Courseiva
Network TroubleshootingmediumMultiple ChoiceObjective-mapped

N10-009 Network Troubleshooting Practice Question

A user can ping the default gateway (192.168.1.1) but cannot ping the external IP address 8.8.8.8. Other users on the same subnet can ping 8.8.8.8 without issue. The user's IP configuration is correct: IP 192.168.1.10/24, default gateway 192.168.1.1, DNS 8.8.8.8. What is the most likely cause?

⚠ Common exam trap

A common mix-up: candidates assume a routing or DNS issue when the problem is host-specific, but the key clue is that other users on the same subnet succeed, pointing to a local host configuration or firewall problem rather than a network-wide fault.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The computer's firewall is blocking outbound ICMP

The user can ping the default gateway (192.168.1.1) but not the external IP 8.8.8.8, while other users on the same subnet can ping 8.8.8.8 without issue. This isolates the problem to the user's specific host, not the network infrastructure. A local firewall on the user's computer blocking outbound ICMP (Internet Control Message Protocol) traffic would prevent ping to external IPs while still allowing local subnet communication, as ICMP is often restricted by default in some security policies.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The computer's firewall is blocking outbound ICMP

    Why this is correct

    If a user can successfully ping the default gateway (an internal network device) but fails to ping an external IP address like 8.8.8.8, it strongly suggests a local issue on the user's machine. Many operating system firewalls, by default or through custom configuration, are set to block outbound Internet Control Message Protocol (ICMP) echo requests to external destinations, while still permitting internal network communication. This selective blocking prevents external pings from leaving the host, even if the network path to the gateway is clear.

  • The router is missing a default route to the internet

    Why it's wrong here

    A missing or incorrect default route on the network router would prevent all devices on the local network from reaching external destinations, as the router would not know where to forward traffic destined for networks outside its directly connected subnets. Since the problem statement indicates that other users can successfully ping external IPs, the router's routing table, including its default route to the internet, must be correctly configured and operational. This scenario points away from a shared network infrastructure problem.

    When this WOULD be correct

    If the question stated that no users on the subnet can ping external IPs, and the router's routing table shows no default route, then a missing default route would be the likely cause.

  • The DNS server is not resolving the hostname

    Why it's wrong here

    The problem statement explicitly mentions the user attempting to ping the IP address 8.8.8.8, which is Google's public DNS server. When an IP address is used directly as the target for a ping command, the Domain Name System (DNS) is not involved in the resolution process. DNS is only required when a hostname (e.g., "google.com") needs to be translated into an IP address. Therefore, DNS server issues are irrelevant to this specific troubleshooting scenario.

    When this WOULD be correct

    In a scenario where a user cannot ping a hostname (e.g., www.google.com) but can ping its IP address (e.g., 8.8.8.8), and other users can ping the hostname, the most likely cause is DNS server misconfiguration or failure.

  • The network cable is loose or faulty

    Why it's wrong here

    A loose or faulty network cable would typically manifest as a complete loss of physical layer connectivity or highly intermittent network access. If the user can successfully ping the default gateway, it confirms that the physical connection between the computer's Network Interface Card (NIC) and the local network switch or access point is stable and functional. Therefore, the integrity of the network cable is not the root cause of the inability to reach external IP addresses.

    When this WOULD be correct

    In a scenario where a user cannot ping any IP address (neither gateway nor external), and link lights are off or intermittent, a loose or faulty network cable would be the likely cause.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

The computer's firewall is blocking outbound ICMPCorrect answer

Why this is correct

If a user can successfully ping the default gateway (an internal network device) but fails to ping an external IP address like 8.8.8.8, it strongly suggests a local issue on the user's machine. Many operating system firewalls, by default or through custom configuration, are set to block outbound Internet Control Message Protocol (ICMP) echo requests to external destinations, while still permitting internal network communication. This selective blocking prevents external pings from leaving the host, even if the network path to the gateway is clear.

The router is missing a default route to the internetWrong answer — click to see why

Why this is wrong here

Other users on the same subnet can ping 8.8.8.8, which proves the router has a default route to the internet. The issue is isolated to this user's computer.

★ When this WOULD be the correct answer

If the question stated that no users on the subnet can ping external IPs, and the router's routing table shows no default route, then a missing default route would be the likely cause.

Why candidates choose this

Candidates may assume that any inability to reach the internet is due to a router misconfiguration, overlooking that the problem is isolated to a single host.

The DNS server is not resolving the hostnameWrong answer — click to see why

Why this is wrong here

The user can ping the default gateway but not 8.8.8.8, and DNS is not involved in ICMP ping to an IP address. DNS resolution is only needed when pinging a hostname, not an IP.

★ When this WOULD be the correct answer

In a scenario where a user cannot ping a hostname (e.g., www.google.com) but can ping its IP address (e.g., 8.8.8.8), and other users can ping the hostname, the most likely cause is DNS server misconfiguration or failure.

Why candidates choose this

Candidates often confuse DNS with general internet connectivity issues, assuming that if you can't reach an external IP, DNS must be the problem, even though the ping command uses an IP address directly.

The network cable is loose or faultyWrong answer — click to see why

Why this is wrong here

The user can ping the default gateway, indicating the network cable is functional. A loose or faulty cable would prevent all network communication, including pinging the gateway.

★ When this WOULD be the correct answer

In a scenario where a user cannot ping any IP address (neither gateway nor external), and link lights are off or intermittent, a loose or faulty network cable would be the likely cause.

Why candidates choose this

Candidates may associate connectivity issues with physical layer problems, overlooking that successful gateway ping rules out cable faults.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

About these practice questions

This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.