N10-009 Networking Concepts Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  It identifies the default gateway for a subnet

  Why it's wrong here

  Identifying the default gateway is a separate configuration task, where an administrator explicitly assigns the IP address of a router that serves as the exit point for traffic destined outside the local subnet. While the subnet mask defines the boundaries of the local network, allowing a device to recognize if an IP is local or remote, it does not inherently reveal the gateway's specific IP address. The gateway's IP must be known and configured for proper routing beyond the immediate network segment.

  When this WOULD be correct

  In a question asking 'Which parameter must be configured on a host to enable communication with devices on other subnets?', the default gateway would be the correct answer.

• ✓

  It determines the network portion of an IP address

  Why this is correct

  The subnet mask is a 32-bit number that, when logically combined with an IP address using a bitwise AND operation, precisely delineates the network portion from the host portion. This fundamental operation allows devices to determine if a destination IP address resides on the local network segment or requires forwarding to a router. By defining the network boundary, the subnet mask is crucial for efficient packet routing decisions within an IPv4 network.

• ✗

  It provides encryption for data in transit

  Why it's wrong here

  Providing encryption for data in transit is a security function typically handled by protocols operating at higher layers of the OSI model, such as TLS/SSL at the Transport Layer or IPsec at the Network Layer, or even application-specific encryption. The subnet mask's role is purely in logical addressing and network segmentation for routing purposes, having no mechanism or responsibility for data confidentiality or integrity. It is entirely unrelated to securing the content of network traffic.

  When this WOULD be correct

  A question asking 'Which protocol provides encryption for data in transit at the network layer?' would make IPsec the correct answer, as it encrypts IP packets. Alternatively, a question about 'Which OSI layer handles encryption?' could point to the Presentation layer (e.g., TLS).

• ✗

  It maps IP addresses to MAC addresses

  Why it's wrong here

  Mapping IP addresses to MAC addresses is the exclusive function of the Address Resolution Protocol (ARP), which operates at Layer 2 (Data Link Layer) of the OSI model. The subnet mask, conversely, operates at Layer 3 (Network Layer) and is solely concerned with logically segmenting an IP address into its network and host components. These are distinct functions performed by different protocols at different layers of the networking stack.

  When this WOULD be correct

  In a question asking 'Which protocol maps IP addresses to MAC addresses?', option D would be correct if it stated ARP instead of subnet mask.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question