CCNA Networking Concepts Questions — Page 1 of 2

MCQmedium

Which of the following is a characteristic of UDP?

A.Provides guaranteed delivery

B.Uses sequence numbers

C.Supports three-way handshake

D.Has lower overhead than TCP

AnswerD

UDP omits connection establishment, acknowledgements, sequencing, and flow control, leaving only a minimal eight-byte header. That absence of TCP's handshaking and reliability machinery is precisely why UDP carries lower overhead, making it suitable for latency-sensitive traffic.

Why this answer

UDP (User Datagram Protocol) is a connectionless transport-layer protocol that provides minimal overhead compared to TCP. It does not establish a connection before sending data, nor does it provide reliability, flow control, or error recovery, making it ideal for real-time applications like VoIP and streaming where speed is prioritized over guaranteed delivery.

Exam trap

The trap here is that candidates often confuse UDP's lack of reliability with being 'unreliable' in a negative sense, but the exam tests that UDP's lower overhead is a deliberate design choice for performance-sensitive applications.

Why the other options are wrong

UDP is a connectionless protocol that does not provide guaranteed delivery; it offers no acknowledgments or retransmissions, unlike TCP which ensures reliable data transfer.

UDP is a connectionless protocol that does not use sequence numbers; sequence numbers are a feature of TCP for ordered delivery.

UDP is a connectionless protocol that does not establish a session, so it does not support a three-way handshake, which is a TCP mechanism.

Practice this question →

MCQmedium

A network technician is analyzing a small office network topology. An 8-port switch has 7 workstations directly connected. The remaining switch port is connected to a 4-port hub, which has 4 workstations attached. All devices are configured on the same VLAN and IP subnet. How many collision domains and broadcast domains are present in this network?

A.8 collision domains, 1 broadcast domain

B.11 collision domains, 1 broadcast domain

C.12 collision domains, 5 broadcast domains

D.8 collision domains, 5 broadcast domains

AnswerA

Correct. Each switch port creates its own collision domain (8 total). The hub does not add separate collision domains; it connects all its ports into the collision domain of the switch port it is attached to. All devices are on the same VLAN, so there is one broadcast domain.

Why this answer

Switches create a separate collision domain per port, so the 8-port switch provides 8 collision domains. The hub connected to one switch port extends that single collision domain to all its attached devices, but does not create new ones. All devices are on the same VLAN and IP subnet, so there is only one broadcast domain.

Therefore, the network has 8 collision domains and 1 broadcast domain.

Exam trap

The N10-009 exam often tests the distinction between hubs (Layer 1 repeaters that extend collision domains) and switches (Layer 2 devices that segment collision domains), and the trap here is assuming that each hub port creates its own collision domain, leading to overcounting collision domains, or confusing collision domains with broadcast domains by thinking hubs or switches create multiple broadcast domains.

Why the other options are wrong

The hub creates a single collision domain for its 4 ports, not 4 separate ones. The switch has 8 collision domains (one per port), but the hub's segment adds only 1, totaling 9, not 11. The correct count is 8 collision domains (7 switch ports + 1 hub segment) and 1 broadcast domain.

A hub creates a single collision domain for all its ports, and a switch creates a separate collision domain per port. Here, the switch has 8 ports (7 workstations + 1 to hub), giving 8 collision domains. The hub adds 1 collision domain for its 4 workstations, but since it's connected to a switch port, that hub's collision domain is already counted within the switch port's collision domain.

So total collision domains = 8 (switch ports) = 8. Option C incorrectly counts 12 collision domains and 5 broadcast domains, but all devices are on the same VLAN and IP subnet, so there is only 1 broadcast domain.

A switch creates a separate collision domain per port, so the 8-port switch provides 8 collision domains. The hub creates a single collision domain for its 4 workstations, but that hub port on the switch is already counted as one collision domain. Thus total collision domains = 8 (switch ports) = 8, not 8 + 4 = 12.

Broadcast domain is one because all devices are on the same VLAN and IP subnet.

Practice this question →

MCQeasy

Which of the following is a characteristic of a Layer 2 broadcast domain?

A.Devices can communicate using MAC addresses alone.

B.All devices must be on the same IP subnet.

C.Broadcast frames are forwarded to all ports within the domain.

D.Routers are required to communicate between devices in the same domain.

AnswerC

The key characteristic of a broadcast domain is that a broadcast frame sent by any device is received by all other devices in that domain. Switches forward broadcasts to all ports in the same VLAN.

Why this answer

A Layer 2 broadcast domain consists of all devices that receive a broadcast frame sent by any device within that domain. Switches forward broadcast frames (destination MAC FF:FF:FF:FF:FF:FF) out all ports except the ingress port, ensuring every device in the same VLAN or collision-free segment sees the broadcast. This is why option C is correct.

Exam trap

The trap here is that candidates often confuse a broadcast domain with a collision domain, or incorrectly assume that being on the same IP subnet is a requirement for receiving broadcasts, when in fact Layer 2 broadcasts are forwarded regardless of IP addressing.

Why the other options are wrong

In a Layer 2 broadcast domain, devices communicate using MAC addresses, but this is not a defining characteristic of the domain itself; it's true for any Ethernet network. The question asks for a characteristic of the broadcast domain, which is that broadcast frames are forwarded to all ports.

A Layer 2 broadcast domain is defined by the reach of broadcast frames, not by IP subnetting. Devices on the same broadcast domain can be on different IP subnets; IP subnetting is a Layer 3 concept.

Routers operate at Layer 3 and are not required for communication within the same Layer 2 broadcast domain; switches or bridges handle Layer 2 forwarding.

Practice this question →

MCQeasy

Which of the following best describes the primary difference between a hub and a switch?

A.A switch is faster than a hub because it operates at Layer 3

B.A hub broadcasts all frames to all ports; a switch forwards frames only to the destination port

C.A hub can segment collision domains; a switch cannot

D.Both hubs and switches operate at the same OSI layer but use different frame types

AnswerB

Hubs are Layer 1 devices that simply regenerate electrical signals received on one port and send them out all other ports, effectively creating a single collision domain where all connected devices see all traffic. In contrast, a switch operates at Layer 2, building a MAC address table by inspecting source MAC addresses of incoming frames. It then uses this table to intelligently forward frames only to the specific port where the destination MAC address is known to reside, significantly reducing unnecessary traffic on other ports.

Why this answer

A hub operates at Layer 1 (physical layer) and simply repeats electrical signals out all ports, causing all connected devices to receive every frame. A switch operates at Layer 2 (data link layer) and uses the MAC address table to forward frames only to the specific port where the destination device resides, reducing unnecessary traffic and improving network efficiency.

Exam trap

The trap here is that candidates often confuse the OSI layer of a switch (Layer 2) with a router (Layer 3) and incorrectly assume switches are faster because they operate at a higher layer, or they mistakenly think hubs can segment collision domains when in fact they expand them.

Why the other options are wrong

Switches operate at Layer 2 (data link layer), not Layer 3. While some switches can perform Layer 3 routing, the primary difference between a hub and a switch is not speed based on OSI layer; hubs operate at Layer 1 and switches at Layer 2.

A hub does not segment collision domains; it actually extends them. A switch segments collision domains by creating a separate collision domain per port.

Both hubs and switches operate at Layer 2 (Data Link layer) and use the same Ethernet frame types; the statement is factually incorrect.

Practice this question →

MCQmedium

A router has two routes to the same destination network: one learned via OSPF with a metric of 10, and another learned via EIGRP with a composite metric of 3072. The default administrative distances are OSPF=110, EIGRP=90. Which route will be installed in the routing table?

A.The OSPF route because it has a lower metric

B.The EIGRP route because it has a lower administrative distance

C.Both routes will be installed for load balancing

D.The OSPF route because it is a link-state protocol

AnswerB

When a router learns multiple routes to the same destination from different routing protocols, it employs administrative distance (AD) as the primary criterion for path selection. EIGRP has a default AD of 90, which is lower than OSPF's default AD of 110. Since a lower administrative distance indicates a more trustworthy source, the router will always prefer the EIGRP-learned route, irrespective of the metric values calculated by each protocol.

Why this answer

The EIGRP route is installed because administrative distance (AD) is the primary tiebreaker when multiple routing protocols provide routes to the same destination. EIGRP has a default AD of 90, which is lower than OSPF's AD of 110, so the router prefers the EIGRP route regardless of metric values. Metrics are only compared when routes come from the same protocol.

Exam trap

The trap here is that candidates often confuse metric with administrative distance, mistakenly thinking a lower OSPF metric (10) beats a higher EIGRP metric (3072), when in fact the router first compares AD values (90 vs 110) and selects the EIGRP route.

Why the other options are wrong

When comparing routes from different routing protocols, the router uses administrative distance (AD) first, not metric. OSPF has AD 110, EIGRP has AD 90, so EIGRP is preferred regardless of metric values.

Routers install only the route with the lowest administrative distance (AD) when multiple routes to the same destination exist from different routing protocols. Here, EIGRP has AD 90 vs OSPF's 110, so only the EIGRP route is installed; load balancing requires equal AD and equal metric.

OSPF being a link-state protocol does not automatically make its route preferred; route selection is based on administrative distance, not protocol type. Here, EIGRP has a lower AD (90 vs 110), so it wins regardless of OSPF's link-state nature.

Practice this question →

MCQhard

An IPv6 address has the prefix 2001:db8::/32. Which of the following IP addresses belongs to the same prefix?

A.2001:db8:1::1

B.2001:db9::1

C.2001:db7::1

D.fe80::1

AnswerA

This address, 2001:db8:1::1, precisely matches the 2001:db8 portion of the given /32 prefix in its first two hextets. The prefix 2001:db8::/32 dictates that any address beginning with 2001:db8 belongs to this network. Since the first 32 bits of 2001:db8:1::1 are indeed 2001:0db8, it is correctly identified as being within the specified network range, making it a valid address for this prefix.

Why this answer

The prefix 2001:db8::/32 means the first 32 bits of the address must be 2001:0db8. Option A (2001:db8:1::1) expands to 2001:0db8:0001:0000:0000:0000:0000:0001, which matches the first 32 bits exactly, so it belongs to the same /32 prefix.

Exam trap

The N10-009 exam often tests the misconception that the double-colon (::) compresses the prefix itself, leading candidates to incorrectly assume that 2001:db8::/32 matches any address starting with 2001:db8, even if the second hextet is altered (e.g., 2001:db9 or 2001:db7).

Why the other options are wrong

The prefix 2001:db8::/32 includes addresses where the first 32 bits are 2001:0db8. Option B, 2001:db9::1, has the third quartet as 0db9, which differs in the 33rd bit, so it is not within the /32 prefix.

The prefix 2001:db8::/32 includes addresses where the first 32 bits are 2001:0db8. Option C (2001:db7::1) has the third hextet as db7, which differs from db8 in the 33rd bit, so it does not match the /32 prefix.

The prefix 2001:db8::/32 specifies that the first 32 bits must be 2001:0db8. Option D (fe80::1) starts with fe80, which is a link-local address prefix, not matching the required prefix.

Practice this question →

MCQeasy

A network technician is explaining the process of resolving Layer 2 addresses to Layer 3 addresses on a local network. Which protocol is used by a host to determine the MAC address of another host given its IP address?

A.DNS

B.ARP

C.DHCP

D.ICMP

AnswerB

The Address Resolution Protocol (ARP) is a crucial Layer 2 protocol that dynamically maps an IPv4 address to its corresponding hardware (MAC) address within the same local network segment. When a device needs to communicate with another device on the same subnet, it uses ARP to discover the destination's MAC address if it's not already known. This involves broadcasting an ARP request for the target IP, and the device with that IP responds with its MAC address, allowing for proper frame encapsulation and delivery. ARP is fundamental for enabling IP packets to traverse Ethernet networks.

Why this answer

ARP (Address Resolution Protocol) is the correct answer because it is specifically designed to resolve a known Layer 3 (IP) address to an unknown Layer 2 (MAC) address on a local network. When a host needs to send a frame to another host, it first checks its ARP cache; if no entry exists, it broadcasts an ARP request containing the target IP, and the host with that IP responds with its MAC address. This process is defined in RFC 826 and operates at the data link layer, enabling direct communication within the same broadcast domain.

Exam trap

The trap here is that candidates often confuse ARP with DNS because both involve 'resolution,' but DNS resolves names to IPs (Layer 3) while ARP resolves IPs to MACs (Layer 2), and Cisco tests this distinction by including DNS as a distractor in Layer 2 addressing questions.

Why the other options are wrong

DNS resolves domain names to IP addresses, not MAC addresses. The question asks for the protocol that maps IP addresses (Layer 3) to MAC addresses (Layer 2), which is ARP.

DHCP is used for dynamically assigning IP addresses and other network configuration parameters to hosts, not for resolving Layer 2 MAC addresses from Layer 3 IP addresses.

ICMP is used for error reporting and diagnostics (e.g., ping), not for resolving Layer 2 addresses from Layer 3 addresses.

Practice this question →

MCQeasy

A network engineer is troubleshooting a communication issue between two hosts. The engineer determines that the data is being segmented at the source and reassembled at the destination, but the segments are arriving out of order. Which OSI layer is responsible for sequencing the segments?

A.A) Physical layer

B.B) Data Link layer

C.C) Network layer

D.D) Transport layer

AnswerD

The Transport layer, notably through protocols like TCP, is directly responsible for segmenting application data into smaller units, assigning unique sequence numbers to each segment. This crucial sequencing allows the receiving host to correctly reassemble the data stream in its original order, even if segments arrive out of sequence due to network conditions. It also facilitates reliable delivery, acknowledging received segments and requesting retransmission of any missing ones, ensuring data integrity from source to destination.

Why this answer

The Transport layer (Layer 4) is responsible for end-to-end communication, including segmentation, reassembly, and sequencing of data segments. Protocols like TCP use sequence numbers to order segments correctly at the destination, even if they arrive out of order. This ensures the upper layers receive a complete, ordered data stream.

Exam trap

CompTIA often tests the misconception that the Network layer (Layer 3) handles sequencing because it deals with packet fragmentation and reassembly, but fragmentation is based on MTU size, not sequence numbers for ordering; sequencing is strictly a Transport layer function.

Why the other options are wrong

The Physical layer (Layer 1) handles raw bit transmission over a physical medium and does not perform any sequencing or reassembly of data segments.

The Data Link layer handles node-to-node delivery and framing, not end-to-end segment sequencing. Sequencing of segments is a Transport layer function (e.g., TCP sequence numbers).

The Network layer (Layer 3) handles routing and logical addressing, but not segmentation or sequencing of data segments. Sequencing is a function of the Transport layer (Layer 4), which manages end-to-end communication and reassembly.

Practice this question →

MCQhard

A network administrator is configuring BGP between two autonomous systems. Which BGP attribute is primarily used to influence inbound traffic to a particular AS?

A.AS_PATH

B.Next Hop

C.Local Preference

D.MED (Multi-Exit Discriminator)

AnswerD

The Multi-Exit Discriminator (MED) is a BGP attribute exchanged between autonomous systems (ASes) to influence how a neighboring AS routes traffic into the advertising AS. When an AS has multiple entry points to a peer AS, the MED value, which is essentially a metric, allows the advertising AS to suggest which entry point is preferred for inbound traffic. A lower MED value indicates a more preferred path, guiding the external AS's routing decisions for traffic destined for the advertising AS.

