Courseiva
Network TroubleshootingmediumMultiple ChoiceObjective-mapped

N10-009 Network Troubleshooting Practice Question

A user reports that they can access the company's intranet but not the internet. The technician checks the IP configuration and finds that the default gateway is set to 192.168.1.1, and the user can ping that IP. Which of the following is the most likely cause?

⚠ Common exam trap

Many candidates assume internet access failure is always a DNS or gateway issue, but the ability to ping the gateway and access local resources isolates the problem to the router's NAT translation, not the workstation's IP configuration.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The router's NAT configuration is faulty.

Since the user can ping the default gateway (192.168.1.1) and access the intranet, Layer 3 connectivity to the local router is functional. The inability to reach the internet, despite having a valid gateway, points to a failure in the router's NAT (Network Address Translation) configuration. NAT is required to translate private RFC 1918 addresses (like 192.168.1.x) to a public IP for internet access; without it, packets are routed to the gateway but cannot be forwarded beyond the local network.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The DNS server address is incorrect.

    Why it's wrong here

    An incorrect DNS server address would primarily prevent name resolution, meaning users couldn't access websites by their domain names. However, they would still be able to reach internet resources by their IP addresses if the underlying network connectivity and routing were functional. Since the user cannot access the internet at all, even potentially by IP, and can access the intranet, DNS is unlikely to be the sole root cause of complete internet blockage. Furthermore, intranet access implies internal name resolution is working, suggesting the DNS configuration might be partially correct or not the primary issue for all internet access.

    When this WOULD be correct

    A user can access the internet by IP address but not by domain name. The technician verifies that the default gateway is correct and reachable. In this scenario, an incorrect DNS server address would be the most likely cause.

  • The router's NAT configuration is faulty.

    Why this is correct

    This is the correct answer. The user can access the intranet and ping the default gateway, indicating local network connectivity and a valid gateway IP. However, the inability to reach the internet strongly suggests a problem with Network Address Translation (NAT). NAT is essential for translating private internal IP addresses into public routable IP addresses, allowing multiple internal devices to share a single public IP for internet access. A faulty NAT configuration would prevent this translation, blocking outbound internet traffic while internal network access remains functional.

  • The DHCP server is not providing a default gateway.

    Why it's wrong here

    The problem statement implies the user has a default gateway configured and can successfully ping it. This indicates that the workstation has a valid path to its local router. DHCP's role is to automatically assign IP addresses, subnet masks, and default gateways. If the user already has a functional default gateway, whether manually configured or obtained via DHCP, then the DHCP server's operation (or lack thereof) is not the cause of the inability to reach the internet beyond that gateway.

    When this WOULD be correct

    A user cannot access any network resources, including the intranet. The technician finds the workstation has no default gateway configured. In this scenario, the DHCP server failing to provide a default gateway would be the likely cause.

  • The user's workstation has a static IP address.

    Why it's wrong here

    A static IP address configuration on a workstation is not inherently problematic and does not prevent internet access. Many servers and critical network devices are intentionally configured with static IPs. As long as the static IP address, subnet mask, and default gateway are correctly configured and valid for the network segment, the workstation should be able to communicate both internally and externally. The issue lies beyond the workstation's IP assignment method.

    When this WOULD be correct

    This option would be correct in a scenario where a user cannot access any network resources (neither intranet nor internet) and the technician finds an IP address that does not match the subnet of the default gateway, indicating a misconfigured static IP.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

The router's NAT configuration is faulty.Correct answer

Why this is correct

This is the correct answer. The user can access the intranet and ping the default gateway, indicating local network connectivity and a valid gateway IP. However, the inability to reach the internet strongly suggests a problem with Network Address Translation (NAT). NAT is essential for translating private internal IP addresses into public routable IP addresses, allowing multiple internal devices to share a single public IP for internet access. A faulty NAT configuration would prevent this translation, blocking outbound internet traffic while internal network access remains functional.

The DNS server address is incorrect.Wrong answer — click to see why

Why this is wrong here

The user can access the intranet and ping the default gateway, indicating IP connectivity is fine. DNS is not required for intranet access or pinging, and incorrect DNS would prevent name resolution but not all internet access (IP-based access would still work).

★ When this WOULD be the correct answer

A user can access the internet by IP address but not by domain name. The technician verifies that the default gateway is correct and reachable. In this scenario, an incorrect DNS server address would be the most likely cause.

Why candidates choose this

Candidates often associate internet access issues with DNS, overlooking that the symptom here is complete internet failure (not just name resolution failure) and that intranet access works, which DNS does not affect.

The DHCP server is not providing a default gateway.Wrong answer — click to see why

Why this is wrong here

The user can ping the default gateway (192.168.1.1), which indicates the gateway is reachable. If DHCP were not providing a default gateway, the user would have no gateway or an incorrect one, and pinging 192.168.1.1 would fail.

★ When this WOULD be the correct answer

A user cannot access any network resources, including the intranet. The technician finds the workstation has no default gateway configured. In this scenario, the DHCP server failing to provide a default gateway would be the likely cause.

Why candidates choose this

Candidates may confuse symptoms of DNS failure (can access intranet but not internet) with DHCP issues, assuming that if DHCP is broken, the gateway might be missing or wrong, but here the gateway is correctly set and reachable.

The user's workstation has a static IP address.Wrong answer — click to see why

Why this is wrong here

A static IP address would not cause the described symptom because the user can access the intranet and ping the default gateway, indicating proper IP configuration and connectivity to the local network. The issue is with internet access, which points to a routing or NAT problem, not the IP assignment method.

★ When this WOULD be the correct answer

This option would be correct in a scenario where a user cannot access any network resources (neither intranet nor internet) and the technician finds an IP address that does not match the subnet of the default gateway, indicating a misconfigured static IP.

Why candidates choose this

Candidates may think that a static IP could conflict with DHCP or be misconfigured, but here the user can ping the gateway, so the IP is valid. The temptation comes from assuming static IPs often cause connectivity issues without verifying actual symptoms.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.