N10-009 Network Operations Practice Question
A network administrator needs to maintain a record of all configuration changes made to network switches, including the date, time, and the administrator who made the change. Which document should be used for this purpose?
⚠ Common exam trap
A common mix-up: candidates confuse a baseline configuration report with a change log, thinking it records changes, when in fact a baseline is a snapshot of a known good state, not a running history of modifications.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change management log
A change management log is the correct document because it is specifically designed to record configuration changes, including the date, time, and the administrator responsible. This log provides an audit trail for network devices, ensuring compliance and facilitating troubleshooting by tracking who made what change and when.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Network topology diagram
Why it's wrong here
A network topology diagram provides a visual representation of the physical and logical interconnections among network devices, such as routers, switches, and servers. While fundamental for understanding the current layout and device relationships, it serves as a static snapshot of the network's structure at a given moment. It does not inherently record the historical sequence or specific details of configuration changes applied over time, focusing instead on connectivity.
When this WOULD be correct
When a question asks for a document that visually represents the arrangement of network devices and their interconnections, such as 'Which document should be used to understand the physical layout of the network?'
- ✗
Baseline configuration report
Why it's wrong here
A baseline configuration report captures and documents the stable, known-good state of a network device or system at a specific point in time. Its primary purpose is to establish a reference against which future configurations or performance metrics can be compared to identify deviations or issues. However, this report is a singular snapshot and does not dynamically track or log the continuous sequence of modifications that occur after the baseline is established.
When this WOULD be correct
When an exam question asks for a document that captures the standard or expected configuration of network devices for comparison purposes, such as verifying compliance or detecting unauthorized changes.
- ✓
Change management log
Why this is correct
A change management log is a critical document specifically designed to systematically track all modifications made to network infrastructure, configurations, and services. It provides a chronological record detailing who initiated the change, the exact timestamp of its implementation, a comprehensive description of what was altered, and often includes the reason for the change and any necessary rollback procedures. This log is indispensable for auditing, troubleshooting, ensuring accountability, and maintaining network stability.
- ✗
Incident report
Why it's wrong here
An incident report is a formal document created to detail specific security breaches, service outages, or other critical operational disruptions within the network. Its main function is to record the nature of the incident, its impact, the steps taken for resolution, and any post-mortem analysis for future prevention. This type of report is not intended to systematically record routine, planned configuration changes made during normal network operations.
When this WOULD be correct
An incident report would be correct if the question asked: 'Which document should be used to record details of a security breach or network outage, including the date, time, and administrator who responded?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓Change management logCorrect answer▾
Why this is correct
A change management log is a critical document specifically designed to systematically track all modifications made to network infrastructure, configurations, and services. It provides a chronological record detailing who initiated the change, the exact timestamp of its implementation, a comprehensive description of what was altered, and often includes the reason for the change and any necessary rollback procedures. This log is indispensable for auditing, troubleshooting, ensuring accountability, and maintaining network stability.
✗Network topology diagramWrong answer — click to see why▾
Why this is wrong here
A network topology diagram shows the physical or logical layout of devices and connections, not a record of configuration changes with timestamps and administrator details.
★ When this WOULD be the correct answer
When a question asks for a document that visually represents the arrangement of network devices and their interconnections, such as 'Which document should be used to understand the physical layout of the network?'
Why candidates choose this
Candidates may confuse documentation of changes with documentation of the network structure, thinking that a topology diagram would include change history.
✗Baseline configuration reportWrong answer — click to see why▾
Why this is wrong here
A baseline configuration report documents the initial or standard configuration of network devices, not a historical record of changes with dates and administrators.
★ When this WOULD be the correct answer
When an exam question asks for a document that captures the standard or expected configuration of network devices for comparison purposes, such as verifying compliance or detecting unauthorized changes.
Why candidates choose this
Candidates may confuse 'baseline' with a log of changes, thinking it records deviations from the baseline, but it is a snapshot, not a change history.
✗Incident reportWrong answer — click to see why▾
Why this is wrong here
An incident report documents unplanned events or security breaches, not routine configuration changes. The question asks for a record of all configuration changes, which is the purpose of a change management log.
★ When this WOULD be the correct answer
An incident report would be correct if the question asked: 'Which document should be used to record details of a security breach or network outage, including the date, time, and administrator who responded?'
Why candidates choose this
Candidates may confuse incident reports with change logs because both involve recording dates, times, and personnel, but incident reports are for reactive events, not proactive changes.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
Change management
Change management is the structured process of planning, approving, implementing, and reviewing changes to IT systems to minimize risk and disruption.
Key term
A record
An A record is a type of DNS resource record that maps a domain name to an IPv4 address.
About these practice questions
One of 464 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.