Default Gateway: Forwarding Traffic to External Networks
Which of the following describes the purpose of a default gateway on a host in a TCP/IP network?
Quick Answer
The answer is that a default gateway forwards traffic from the local network to other networks. This is correct because when a host in a TCP/IP network determines that a destination IP address is not within its own subnet—calculated using its subnet mask—it cannot deliver the packet directly via ARP. Instead, it sends the frame to the default gateway’s MAC address, which is the router interface on the local subnet responsible for routing the packet toward the remote network. On the CompTIA Network+ N10-009 exam, this concept tests your understanding of Layer 3 forwarding and the host’s routing decision process. A common trap is confusing the default gateway with a DNS server or DHCP server; remember that the gateway handles traffic leaving the subnet, not name resolution or address assignment. A helpful memory tip: think of the default gateway as the “exit door” for your local network—without it, your host is stuck talking only to neighbors on the same broadcast domain.
⚠ Common exam trap
It's easy for candidates to confuse the default gateway with a DNS server or DHCP server, because all three are often configured on the same router in small networks, but the exam specifically tests the Layer 3 forwarding role of the default gateway.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It forwards traffic from the local network to other networks
The default gateway is the router interface on the local subnet that a host uses to send packets destined for IP addresses outside its own network. When a host determines that the destination IP is not in its local subnet (via its subnet mask), it forwards the frame to the default gateway's MAC address, which then routes the packet toward the remote network. Without a default gateway, a host can only communicate with devices on the same local broadcast domain.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It translates domain names to IP addresses
Why it's wrong here
DNS resolves hostnames to IP addresses; a default gateway forwards traffic destined for remote subnets. It is tempting because both are host-configured network settings, and DNS is the correct answer when the question asks how a host resolves a fully qualified domain name.
When this WOULD be correct
In a question asking 'Which service translates domain names to IP addresses?', option A would be correct, as DNS performs this function.
- ✗
It assigns IP addresses to devices on the network
Why it's wrong here
DHCP assigns IP addresses; a default gateway forwards packets destined for remote networks. It is tempting because both are configured on hosts and often delivered together by DHCP, and DHCP is the correct answer when the question asks how devices obtain addresses automatically.
When this WOULD be correct
In a question asking 'Which network service dynamically assigns IP addresses to devices on a network?', the correct answer would be 'DHCP server' or a similar option describing IP address assignment.
- ✓
It forwards traffic from the local network to other networks
Why this is correct
A default gateway is the router interface a host sends packets to when the destination IP is outside its own subnet. It performs the layer-3 forwarding that moves traffic from the local network onto other networks, which is exactly the function described.
- ✗
It filters traffic to prevent unauthorized access
Why it's wrong here
Packet filtering is performed by firewalls, not gateways; a default gateway forwards off-subnet traffic to the next hop. It is tempting because the gateway sits at the network perimeter, so it appears security-relevant, and it is correct when the question asks which device enforces boundary filtering rules.
When this WOULD be correct
This option would be correct in a question asking: 'Which of the following describes the purpose of a firewall on a host in a TCP/IP network?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓It forwards traffic from the local network to other networksCorrect answer▾
Why this is correct
A default gateway is the router interface a host sends packets to when the destination IP is outside its own subnet. It performs the layer-3 forwarding that moves traffic from the local network onto other networks, which is exactly the function described.
✗It translates domain names to IP addressesWrong answer — click to see why▾
Why this is wrong here
A default gateway forwards traffic to other networks, not translates domain names to IP addresses; that is the function of DNS.
★ When this WOULD be the correct answer
In a question asking 'Which service translates domain names to IP addresses?', option A would be correct, as DNS performs this function.
Why candidates choose this
Candidates may confuse the default gateway with DNS because both involve network connectivity and are often configured together, leading to a mix-up of their roles.
✗It assigns IP addresses to devices on the networkWrong answer — click to see why▾
Why this is wrong here
A default gateway forwards traffic to other networks, not assign IP addresses. IP address assignment is typically done by a DHCP server, not a default gateway.
★ When this WOULD be the correct answer
In a question asking 'Which network service dynamically assigns IP addresses to devices on a network?', the correct answer would be 'DHCP server' or a similar option describing IP address assignment.
Why candidates choose this
Candidates may confuse the default gateway with a DHCP server because both are common network services, and the gateway often runs a DHCP server in small networks.
✗It filters traffic to prevent unauthorized accessWrong answer — click to see why▾
Why this is wrong here
A default gateway forwards traffic to other networks, not filters it. Traffic filtering to prevent unauthorized access is the function of a firewall, not a default gateway.
★ When this WOULD be the correct answer
This option would be correct in a question asking: 'Which of the following describes the purpose of a firewall on a host in a TCP/IP network?'
Why candidates choose this
Candidates may confuse the default gateway with a firewall because both are involved in network traffic control and security, leading them to think the gateway filters traffic.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
IPv4 Address Class Summary
| Class | First Octet Range | Default Mask | Networks | Hosts per Network |
|---|---|---|---|---|
| A | 1–126 | /8 (255.0.0.0) | 126 | 16,777,214 |
| B | 128–191 | /16 (255.255.0.0) | 16,384 | 65,534 |
| C | 192–223 | /24 (255.255.255.0) | 2,097,152 | 254 |
| D | 224–239 | N/A | Multicast groups | — |
| E | 240–255 | N/A | Reserved / experimental | — |
127.x.x.x is reserved for loopback. Modern networks use CIDR (classless) rather than classful addressing.
Go deeper
Related to this question
Learn chapter
IPv6 Addressing and Address Types
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
Key term
Router
A router is a networking device that connects different networks together and directs data traffic between them by choosing the best path for data to travel.
About these practice questions
One of 472 original N10-009 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on N10-009
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network technician is explaining the function of a default gateway to a junior technician. Which of the following best describes the purpose of a default gateway?
easy- A.It connects two different VLANs.
- B.It provides DHCP services to the local network.
- ✓ C.It routes traffic from the local network to external networks.
- D.It translates private IP addresses to public IP addresses.
Why C: The default gateway is a router or Layer 3 device that serves as the next-hop destination for packets destined to IP addresses outside the local subnet. When a host determines that the destination IP is not on the same network, it forwards the frame to the default gateway's MAC address, which then routes the packet toward the external network. This is defined in RFC 1122 and is essential for any host that needs to communicate beyond its directly connected segment.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.