N10-009 Networking Concepts Practice Question
At which layer of the OSI model does a network device encapsulate data into frames and add source and destination MAC addresses?
⚠ Common exam trap
CompTIA often tests the distinction between MAC addresses (Layer 2) and IP addresses (Layer 3), and the trap here is that candidates may confuse the encapsulation process and incorrectly associate MAC addressing with the Network layer due to familiarity with IP addressing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Layer 2 – Data Link
The Data Link layer (Layer 2) is responsible for node-to-node communication and encapsulates packets from the Network layer into frames. It adds a header containing the source and destination MAC addresses, which are used for delivery within the same local network segment. This process is defined by IEEE 802 standards such as Ethernet (802.3) and Wi-Fi (802.11).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Layer 1 – Physical
Why it's wrong here
The Physical layer (Layer 1) is concerned solely with the transmission and reception of raw, unstructured bit streams over a physical medium, such as copper cables, fiber optics, or wireless signals. It defines the electrical, mechanical, procedural, and functional specifications for activating, maintaining, and deactivating the physical link. This layer does not interpret data, create frames, or manage addressing schemes like MAC addresses; it simply moves the raw bits as electrical or optical pulses.
When this WOULD be correct
A question asking which layer defines electrical signals, cable types, or bit rates (e.g., 'At which layer are voltage levels and connector types defined?') would have Layer 1 as the correct answer.
- ✓
Layer 2 – Data Link
Why this is correct
The Data Link layer (Layer 2) is responsible for node-to-node data transfer within the same local network segment, handling the physical addressing (MAC addresses) and framing of data into manageable units. It creates these frames, adds the necessary MAC addresses for local delivery, and provides error detection and correction mechanisms to ensure reliable data transmission across the physical medium. This layer is crucial for direct communication between devices on the same broadcast domain, such as within a single Ethernet network.
- ✗
Layer 3 – Network
Why it's wrong here
The Network layer (Layer 3) primarily deals with logical addressing, using IP addresses to identify devices across different networks and facilitate routing decisions. Its main function is to move packets from a source host to a destination host, potentially across multiple interconnected networks, by determining the best path. This layer operates independently of the underlying physical medium and does not concern itself with MAC addresses, which are handled at a lower layer for local segment delivery.
When this WOULD be correct
A question asking 'At which OSI layer does a router operate based on IP addresses?' or 'Which layer adds source and destination IP addresses to packets?' would have Layer 3 as the correct answer.
- ✗
Layer 4 – Transport
Why it's wrong here
The Transport layer (Layer 4) provides end-to-end communication services for applications, segmenting data from the upper layers and ensuring its reliable or unreliable delivery between processes running on source and destination hosts. It uses port numbers to direct data to the correct application and manages flow control and error recovery for the entire communication session. MAC addresses are irrelevant at this layer, as its focus is on logical connections between applications, not physical device identification on a local segment.
When this WOULD be correct
A question asking: 'At which layer does TCP segment data and add port numbers?' would make Layer 4 correct, as TCP operates at the Transport layer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓Layer 2 – Data LinkCorrect answer▾
Why this is correct
The Data Link layer (Layer 2) is responsible for node-to-node data transfer within the same local network segment, handling the physical addressing (MAC addresses) and framing of data into manageable units. It creates these frames, adds the necessary MAC addresses for local delivery, and provides error detection and correction mechanisms to ensure reliable data transmission across the physical medium. This layer is crucial for direct communication between devices on the same broadcast domain, such as within a single Ethernet network.
✗Layer 1 – PhysicalWrong answer — click to see why▾
Why this is wrong here
Frames and MAC addresses are data link layer (Layer 2) concepts; Layer 1 handles raw bit transmission without framing or addressing.
★ When this WOULD be the correct answer
A question asking which layer defines electrical signals, cable types, or bit rates (e.g., 'At which layer are voltage levels and connector types defined?') would have Layer 1 as the correct answer.
Why candidates choose this
Candidates may confuse physical transmission of bits with the framing and addressing that occurs at Layer 2, or they may think MAC addresses are part of the physical hardware.
✗Layer 3 – NetworkWrong answer — click to see why▾
Why this is wrong here
Layer 3 (Network) handles logical addressing (e.g., IP addresses) and routing, not frame encapsulation or MAC addresses. Frames and MAC addresses are specific to Layer 2 (Data Link).
★ When this WOULD be the correct answer
A question asking 'At which OSI layer does a router operate based on IP addresses?' or 'Which layer adds source and destination IP addresses to packets?' would have Layer 3 as the correct answer.
Why candidates choose this
Candidates may confuse MAC addresses with IP addresses or think that network devices like switches (Layer 2) and routers (Layer 3) both deal with addressing, leading them to incorrectly select Layer 3.
✗Layer 4 – TransportWrong answer — click to see why▾
Why this is wrong here
Layer 4 (Transport) handles end-to-end communication, segmentation, and reassembly, not frame encapsulation or MAC addressing. Frames and MAC addresses are specific to Layer 2 (Data Link).
★ When this WOULD be the correct answer
A question asking: 'At which layer does TCP segment data and add port numbers?' would make Layer 4 correct, as TCP operates at the Transport layer.
Why candidates choose this
Candidates may confuse the encapsulation process, thinking that adding headers (like TCP headers) is similar to adding MAC addresses, or they may not clearly distinguish between layers.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
OSI Model Reference
| Layer | Name | PDU | Key Protocols / Devices |
|---|---|---|---|
| 7 | Application | Data | HTTP, HTTPS, DNS, SMTP, FTP, SSH |
| 6 | Presentation | Data | TLS / SSL, JPEG, ASCII encoding |
| 5 | Session | Data | NetBIOS, RPC, SIP |
| 4 | Transport | Segment / Datagram | TCP, UDP |
| 3 | Network | Packet | IP, ICMP, OSPF — Routers |
| 2 | Data Link | Frame | Ethernet, Wi-Fi, PPP — Switches, Bridges |
| 1 | Physical | Bits | Cables, NICs, Hubs, Repeaters |
Go deeper
Related to this question
Learn chapter
Network Virtualization and VXLAN
Key term
Segment
A segment is a division of a larger network, such as a collision domain, broadcast domain, or a portion of a TCP data stream, used to organize traffic and improve performance.
Key term
OSI model
The OSI model is a conceptual framework that standardizes the functions of a telecommunication or computing system into seven distinct layers, from physical hardware to application software.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.