N10-009 Network Troubleshooting Practice Question
A user can ping the default gateway (192.168.1.1) but cannot ping the external IP address 8.8.8.8. Other users on the same subnet can ping 8.8.8.8 without issue. The user's IP configuration is correct: IP 192.168.1.10/24, default gateway 192.168.1.1, DNS 8.8.8.8. What is the most likely cause?
⚠ Common exam trap
A common mix-up: candidates assume a routing or DNS issue when the problem is host-specific, but the key clue is that other users on the same subnet succeed, pointing to a local host configuration or firewall problem rather than a network-wide fault.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The computer's firewall is blocking outbound ICMP
The user can ping the default gateway (192.168.1.1) but not the external IP 8.8.8.8, while other users on the same subnet can ping 8.8.8.8 without issue. This isolates the problem to the user's specific host, not the network infrastructure. A local firewall on the user's computer blocking outbound ICMP (Internet Control Message Protocol) traffic would prevent ping to external IPs while still allowing local subnet communication, as ICMP is often restricted by default in some security policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The computer's firewall is blocking outbound ICMP
Why this is correct
If a user can successfully ping the default gateway (an internal network device) but fails to ping an external IP address like 8.8.8.8, it strongly suggests a local issue on the user's machine. Many operating system firewalls, by default or through custom configuration, are set to block outbound Internet Control Message Protocol (ICMP) echo requests to external destinations, while still permitting internal network communication. This selective blocking prevents external pings from leaving the host, even if the network path to the gateway is clear.
- ✗
The router is missing a default route to the internet
Why it's wrong here
A missing or incorrect default route on the network router would prevent all devices on the local network from reaching external destinations, as the router would not know where to forward traffic destined for networks outside its directly connected subnets. Since the problem statement indicates that other users can successfully ping external IPs, the router's routing table, including its default route to the internet, must be correctly configured and operational. This scenario points away from a shared network infrastructure problem.
When this WOULD be correct
If the question stated that no users on the subnet can ping external IPs, and the router's routing table shows no default route, then a missing default route would be the likely cause.
- ✗
The DNS server is not resolving the hostname
Why it's wrong here
The problem statement explicitly mentions the user attempting to ping the IP address 8.8.8.8, which is Google's public DNS server. When an IP address is used directly as the target for a ping command, the Domain Name System (DNS) is not involved in the resolution process. DNS is only required when a hostname (e.g., "google.com") needs to be translated into an IP address. Therefore, DNS server issues are irrelevant to this specific troubleshooting scenario.
When this WOULD be correct
In a scenario where a user cannot ping a hostname (e.g., www.google.com) but can ping its IP address (e.g., 8.8.8.8), and other users can ping the hostname, the most likely cause is DNS server misconfiguration or failure.
- ✗
The network cable is loose or faulty
Why it's wrong here
A loose or faulty network cable would typically manifest as a complete loss of physical layer connectivity or highly intermittent network access. If the user can successfully ping the default gateway, it confirms that the physical connection between the computer's Network Interface Card (NIC) and the local network switch or access point is stable and functional. Therefore, the integrity of the network cable is not the root cause of the inability to reach external IP addresses.
When this WOULD be correct
In a scenario where a user cannot ping any IP address (neither gateway nor external), and link lights are off or intermittent, a loose or faulty network cable would be the likely cause.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓The computer's firewall is blocking outbound ICMPCorrect answer▾
Why this is correct
If a user can successfully ping the default gateway (an internal network device) but fails to ping an external IP address like 8.8.8.8, it strongly suggests a local issue on the user's machine. Many operating system firewalls, by default or through custom configuration, are set to block outbound Internet Control Message Protocol (ICMP) echo requests to external destinations, while still permitting internal network communication. This selective blocking prevents external pings from leaving the host, even if the network path to the gateway is clear.
✗The router is missing a default route to the internetWrong answer — click to see why▾
Why this is wrong here
Other users on the same subnet can ping 8.8.8.8, which proves the router has a default route to the internet. The issue is isolated to this user's computer.
★ When this WOULD be the correct answer
If the question stated that no users on the subnet can ping external IPs, and the router's routing table shows no default route, then a missing default route would be the likely cause.
Why candidates choose this
Candidates may assume that any inability to reach the internet is due to a router misconfiguration, overlooking that the problem is isolated to a single host.
✗The DNS server is not resolving the hostnameWrong answer — click to see why▾
Why this is wrong here
The user can ping the default gateway but not 8.8.8.8, and DNS is not involved in ICMP ping to an IP address. DNS resolution is only needed when pinging a hostname, not an IP.
★ When this WOULD be the correct answer
In a scenario where a user cannot ping a hostname (e.g., www.google.com) but can ping its IP address (e.g., 8.8.8.8), and other users can ping the hostname, the most likely cause is DNS server misconfiguration or failure.
Why candidates choose this
Candidates often confuse DNS with general internet connectivity issues, assuming that if you can't reach an external IP, DNS must be the problem, even though the ping command uses an IP address directly.
✗The network cable is loose or faultyWrong answer — click to see why▾
Why this is wrong here
The user can ping the default gateway, indicating the network cable is functional. A loose or faulty cable would prevent all network communication, including pinging the gateway.
★ When this WOULD be the correct answer
In a scenario where a user cannot ping any IP address (neither gateway nor external), and link lights are off or intermittent, a loose or faulty network cable would be the likely cause.
Why candidates choose this
Candidates may associate connectivity issues with physical layer problems, overlooking that successful gateway ping rules out cable faults.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Troubleshoot: Network Connectivity
Key term
ICMP
ICMP is a network-layer protocol used by network devices to send error messages and operational information about network connectivity.
Key term
Firewall
A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules to protect trusted internal networks from untrusted external networks.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.