Why this answer

The Multi-Exit Discriminator (MED) is a BGP attribute used to influence inbound traffic from a neighboring AS when multiple entry points exist. A lower MED value is preferred, allowing an AS to advertise to its neighbor which path should be used to reach it, thereby influencing traffic entering the local AS.

Exam trap

The trap here is confusing MED with Local Preference: candidates often pick Local Preference because it is a well-known attribute for path selection, but it influences outbound traffic from the local AS, not inbound traffic from a neighboring AS.

Why the other options are wrong

AS_PATH is used for loop prevention and path selection, but it primarily influences outbound traffic by affecting how routes are advertised, not inbound traffic to a particular AS.

The Next Hop attribute specifies the IP address of the next router to reach a destination, but it does not influence inbound traffic decisions; it is used for routing path selection, not traffic engineering into an AS.

Local Preference is used to influence outbound traffic from an AS, not inbound traffic. It is a well-known discretionary attribute that is exchanged within an AS to affect the exit path for routes learned from EBGP peers.

Practice this question →

MCQeasy

A network administrator is configuring IP addresses for a new subnet. The network address is 192.168.1.0 with a subnet mask of 255.255.255.240. How many usable host addresses are available on this subnet?

A.14

B.16

C.30

D.62

AnswerA

A /28 subnet mask (255.255.255.240) designates 4 bits for the host portion of the IP address (32 total bits - 28 network bits = 4 host bits). This allows for 2^4 = 16 total IP addresses within the subnet. However, two addresses are reserved: one for the network address itself and one for the broadcast address. Subtracting these two reserved addresses leaves 14 usable IP addresses for hosts and other network devices.

Why this answer

The subnet mask 255.255.255.240 (or /28) provides 16 total addresses per subnet. The network address (192.168.1.0) and the broadcast address (192.168.1.15) are reserved, leaving 16 - 2 = 14 usable host addresses. This is calculated as 2^(32-28) - 2 = 2^4 - 2 = 16 - 2 = 14.

Exam trap

The trap here is that candidates often forget to subtract the network and broadcast addresses, selecting the total number of addresses (16) instead of the usable host count (14).

Why the other options are wrong

The subnet mask 255.255.255.240 (/28) provides 16 total addresses per subnet, but the network address and broadcast address are reserved, leaving only 14 usable host addresses.

A /28 subnet (255.255.255.240) provides 16 total addresses, but the network and broadcast addresses are reserved, leaving 14 usable hosts. Option C (30) corresponds to a /27 subnet (255.255.255.224), not /28.

A /28 subnet (255.255.255.240) provides 16 total addresses, but 2 are reserved for network and broadcast, leaving 14 usable. Option D (62) corresponds to a /26 subnet (255.255.255.192), which is not the mask in this question.

Practice this question →

MCQeasy

A network technician is explaining the role of a network switch to a new employee. Which of the following best describes the primary function of a switch in a local area network?

A.It forwards data based on IP addresses.

B.It forwards data based on MAC addresses.

C.It connects different networks and performs routing.

D.It amplifies and repeats the signal to all ports.

AnswerB

A network switch, operating at Layer 2 of the OSI model, intelligently forwards data frames based on the destination Media Access Control (MAC) address found in the frame header. The switch dynamically learns the MAC addresses of connected devices by inspecting incoming frames and populates its MAC address table, also known as a CAM table. When a frame arrives, the switch consults this table to send the frame only to the specific port where the destination MAC address is known to reside. This intelligent forwarding significantly reduces unnecessary network traffic and segments collision domains, improving overall network performance.

Why this answer

A network switch operates at Layer 2 of the OSI model and uses MAC addresses to make forwarding decisions. When a frame arrives, the switch examines the destination MAC address, looks it up in its MAC address table, and forwards the frame only to the port associated with that address, reducing collision domains and improving network efficiency.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 switching (MAC addresses) and Layer 3 routing (IP addresses), and the trap here is that candidates confuse the switch's forwarding decision with that of a router, especially when dealing with multilayer switches that can perform both functions.

Why the other options are wrong

Switches operate at Layer 2 and forward frames based on MAC addresses, not IP addresses. IP address-based forwarding is the function of a router (Layer 3).

A switch operates at Layer 2 and forwards frames based on MAC addresses, not IP addresses. Connecting different networks and performing routing is the function of a router, not a switch.

A switch does not amplify and repeat signals to all ports; that describes a hub. Switches forward frames only to the specific port based on MAC addresses.

Practice this question →

MCQeasy

Which of the following network topologies provides the highest level of redundancy and fault tolerance?

A.Star

B.Bus

C.Ring

D.Mesh

AnswerD

A full mesh topology provides the highest level of redundancy by connecting every device directly to every other device in the network. This creates numerous distinct and independent paths for data transmission, ensuring that if any single link or node fails, traffic can automatically reroute through alternative connections. This design effectively eliminates single points of failure, making it exceptionally fault-tolerant and reliable for critical infrastructure.

Why this answer

A mesh topology provides the highest level of redundancy and fault tolerance because every node has a dedicated point-to-point connection to every other node. This means that if any single link or node fails, traffic can be immediately rerouted through multiple alternative paths without any single point of failure. In a full mesh, the number of links is n(n-1)/2, ensuring maximum path diversity and resilience.

Exam trap

The N10-009 exam often tests the misconception that a ring topology (especially a dual-ring like FDDI) offers the highest fault tolerance, but candidates must remember that a full mesh provides more redundant paths and no single point of failure, whereas even a dual ring can be disrupted by multiple simultaneous failures.

Why the other options are wrong

A star topology uses a central switch or hub; if that central device fails, the entire network goes down, so it does not provide the highest level of redundancy and fault tolerance compared to a mesh topology.

A bus topology uses a single backbone cable; if the cable fails, the entire network goes down, offering no redundancy or fault tolerance.

In a ring topology, each device is connected to exactly two neighbors, forming a single path for data. A break in the ring or a device failure disrupts the entire network, offering minimal fault tolerance compared to mesh.

Practice this question →

MCQeasy

At which layer of the OSI model does a network device encapsulate data into frames and add source and destination MAC addresses?

A.Layer 1 – Physical

B.Layer 2 – Data Link

C.Layer 3 – Network

D.Layer 4 – Transport

AnswerB

The Data Link layer (Layer 2) is responsible for node-to-node data transfer within the same local network segment, handling the physical addressing (MAC addresses) and framing of data into manageable units. It creates these frames, adds the necessary MAC addresses for local delivery, and provides error detection and correction mechanisms to ensure reliable data transmission across the physical medium. This layer is crucial for direct communication between devices on the same broadcast domain, such as within a single Ethernet network.

Why this answer

The Data Link layer (Layer 2) is responsible for node-to-node communication and encapsulates packets from the Network layer into frames. It adds a header containing the source and destination MAC addresses, which are used for delivery within the same local network segment. This process is defined by IEEE 802 standards such as Ethernet (802.3) and Wi-Fi (802.11).

Exam trap

CompTIA often tests the distinction between MAC addresses (Layer 2) and IP addresses (Layer 3), and the trap here is that candidates may confuse the encapsulation process and incorrectly associate MAC addressing with the Network layer due to familiarity with IP addressing.

Why the other options are wrong

Frames and MAC addresses are data link layer (Layer 2) concepts; Layer 1 handles raw bit transmission without framing or addressing.

Layer 3 (Network) handles logical addressing (e.g., IP addresses) and routing, not frame encapsulation or MAC addresses. Frames and MAC addresses are specific to Layer 2 (Data Link).

Layer 4 (Transport) handles end-to-end communication, segmentation, and reassembly, not frame encapsulation or MAC addressing. Frames and MAC addresses are specific to Layer 2 (Data Link).

Practice this question →

MCQeasy

A network administrator wants to automate IP address assignment for client devices. Which protocol should be used?

A.DHCP

B.DNS

C.ARP

D.ICMP

AnswerA

DHCP (Dynamic Host Configuration Protocol) is the foundational network protocol for automatically assigning IP addresses and other crucial network configuration parameters to client devices. Upon booting or connecting to a network, a client initiates a DHCP discovery process to obtain an IP address, subnet mask, default gateway, and DNS server information from a DHCP server. This automation significantly reduces administrative overhead and prevents IP address conflicts, ensuring efficient network operation.

Why this answer

DHCP (Dynamic Host Configuration Protocol) automates IP address assignment by leasing IP configurations to client devices from a defined pool. This eliminates the need for manual static IP configuration, making it the correct protocol for automated IP address management.

Exam trap

CompTIA often tests the distinction between DHCP for address assignment and DNS for name resolution, leading candidates to confuse the two when the question mentions 'automating IP address assignment'.

Why the other options are wrong

DNS resolves domain names to IP addresses, but does not automate IP address assignment for client devices.

ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses on a local network, not to automate IP address assignment for client devices.

ICMP is used for network diagnostics and error reporting (e.g., ping, traceroute), not for automating IP address assignment. DHCP is the correct protocol for dynamic IP allocation.

Practice this question →

MCQeasy

A network technician is explaining the difference between a hub and a switch to a junior technician. Which statement correctly describes a key difference between these devices?

A.A hub operates at Layer 2, while a switch operates at Layer 1.

B.A hub sends frames out all ports except the incoming port; a switch sends frames only to the port with the matching MAC address.

C.A hub uses MAC addresses to make forwarding decisions, while a switch uses IP addresses.

D.A hub creates a separate collision domain for each port, while a switch creates a single collision domain.

AnswerB

A hub is a Layer 1 device that simply regenerates electrical signals, broadcasting incoming data frames to all connected ports except the one from which the frame originated, without any intelligence. In contrast, a switch is a Layer 2 device that intelligently learns the MAC addresses of connected devices and stores them in its MAC address table. When a switch receives a frame, it examines the destination MAC address and forwards the frame only to the specific port associated with that MAC address, significantly reducing unnecessary network traffic and improving efficiency.

Why this answer

B is correct because a hub operates at Layer 1 (physical layer) and blindly repeats electrical signals out all ports except the incoming port, creating a single collision domain. In contrast, a switch operates at Layer 2 (data link layer) and uses the MAC address table to forward frames only to the specific port associated with the destination MAC address, reducing unnecessary traffic and creating separate collision domains per port.

Exam trap

The N10-009 exam often tests the confusion between Layer 1 and Layer 2 operations, where candidates mistakenly think a hub operates at Layer 2 or that a switch uses IP addresses, but the key trap is reversing the collision domain behavior—hub creates one collision domain, switch creates many.

Why the other options are wrong

Hubs operate at Layer 1 (physical layer) and do not process MAC addresses, while switches operate at Layer 2 (data link layer) and use MAC addresses for forwarding. This option reverses the OSI layers for hubs and switches.

Hubs operate at Layer 1 and do not use MAC addresses; switches use MAC addresses at Layer 2. This option reverses the roles: hubs do not use MAC addresses, and switches do not use IP addresses for forwarding.

A hub creates a single collision domain for all ports, while a switch creates a separate collision domain per port. The statement reverses these facts.

Practice this question →

MCQhard

A network engineer is designing a new IPv6 addressing scheme. The company has been assigned a /48 prefix and needs to support up to 250 subnets. Which subnet size should be used to minimize waste while meeting the requirement?

A./52

B./56

C./64

D./60

AnswerB

A /48 global routing prefix is typically assigned to an organization. To create 250 subnets, additional bits beyond the /48 must be used for subnetting. A /56 prefix length means 8 bits are available for subnetting (56 - 48 = 8). This yields 2^8, or 256, possible subnets, which perfectly accommodates the requirement for 250 subnets with minimal address space waste.

Why this answer

A /56 subnet provides 256 subnets (2^(56-48) = 2^8 = 256), which meets the requirement of up to 250 subnets with minimal waste. A /48 prefix is the site-level allocation, and using a /56 subnet mask leaves 8 bits for subnetting, offering exactly the needed capacity without over-allocating address space.

Exam trap

The N10-009 exam often tests the misconception that /64 is the only valid subnet size in IPv6, but the question asks for subnet size to minimize waste for subnets, not for SLAAC, so candidates incorrectly choose /64 without considering the requirement for only 250 subnets.

Why the other options are wrong

A /52 prefix provides 16 subnets (2^(52-48)=16), which is insufficient for the requirement of up to 250 subnets.

A /64 subnet provides 2^64 addresses per subnet, which is far more than needed for 250 subnets. Using /64 would waste a huge number of addresses and does not minimize waste given the /48 prefix.

A /60 subnet provides only 2^(60-48)=4096 subnets, which is far more than the required 250, but it wastes more addresses than a /56 (which gives 256 subnets). The question asks to minimize waste, so /56 is optimal.

Practice this question →

MCQeasy

A network technician is explaining the difference between connection-oriented and connectionless protocols to a junior technician. Which of the following protocols is connectionless at the transport layer?

A.TCP

B.UDP

C.ICMP

D.ARP

AnswerB

User Datagram Protocol (UDP) is a connectionless transport layer protocol. It prioritizes speed and low overhead by sending data packets, called datagrams, without first establishing a formal connection or guaranteeing delivery. This makes UDP suitable for applications where real-time performance is critical, such as streaming video, online gaming, and DNS lookups, where occasional packet loss is acceptable. However, it offers no error checking, retransmission, or flow control mechanisms.

Why this answer

UDP (User Datagram Protocol) is the correct answer because it is a connectionless transport-layer protocol. It does not establish a session or guarantee delivery, instead sending datagrams independently without handshaking or acknowledgments, which makes it suitable for real-time applications like VoIP and streaming.

Exam trap

The trap here is that candidates often confuse ICMP or ARP as transport-layer protocols because they are involved in network communication, but the question specifically asks for the transport layer, where only TCP and UDP reside, and UDP is the connectionless one.

Why the other options are wrong

TCP is a connection-oriented protocol at the transport layer, meaning it establishes a reliable connection before data transfer, which is the opposite of connectionless.

ICMP operates at the network layer (Layer 3), not the transport layer. The question specifically asks for a connectionless protocol at the transport layer, which is UDP.

ARP operates at the Data Link layer (Layer 2) and resolves IP addresses to MAC addresses; it is not a transport layer protocol and does not provide connectionless transport services.

Practice this question →

MCQeasy

A client obtains an IP address from a DHCP server but cannot resolve hostnames. The client can ping the default gateway and external IP addresses successfully. What is the most likely cause?

A.Incorrect subnet mask

B.DNS server misconfiguration

C.Default gateway not set

D.Firewall blocking DNS

AnswerB

A DNS server misconfiguration means the client either has an incorrect DNS server IP address, or the assigned server is unreachable or non-functional. While the client can successfully obtain an IP address and establish basic IP connectivity (evidenced by pinging external IPs), it cannot translate human-readable hostnames (like www.example.com) into numerical IP addresses. This prevents web browsing or accessing resources by name, as the client doesn't know where to send the traffic for those hostnames.

