devices, not for discovering directly connected neighbors and their capabilities. It requires prior configuration and does not provide link-layer discovery.
★ When this WOULD be the correct answer
When the question asks for a protocol to monitor network performance, collect statistics, or manage device configurations across a network, SNMP is the correct choice.
Why candidates choose this
Candidates may confuse SNMP's management capabilities with discovery, or think that because SNMP can retrieve device information, it can also discover neighbors.
✗ICMPWrong answer — click to see why▾
Why this is wrong here
ICMP is used for network diagnostics (e.g., ping, traceroute) and error reporting, not for discovering directly connected devices and their capabilities. It does not provide device type, management address, or port information.
★ When this WOULD be the correct answer
A question asking which protocol is used to test reachability or measure round-trip time between two hosts would make ICMP correct, e.g., 'Which protocol does the ping command use?'
Why candidates choose this
Candidates may confuse ICMP's role in network discovery (like traceroute) with the specific capability discovery and neighbor identification that LLDP provides.
✗ARPWrong answer — click to see why▾
Why this is wrong here
ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses on a local network, not to discover directly connected network devices and their capabilities for documentation.
★ When this WOULD be the correct answer
When the question asks for the protocol used to resolve a known IP address to its corresponding MAC address on a local network segment, ARP is the correct answer.
Why candidates choose this
Candidates may confuse ARP's role in discovering MAC addresses of directly connected devices with the broader device discovery and capability information provided by LLDP.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
VLAN
A VLAN logically segments a physical network into isolated broadcast domains without requiring separate physical switches.
Key term
Link Layer Discovery Protocol
Link Layer Discovery Protocol (LLDP) is a vendor-neutral protocol used by network devices to advertise their identity, capabilities, and neighbors over a local area network.
About these practice questions
This N10-009 question is part of Courseiva's 472-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.