N10-009 Network Troubleshooting Practice Question
A user reports that they can access the company's intranet but not the internet. The technician checks the IP configuration and finds that the default gateway is set to 192.168.1.1, and the user can ping that IP. Which of the following is the most likely cause?
⚠ Common exam trap
Many candidates assume internet access failure is always a DNS or gateway issue, but the ability to ping the gateway and access local resources isolates the problem to the router's NAT translation, not the workstation's IP configuration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The router's NAT configuration is faulty.
Since the user can ping the default gateway (192.168.1.1) and access the intranet, Layer 3 connectivity to the local router is functional. The inability to reach the internet, despite having a valid gateway, points to a failure in the router's NAT (Network Address Translation) configuration. NAT is required to translate private RFC 1918 addresses (like 192.168.1.x) to a public IP for internet access; without it, packets are routed to the gateway but cannot be forwarded beyond the local network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The DNS server address is incorrect.
Why it's wrong here
An incorrect DNS server address would primarily prevent name resolution, meaning users couldn't access websites by their domain names. However, they would still be able to reach internet resources by their IP addresses if the underlying network connectivity and routing were functional. Since the user cannot access the internet at all, even potentially by IP, and can access the intranet, DNS is unlikely to be the sole root cause of complete internet blockage. Furthermore, intranet access implies internal name resolution is working, suggesting the DNS configuration might be partially correct or not the primary issue for all internet access.
When this WOULD be correct
A user can access the internet by IP address but not by domain name. The technician verifies that the default gateway is correct and reachable. In this scenario, an incorrect DNS server address would be the most likely cause.
- ✓
The router's NAT configuration is faulty.
Why this is correct
This is the correct answer. The user can access the intranet and ping the default gateway, indicating local network connectivity and a valid gateway IP. However, the inability to reach the internet strongly suggests a problem with Network Address Translation (NAT). NAT is essential for translating private internal IP addresses into public routable IP addresses, allowing multiple internal devices to share a single public IP for internet access. A faulty NAT configuration would prevent this translation, blocking outbound internet traffic while internal network access remains functional.
- ✗
The DHCP server is not providing a default gateway.
Why it's wrong here
The problem statement implies the user has a default gateway configured and can successfully ping it. This indicates that the workstation has a valid path to its local router. DHCP's role is to automatically assign IP addresses, subnet masks, and default gateways. If the user already has a functional default gateway, whether manually configured or obtained via DHCP, then the DHCP server's operation (or lack thereof) is not the cause of the inability to reach the internet beyond that gateway.
When this WOULD be correct
A user cannot access any network resources, including the intranet. The technician finds the workstation has no default gateway configured. In this scenario, the DHCP server failing to provide a default gateway would be the likely cause.
- ✗
The user's workstation has a static IP address.
Why it's wrong here
A static IP address configuration on a workstation is not inherently problematic and does not prevent internet access. Many servers and critical network devices are intentionally configured with static IPs. As long as the static IP address, subnet mask, and default gateway are correctly configured and valid for the network segment, the workstation should be able to communicate both internally and externally. The issue lies beyond the workstation's IP assignment method.
When this WOULD be correct
This option would be correct in a scenario where a user cannot access any network resources (neither intranet nor internet) and the technician finds an IP address that does not match the subnet of the default gateway, indicating a misconfigured static IP.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓The router's NAT configuration is faulty.Correct answer▾
Why this is correct
This is the correct answer. The user can access the intranet and ping the default gateway, indicating local network connectivity and a valid gateway IP. However, the inability to reach the internet strongly suggests a problem with Network Address Translation (NAT). NAT is essential for translating private internal IP addresses into public routable IP addresses, allowing multiple internal devices to share a single public IP for internet access. A faulty NAT configuration would prevent this translation, blocking outbound internet traffic while internal network access remains functional.
✗The DNS server address is incorrect.Wrong answer — click to see why▾
Why this is wrong here
The user can access the intranet and ping the default gateway, indicating IP connectivity is fine. DNS is not required for intranet access or pinging, and incorrect DNS would prevent name resolution but not all internet access (IP-based access would still work).
★ When this WOULD be the correct answer
A user can access the internet by IP address but not by domain name. The technician verifies that the default gateway is correct and reachable. In this scenario, an incorrect DNS server address would be the most likely cause.
Why candidates choose this
Candidates often associate internet access issues with DNS, overlooking that the symptom here is complete internet failure (not just name resolution failure) and that intranet access works, which DNS does not affect.
✗The DHCP server is not providing a default gateway.Wrong answer — click to see why▾
Why this is wrong here
The user can ping the default gateway (192.168.1.1), which indicates the gateway is reachable. If DHCP were not providing a default gateway, the user would have no gateway or an incorrect one, and pinging 192.168.1.1 would fail.
★ When this WOULD be the correct answer
A user cannot access any network resources, including the intranet. The technician finds the workstation has no default gateway configured. In this scenario, the DHCP server failing to provide a default gateway would be the likely cause.
Why candidates choose this
Candidates may confuse symptoms of DNS failure (can access intranet but not internet) with DHCP issues, assuming that if DHCP is broken, the gateway might be missing or wrong, but here the gateway is correctly set and reachable.
✗The user's workstation has a static IP address.Wrong answer — click to see why▾
Why this is wrong here
A static IP address would not cause the described symptom because the user can access the intranet and ping the default gateway, indicating proper IP configuration and connectivity to the local network. The issue is with internet access, which points to a routing or NAT problem, not the IP assignment method.
★ When this WOULD be the correct answer
This option would be correct in a scenario where a user cannot access any network resources (neither intranet nor internet) and the technician finds an IP address that does not match the subnet of the default gateway, indicating a misconfigured static IP.
Why candidates choose this
Candidates may think that a static IP could conflict with DHCP or be misconfigured, but here the user can ping the gateway, so the IP is valid. The temptation comes from assuming static IPs often cause connectivity issues without verifying actual symptoms.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Troubleshoot: Cable and Physical Layer
Key term
NAT
NAT (Network Address Translation) is a method that allows multiple devices on a private network to share a single public IP address when accessing the internet.
Key term
Network Address Translation
Network Address Translation (NAT) is a method that allows multiple devices on a local network to share a single public IP address to access the internet.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.