Why this answer

The client can ping external IP addresses and the default gateway, confirming that IP connectivity and routing are functional. However, the inability to resolve hostnames points directly to a DNS resolution failure, which occurs when the DNS server address is misconfigured or unreachable. Since DHCP provided the IP address, the DNS server setting is likely incorrect or missing in the DHCP scope.

Exam trap

The N10-009 exam often tests the distinction between IP connectivity and name resolution, trapping candidates who assume that successful pings to external IPs imply DNS is working, when in fact DNS is a separate service that must be explicitly configured.

Why the other options are wrong

The client can ping external IP addresses successfully, which indicates that the subnet mask is correct; otherwise, routing to external IPs would fail.

The client can ping the default gateway and external IP addresses, which indicates the default gateway is correctly configured. The issue is name resolution, not routing.

The client can ping external IP addresses successfully, indicating that traffic to external networks is not blocked. A firewall blocking DNS would prevent DNS queries but not ICMP pings to external IPs; however, the ability to ping external IPs suggests no general firewall blocking of outbound traffic. The issue is specifically name resolution, not packet filtering.

Practice this question →

MCQmedium

In the OSI model, which layer is responsible for establishing, managing, and terminating sessions between applications, as well as providing checkpoints and recovery?

A.Transport layer

B.Session layer

C.Network layer

D.Data link layer

AnswerB

The Session layer (Layer 5) is precisely responsible for establishing, managing, and terminating communication sessions, or 'dialogues,' between applications on different hosts. It handles dialogue control, determining whose turn it is to transmit, and provides synchronization points for data exchange, enabling checkpointing and recovery in case of failures. This ensures that if a connection is interrupted, the session can resume from the last known good point, rather than restarting entirely.

Why this answer

The Session layer (Layer 5) of the OSI model is explicitly responsible for establishing, managing, and terminating sessions between applications, as well as providing checkpointing and recovery mechanisms. This layer uses protocols like NetBIOS, RPC, and PPTP to coordinate dialog control, synchronization points, and session restoration after failures, ensuring that long-lived transactions can resume from a checkpoint rather than restarting entirely.

Exam trap

The N10-009 exam often tests the Session layer by describing its functions in a way that sounds like Transport-layer reliability (e.g., 'checkpoints and recovery'), leading candidates to mistakenly choose the Transport layer because they associate recovery with TCP's retransmission, but TCP only recovers lost segments, not application sessions.

Why the other options are wrong

The Transport layer handles end-to-end communication, segmentation, and flow control, but not session establishment, management, termination, checkpoints, or recovery.

The Network layer (Layer 3) is responsible for routing and forwarding packets across networks, not for session management, checkpoints, or recovery.

The data link layer (Layer 2) handles node-to-node data transfer, error detection, and framing, not session management, checkpoints, or recovery.

Practice this question →

MCQeasy

Which layer of the OSI model is responsible for logical addressing and routing of packets between networks?

A.Data Link layer

B.Network layer

C.Transport layer

D.Application layer

AnswerB

The Network layer (Layer 3) is uniquely responsible for logical addressing, primarily through IP addresses, which enables devices to communicate across different network segments. It also handles routing, determining the best path for data packets to travel from source to destination across interconnected networks. This layer's functions are crucial for internetworking, allowing global communication beyond a single local area network by abstracting the underlying physical topology.

Why this answer

The Network layer (Layer 3) is responsible for logical addressing (e.g., IPv4/IPv6 addresses) and routing packets between different networks by determining the best path using routing protocols such as OSPF, BGP, or static routes. Unlike the Data Link layer, which handles physical addressing (MAC) within a single network segment, the Network layer enables end-to-end delivery across multiple hops.

Exam trap

The N10-009 exam often tests the distinction between logical addressing (Layer 3) and physical addressing (Layer 2), leading candidates to mistakenly choose the Data Link layer because they associate 'addressing' with MAC addresses rather than IP addresses.

Why the other options are wrong

The Data Link layer (Layer 2) handles node-to-node data transfer, error detection, and MAC addressing, not logical addressing or routing between networks, which are functions of the Network layer (Layer 3).

The Transport layer (Layer 4) is responsible for end-to-end communication, segmentation, and flow control, not for logical addressing or routing between networks.

The Application layer (Layer 7) provides network services to end-user applications, such as HTTP, FTP, and SMTP. It does not handle logical addressing or routing, which are functions of the Network layer.

Practice this question →

MCQeasy

Which transport layer protocol is used by VoIP and streaming video because it provides low latency and does not require retransmission?

A.TCP

B.UDP

C.ICMP

D.IGMP

AnswerB

User Datagram Protocol (UDP) is a connectionless transport layer protocol that prioritizes speed and low latency over guaranteed delivery. It does not establish a session, perform error checking, or retransmit lost packets, which significantly reduces overhead. This makes UDP ideal for real-time applications like Voice over IP (VoIP) and video streaming, where occasional packet loss is preferable to the delays introduced by retransmission and flow control mechanisms. The continuous flow of media data benefits from UDP's minimal processing requirements.

Why this answer

VoIP and streaming video use UDP (User Datagram Protocol) because it is connectionless and provides low-latency transmission without retransmission of lost packets. This is critical for real-time applications where a slight delay is more disruptive than occasional packet loss.

Exam trap

CompTIA often tests the misconception that 'reliable delivery is always better,' leading candidates to choose TCP, but the trap is that real-time applications prioritize low latency over guaranteed delivery, making UDP the correct choice.

Why the other options are wrong

TCP provides reliable, connection-oriented delivery with retransmission of lost packets, which increases latency and is unsuitable for real-time applications like VoIP and streaming video that prioritize low latency over reliability.

ICMP is a network layer protocol used for error reporting and diagnostics (e.g., ping), not for transporting VoIP or streaming video data. It does not provide the low-latency, connectionless transport required for real-time media.

IGMP (Internet Group Management Protocol) is used for managing multicast group memberships, not for transporting VoIP or streaming video data. It operates at the network layer, not the transport layer, and does not handle low-latency data delivery or retransmission.

Practice this question →

MCQeasy

At which layer of the OSI model does a device provide flow control, error detection, and recovery for end-to-end communication?

A.A: Transport layer

B.B: Network layer

C.C: Data Link layer

D.D: Session layer

AnswerA

The Transport layer, specifically through protocols like TCP, provides end-to-end flow control to manage the rate of data transmission between a sending and receiving application. It prevents a faster sender from overwhelming a slower receiver by using a sliding window mechanism, where the receiver advertises its available buffer space. This ensures that the sender only transmits data up to the receiver's advertised window size, dynamically adjusting the data flow to match the receiver's processing capabilities and preventing buffer overflows.

Why this answer

The Transport layer (Layer 4) is responsible for end-to-end communication between source and destination hosts. It provides flow control (e.g., TCP's sliding window mechanism), error detection (via checksums in TCP and UDP headers), and recovery (through TCP retransmission of lost segments). These functions ensure reliable data delivery across the network, distinguishing it from lower layers that handle hop-by-hop or link-local tasks.

Exam trap

The N10-009 exam often tests the distinction between hop-by-hop (Data Link) and end-to-end (Transport) responsibilities, tricking candidates into confusing link-layer error detection (e.g., Ethernet CRC) with end-to-end recovery, which is exclusively a Transport layer function.

Why the other options are wrong

The Network layer (Layer 3) handles routing and logical addressing, but flow control, error detection, and recovery for end-to-end communication are functions of the Transport layer (Layer 4).

The Data Link layer provides flow control, error detection, and recovery only for direct node-to-node links, not for end-to-end communication across multiple network segments.

The Session layer (Layer 5) manages sessions, dialog control, and synchronization, but does not provide flow control, error detection, or recovery for end-to-end communication; those functions belong to the Transport layer.

Practice this question →

MCQeasy

A junior network technician asks which device operates at Layer 2 of the OSI model and uses MAC addresses to forward frames. Which device is the technician describing?

A.Hub

B.Switch

C.Router

D.Firewall

AnswerB

Switches operate primarily at Layer 2 (Data Link Layer) of the OSI model. They intelligently forward data frames based on the destination Media Access Control (MAC) address found in the frame header. By learning MAC addresses and storing them in a MAC address table, switches create dedicated collision domains for each port, significantly improving network efficiency compared to hubs. This targeted forwarding ensures data only reaches the intended recipient, reducing unnecessary network traffic.

Why this answer

A switch operates at Layer 2 (Data Link layer) of the OSI model and uses MAC addresses to make forwarding decisions. It builds a MAC address table by learning source MAC addresses from incoming frames and then forwards frames only to the specific port associated with the destination MAC address, reducing collision domains and improving network efficiency.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 and Layer 3 devices by asking about forwarding decisions based on MAC vs. IP addresses, and the trap here is that candidates may confuse a switch with a router because both can connect multiple devices, but only the switch operates purely at Layer 2 using MAC addresses.

Why the other options are wrong

Hubs operate at Layer 1 (Physical layer) and simply repeat electrical signals to all ports; they do not use MAC addresses to forward frames.

Routers operate at Layer 3 (Network layer) and use IP addresses to forward packets, not MAC addresses to forward frames.

A firewall operates at Layers 3 and 4 (and sometimes higher) of the OSI model, using IP addresses and ports to filter traffic, not MAC addresses to forward frames.

Practice this question →

MCQeasy

Which of the following best describes the purpose of the TCP three-way handshake?

A.To establish a reliable connection between two hosts

B.To terminate a connection gracefully

C.To resolve an IP address to a MAC address

D.To encrypt data between two devices

AnswerA

The TCP three-way handshake is fundamental for initiating a reliable, full-duplex connection between a client and a server. It involves the exchange of SYN, SYN-ACK, and ACK packets to synchronize initial sequence numbers, ensuring that both hosts agree on where data transmission will begin. This process reserves resources and establishes the necessary state for ordered and error-checked data transfer across the network.

Why this answer

The TCP three-way handshake is the process by which two hosts synchronize sequence numbers and establish a reliable connection before data transfer begins. It involves the exchange of SYN, SYN-ACK, and ACK segments, ensuring both sides are ready to communicate and agree on initial sequence numbers (ISNs) as defined in RFC 793.

Exam trap

The trap here is that candidates confuse the TCP three-way handshake with connection termination (the four-way handshake) or with lower-layer address resolution protocols like ARP, leading them to select the graceful termination or IP-to-MAC resolution options.

Why the other options are wrong

The TCP three-way handshake is used to establish a connection, not to terminate one. Termination uses a four-way handshake with FIN flags.

The TCP three-way handshake is used to establish a connection, not to resolve IP addresses to MAC addresses; that is the function of ARP (Address Resolution Protocol).

The TCP three-way handshake is used to establish a connection, not to encrypt data. Encryption is handled by protocols like TLS or IPsec, not by TCP itself.

Practice this question →

MCQeasy

Which IPv6 address type is used for one-to-many communication and is similar to an IPv4 multicast address?

A.Multicast

B.Anycast

C.Unicast

D.Broadcast

AnswerA

IPv6 multicast addresses are specifically designed for one-to-many communication, allowing a single packet to be efficiently delivered from a source to multiple specific destinations simultaneously. Nodes join a designated multicast group to receive traffic destined for that group, ensuring that only interested hosts process the data. This mechanism is crucial for applications like streaming media, routing protocol updates, and service discovery, optimizing network bandwidth by avoiding redundant transmissions.

Why this answer

IPv6 multicast addresses (FF00::/8) are designed for one-to-many communication, where a single packet is delivered to multiple interfaces that have joined the multicast group. This directly parallels the behavior of IPv4 multicast addresses (224.0.0.0/4), making option A correct.

Exam trap

The trap here is that candidates confuse anycast with multicast because both involve groups of interfaces, but anycast delivers to only one member (the nearest), while multicast delivers to all members.

Why the other options are wrong

Anycast is used for one-to-nearest communication, where multiple hosts share the same address but only the closest one responds, not for one-to-many communication like multicast.

Unicast is used for one-to-one communication, not one-to-many. The question specifically asks for an address type similar to IPv4 multicast, which is one-to-many.

IPv6 does not have a broadcast address; broadcast functionality is replaced by multicast. The question asks for an IPv6 address type similar to IPv4 multicast, which is multicast in IPv6.

Practice this question →

MCQeasy

Which device operates at Layer 1 (Physical) of the OSI model and regenerates electrical signals to extend the distance of a network segment?

A.Switch

B.Router

C.Hub

D.Bridge

AnswerC

A hub is a fundamental Layer 1 device, functioning as a multi-port repeater that operates purely at the physical layer of the OSI model. It receives an incoming electrical signal on one port and regenerates it, broadcasting the signal to all other connected ports without any intelligence regarding data frames or MAC addresses. This action effectively extends the physical range of the network but creates a single, large collision domain for all connected devices.

Why this answer

A hub operates at Layer 1 (Physical) of the OSI model. It receives incoming electrical signals on one port and regenerates (repeats) those signals out to all other ports, effectively extending the physical reach of a network segment. Unlike switches or routers, it performs no frame inspection or forwarding decisions.

Exam trap

CompTIA often tests the distinction between a hub (Layer 1, signal regeneration) and a bridge/switch (Layer 2, frame forwarding), trapping candidates who confuse signal regeneration with MAC-based forwarding.

Why the other options are wrong

A switch operates at Layer 2 (Data Link) and uses MAC addresses to forward frames, not at Layer 1. It does not simply regenerate electrical signals; it makes forwarding decisions based on addressing.

Routers operate at Layer 3 (Network) and make forwarding decisions based on IP addresses, not by regenerating electrical signals at the physical layer.

A bridge operates at Layer 2 (Data Link) and uses MAC addresses to forward frames, not Layer 1 signal regeneration. It does not simply regenerate electrical signals to extend distance.

Practice this question →

MCQeasy

In a network, a collision domain is a network segment where which of the following is true?

A.A: Only one device can transmit at a time to avoid data collisions

B.B: All devices share the same IP subnet

C.C: Broadcast traffic is confined to that segment

D.D: MAC addresses are resolved to IP addresses

AnswerA

A collision domain is a network segment where all connected devices share the same physical medium, such as an Ethernet hub or a shared coaxial cable. In such an environment, only one device can successfully transmit data at any given moment. If two or more devices attempt to transmit simultaneously, their signals interfere, resulting in a data collision that corrupts the frames and necessitates retransmission. This fundamental limitation defines the boundaries of a collision domain.

Why this answer

In a collision domain, only one device can transmit at a time because if two or more devices transmit simultaneously, their signals collide, corrupting the data. This is a fundamental characteristic of half-duplex Ethernet segments, such as those using hubs or legacy bus topologies, where the medium is shared and CSMA/CD (Carrier Sense Multiple Access with Collision Detection) is used to manage access.

Exam trap

The trap here is that candidates often confuse collision domains with broadcast domains, mistakenly thinking that confining broadcast traffic or sharing an IP subnet defines a collision domain, when in fact collision domains are strictly about physical-layer contention for the medium.

Why the other options are wrong

A collision domain is defined by the possibility of frame collisions when multiple devices transmit simultaneously, not by IP subnet membership. Devices on different IP subnets can still be in the same collision domain if connected via a hub or repeater.

