N10-009 Network Operations Practice Question
A network administrator needs to monitor the health and performance of network devices and receive alerts when link failures occur. Which of the following protocols should be implemented?
⚠ Common exam trap
Test-takers frequently confuse SNMP with SMTP because both can be involved in alerting, but SMTP is only a delivery mechanism for email-based alerts, not the protocol that actually monitors devices and detects link failures.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SNMP
SNMP (Simple Network Management Protocol) is the correct choice because it is specifically designed to monitor and manage network devices, collect performance metrics, and send traps or notifications when events like link failures occur. SNMP agents on devices report status to a management system, which can generate alerts based on thresholds or trap messages (e.g., linkDown traps per RFC 3418).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SNMP
Why this is correct
SNMP (Simple Network Management Protocol) is the industry-standard protocol specifically designed for managing and monitoring network devices. It enables network administrators to collect critical operational data, such as CPU utilization, interface statistics, and error rates, from various network components like routers, switches, and servers. SNMP agents on these devices respond to queries from a network management station (NMS) and can proactively send unsolicited alerts, known as traps, when predefined thresholds are exceeded or significant events occur, facilitating comprehensive network health oversight.
- ✗
SMTP
Why it's wrong here
SMTP (Simple Mail Transfer Protocol) is the foundational protocol for sending and receiving email messages across IP networks. Its primary function is to facilitate the reliable transfer of electronic mail between mail servers and from email clients to mail servers. While network monitoring systems might leverage SMTP to send email notifications or alerts to administrators when issues are detected, SMTP itself does not provide any capabilities for directly querying device health, collecting performance metrics, or managing network components within a network infrastructure.
When this WOULD be correct
A question asking which protocol is used to send email alerts from a network monitoring system to an administrator's email address would make SMTP correct.
- ✗
SSH
Why it's wrong here
SSH (Secure Shell) is a cryptographic network protocol that provides secure remote access to network devices and servers over an unsecured network. It establishes an encrypted connection, allowing administrators to execute commands, transfer files securely (using SCP or SFTP), and manage configurations interactively. While crucial for secure administrative access and manual troubleshooting, SSH is not designed for automated, programmatic collection of performance data or passive, continuous monitoring of device health across an entire network without direct human intervention or complex scripting.
When this WOULD be correct
A network administrator needs to securely manage and configure network devices remotely, ensuring encrypted communication. In that scenario, SSH would be the correct protocol to implement.
- ✗
TFTP
Why it's wrong here
TFTP (Trivial File Transfer Protocol) is a lightweight protocol primarily used for transferring files between network devices, often for tasks like booting diskless workstations or distributing configuration files. Unlike more robust protocols, TFTP operates over UDP and lacks authentication, encryption, or directory browsing capabilities. It is not designed for, nor does it provide any mechanisms for, real-time performance monitoring, status querying, or event notification, which are essential functions for assessing network device health.
When this WOULD be correct
A network administrator needs to back up router configurations to a central server without authentication overhead. Which protocol should be used?
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SNMPCorrect answer▾
Why this is correct
SNMP (Simple Network Management Protocol) is the industry-standard protocol specifically designed for managing and monitoring network devices. It enables network administrators to collect critical operational data, such as CPU utilization, interface statistics, and error rates, from various network components like routers, switches, and servers. SNMP agents on these devices respond to queries from a network management station (NMS) and can proactively send unsolicited alerts, known as traps, when predefined thresholds are exceeded or significant events occur, facilitating comprehensive network health oversight.
✗SMTPWrong answer — click to see why▾
Why this is wrong here
SMTP is used for sending email messages, not for monitoring network device health or receiving alerts about link failures. It does not provide device status polling or trap-based notifications.
★ When this WOULD be the correct answer
A question asking which protocol is used to send email alerts from a network monitoring system to an administrator's email address would make SMTP correct.
Why candidates choose this
Candidates may confuse SMTP with SNMP because both are network protocols with similar acronyms, or they might think SMTP is used for sending alerts since alerts are often delivered via email.
✗SSHWrong answer — click to see why▾
Why this is wrong here
SSH is used for secure remote administration and command execution, not for monitoring device health or receiving link failure alerts. It lacks the standardized MIB structure and trap/notification mechanisms that SNMP provides for network monitoring.
★ When this WOULD be the correct answer
A network administrator needs to securely manage and configure network devices remotely, ensuring encrypted communication. In that scenario, SSH would be the correct protocol to implement.
Why candidates choose this
Candidates may confuse SSH with SNMP because both are commonly used in network management, or they might think SSH can be used to check device status via command-line scripts, overlooking the need for a dedicated monitoring protocol with alerting capabilities.
✗TFTPWrong answer — click to see why▾
Why this is wrong here
TFTP is a file transfer protocol used for transferring configuration files or firmware, not for monitoring device health or receiving link failure alerts.
★ When this WOULD be the correct answer
A network administrator needs to back up router configurations to a central server without authentication overhead. Which protocol should be used?
Why candidates choose this
Candidates may confuse TFTP with SNMP because both are UDP-based and used in network management contexts, but TFTP lacks monitoring and alerting capabilities.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Documentation and Diagrams
Key term
SNMP
A network protocol used to collect and organize information about managed devices on IP networks and to modify that information to change device behavior.
Key term
Out-of-band
Out-of-band refers to a separate, dedicated network path used for managing and configuring IT devices, distinct from the main data traffic path.
About these practice questions
One of 464 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.