- A
Perform a traceroute to the external website to identify the point of failure.
Why wrong: Traceroute is useful for identifying path issues, but since external IPs are reachable (ping 8.8.8.8 works), the path is likely fine. The problem is with name resolution.
- B
Verify that the DNS server can resolve external domain names.
The user can access internal resources by name and can reach external IPs, so the DNS server must be able to resolve external names. If the DNS server is not configured to forward queries or is using a root hint that fails, this would explain the symptom.
- C
Check the Windows Firewall on the workstation to ensure it is not blocking outbound HTTP traffic.
Why wrong: If the firewall were blocking HTTP, the user would likely not be able to load any web pages, but the ability to ping external IPs suggests basic connectivity exists. The issue is specific to name resolution.
- D
Renew the DHCP lease on the workstation.
Why wrong: The workstation already has a valid IP configuration and can reach internal and external IPs. Renewing the lease would not resolve a DNS-specific issue.
Quick Answer
The correct next step is to verify that the DNS server can resolve external domain names. This is because the user can access internal resources by name and successfully ping an external IP address like 8.8.8.8, confirming that IP routing, the default gateway, and basic network connectivity are all functional. The specific symptom of being unable to access external websites by name, despite having DNS server addresses configured, isolates the problem to a DNS resolution failure for external domains. On the CompTIA Network+ N10-009 exam, this scenario tests your ability to distinguish between connectivity issues and name resolution failures—a common trap is to assume the DNS server is down entirely, but internal name resolution may still work if the server is configured for split DNS or internal zones. A reliable memory tip is to remember the “ping test” logic: if you can ping 8.8.8.8 but not google.com, the problem is always DNS, not the network.
N10-009 Network Troubleshooting Practice Question
This N10-009 practice question tests your understanding of network troubleshooting. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A user reports that they can access internal resources such as file shares and printers by name, but they cannot access any external websites. The technician checks the IP configuration and finds the workstation has a valid IP address, subnet mask, default gateway, and DNS server addresses. The technician can successfully ping the default gateway and an external IP address like 8.8.8.8. Which of the following should the technician check NEXT?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Verify that the DNS server can resolve external domain names.
The user can access internal resources by name and can ping an external IP address (8.8.8.8), which confirms that IP routing, the default gateway, and basic network connectivity are working. The inability to access external websites by name, despite having DNS server addresses configured, points directly to a DNS resolution failure for external domains. Therefore, the next logical step is to verify that the configured DNS server can resolve external domain names, such as by using `nslookup` or `dig` to query a public domain like google.com.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Perform a traceroute to the external website to identify the point of failure.
Why it's wrong here
Traceroute is useful for identifying path issues, but since external IPs are reachable (ping 8.8.8.8 works), the path is likely fine. The problem is with name resolution.
- ✓
Verify that the DNS server can resolve external domain names.
Why this is correct
The user can access internal resources by name and can reach external IPs, so the DNS server must be able to resolve external names. If the DNS server is not configured to forward queries or is using a root hint that fails, this would explain the symptom.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
Check the Windows Firewall on the workstation to ensure it is not blocking outbound HTTP traffic.
- ✗
Renew the DHCP lease on the workstation.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates assume a successful ping to an external IP means all network layers are fine, but they overlook that DNS resolution is a separate service that can fail independently, leading them to waste time on traceroute or firewall checks.
Detailed technical explanation
How to think about this question
DNS resolution for internal resources often uses a separate internal DNS server or a split-brain DNS configuration, while external queries rely on root hints or forwarders. If the DNS server is configured to only resolve internal zones or has a broken forwarder, external queries will fail even though the DNS server IP is correctly set on the workstation. A common real-world scenario is when a corporate DNS server is not configured to forward queries to the internet, causing internal names to work but external names to fail.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A network engineer segments a warehouse floor into three subnets: 20 scanners, 5 printers, and 2 management hosts. Picking the wrong mask wastes addresses or leaves too few usable hosts. Exam questions test whether you can apply CIDR notation, calculate block size, and identify the correct usable-host range for a given prefix.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
Network Troubleshooting — study guide chapter
Learn the concepts, then practise the questions
- →
Network Troubleshooting practice questions
Targeted practice on this topic area only
- →
All N10-009 questions
520 questions across all exam domains
- →
CompTIA Network+ N10-009 study guide
Full concept coverage aligned to exam objectives
- →
N10-009 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related N10-009 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Networking Concepts practice questions
Practise N10-009 questions linked to Networking Concepts.
Network Implementation practice questions
Practise N10-009 questions linked to Network Implementation.
Network Operations practice questions
Practise N10-009 questions linked to Network Operations.
Network Security practice questions
Practise N10-009 questions linked to Network Security.
Network Troubleshooting practice questions
Practise N10-009 questions linked to Network Troubleshooting.
Network+ network fundamentals practice questions
Practise N10-009 questions linked to Network+ network fundamentals.
Practice this exam
Start a free N10-009 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this N10-009 question test?
Network Troubleshooting — This question tests Network Troubleshooting — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Verify that the DNS server can resolve external domain names. — The user can access internal resources by name and can ping an external IP address (8.8.8.8), which confirms that IP routing, the default gateway, and basic network connectivity are working. The inability to access external websites by name, despite having DNS server addresses configured, points directly to a DNS resolution failure for external domains. Therefore, the next logical step is to verify that the configured DNS server can resolve external domain names, such as by using `nslookup` or `dig` to query a public domain like google.com.
What should I do if I get this N10-009 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
3 more ways this is tested on N10-009
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network technician is troubleshooting intermittent internet access for a single user. The user’s workstation can ping the default gateway consistently, but web pages fail to load intermittently. Which of the following should the technician check NEXT?
medium- ✓ A.A) DNS server configuration
- B.B) DHCP lease time
- C.C) Switch port speed and duplex settings
- D.D) Firewall rules blocking ICMP
Why A: The user can ping the default gateway consistently, indicating Layer 3 connectivity to the local network is intact. However, intermittent web page failures suggest a name resolution issue, as DNS translates domain names to IP addresses. If the DNS server is misconfigured, unreachable, or returning stale records, the browser will fail to load pages even though basic IP connectivity works. Checking DNS server configuration is the logical next step because it directly addresses the symptom of name resolution failures.
Variation 2. A user reports that they can browse to a website by typing its IP address (e.g., 93.184.216.34) but cannot access it by typing the domain name (e.g., www.example.com). The user's workstation receives IP configuration via DHCP. Which of the following is the most likely cause?
easy- A.The default gateway is misconfigured.
- ✓ B.The DNS server address is incorrect or unreachable.
- C.The web server's SSL certificate is expired.
- D.The workstation's hosts file has an incorrect entry.
Why B: The user can reach the website by IP address but not by domain name, which isolates the issue to name resolution. DNS translates domain names to IP addresses; if the DNS server address provided by DHCP is incorrect or unreachable, the workstation cannot resolve www.example.com to 93.184.216.34. This is the most likely cause because all other connectivity (default gateway, web server) is confirmed working by the successful IP-based access.
Variation 3. A user reports that they can connect to the internet by IP address but cannot access any websites by domain name. Which command-line tool should a technician use first to isolate the issue?
medium- A.ping
- ✓ B.nslookup
- C.tracert
- D.netstat
Why B: The user can reach the internet by IP address but not by domain name, which indicates a DNS resolution failure. The `nslookup` command queries DNS servers directly to test name resolution, making it the correct first step to isolate whether the issue is with the DNS server, the client's DNS configuration, or a network path to the DNS server.
Last reviewed: Jun 11, 2026
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.