A collision domain is defined by the possibility of data collisions when multiple devices transmit simultaneously; broadcast confinement describes a broadcast domain, not a collision domain.

In a collision domain, the key issue is data collisions from simultaneous transmissions, not MAC-to-IP resolution. MAC-to-IP resolution is performed by ARP, which is unrelated to collision domains.

Practice this question →

MCQeasy

Which of the following uniquely identifies a hardware network interface on a device?

A.MAC address

B.IP address

C.Subnet mask

D.Default gateway

AnswerA

A MAC address is a 48-bit hardware identifier burned into the network interface controller, uniquely identifying that interface within its broadcast domain. IP addresses are logical and reassignable, so they do not uniquely identify the physical interface.

Why this answer

A MAC (Media Access Control) address is a hardware-embedded, globally unique identifier assigned to a network interface controller (NIC) by the manufacturer. It operates at Layer 2 (Data Link Layer) of the OSI model and is used for local network communication, ensuring that no two devices on the same broadcast domain have the same MAC address.

Exam trap

The trap here is that candidates often confuse the MAC address with the IP address, thinking the IP address is the hardware identifier, but CompTIA tests that the MAC address is the only Layer 2 permanent identifier, while IP addresses are logical and can be reassigned via DHCP or static configuration.

Why the other options are wrong

An IP address identifies a device on a network layer, not the hardware interface itself, and can change dynamically or be reassigned.

A subnet mask defines the network and host portions of an IP address, but it does not uniquely identify a hardware network interface; it is a logical parameter used for routing.

A default gateway is a router's IP address used for traffic outside the local subnet, not a unique identifier for a hardware network interface.

Practice this question →

MCQeasy

Which network topology connects all devices to a central device?

A.Star

B.Mesh

C.Bus

D.Ring

AnswerA

A star topology is characterized by all network devices connecting to a single central device, such as a hub or switch. This central point manages and directs all data traffic between the connected nodes. This design simplifies troubleshooting and fault isolation, as a failure in one device or cable typically does not affect the rest of the network, though the central device itself becomes a single point of failure.

Why this answer

In a star topology, each device connects directly to a central device such as a switch or hub. This central device manages all communication between endpoints, meaning any data sent from one device must pass through the central point before reaching its destination. This design simplifies fault isolation because a single cable failure only affects the connected device, not the entire network.

Exam trap

The trap here is that candidates often confuse a physical star topology with a logical bus topology (e.g., early Ethernet using a hub) and forget that a switch-based star creates a point-to-point logical connection, eliminating the shared medium and collision domain of a bus.

Why the other options are wrong

In a mesh topology, each device connects to multiple other devices, not to a single central device. The question specifically asks for a topology where all devices connect to a central device, which is the star topology.

In a bus topology, all devices are connected to a single central cable (the bus), not to a central device like a switch or hub. The question specifies a central device, which is characteristic of a star topology.

In a ring topology, each device is connected to exactly two other devices, forming a circular data path, not to a central device.

Practice this question →

MCQmedium

A network technician is assigned a subnet mask of 255.255.255.248. How many usable host addresses are available in this subnet?

A.A) 6

B.B) 8

C.C) 14

D.D) 30

AnswerA

Correct. /29 gives 8 total addresses minus 2 = 6 usable hosts.

Why this answer

The subnet mask 255.255.255.248 corresponds to a /29 prefix length, which provides 2^(32-29) = 8 total addresses. Subtracting the network address and broadcast address leaves 8 - 2 = 6 usable host addresses.

Exam trap

The N10-009 exam often tests the distinction between total addresses and usable host addresses, trapping candidates who forget to subtract the two reserved addresses (network and broadcast) from the total.

Why the other options are wrong

The subnet mask 255.255.255.248 corresponds to a /29 prefix, which provides 2^(32-29) = 8 total addresses. Subtracting 2 for network and broadcast addresses leaves 6 usable hosts, not 8.

A /28 subnet (255.255.255.240) provides 14 usable hosts, but the given mask is /29 (255.255.255.248), which has only 6 usable hosts.

A subnet mask of 255.255.255.248 corresponds to a /29 prefix, which provides 2^(32-29)=8 total addresses. Subtracting the network and broadcast addresses leaves 6 usable hosts, not 30.

Practice this question →

MCQmedium

A network technician is configuring a small office network with two subnets: 10.0.1.0/24 and 10.0.2.0/24. Each subnet has its own switch, and both switches are connected to a router with interfaces 10.0.1.1 and 10.0.2.1. Hosts on subnet A can ping the router's interface in their subnet but cannot ping hosts on subnet B. Which of the following is the most likely cause?

A.The router is not configured with a routing protocol.

B.IP routing is disabled on the router.

C.The hosts in subnet A have the wrong default gateway.

D.The switch in subnet A is blocking ICMP traffic.

AnswerB

If IP routing is disabled, the router functions merely as a multi-port switch, preventing it from performing its fundamental Layer 3 role of forwarding packets between different IP subnets. While hosts can reach the router's interface on their local subnet, the router will not process and forward traffic destined for other subnets, effectively isolating them. This directly explains why communication fails beyond the local segment.

Why this answer

The hosts on subnet A can ping their default gateway (10.0.1.1) but cannot reach hosts on subnet B, which indicates that the router is not forwarding packets between the two directly connected subnets. This behavior is characteristic of a router with IP routing disabled, as the router will not perform inter-VLAN or inter-subnet forwarding unless the 'ip routing' command is enabled globally. Without IP routing, the router acts as a host and will only respond to traffic destined for its own interfaces, dropping any packets that require forwarding to another subnet.

Exam trap

The N10-009 exam often tests the distinction between 'routing protocol' and 'IP routing' — candidates mistakenly think a routing protocol is required for directly connected subnets, when in fact the 'ip routing' global command is the fundamental enabler of any Layer 3 forwarding.

Why the other options are wrong

The router is directly connected to both subnets (10.0.1.0/24 and 10.0.2.0/24), so it automatically has routes to these networks. A routing protocol is only needed to learn routes to non-directly connected networks, which is not the case here.

The hosts can ping the router's interface in their subnet, indicating the default gateway is correctly configured. The issue is inter-subnet routing, not the gateway address.

The switch in subnet A is a Layer 2 device and does not block ICMP traffic between subnets; inter-subnet communication requires a router, and the issue is that the router is not forwarding packets because IP routing is disabled.

Practice this question →

MCQeasy

A network technician is troubleshooting a workstation that can reach devices on its local subnet but cannot access any hosts on remote networks. The technician runs ipconfig and sees that the workstation has a valid IP address and subnet mask but no default gateway configured. Which of the following best describes why the missing default gateway causes this behavior?

A.The default gateway forwards traffic to remote networks when the destination is outside the local subnet.

B.The default gateway filters broadcast traffic to prevent loops within the local subnet.

C.The default gateway resolves hostnames to IP addresses for remote connections.

D.The default gateway assigns IP addresses to hosts on the local subnet via DHCP.

AnswerA

The default gateway is the router interface that a host uses when the destination IP address is not on its own subnet. Without it, the host has no way to send packets beyond the local broadcast domain, so remote hosts are unreachable even though local communication still works. This directly explains the observed symptom.

Why this answer

A host uses its configured default gateway to reach any destination outside its own subnet. When the gateway is missing, the host can still communicate locally because local traffic is delivered directly via ARP and Layer 2, but it has no next hop for remote networks, so those connections fail. The other functions listed belong to DHCP, DNS, or general router behavior, not to the gateway role.

Exam trap

The trap here is assuming the default gateway performs name resolution or address assignment, when it is actually the next-hop router for off-subnet traffic.

Practice this question →

MCQhard

A network has a single switch with VLANs 10, 20, and 30 configured. The switch is connected to a router that has three subinterfaces, each in a different VLAN. How many broadcast domains are present?

A.1

B.3

C.4

D.5

AnswerB

A broadcast domain is a network segment where all devices can receive each other's broadcast frames. By definition, each Virtual Local Area Network (VLAN) isolates broadcast traffic to its own members, effectively creating a distinct broadcast domain. With VLANs 10, 20, and 30 configured on the switch, there are precisely three separate broadcast domains, as the router's subinterfaces facilitate inter-VLAN routing but do not merge these isolated domains.

Why this answer

Each VLAN is a separate Layer 2 broadcast domain. With VLANs 10, 20, and 30 configured on the switch and a router using subinterfaces to route between them, there are exactly three broadcast domains — one per VLAN. Broadcasts are confined to their VLAN and do not cross VLAN boundaries without a Layer 3 device.

Exam trap

The trap here is that candidates often count the router subinterfaces as separate broadcast domains, not realizing that broadcast domains are strictly Layer 2 constructs and that the router only provides inter-VLAN routing without adding new broadcast domains.

Why the other options are wrong

Each VLAN creates a separate broadcast domain. With three VLANs (10, 20, 30) and a router with three subinterfaces, there are three distinct broadcast domains, not one.

Each VLAN creates its own broadcast domain, and with three VLANs (10, 20, 30) there are exactly three broadcast domains. Option C (4) is incorrect because there is no fourth broadcast domain; the router subinterfaces do not add additional broadcast domains beyond the VLANs.

Practice this question →

MCQmedium

Which of the following protocols is used to automatically assign IP addresses to devices on a network and also provides the subnet mask and default gateway?

A.DNS

B.DHCP

C.ARP

D.ICMP

AnswerB

DHCP uses the DORA exchange to lease addresses dynamically and, via options, also delivers the subnet mask and default gateway. This satisfies the stem's requirement for automatic assignment plus supplementary configuration, unlike BOOTP or static addressing.

Why this answer

DHCP (Dynamic Host Configuration Protocol) is the correct answer because it is specifically designed to automatically assign IP addresses to devices on a network, along with essential configuration parameters such as the subnet mask and default gateway. When a DHCP client sends a discover message, the DHCP server responds with an offer that includes these details, allowing the client to fully participate in network communication without manual configuration.

Exam trap

The N10-009 exam often tests the distinction between DHCP and DNS, where candidates mistakenly think DNS assigns IP addresses because it 'looks up' information, but DNS only resolves names, not addresses or subnet masks.

Why the other options are wrong

DNS resolves domain names to IP addresses, but does not assign IP addresses or provide subnet masks and default gateways.

ARP (Address Resolution Protocol) is used to resolve IP addresses to MAC addresses on a local network, not to assign IP addresses or provide subnet masks and default gateways.

ICMP is used for network diagnostics and error reporting (e.g., ping, traceroute), not for automatic IP address assignment or providing subnet mask and default gateway.

Practice this question →

MCQeasy

Which device is used to connect two different network segments and makes forwarding decisions based on IP addresses?

A.Switch

B.Router

C.Hub

D.Bridge

AnswerB

A router forwards packets between separate network segments by examining layer 3 IP addresses and consulting its routing table, which is exactly the IP-based forwarding decision described. Switches and bridges instead forward on layer 2 MAC addresses within a single broadcast domain.

Why this answer

A router is the correct device because it operates at Layer 3 (Network layer) of the OSI model and makes forwarding decisions based on destination IP addresses. It connects two different network segments (subnets) and uses routing tables to determine the best path for packet delivery, often employing protocols like OSPF or BGP.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 and Layer 3 devices, trapping candidates who confuse a switch's MAC-based forwarding with a router's IP-based forwarding, especially when the question mentions 'different network segments'—a switch can segment collision domains but not broadcast domains, while a router segments broadcast domains.

Why the other options are wrong

A switch forwards frames based on MAC addresses, not IP addresses, and operates within a single network segment, not between different network segments.

A hub operates at Layer 1 (physical) and simply repeats electrical signals to all ports, making no forwarding decisions based on IP addresses.

A bridge connects two network segments but makes forwarding decisions based on MAC addresses, not IP addresses, and operates at Layer 2 of the OSI model.

Practice this question →

MCQeasy

Which of the following best describes the primary function of a subnet mask in IPv4 networking?

A.It identifies which part of an IP address is the network address and which part is the host address

B.It dynamically assigns IP addresses to devices on the network

C.It encrypts data packets to ensure secure communication

D.It specifies the IP address of the router that forwards traffic to other networks

AnswerA

The subnet mask is used to divide the IP address into network and host bits, allowing devices to determine if a destination is on the same local network or requires routing.

Why this answer

The subnet mask is a 32-bit value that separates the IP address into network and host portions through a bitwise AND operation. This allows routers and hosts to determine whether a destination IP is on the same local network or requires forwarding to a default gateway. Without the subnet mask, a device cannot distinguish the network prefix from the host identifier, making routing impossible.

Exam trap

CompTIA often tests the misconception that the subnet mask assigns IP addresses or acts as a gateway, so candidates confuse it with DHCP or the default gateway, especially when questions pair subnet mask with 'dynamic' or 'router' in the answer choices.

Why the other options are wrong

A subnet mask does not assign IP addresses; it is used to determine the network and host portions of an IP address. Dynamic IP assignment is performed by DHCP, not the subnet mask.

A subnet mask does not encrypt data packets; encryption is handled by protocols like IPsec or TLS, not by the subnet mask.

The subnet mask does not specify the default gateway; it only delineates network and host portions of an IP address. The default gateway is a separate configuration parameter.

Practice this question →

MCQeasy

At which layer of the OSI model does end-to-end communication and data segmentation occur?

A.Session layer

B.Transport layer

C.Network layer

D.Data link layer

AnswerB

The Transport layer is crucial for establishing logical end-to-end communication between specific application processes running on different hosts. It segments data from the Application layer, adding headers that include port numbers to identify these processes. This layer ensures reliable, ordered delivery via TCP, or provides faster, connectionless delivery with UDP, managing flow control and error recovery for the entire communication session between the two endpoints.

Why this answer

The transport layer (Layer 4) is responsible for end-to-end communication between source and destination hosts, as well as data segmentation and reassembly. Protocols such as TCP and UDP operate at this layer, with TCP providing reliable, connection-oriented service by segmenting data into segments and managing flow control and error recovery.

Exam trap

The trap here is that candidates confuse the transport layer's end-to-end communication with the network layer's end-to-end delivery of packets, forgetting that Layer 4 provides logical communication between processes (ports) while Layer 3 provides logical communication between hosts (IP addresses).

Why the other options are wrong

The session layer manages sessions (establish, maintain, terminate) but does not handle end-to-end communication or data segmentation; those are transport layer functions.

The Network layer (Layer 3) handles routing and logical addressing, not end-to-end communication and data segmentation, which are functions of the Transport layer.

The data link layer handles node-to-node communication and framing, not end-to-end communication or data segmentation, which are functions of the transport layer.

Practice this question →

MCQeasy

A network device receives a frame on one port and forwards it out to all other ports. The device does not examine the destination MAC address. Which type of device is being described?

A.Switch

B.Hub

C.Bridge

D.Router

AnswerB

A hub operates at the Physical layer (Layer 1) of the OSI model, functioning as a multi-port repeater. When a hub receives an electrical signal (representing a frame) on one port, it simply regenerates that signal and broadcasts it out to all other connected ports, without inspecting any MAC address information. It has no intelligence to make forwarding decisions, effectively creating a single collision domain where all connected devices share the same bandwidth.

