N10-009 Network Operations Practice Question
An organization wants to centrally manage and monitor network devices from a single interface. The solution should support auto-discovery, configuration management, and performance monitoring. Which type of system should be deployed?
⚠ Common exam trap
CompTIA often tests the distinction between an NMS and a SIEM, where candidates mistakenly choose SIEM because they think 'monitoring' includes security event monitoring, but the question explicitly asks for auto-discovery and configuration management, which are core NMS functions, not SIEM capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Network Management System (NMS)
A Network Management System (NMS) is the correct choice because it provides a centralized interface for auto-discovery (e.g., via SNMP or CDP/LLDP), configuration management (e.g., using NETCONF or CLI scripting), and performance monitoring (e.g., polling SNMP MIBs or streaming telemetry). This directly matches the requirement for a single-pane-of-glass solution for network device lifecycle management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AAA server
Why it's wrong here
An AAA (Authentication, Authorization, and Accounting) server manages user and device access to network resources by verifying identities, determining permitted actions, and logging activity. It ensures that only authorized users or devices can connect and perform specific tasks, providing a critical security layer for access control. However, an AAA server does not offer capabilities for monitoring the operational status, performance, or configuration of the network devices themselves.
When this WOULD be correct
A question asking for a system to control user access to network resources, enforce policies, and log access attempts for compliance would make an AAA server the correct answer.
- ✓
Network Management System (NMS)
Why this is correct
A Network Management System (NMS) is purpose-built for comprehensive, centralized oversight and control of network infrastructure. It utilizes protocols like SNMP to discover devices, monitor their performance metrics (e.g., CPU, memory, bandwidth), manage configurations, and detect faults across routers, switches, and firewalls. This enables administrators to proactively identify issues, apply updates, and ensure optimal network health from a single console, directly addressing the need for central management and monitoring.
- ✗
SIEM
Why it's wrong here
A Security Information and Event Management (SIEM) system primarily aggregates and analyzes security-related log data from various sources, including network devices, servers, and applications. Its core function is to detect, analyze, and respond to security threats and compliance violations, rather than managing device configurations or monitoring operational performance. While it consumes data from network devices for security insights, it does not provide tools for their direct operational management or health monitoring.
When this WOULD be correct
An organization needs to collect, analyze, and correlate security logs from multiple sources (e.g., firewalls, servers, applications) to detect and respond to security incidents in real time. Which system should be deployed?
- ✗
DHCP server
Why it's wrong here
A DHCP (Dynamic Host Configuration Protocol) server is specifically designed to automate the assignment of IP addresses, subnet masks, default gateways, and DNS server information to client devices on a network. This essential service simplifies network administration by eliminating manual IP configuration and preventing address conflicts. Its function is limited to IP address management and does not extend to the broader tasks of monitoring device health, performance, or configuration management for network infrastructure.
When this WOULD be correct
An organization needs to automatically assign IP addresses to devices on a subnet and ensure that network configuration (e.g., default gateway, DNS) is consistently applied without manual intervention.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓Network Management System (NMS)Correct answer▾
Why this is correct
A Network Management System (NMS) is purpose-built for comprehensive, centralized oversight and control of network infrastructure. It utilizes protocols like SNMP to discover devices, monitor their performance metrics (e.g., CPU, memory, bandwidth), manage configurations, and detect faults across routers, switches, and firewalls. This enables administrators to proactively identify issues, apply updates, and ensure optimal network health from a single console, directly addressing the need for central management and monitoring.
✗AAA serverWrong answer — click to see why▾
Why this is wrong here
An AAA server handles authentication, authorization, and accounting for network access, not centralized management, auto-discovery, configuration management, or performance monitoring of network devices.
★ When this WOULD be the correct answer
A question asking for a system to control user access to network resources, enforce policies, and log access attempts for compliance would make an AAA server the correct answer.
Why candidates choose this
Candidates may confuse AAA's centralized control of network access with centralized management of devices, or think AAA includes device monitoring features.
✗SIEMWrong answer — click to see why▾
Why this is wrong here
A SIEM (Security Information and Event Management) system focuses on security event collection, correlation, and alerting, not on network device auto-discovery, configuration management, or performance monitoring.
★ When this WOULD be the correct answer
An organization needs to collect, analyze, and correlate security logs from multiple sources (e.g., firewalls, servers, applications) to detect and respond to security incidents in real time. Which system should be deployed?
Why candidates choose this
Candidates may confuse SIEM with NMS because both involve monitoring and centralized management, but SIEM is security-focused while NMS handles network infrastructure.
✗DHCP serverWrong answer — click to see why▾
Why this is wrong here
A DHCP server assigns IP addresses and network configuration parameters to clients; it does not provide centralized management, monitoring, auto-discovery, or configuration management of network devices.
★ When this WOULD be the correct answer
An organization needs to automatically assign IP addresses to devices on a subnet and ensure that network configuration (e.g., default gateway, DNS) is consistently applied without manual intervention.
Why candidates choose this
Candidates may confuse DHCP's role in network configuration with broader network management capabilities, or think that DHCP's auto-assignment feature is similar to auto-discovery.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
Key term
Cisco Discovery Protocol
A proprietary Layer 2 network protocol used by Cisco devices to discover information about directly connected neighbor devices.
About these practice questions
One of 464 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.