N10-009 Network Implementation Practice Question
A network administrator is configuring a new switch in a production environment. The switch must be managed remotely. Which of the following should be configured on the switch's management interface?
⚠ Common exam trap
Watch out — candidates often think VLAN 1 membership (Option C) is sufficient for remote management, forgetting that the switch needs a default gateway to route management traffic beyond its local subnet.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Default gateway
The default gateway is required for remote management because the management interface (often a virtual interface like VLAN 1 or a dedicated management VLAN) needs a route to reach devices on different subnets. Without a default gateway, the switch can only be accessed from hosts within the same subnet, making remote management impossible across routed networks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Default gateway
Why this is correct
The default gateway is absolutely essential for remote management because it provides the switch's management interface with a route to reach devices outside its directly connected local subnet. Without a configured default gateway, the switch can only communicate with other devices within its immediate broadcast domain, making remote administration from a different network segment or the internet impossible. This setting directs all non-local IP traffic to the appropriate router for forwarding.
- ✗
Spanning tree priority
Why it's wrong here
Spanning Tree Protocol (STP) priority is a parameter used to influence the election of the root bridge within a Layer 2 network, which is critical for preventing switching loops and ensuring a stable topology. While vital for network operation and preventing broadcast storms, configuring STP priority has no direct impact on the IP addressability or routing capabilities required for remote management access to the switch's management interface.
When this WOULD be correct
A question asking which STP parameter should be adjusted to ensure a specific switch becomes the root bridge in a network with redundant links would have spanning tree priority as the correct answer.
- ✗
VLAN 1 membership
Why it's wrong here
VLAN 1 is the default VLAN on most Ethernet switches, and management interfaces are often assigned to it by default. However, merely being a member of VLAN 1 only places the management interface within that specific broadcast domain. It does not automatically provide the necessary IP address, subnet mask, or, most importantly, the default gateway required for the switch to communicate with and be managed from a remote IP network.
When this WOULD be correct
When a question asks which VLAN should be used for the native VLAN on trunk ports to avoid VLAN mismatch issues, or when configuring a management VLAN different from VLAN 1 for security.
- ✗
Port security
Why it's wrong here
Port security is a Layer 2 feature designed to enhance network security by restricting which MAC addresses can be learned on a specific switch port, thereby preventing unauthorized devices from connecting. It can limit the number of MAC addresses or allow only specific static MAC addresses on an access port. This security measure primarily affects end-user device connectivity and has no bearing on the IP routing or reachability of the switch's own management interface from a remote network.
When this WOULD be correct
A network administrator is configuring a switch port that connects to a sensitive server and must ensure only authorized devices can connect. In that scenario, port security would be the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓Default gatewayCorrect answer▾
Why this is correct
The default gateway is absolutely essential for remote management because it provides the switch's management interface with a route to reach devices outside its directly connected local subnet. Without a configured default gateway, the switch can only communicate with other devices within its immediate broadcast domain, making remote administration from a different network segment or the internet impossible. This setting directs all non-local IP traffic to the appropriate router for forwarding.
✗Spanning tree priorityWrong answer — click to see why▾
Why this is wrong here
Spanning tree priority is a configuration for the Spanning Tree Protocol (STP) to influence root bridge election, not for enabling remote management of the switch's management interface.
★ When this WOULD be the correct answer
A question asking which STP parameter should be adjusted to ensure a specific switch becomes the root bridge in a network with redundant links would have spanning tree priority as the correct answer.
Why candidates choose this
Candidates may confuse management interface configuration with general switch settings, thinking that STP priority is needed for network stability before remote access, or they may misassociate 'priority' with management access control.
✗VLAN 1 membershipWrong answer — click to see why▾
Why this is wrong here
VLAN 1 membership is the default for all switch ports and does not enable remote management; remote management requires an IP address and default gateway on the management interface.
★ When this WOULD be the correct answer
When a question asks which VLAN should be used for the native VLAN on trunk ports to avoid VLAN mismatch issues, or when configuring a management VLAN different from VLAN 1 for security.
Why candidates choose this
Candidates may think VLAN 1 is special for management because it is the default VLAN and often used for management in small networks, but remote management specifically needs Layer 3 connectivity.
✗Port securityWrong answer — click to see why▾
Why this is wrong here
Port security is a feature that restricts which MAC addresses can communicate through a switch port, but it is not required for remote management of the switch's management interface.
★ When this WOULD be the correct answer
A network administrator is configuring a switch port that connects to a sensitive server and must ensure only authorized devices can connect. In that scenario, port security would be the correct answer.
Why candidates choose this
Candidates may think that securing the management interface involves limiting access, and port security seems like a logical way to control which devices can connect to the switch, but it applies to data ports, not the management interface itself.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Physical Network Infrastructure
Key term
VLAN
A VLAN logically segments a physical network into isolated broadcast domains without requiring separate physical switches.
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.