Why this answer

A hub operates at Layer 1 (physical layer) of the OSI model and simply repeats incoming electrical or optical signals out all other ports without any processing of the frame's destination MAC address. This behavior matches the description exactly: the device receives a frame on one port and forwards it out all other ports without examining the MAC address.

Exam trap

The N10-009 exam often tests the distinction between Layer 1 (hub) and Layer 2 (switch/bridge) devices by describing the 'flooding' behavior of a switch when the MAC address is unknown, which can trick candidates into thinking a switch forwards to all ports without examining the MAC address, but a switch always examines the destination MAC address first.

Why the other options are wrong

A switch examines the destination MAC address to forward frames only to the appropriate port, not to all ports, unlike the device described.

Bridges examine destination MAC addresses to decide whether to forward or filter frames, and they do not flood frames out all ports unless the address is unknown. This question describes a device that forwards all frames out all ports without examining MAC addresses, which is a hub, not a bridge.

Routers operate at Layer 3 and examine destination IP addresses to make forwarding decisions, not MAC addresses. They do not forward frames out all ports without inspection.

Practice this question →

MCQeasy

A network technician is explaining network segmentation to a junior technician. Which of the following devices increases the number of collision domains but does not increase the number of broadcast domains?

A.Hub

B.Switch

C.Router

D.Repeater

AnswerB

A switch effectively segments a network by creating a dedicated collision domain for each connected port. This means that devices connected to different switch ports can transmit simultaneously without causing collisions, significantly improving network performance and reducing congestion within a local area network. However, a switch operates at Layer 2 and forwards all broadcast frames, so it does not segment broadcast domains.

Why this answer

A switch creates a separate collision domain for each port, so multiple devices can transmit simultaneously without collisions, but it does not segment broadcast domains; all ports remain in the same broadcast domain unless VLANs are configured. This directly matches the question's requirement: increasing collision domains without increasing broadcast domains.

Exam trap

The trap here is that candidates often confuse collision domains with broadcast domains, thinking that a switch reduces both, when in fact it only reduces collision domains while leaving broadcast domains unchanged (unless VLANs are used).

Why the other options are wrong

A hub operates at Layer 1 and does not segment collision domains; all ports share a single collision domain, so it does not increase the number of collision domains.

A router increases both collision domains and broadcast domains because it separates broadcast domains by default, which is not what the question asks.

A repeater operates at Layer 1 and simply regenerates signals, extending the physical reach of a network. It does not segment collision domains; all devices connected via repeaters share the same collision domain, and it does not affect broadcast domains.

Practice this question →

MCQeasy

A network technician is explaining the OSI model to a junior technician. The technician mentions that the Transport layer is responsible for end-to-end communication and data segmentation. Which protocol operates at the Transport layer?

A.IP

B.TCP

C.Ethernet

D.HTTP

AnswerB

TCP (Transmission Control Protocol) is a core protocol of the Transport layer (Layer 4) of the OSI model. It provides reliable, connection-oriented communication by establishing a three-way handshake before data transfer. TCP ensures data integrity through sequence numbers, acknowledgments, and retransmission of lost segments, also managing flow control and congestion control to optimize data delivery. This makes it suitable for applications requiring guaranteed delivery, such as web browsing and email.

Why this answer

TCP (Transmission Control Protocol) operates at Layer 4 (Transport) of the OSI model, providing reliable, connection-oriented end-to-end communication and data segmentation with sequencing and acknowledgment. It ensures data is delivered error-free and in order, directly fulfilling the described responsibilities.

Exam trap

CompTIA often tests the distinction between TCP and UDP at the Transport layer, but here the trap is that candidates confuse IP (Layer 3) with Transport layer protocols because IP is fundamental to networking, yet it does not perform end-to-end communication or segmentation.

Why the other options are wrong

IP operates at the Network layer (Layer 3), not the Transport layer. It handles routing and addressing, not end-to-end communication and data segmentation.

Ethernet operates at the Data Link layer (Layer 2) and the Physical layer (Layer 1), not the Transport layer (Layer 4). It handles local network framing and media access, not end-to-end communication or segmentation.

HTTP operates at the Application layer (Layer 7) of the OSI model, not the Transport layer. The Transport layer is responsible for end-to-end communication and segmentation, which is handled by protocols like TCP and UDP.

Practice this question →

MCQeasy

A network technician is reviewing the OSI model to understand how data is encapsulated when a web request is sent from a client to a server. At which layer does the web browser's HTTP request data get encapsulated with a TCP segment header?

A.Application layer

B.Presentation layer

C.Session layer

D.Transport layer

AnswerD

The Transport layer (Layer 4) is responsible for end-to-end communication between applications, segmenting data from upper layers and reassembling it at the destination. It adds either a TCP header for reliable, connection-oriented delivery (like for HTTP) or a UDP header for unreliable, connectionless delivery. This header includes source and destination port numbers, enabling multiplexing and demultiplexing of data streams to specific applications.

Why this answer

The Transport layer (Layer 4) is responsible for encapsulating application data with a TCP or UDP segment header. When a web browser sends an HTTP request, the HTTP data is passed down from the Application layer to the Transport layer, where the TCP segment header (including source/destination ports, sequence numbers, and checksum) is added. This encapsulation occurs at Layer 4, not at any higher layer.

Exam trap

The trap here is that candidates often confuse the Application layer (where HTTP data is generated) with the layer where the TCP header is added, mistakenly thinking encapsulation happens at Layer 7 instead of Layer 4.

Why the other options are wrong

HTTP operates at the Application layer (Layer 7), but the TCP segment header is added at the Transport layer (Layer 4) during encapsulation. The question specifically asks where the HTTP data gets encapsulated with a TCP segment header, which occurs at the Transport layer, not the Application layer.

The Presentation layer (Layer 6) handles data translation, encryption, and compression, not encapsulation with TCP segment headers. TCP segment headers are added at the Transport layer (Layer 4).

The Session layer (Layer 5) manages sessions, not encapsulation of data into segments; TCP segment headers are added at the Transport layer (Layer 4).

Practice this question →

MCQeasy

Which of the following describes the purpose of a default gateway on a host in a TCP/IP network?

A.It translates domain names to IP addresses

B.It assigns IP addresses to devices on the network

C.It forwards traffic from the local network to other networks

D.It filters traffic to prevent unauthorized access

AnswerC

A default gateway is the router interface a host sends packets to when the destination IP is outside its own subnet. It performs the layer-3 forwarding that moves traffic from the local network onto other networks, which is exactly the function described.

Why this answer

The default gateway is the router interface on the local subnet that a host uses to send packets destined for IP addresses outside its own network. When a host determines that the destination IP is not in its local subnet (via its subnet mask), it forwards the frame to the default gateway's MAC address, which then routes the packet toward the remote network. Without a default gateway, a host can only communicate with devices on the same local broadcast domain.

Exam trap

The trap here is that candidates confuse the default gateway with a DNS server or DHCP server, because all three are often configured on the same router in small networks, but the exam specifically tests the Layer 3 forwarding role of the default gateway.

Why the other options are wrong

A default gateway forwards traffic to other networks, not translates domain names to IP addresses; that is the function of DNS.

A default gateway forwards traffic to other networks, not assign IP addresses. IP address assignment is typically done by a DHCP server, not a default gateway.

A default gateway forwards traffic to other networks, not filters it. Traffic filtering to prevent unauthorized access is the function of a firewall, not a default gateway.

Practice this question →

MCQmedium

A client and server are establishing a TCP connection. The client sends a SYN segment to the server. The server responds with a SYN-ACK segment. What is the next segment in the handshake?

A.ACK

B.RST

C.FIN

D.SYN

AnswerA

This is the third and final step of the TCP three-way handshake. After the client sends a SYN and the server responds with a SYN-ACK, the client must send an ACK segment. This final acknowledgment confirms the server's SYN-ACK, successfully establishing a full-duplex connection and making it ready for reliable data transfer. The ACK segment carries no data but signifies the completion of the connection setup.

Why this answer

The TCP three-way handshake requires the client to acknowledge the server's SYN-ACK by sending an ACK segment. This completes the handshake, establishing a full-duplex connection with synchronized sequence numbers. Without this final ACK, the server remains in a half-open state, unable to begin data transmission.

Exam trap

The N10-009 exam often tests the misconception that the handshake ends after the SYN-ACK, or that a FIN or RST could be used to complete the handshake, when in fact the final ACK is mandatory to transition the server's state from SYN-RECEIVED to ESTABLISHED.

Why the other options are wrong

In a TCP three-way handshake, after the server sends SYN-ACK, the client must send an ACK to complete the connection. RST is used to reset a connection, not to continue the handshake.

The TCP three-way handshake requires an ACK from the client after receiving SYN-ACK; FIN is used to terminate a connection, not to establish it.

In the TCP three-way handshake, after the server sends SYN-ACK, the client must send an ACK to complete the connection. Sending a SYN again would be redundant and violate the handshake sequence.

Practice this question →

MCQeasy

Which of the following describes a unicast transmission?

A.One-to-one communication

B.One-to-many communication

C.One-to-all communication

D.Many-to-many communication

AnswerA

A unicast transmission establishes a direct, point-to-point communication channel between a single sending host and a single, specifically identified receiving host. Data packets are addressed to the unique network address (e.g., IP or MAC) of the intended destination, ensuring that only that particular device processes the transmitted information. This method is highly efficient for dedicated data exchange, such as web browsing, file transfers, or secure shell sessions, as network resources are not consumed by unintended recipients.

Why this answer

Unicast transmission is defined as one-to-one communication where a single source sends data to a single destination. In IPv4 networking, this is the standard method for most client-server interactions, such as a host sending an HTTP request to a web server. The destination MAC address in the Ethernet frame is the unique address of the target device, ensuring only that device processes the frame.

Exam trap

The trap here is that candidates often confuse unicast with multicast because both involve a single source, but they forget that unicast is strictly one-to-one, while multicast is one-to-many to a subscribed group.

Why the other options are wrong

Unicast transmission is defined as one-to-one communication, not one-to-many. One-to-many communication is multicast, where data is sent from one source to a specific group of recipients.

Unicast transmission is defined as one-to-one communication, not one-to-all. One-to-all communication is broadcast, where a single sender transmits to all devices on the network.

Unicast transmission is defined as one-to-one communication, not many-to-many. Many-to-many communication describes multicast or anycast in some contexts, but not unicast.

Practice this question →

MCQmedium

A network engineer is designing a subnet to accommodate 50 devices in a single broadcast domain. The engineer uses a /26 subnet mask. How many usable host addresses are available?

A.30

B.62

C.126

D.254

AnswerB

A /26 subnet mask allocates 26 bits to the network portion, leaving 6 bits for host addresses (32 - 26 = 6). This configuration provides 2^6 = 64 total IP addresses within the subnet. After reserving two addresses for the network identifier and the broadcast address, 64 - 2 = 62 usable host addresses remain. This quantity is perfectly suitable for accommodating 50 devices while also providing a comfortable buffer for future network expansion.

Why this answer

A /26 subnet mask provides 2^(32-26) = 64 total addresses. Subtracting the network and broadcast addresses leaves 62 usable host addresses. This is sufficient for 50 devices in a single broadcast domain.

Exam trap

The trap here is that candidates often forget to subtract the network and broadcast addresses, or they confuse the total addresses (64) with usable addresses (62), leading them to pick 64 or misapply the formula for a different prefix length.

Why the other options are wrong

A /26 subnet provides 2^(32-26) = 64 total addresses, with 2 reserved for network and broadcast, leaving 62 usable. Option A (30) corresponds to a /27 subnet, not /26.

A /26 subnet mask provides 64 total addresses, with 62 usable host addresses (2^6 - 2 = 62). Option C (126) corresponds to a /25 subnet mask, which is not used in this question.

A /26 subnet mask provides 64 total addresses, with 62 usable host addresses (64 - 2 for network and broadcast). Option D (254) corresponds to a /24 subnet mask, not /26.

Practice this question →

MCQhard

An engineer is configuring a network and needs to understand the default behavior of an IPv6 node. When an IPv6 interface is initialized, which type of address is automatically assigned without any configuration server?

A.Global unicast address

B.Unique local address

C.Link-local address

D.Multicast address

AnswerC

An IPv6 link-local address (fe80::/10) is automatically configured on every IPv6-enabled interface, serving as the essential address for communication only within the local network segment. It is derived either from the interface's MAC address using EUI-64 or through privacy extensions, ensuring immediate local connectivity without requiring a DHCPv6 server or manual configuration. This address is fundamental for Neighbor Discovery Protocol (NDP) operations and initial router solicitations.

Why this answer

When an IPv6 interface is initialized, it automatically generates a link-local address (fe80::/10) using Stateless Address Autoconfiguration (SLAAC) without requiring any external server (e.g., DHCPv6). This address is mandatory for neighbor discovery and other link-local communication, allowing the node to operate on the local network segment immediately.

Exam trap

The N10-009 exam often tests the misconception that a global unicast address is automatically assigned, but the trap here is that only the link-local address is generated by default, while global and unique local addresses require additional configuration or router presence.

Why the other options are wrong

Global unicast addresses require either manual configuration or DHCPv6 (stateful or stateless) to be assigned; they are not automatically generated upon interface initialization without a configuration server.

Unique local addresses (ULAs) are not automatically assigned upon interface initialization; they require manual configuration or DHCPv6. IPv6 nodes automatically generate a link-local address (fe80::/10) without any server.

A multicast address is not automatically assigned to an interface upon initialization; it is typically joined for specific protocols (e.g., all-nodes multicast FF02::1) but not generated as a unicast address for the interface itself.

Practice this question →

MCQmedium

A network engineer is reviewing RFC 1918 address ranges to plan a private IP addressing scheme. Which of the following IP addresses falls within the private address space for Class A?

A.172.16.0.1

B.192.168.1.1

C.10.10.10.1

D.172.32.0.1

AnswerC

10.10.10.1 sits inside the 10.0.0.0/8 block, the RFC 1918 Class A private range spanning 10.0.0.0 to 10.255.255.255. That single /8 gives roughly 16.7 million host addresses, satisfying the stem's requirement for a Class A private address rather than the 172.16.0.0/12 or 192.168.0.0/16 ranges.

Why this answer

RFC 1918 defines the Class A private address range as 10.0.0.0/8, which includes all addresses from 10.0.0.0 to 10.255.255.255. 10.10.10.1 falls within this range, making it a valid private IP address for internal network use.

Exam trap

The trap here is that candidates often confuse the Class B private range (172.16.0.0/12) with any 172.x.x.x address, forgetting that only 172.16.0.0 through 172.31.255.255 are private, while 172.32.0.0 and above are public.

Why the other options are wrong

The 172.16.0.1 address is part of the Class B private range (172.16.0.0/12), not Class A. The question specifically asks for a Class A private address, which is 10.0.0.0/8.

The question asks for a Class A private address per RFC 1918. 192.168.1.1 is a Class C private address (192.168.0.0/16), not Class A.

172.32.0.1 is not within the RFC 1918 private address ranges; the Class B private range is 172.16.0.0/12 (172.16.0.0 to 172.31.255.255), and 172.32.0.1 falls outside that range.

Practice this question →

MCQeasy

A network engineer wants to segment a LAN into multiple broadcast domains without purchasing additional hardware. Which of the following technologies should be implemented?

A.Subnetting

B.VLANs

C.VPN

D.NAT

AnswerB

VLANs logically partition a single physical switch into separate Layer 2 broadcast domains, containing broadcast traffic without buying extra hardware. Each VLAN is its own subnet, so broadcasts stay within it, satisfying the no-additional-hardware constraint while segmenting the LAN.

Why this answer

VLANs (Virtual Local Area Networks) allow a network engineer to logically segment a single physical LAN switch into multiple isolated broadcast domains without purchasing additional hardware. By assigning switch ports to different VLAN IDs, broadcast traffic is confined to ports within the same VLAN, effectively creating separate Layer 2 networks on the same switch infrastructure.

Exam trap

CompTIA often tests the misconception that subnetting alone can segment broadcast domains, but subnetting only divides IP address space; without VLANs, all devices on the same switch remain in one broadcast domain at Layer 2.

Why the other options are wrong

Subnetting segments a network into multiple IP subnets, but it requires a router to forward traffic between subnets, and it does not create separate broadcast domains without additional hardware (the router). VLANs achieve broadcast domain segmentation at Layer 2 without extra hardware.

VPNs create encrypted tunnels over public networks for secure remote access, but they do not segment a LAN into multiple broadcast domains; they operate at Layer 3 and above, not at Layer 2 where broadcast domains are defined.

NAT (Network Address Translation) translates private IP addresses to public ones for internet access, but it does not segment a LAN into multiple broadcast domains. Broadcast domains are separated by Layer 2 or Layer 3 boundaries, not by address translation.

Practice this question →

MCQeasy

At which layer of the OSI model does the conversion of data frames into electrical signals for transmission occur?

A.Layer 1 (Physical)

B.Layer 2 (Data Link)

C.Layer 3 (Network)

D.Layer 4 (Transport)

AnswerA

The Physical layer (Layer 1) is where the actual conversion of digital data into physical signals occurs. This layer defines the electrical, mechanical, procedural, and functional specifications for transmitting raw bit streams over a communication medium. It is responsible for encoding bits into electrical voltages for copper cables, light pulses for fiber optics, or radio waves for wireless connections, enabling the physical transmission and reception of data across the network.

Why this answer

Layer 1 (Physical) is responsible for the actual transmission of raw bits over a physical medium. This includes converting data frames received from Layer 2 into electrical signals (e.g., voltage levels on copper), light pulses (fiber optic), or radio waves (wireless). The Physical layer defines the hardware specifications, such as connectors, cable types, and signaling methods like Manchester encoding or NRZ.

Exam trap

The trap here is that candidates often confuse the Data Link layer's role in 'framing' with the actual physical transmission, leading them to select Layer 2 when the question specifically asks about conversion to electrical signals.

Why the other options are wrong

The conversion of data frames into electrical signals occurs at Layer 1 (Physical), not Layer 2. Layer 2 (Data Link) handles framing, MAC addressing, and error detection, but does not perform signal conversion.

Layer 3 (Network) handles logical addressing and routing, not the conversion of data frames into electrical signals. That conversion occurs at Layer 1 (Physical).

Layer 4 (Transport) handles end-to-end communication, segmentation, and reassembly, not the conversion of data frames into electrical signals. That conversion occurs at Layer 1 (Physical).

Practice this question →

MCQeasy

Which of the following is a characteristic of a Layer 2 network switch?

A.Makes forwarding decisions based on IP addresses

B.Uses MAC addresses to make forwarding decisions

C.Can route traffic between different VLANs without a router

D.Provides Network Address Translation (NAT)

AnswerB

A Layer 2 network switch operates at the Data Link Layer, using Media Access Control (MAC) addresses for intelligent frame forwarding. It dynamically builds a MAC address table (CAM table) by learning the source MAC addresses of incoming frames and associating them with specific ports. When a frame arrives, the switch inspects its destination MAC address and consults the CAM table to forward the frame only to the corresponding output port, effectively segmenting collision domains and enhancing network efficiency.

Why this answer

A Layer 2 network switch operates at the Data Link layer of the OSI model and uses MAC addresses to make forwarding decisions. It examines the destination MAC address in an Ethernet frame and consults its MAC address table to determine the appropriate port to forward the frame, enabling efficient local area network communication.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 and Layer 3 functionality, and the trap here is that candidates may confuse a switch's ability to segment VLANs with the ability to route between them, forgetting that routing requires a Layer 3 device or process.

Why the other options are wrong

Layer 2 switches operate at the data link layer and use MAC addresses, not IP addresses, for forwarding decisions. IP addresses are used by Layer 3 devices like routers.

A Layer 2 switch operates at the data link layer and cannot route traffic between VLANs; inter-VLAN routing requires a Layer 3 device such as a router or a multilayer switch.

Network Address Translation (NAT) is a function typically performed by routers or firewalls, not by Layer 2 switches. Layer 2 switches operate at the data link layer and do not modify IP addresses.

Practice this question →

MCQeasy

A network device receives a frame and forwards it based on the destination MAC address. The device does not modify the frame and only floods unknown unicast frames. At which layer of the OSI model does this device operate?

A.Layer 1

B.Layer 2

C.Layer 3

D.Layer 4

AnswerB

A network device operating at Layer 2, such as a switch, receives data in the form of frames. It makes forwarding decisions by examining the destination Media Access Control (MAC) address within the frame header. Switches maintain a MAC address table, also known as a Content Addressable Memory (CAM) table, to map MAC addresses to specific ports. If the destination MAC address is unknown, the switch will flood the frame out all ports except the ingress port.

Why this answer

This device operates at Layer 2 (Data Link Layer) because it forwards frames based on the destination MAC address, does not modify the frame, and floods unknown unicast frames. These behaviors are characteristic of a transparent bridge or switch, which uses a MAC address table to make forwarding decisions without examining IP addresses or modifying the frame. Layer 2 devices do not perform routing or alter the frame's content, distinguishing them from Layer 3 routers.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 switching and Layer 3 routing by describing a device that forwards based on MAC addresses but does not modify frames, leading candidates to mistakenly think of a router (Layer 3) because they associate 'forwarding' with routing, when in fact the key clue is the lack of frame modification and the flooding of unknown unicasts.

Why the other options are wrong

The device forwards based on MAC addresses and floods unknown unicasts, which are Layer 2 functions. Layer 1 devices (e.g., repeaters, hubs) do not examine MAC addresses and simply regenerate signals.

Layer 3 devices (routers) forward based on destination IP address, not MAC address, and they modify the frame by decrementing TTL and recalculating checksums. This device forwards by MAC address and does not modify frames, which is Layer 2 switching.

Layer 4 (Transport) handles end-to-end communication, segmentation, and flow control using ports, not MAC address forwarding. The device described operates at Layer 2 (Data Link) because it forwards based on MAC addresses and floods unknown unicasts.

Practice this question →

MCQeasy

A network administrator needs to ensure that data sent from a host arrives at the correct destination on a different network. Which of the following provides the logical address used for this purpose in IPv4?

A.MAC address

B.IP address

C.Port number

D.Default gateway

AnswerB

An IP address uniquely identifies a host on a network and is fundamental for routing data across different network segments and the internet. Its hierarchical structure, comprising network and host portions, enables routers to efficiently determine the optimal path for packets to reach their intended destination, ensuring data arrives at the correct host regardless of its physical location.

Why this answer

In IPv4, the logical address used to route data between different networks is the IP address. The IP address contains a network portion that routers use to forward packets across network boundaries, ensuring the data reaches the correct destination network and host.

Exam trap

The N10-009 exam often tests the distinction between Layer 2 (MAC) and Layer 3 (IP) addressing, trapping candidates who confuse local delivery with inter-network routing.

Why the other options are wrong

MAC addresses operate at Layer 2 (Data Link) and are used for local network delivery, not for routing across different networks. IPv4 uses IP addresses as logical addresses to identify hosts on different networks.

Port numbers identify specific processes or services on a host (transport layer), not the destination network or host itself. The question asks for the logical address used to reach a different network, which is the IP address (network layer).

The default gateway is a router's IP address used to forward traffic to other networks, but it is not the logical address of the destination host. The question asks for the logical address that identifies the destination host on a different network, which is the IP address.

Practice this question →

MCQmedium

A network technician is explaining the concept of encapsulation to a junior technician. At which OSI layer does a packet get encapsulated with a source and destination IP address?

A.Layer 2

B.Layer 3

C.Layer 4

D.Layer 1

AnswerB

The Network layer (Layer 3) is precisely where the IP header is added to the Transport layer segment or datagram, creating an IP packet. This header contains the crucial source and destination IP addresses, enabling logical addressing across disparate networks. This encapsulation is fundamental for routing decisions, allowing data to traverse multiple routers and reach its ultimate destination beyond the local network segment.

Why this answer

At Layer 3 (the Network layer), the packet is encapsulated with a source and destination IP address. This is defined by the Internet Protocol (IP), which handles logical addressing and routing across networks. The IP header is added to the payload from the upper layers, creating a packet that can be forwarded by routers.

Exam trap

The trap here is that candidates often confuse Layer 2 MAC addressing with Layer 3 IP addressing, mistakenly thinking the packet is encapsulated with IP addresses at the Data Link layer, but encapsulation with IP addresses occurs strictly at the Network layer.

Why the other options are wrong

Layer 2 (Data Link layer) uses MAC addresses for local network delivery, not IP addresses. Encapsulation with source and destination IP addresses occurs at Layer 3 (Network layer).

Layer 4 (Transport) uses port numbers and manages end-to-end communication, not IP addressing. IP addresses are added at Layer 3 (Network).

Layer 1 (Physical) deals with raw bit transmission over physical media, not with IP addresses. Encapsulation with IP addresses occurs at Layer 3 (Network).

Practice this question →

MCQeasy

Which of the following IPv6 addresses is a link-local address?

A.2001:db8::1

B.fe80::1

C.ff02::1

D.2000::/3

AnswerB

IPv6 link-local addresses, identified by the fe80::/10 prefix, are automatically configured on every network interface. These addresses are strictly confined to a single physical link and are not routable beyond that segment. Their primary purpose is for local-link communication, such as Neighbor Discovery Protocol (NDP) operations, stateless address autoconfiguration (SLAAC), and initial router discovery. fe80::1 is a valid example of such an address, often assigned to a host or a router's interface.

Why this answer

(fe80::1) is correct because IPv6 link-local addresses always begin with the prefix fe80::/10, as defined in RFC 4291. These addresses are automatically assigned to every IPv6-enabled interface and are only valid on a single link (subnet), never routed. The address fe80::1 is a common example of a link-local address.

Exam trap

The N10-009 exam often tests the distinction between the link-local prefix (fe80::/10) and the multicast prefix (ff00::/8), so candidates may confuse ff02::1 (all-nodes multicast) with a link-local unicast address.

Why the other options are wrong

2001:db8::1 is a global unicast address (used for documentation), not a link-local address. Link-local addresses always start with fe80::/10.

ff02::1 is a multicast address (all-nodes link-local multicast), not a unicast link-local address. Link-local unicast addresses start with fe80::/10.

2000::/3 is the prefix for global unicast addresses, not link-local addresses. Link-local addresses are in the fe80::/10 range.

Practice this question →

MCQmedium

A network administrator wants to segment the network into multiple virtual LANs to reduce broadcast traffic. Which device is required to route traffic between these VLANs?

A.Layer 2 switch

B.Router or Layer 3 switch

C.Bridge

D.Hub

AnswerB

A router or a Layer 3 switch is essential for inter-VLAN routing because these devices operate at Layer 3 of the OSI model, processing IP packets. They maintain routing tables and use IP addresses to forward traffic between different IP subnets, each typically corresponding to a distinct VLAN. This capability allows hosts in separate VLANs to communicate, effectively segmenting the network while maintaining connectivity. Layer 3 switches integrate this routing functionality directly into the switching fabric for higher performance.

Why this answer

VLANs operate at Layer 2, isolating broadcast domains. To route traffic between different VLANs, a device that can forward packets based on Layer 3 IP addresses is required. A router or a Layer 3 switch (which performs hardware-based routing using ASICs) provides the necessary inter-VLAN routing functionality.

Exam trap

CompTIA often tests the misconception that a Layer 2 switch alone can route between VLANs if it supports VLAN tagging (802.1Q), but the switch must have Layer 3 routing capabilities (either as a Layer 3 switch or with an external router) to actually forward traffic between VLANs.

Why the other options are wrong

A Layer 2 switch forwards frames based on MAC addresses and cannot perform routing between VLANs because it lacks Layer 3 IP routing capabilities.

A bridge operates at Layer 2 and cannot perform routing between VLANs; it only forwards frames based on MAC addresses within the same broadcast domain.

A hub operates at Layer 1 and cannot perform VLAN segmentation or routing; it simply repeats electrical signals to all ports, so it cannot route traffic between VLANs.

Practice this question →

MCQmedium

Which of the following is a characteristic of UDP when compared to TCP?

A.A) UDP uses sequence numbers for ordering

B.B) UDP provides reliable data delivery

C.C) UDP has lower overhead due to minimal header

D.D) UDP requires a three-way handshake to establish a connection

AnswerC

UDP's minimal 8-byte header, containing only source and destination ports, length, and a checksum, significantly reduces protocol overhead compared to TCP's more complex 20-byte header. This streamlined structure, coupled with its connectionless nature, eliminates the need for connection establishment and state management, allowing for faster data transmission with less processing burden on network devices and endpoints.

Why this answer

UDP (User Datagram Protocol) has a minimal 8-byte header compared to TCP's 20-byte header, resulting in lower overhead and faster transmission. Unlike TCP, UDP does not provide reliability, flow control, or error recovery, making it ideal for real-time applications like VoIP or video streaming where speed is prioritized over guaranteed delivery.

Exam trap

The trap here is that candidates often confuse UDP's lack of reliability with it being 'unusable' or 'broken,' but the exam tests that UDP's lower overhead is a deliberate design choice for performance-sensitive applications where occasional packet loss is acceptable.

Why the other options are wrong

UDP does not use sequence numbers for ordering; that is a feature of TCP, which uses sequence numbers to ensure ordered delivery of data segments.

UDP does not provide reliable data delivery; it is connectionless and offers no guarantees regarding packet delivery, ordering, or error recovery, unlike TCP which ensures reliability through acknowledgments and retransmissions.

UDP does not require a three-way handshake; it is connectionless and sends data without establishing a connection. The three-way handshake is a TCP mechanism for connection establishment.

Practice this question →

MCQeasy

Which of the following network devices operates at Layer 1 of the OSI model and forwards all incoming electrical signals to all of its ports?

A.Router

B.Switch

C.Hub

D.Bridge

AnswerC

A hub is a fundamental Layer 1 device operating at the Physical layer of the OSI model. It functions as a multi-port repeater, regenerating incoming electrical signals and broadcasting them to all connected ports without any form of intelligence or filtering. This creates a single, large collision domain, meaning all devices connected to the hub share the same network segment and contend for bandwidth.

Why this answer

A hub operates at Layer 1 (Physical layer) of the OSI model and is a multiport repeater. It regenerates and forwards every incoming electrical signal out of all ports except the incoming port, regardless of the intended destination, because it has no intelligence to process MAC addresses or frames.

Exam trap

The N10-009 exam often tests the distinction between a hub and a switch, where candidates mistakenly think a switch forwards all incoming traffic to all ports (like a hub) because they confuse broadcast traffic with general forwarding behavior.

Why the other options are wrong

A router operates at Layer 3 (Network layer) and makes forwarding decisions based on IP addresses, not by blindly forwarding electrical signals to all ports.

A switch operates at Layer 2 (Data Link) and uses MAC addresses to selectively forward frames only to the destination port, not to all ports like a hub.

A bridge operates at Layer 2, not Layer 1, and it forwards frames based on MAC addresses, not all electrical signals to all ports.

Practice this question →

MCQeasy

At which layer of the OSI model does a switch that uses MAC addresses to forward frames operate?

A.Layer 1

B.Layer 2

C.Layer 3

D.Layer 4

AnswerB

A network switch operates primarily at the Data Link layer (Layer 2) of the OSI model. It utilizes Media Access Control (MAC) addresses to forward Ethernet frames to their intended destination within the same local area network (LAN) segment. By maintaining a MAC address table, the switch learns which MAC addresses are associated with specific physical ports, enabling efficient and targeted frame delivery rather than broadcasting to all ports. This intelligent forwarding mechanism significantly reduces network congestion compared to a hub.

Why this answer

A switch that uses MAC addresses to forward frames operates at Layer 2 (Data Link layer) of the OSI model. Layer 2 is responsible for node-to-node data transfer and error detection, using MAC addresses as the addressing scheme. The switch builds a MAC address table by learning source MAC addresses from incoming frames and then forwards frames based on the destination MAC address, making forwarding decisions at this layer.

Exam trap

The trap here is that candidates often confuse a switch's MAC address-based forwarding with a router's IP-based forwarding, mistakenly selecting Layer 3, or they think of a hub's operation at Layer 1 and incorrectly apply that to a switch.

Why the other options are wrong

Switches that forward frames based on MAC addresses operate at Layer 2 (Data Link layer), not Layer 1 (Physical layer). Layer 1 deals with raw bit transmission over physical media, not frame forwarding.

A switch that uses MAC addresses to forward frames operates at Layer 2 (Data Link layer), not Layer 3 (Network layer). Layer 3 involves IP addresses and routing, not MAC-based forwarding.

Layer 4 (Transport) handles end-to-end communication, segmentation, and flow control using port numbers, not MAC addresses. A switch forwarding frames based on MAC addresses operates at Layer 2 (Data Link).

Practice this question →

MCQeasy

Which of the following best describes the function of a default gateway?

A.It translates private IP addresses to public IP addresses.

B.It provides DHCP services to clients.

C.It routes packets from a local subnet to destinations on other networks.

D.It performs DNS resolution for network clients.

AnswerC

The default gateway serves as the essential exit point for all network traffic originating from a local subnet that is destined for hosts or services residing on different IP networks. When a device needs to communicate outside its immediate broadcast domain, it forwards those packets to the default gateway. This device, typically a router, then intelligently forwards the packets towards their ultimate destination across the wider internet or other enterprise networks.

Why this answer

The default gateway is a router or Layer 3 device on a local subnet that serves as the next-hop IP address for packets destined to networks outside the local subnet. When a host determines that the destination IP is not on the same subnet (using its subnet mask), it forwards the packet to the default gateway's MAC address via ARP, which then routes the packet toward the remote network. Without a correctly configured default gateway, a host can only communicate within its own subnet.

Exam trap

The N10-009 exam often tests the misconception that the default gateway performs NAT or DHCP, but the trap here is that candidates confuse the default gateway's routing role with other common router functions like NAT or DHCP services.

Why the other options are wrong

The default gateway does not perform NAT; its primary role is to forward packets from a local subnet to other networks. NAT is typically handled by a router or firewall, not the default gateway itself.

The default gateway is a router that forwards traffic from a local subnet to other networks, not a DHCP server. DHCP services are provided by a DHCP server, which may be a separate device or integrated into a router, but that is not the function of a default gateway.

DNS resolution translates domain names to IP addresses, but it does not route packets or serve as a gateway for traffic leaving the local subnet.

Practice this question →

MCQmedium

A network engineer is designing a network and needs to ensure that broadcast traffic is contained within a single broadcast domain. Which of the following devices should be used to create these separate broadcast domains?

A.Hub

B.Bridge

C.Switch

D.Router

AnswerD

A router operates at Layer 3 of the OSI model, making forwarding decisions based on IP addresses. By default, a router does not forward Layer 2 broadcast frames from one interface to another, effectively creating a distinct broadcast domain on each of its connected network segments. This fundamental function is crucial for segmenting large networks, preventing broadcast traffic from overwhelming interconnected subnets and improving overall network efficiency.

Why this answer

A router operates at Layer 3 of the OSI model and does not forward broadcast frames by default, making it the correct device to segment a network into separate broadcast domains. Each interface on a router creates a distinct broadcast domain, ensuring that broadcast traffic is contained within that interface's subnet.

Exam trap

The N10-009 exam often tests the misconception that a switch creates separate broadcast domains, but a switch only separates collision domains; without VLANs, all ports on a switch belong to the same broadcast domain.

Why the other options are wrong

Hubs operate at Layer 1 and simply repeat electrical signals out all ports, so they do not segment broadcast domains; all devices connected to a hub share the same broadcast domain.

Bridges operate at Layer 2 and forward frames based on MAC addresses, but they do not filter broadcast traffic; broadcasts are flooded to all ports within the same broadcast domain.

A switch operates at Layer 2 and forwards frames based on MAC addresses, but it does not filter broadcast traffic; all ports in the same VLAN belong to the same broadcast domain. Therefore, a switch alone cannot separate broadcast domains.

Practice this question →

MCQeasy

Which of the following IP addresses is a private IP address as defined by RFC 1918?

A.169.254.1.1

B.172.32.1.1

C.192.168.1.1

D.172.15.1.1

AnswerC

192.168.1.1 falls within the 192.168.0.0/16 block that RFC 1918 reserves for private internets, satisfying the stem's requirement. Unlike public addresses, it is non-routable on the internet, so it only works within internal networks behind NAT.

Why this answer

(192.168.1.1) is correct because RFC 1918 reserves the 192.168.0.0/16 block (192.168.0.0 – 192.168.255.255) for private use within local networks. This address is not routable on the public internet, making it suitable for internal LAN addressing.

Exam trap

The trap here is that candidates often remember 172.x.x.x as private but forget the specific range (172.16.0.0/12), leading them to select 172.32.1.1 or 172.15.1.1, both of which are public addresses.

Why the other options are wrong

169.254.1.1 is an APIPA address, not a private IP per RFC 1918. RFC 1918 defines private ranges as 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.

172.32.1.1 falls within the 172.16.0.0/12 range (172.16.0.0 to 172.31.255.255) only if the second octet is between 16 and 31. Since 32 is outside that range, it is not a private IP per RFC 1918.

172.15.1.1 falls within the 172.16.0.0/12 range (172.16.0.0 to 172.31.255.255) defined by RFC 1918 for private IP addresses, but 172.15.1.1 is actually in the 172.8.0.0/13 range, which is not private; it is a public IP address.

Practice this question →

MCQeasy

Which of the following network topologies connects each node to exactly two other nodes, forming a closed loop?

A.Star

B.Bus

C.Ring

D.Mesh

AnswerC

A ring topology establishes a closed loop where each network node is directly connected to exactly two other nodes: one upstream and one downstream neighbor. Data packets travel unidirectionally around this continuous loop, passing through each node until they reach their destination. This structure ensures a predictable data path but can be vulnerable if a single link or node fails, potentially breaking the entire ring.

Why this answer

In a ring topology, each node is connected to exactly two neighbors, forming a closed loop where data travels in one direction (or sometimes dual-ring for redundancy). This is the only topology among the options that inherently creates a circular path with each node having exactly two connections.

Exam trap

The trap here is that candidates often confuse a logical ring (like Token Ring or FDDI) with a physical star-wired ring, where the wiring appears star-shaped but the logical data path is a ring, leading them to incorrectly select 'Star' because they see a central device.

Why the other options are wrong

In a star topology, each node connects to a central hub, not to exactly two other nodes, so it does not form a closed loop.

In a bus topology, all nodes connect to a single central cable, not to exactly two other nodes, and it does not form a closed loop.

In a mesh topology, each node connects to multiple other nodes, not exactly two, and it does not form a closed loop; it provides redundancy through multiple paths.

Practice this question →

MCQmedium

Which IPv6 address is reserved for loopback?

A.::1

B.::

C.127.0.0.1

D.2000::/3

AnswerA

The IPv6 address "::1" is the dedicated loopback address, serving the same function as IPv4's 127.0.0.1. It enables a host to send network traffic to itself, effectively bypassing the network interface card and any physical network infrastructure. This address is indispensable for testing network applications and services locally, ensuring the application stack and internal network processes are functioning correctly without external network involvement.

Why this answer

The IPv6 loopback address is ::1 (equivalent to 127.0.0.1 in IPv4). It is used by a host to send traffic to itself without any physical network interface involvement, as defined in RFC 4291. This address is not routable and should never appear outside the host.

Exam trap

The trap here is that candidates confuse the unspecified address (::) with the loopback address (::1), or mistakenly apply the IPv4 loopback concept (127.0.0.1) to IPv6 without recognizing the different notation.

Why the other options are wrong

The IPv6 address :: (all zeros) is the unspecified address, used to indicate the absence of an address, not for loopback. Loopback in IPv6 is ::1.

127.0.0.1 is an IPv4 loopback address, not an IPv6 address. The question specifically asks for an IPv6 reserved loopback address.

2000::/3 is the prefix for global unicast addresses, not loopback. The IPv6 loopback address is ::1.

Practice this question →

MCQeasy

A workstation with IP address 10.0.1.5/24 needs to communicate with a server at 10.0.2.10/24. The workstation's default gateway is configured as 10.0.1.1. Which of the following will the workstation do with the IP packets destined for the server?

A.Send the packets directly to the server using ARP.

B.Send the packets to the default gateway.

C.Send the packets to the DNS server for resolution.

D.Drop the packets because the server is on a different network.

AnswerB

The workstation first compares the destination IP address with its own IP address and subnet mask to determine if the destination is on the same local network segment. If the destination IP falls outside its local subnet, the workstation recognizes that it cannot directly deliver the packet. Consequently, it encapsulates the IP packet within an Ethernet frame addressed to its configured default gateway's MAC address, forwarding all traffic destined for remote networks to this gateway for subsequent routing.

Why this answer

The workstation's IP address (10.0.1.5/24) and the server's IP address (10.0.2.10/24) are on different subnets (10.0.1.0/24 vs. 10.0.2.0/24). When a host determines that the destination is not on the same local network, it will not attempt direct delivery via ARP. Instead, it forwards the IP packet to its configured default gateway (10.0.1.1), which then routes the packet toward the server's subnet.

Exam trap

The trap here is that candidates mistakenly think a host can ARP for any IP address, even across subnets, or that a host will drop traffic to a different subnet without a router, when in fact the host relies on its default gateway to reach remote networks.

Why the other options are wrong

The workstation's IP (10.0.1.5/24) and server's IP (10.0.2.10/24) are on different subnets (10.0.1.0/24 vs 10.0.2.0/24). The workstation must send packets to its default gateway (10.0.1.1) for routing, not directly to the server via ARP.

DNS resolution is used to translate domain names to IP addresses, but the workstation already knows the server's IP address (10.0.2.10). The question does not involve name resolution, so sending packets to the DNS server is irrelevant.

The workstation will not drop the packets because it can send them to the default gateway (10.0.1.1), which will route them to the server on the different subnet (10.0.2.0/24).

Practice this question →

MCQeasy

A network technician is explaining the function of a default gateway to a junior technician. Which of the following best describes the purpose of a default gateway?

A.It connects two different VLANs.

B.It provides DHCP services to the local network.

C.It routes traffic from the local network to external networks.

D.It translates private IP addresses to public IP addresses.

AnswerC

The default gateway serves as the essential next-hop router for all network traffic originating from the local subnet and destined for any external network. When a device needs to communicate with an IP address outside its immediate local network segment, it forwards those packets to the default gateway. This critical function enables local devices to access the internet, remote corporate networks, or any other network beyond their direct broadcast domain.

Why this answer

The default gateway is a router or Layer 3 device that serves as the next-hop destination for packets destined to IP addresses outside the local subnet. When a host determines that the destination IP is not on the same network, it forwards the frame to the default gateway's MAC address, which then routes the packet toward the external network. This is defined in RFC 1122 and is essential for any host that needs to communicate beyond its directly connected segment.

Exam trap

CompTIA often tests the misconception that the default gateway performs NAT or DHCP, but the trap here is that candidates confuse the default gateway's routing function with other network services like address translation or dynamic addressing.

Why the other options are wrong

A default gateway is not specifically for connecting VLANs; that is the role of a router or Layer 3 switch with inter-VLAN routing configured.

The default gateway does not provide DHCP services; DHCP is handled by a dedicated DHCP server or a router configured with DHCP services, not the default gateway itself.

The default gateway routes traffic between networks, but it does not perform NAT or IP address translation; that is typically the function of a router or firewall with NAT capabilities.

Practice this question →

MCQeasy

Which of the following network devices operates primarily at Layer 2 of the OSI model and uses MAC addresses to forward data?

A.Hub

B.Switch

C.Router

D.Firewall

AnswerB

A network switch operates primarily at Layer 2 (Data Link Layer) of the OSI model. It intelligently forwards Ethernet frames to specific destination ports based on the MAC addresses learned and stored in its Content Addressable Memory (CAM) table. This targeted forwarding significantly reduces network congestion by creating micro-segments and eliminating collision domains, unlike a hub.

Why this answer

A switch operates primarily at Layer 2 (Data Link layer) of the OSI model, forwarding frames based on destination MAC addresses. It builds a MAC address table by learning source MAC addresses from incoming frames and uses this table to make forwarding decisions, reducing collision domains and improving network efficiency.

Exam trap

The N10-009 exam often tests the distinction between a switch (Layer 2, MAC-based forwarding) and a router (Layer 3, IP-based forwarding), and the trap here is that candidates may confuse a switch's ability to segment collision domains with routing functionality, or mistakenly think a switch uses IP addresses for forwarding decisions.

Why the other options are wrong

A hub operates at Layer 1 (physical layer) and simply repeats electrical signals to all ports; it does not use MAC addresses to forward data.

A router operates primarily at Layer 3 (Network layer) and uses IP addresses for forwarding decisions, not MAC addresses. It does not forward based on MAC addresses as a Layer 2 switch does.

A firewall operates at Layer 3 (or higher) of the OSI model, using IP addresses and port numbers to filter traffic, not MAC addresses for forwarding decisions.

Practice this question →

MCQeasy

Which of the following protocols is used to automatically assign IP addresses to devices on a network?

A.A) DNS

B.B) DHCP

C.C) ARP

D.D) ICMP

AnswerB

DHCP (Dynamic Host Configuration Protocol) is a foundational network protocol specifically designed to dynamically assign IP addresses and other critical network configuration parameters, such as subnet masks, default gateways, and DNS server addresses, to devices on an IP network. This automation significantly reduces administrative overhead, prevents IP address conflicts, and ensures efficient reuse of addresses as devices connect and disconnect from the network. When a client boots up, it initiates a process to obtain an IP lease from a DHCP server.

Why this answer

DHCP (Dynamic Host Configuration Protocol) is the correct answer because it is specifically designed to automatically assign IP addresses and other network configuration parameters (such as subnet mask, default gateway, and DNS servers) to devices on a network. When a client device connects, it sends a DHCP Discover broadcast, and the DHCP server responds with an Offer, followed by a Request and Acknowledgment (DORA process), enabling plug-and-play connectivity.

Exam trap

The N10-009 exam often tests the distinction between DHCP (address assignment) and DNS (name resolution), leading candidates to confuse the two because both are essential for network communication, but only DHCP handles automatic IP configuration.

Why the other options are wrong

DNS resolves domain names to IP addresses, but does not automatically assign IP addresses to devices.

ARP (Address Resolution Protocol) is used to resolve IP addresses to MAC addresses on a local network, not to automatically assign IP addresses.

ICMP is used for error reporting and diagnostic functions (e.g., ping, traceroute), not for automatic IP address assignment.

Practice this question →

MCQmedium

A network engineer is designing a network for a large organization. The engineer needs to ensure that broadcast traffic from one VLAN does not propagate to other VLANs while still allowing inter-VLAN communication. Which of the following devices is required to route between VLANs?

A.Layer 2 switch

B.Router

C.Bridge

D.Firewall

AnswerB

A router is a Layer 3 device specifically designed to forward IP packets between different IP networks or subnets, which directly correspond to distinct VLANs. It achieves inter-VLAN routing by having an IP interface (either physical or logical sub-interface on a trunk port) configured within each VLAN, acting as the default gateway for hosts in that VLAN. When traffic from one VLAN needs to reach another, the router processes the destination IP address and forwards the packet accordingly.

Why this answer

A router is required to route between VLANs because VLANs segment a Layer 2 broadcast domain, and inter-VLAN communication must occur at Layer 3. The router performs routing by receiving frames tagged with the source VLAN, stripping the tag, making a forwarding decision based on the destination IP, and then re-encapsulating the frame with the destination VLAN tag. This process is often implemented using a router-on-a-stick configuration with 802.1Q trunking.

Exam trap

The trap here is that candidates often confuse a Layer 3 switch with a Layer 2 switch and assume any switch can route between VLANs, but a standard Layer 2 switch lacks the routing engine and IP forwarding table required for inter-VLAN communication.

Why the other options are wrong

A Layer 2 switch forwards frames based on MAC addresses and does not perform routing; it cannot route between VLANs without a Layer 3 device.

A bridge operates at Layer 2 and forwards frames based on MAC addresses, but it does not perform routing between VLANs. It cannot forward traffic between different VLANs because it lacks the ability to make Layer 3 routing decisions.

A firewall can route between VLANs if configured with routing capabilities, but it is not the primary device required for routing between VLANs; a router or Layer 3 switch is typically used. The question specifically asks for the device required to route between VLANs, and a router is the standard answer.

Practice this question →

MCQeasy

A network administrator wants to logically segment a single physical switch into multiple separate broadcast domains without purchasing additional hardware. Which concept should be used?

A.Spanning Tree Protocol (STP)

B.Virtual LAN (VLAN)

C.Subnetting

D.Quality of Service (QoS)

AnswerB

Virtual LANs (VLANs) logically segment a single physical switch into multiple distinct Layer 2 broadcast domains, effectively creating several virtual switches from one physical device. This segmentation isolates traffic within each VLAN, preventing broadcasts from one VLAN from reaching devices in another, thereby enhancing security and reducing broadcast traffic overhead. For devices in different VLANs to communicate, a Layer 3 device, such as a router or a Layer 3 switch, is required to perform inter-VLAN routing.

Why this answer

A VLAN logically segments a physical switch into multiple isolated broadcast domains by assigning switch ports to specific VLAN IDs (802.1Q). This prevents broadcast traffic from crossing VLAN boundaries without requiring additional hardware, as each VLAN functions as its own Layer 2 network.

Exam trap

The N10-009 exam often tests the misconception that subnetting alone can segment a switch, but subnetting is a Layer 3 concept and does not create separate broadcast domains on a single physical switch without VLANs.

Why the other options are wrong

STP prevents loops in a network topology but does not segment a switch into multiple broadcast domains; it operates at Layer 2 to manage redundant paths, not to create separate logical networks.

Subnetting is a logical division of an IP network at Layer 3, not a method to segment a single physical switch into multiple broadcast domains at Layer 2. VLANs operate at Layer 2 to create separate broadcast domains on the same switch.

QoS prioritizes network traffic but does not segment a switch into separate broadcast domains; it manages bandwidth allocation, not logical separation.

Practice this question →

MCQhard

A network engineer needs to connect two network segments that use different physical media: one segment uses copper Ethernet and the other uses fiber optic. The device must forward frames based on MAC addresses and must not perform any routing. Which device should the engineer choose?

A.Layer 3 switch

B.Media converter

C.Bridge

D.Router

AnswerC

A bridge operates at Layer 2 (Data Link Layer) of the OSI model, intelligently forwarding data frames based on destination MAC addresses. It learns MAC addresses by inspecting incoming frames and builds a forwarding table. Crucially, a bridge can connect two network segments that utilize different physical media types or signaling methods, effectively extending a single logical network while segmenting collision domains without performing any Layer 3 routing.

Why this answer

A bridge operates at Layer 2, forwarding frames based on MAC addresses while connecting different physical media (e.g., copper to fiber). It does not perform routing, making it the correct choice for this scenario. Unlike a media converter, a bridge also provides segmentation and collision domain isolation.

Exam trap

CompTIA often tests the distinction between a media converter (Layer 1) and a bridge (Layer 2), leading candidates to choose the media converter because it handles physical media conversion, but they overlook the requirement for MAC address-based forwarding.

Why the other options are wrong

A Layer 3 switch performs routing based on IP addresses, but the question requires forwarding based on MAC addresses without routing. It also does not inherently connect different physical media like copper and fiber.

A media converter only changes the physical medium (e.g., copper to fiber) but does not forward frames based on MAC addresses; it operates at Layer 1, not Layer 2.

A router operates at Layer 3 (network layer) and makes forwarding decisions based on IP addresses, not MAC addresses. The question specifies that the device must forward frames based on MAC addresses and must not perform routing, which is the function of a Layer 2 bridge, not a router.

Practice this question →

MCQeasy

A network switch is experiencing a high number of collisions on a specific port. The connected device is configured for half-duplex. Which of the following is the most likely cause?

A.The switch port is configured for full-duplex

B.The cable length exceeds 100 meters

C.The device is using an incorrect VLAN

D.The switch port is configured for 1000BASE-T but the device only supports 100BASE-TX

AnswerA

When a switch port is configured for full-duplex, it transmits data without performing Carrier Sense Multiple Access with Collision Detection (CSMA/CD), assuming a dedicated transmit and receive path. If the connected device is operating in half-duplex, it will perform CSMA/CD, listening before transmitting. When the full-duplex switch transmits while the half-duplex device is also transmitting, the half-duplex device detects a collision, leading to a high number of reported collisions on the switch port due to this fundamental operational conflict.

Why this answer

When a switch port is configured for full-duplex but the connected device operates in half-duplex, a duplex mismatch occurs. The switch transmits without checking for collisions (as full-duplex does not use CSMA/CD), while the half-duplex device expects to sense the carrier before sending, leading to collisions on the port. This is the most common cause of excessive collisions on a single switch port.

Exam trap

The trap here is that candidates often assume collisions are always caused by cable length or physical issues, overlooking the duplex mismatch as the primary cause when one side is half-duplex and the other is full-duplex.

Why the other options are wrong

Excessive cable length causes attenuation and signal degradation, not collisions. Collisions are a Layer 2 issue related to duplex mismatch, not physical layer cabling limits.

Incorrect VLAN assignment does not cause collisions; it prevents communication between devices in different VLANs or causes connectivity issues, but collisions are a layer 1/physical layer issue related to duplex mismatch or cabling.

Practice this question →

MCQeasy

A network engineer needs to create subnets for four departments, each requiring at least 50 host addresses. The available network is 192.168.1.0/24. Which subnet mask should be used to satisfy the requirements while minimizing wasted addresses?

A./26 (255.255.255.192)

B./25 (255.255.255.128)

C./27 (255.255.255.224)

D./24 (255.255.255.0)

AnswerA

The /26 CIDR prefix utilizes 26 bits for the network portion, leaving 6 bits for host addresses. This configuration yields 2^6 = 64 total addresses per subnet, which translates to 62 usable host addresses after accounting for the network and broadcast addresses. When applied to a /24 network, a /26 mask creates 2^(26-24) = 4 distinct subnets, perfectly meeting the requirement for four departments, each needing at least 50 hosts.

Why this answer

A /26 subnet mask (255.255.255.192) provides 62 usable host addresses per subnet (2^(32-26) - 2 = 62), which meets the requirement of at least 50 hosts per department. With a /24 network, you can create exactly four /26 subnets (192.168.1.0/26, 192.168.1.64/26, 192.168.1.128/26, 192.168.1.192/26), perfectly matching the four departments while minimizing wasted addresses.

Exam trap

The trap here is that candidates often choose /27 because they calculate 2^5 = 32 and forget to subtract 2 for the network and broadcast addresses, mistakenly thinking 32 hosts are available, or they choose /25 because they see it provides more than 50 hosts without realizing it only creates two subnets, not four.

Why the other options are wrong

A /25 subnet provides 126 host addresses, which is more than the 50 needed per department, but it only allows for 2 subnets, not the required 4 departments.

A /27 subnet provides only 30 usable host addresses per subnet (2^(32-27)-2 = 30), which is insufficient for the requirement of at least 50 hosts per department.

A /24 subnet provides 256 total addresses, which is far more than the 200 needed (4×50), and it cannot be subdivided into four separate subnets without using a different mask.

Practice this question →

MCQeasy

Which of the following IPv6 addresses is a valid link-local address?

A.fe80::1

B.2001:db8::1

C.ff02::1

D.10.0.0.1

AnswerA

This address is a valid IPv6 link-local unicast address because it falls within the fe80::/10 prefix range, which is specifically designated for link-local communication. Link-local addresses are automatically configured on all IPv6 interfaces and are used for communication only within the local network segment, such as for Neighbor Discovery Protocol (NDP) operations and stateless address autoconfiguration (SLAAC). The ::1 suffix is a common host identifier for the first address on a link, making fe80::1 a typical example.

Why this answer

Link-local addresses in IPv6 always start with the prefix fe80::/10, and fe80::1 is a valid example. These addresses are automatically configured on interfaces for local link communication and are not routable beyond the local network segment.

Exam trap

The N10-009 exam often tests the distinction between link-local (fe80::/10) and unique local (fc00::/7) or global unicast (2000::/3) addresses, and candidates frequently confuse the fe80 prefix with multicast or documentation ranges.

Why the other options are wrong

The address 2001:db8::1 is a global unicast address (2001:db8::/32 is reserved for documentation), not a link-local address. Link-local addresses must start with fe80::/10.

ff02::1 is an IPv6 multicast address (all-nodes link-local multicast), not a link-local unicast address. Link-local addresses start with fe80::/10.

This is an IPv4 address, not an IPv6 address. The question specifically asks for a valid IPv6 link-local address, and 10.0.0.1 is in the private IPv4 range.

Practice this question →

MCQmedium

A network technician is explaining the difference between TCP and UDP to a junior technician. Which of the following correctly identifies a characteristic of TCP but NOT of UDP?

A.It provides connectionless communication with minimal overhead.

B.It supports multicast and broadcast transmissions.

C.It uses a three-way handshake to establish a connection before data transfer.

D.It is commonly used for real-time applications like VoIP and video streaming.

AnswerC

TCP is a connection-oriented protocol that initiates communication with a three-way handshake. This process involves the client sending a SYN (synchronize) packet, the server responding with a SYN-ACK (synchronize-acknowledge) packet, and the client concluding with an ACK (acknowledge) packet. This handshake establishes a reliable, full-duplex connection, ensuring both parties are ready to transmit and receive data before any application data is exchanged.

Why this answer

TCP is a connection-oriented protocol that uses a three-way handshake (SYN, SYN-ACK, ACK) to establish a reliable connection before any data is transmitted, ensuring ordered delivery and error recovery. UDP, in contrast, is connectionless and sends datagrams without any prior setup, making the three-way handshake a defining characteristic of TCP only.

Exam trap

The trap here is that candidates often confuse the three-way handshake with general connection establishment, forgetting that UDP is stateless and never performs any handshake, while TCP always does before data transfer.

Why the other options are wrong

TCP is connection-oriented, not connectionless; UDP provides connectionless communication with minimal overhead, so this describes UDP, not TCP.

UDP supports multicast and broadcast transmissions, but TCP does not. The question asks for a characteristic of TCP that is NOT of UDP, so this option describes a feature of UDP, not TCP.

UDP is commonly used for real-time applications like VoIP and video streaming, not TCP. The question asks for a characteristic of TCP but NOT UDP, so this option describes a UDP characteristic.

Practice this question →

MCQeasy

A network switch forwards frames based on which address?

A.MAC address

B.IP address

C.Port number

D.Domain name

AnswerA

Network switches operate at Layer 2 of the OSI model, utilizing Media Access Control (MAC) addresses to make forwarding decisions for frames within a local area network. A switch learns the MAC addresses of connected devices by examining the source MAC address of incoming frames and stores this information in its MAC address table (CAM table). When a frame arrives, the switch looks up the destination MAC address in this table to forward the frame out the correct port, ensuring efficient communication within the segment.

Why this answer

A network switch operates at Layer 2 (Data Link Layer) of the OSI model and uses MAC addresses to make forwarding decisions. When a frame arrives, the switch examines the destination MAC address, looks it up in its MAC address table (CAM table), and forwards the frame only to the port associated with that MAC address, reducing collision domains and improving network efficiency.

Exam trap

CompTIA often tests the distinction between Layer 2 switching (MAC addresses) and Layer 3 routing (IP addresses), and the trap here is that candidates mistakenly associate 'forwarding' with IP addresses because they think of routers, forgetting that the question specifically asks about a switch.

Why the other options are wrong

A network switch operates at Layer 2 of the OSI model and forwards frames based on MAC addresses, not IP addresses. IP addresses are used by routers (Layer 3) for packet forwarding.

A network switch forwards frames based on MAC addresses, not port numbers. Port numbers are used by transport layer protocols (TCP/UDP) to identify applications, not for frame forwarding at layer 2.

A network switch operates at Layer 2 (Data Link layer) and forwards frames based on MAC addresses, not domain names, which are used at Layer 7 (Application layer) for human-readable addressing.

Practice this question →