Courseiva
Question 467 of 464
Network TroubleshootingeasyMultiple ChoiceObjective-mapped

N10-009 Network Troubleshooting Practice Question

A user reports that they cannot access the internet. The technician tests connectivity: pinging the default gateway succeeds, but pinging a public IP address like 8.8.8.8 fails. Firewall logs show outbound ICMP to 8.8.8.8 is permitted. What is the most likely cause?

⚠ Common exam trap

CompTIA often tests the distinction between local connectivity (gateway reachable) and internet connectivity (default route missing), trapping candidates who assume DNS or firewall issues when the symptom is a successful ping to the gateway but failure to external IPs.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Missing default route on the router

The user can ping the default gateway (local connectivity) but cannot ping a public IP like 8.8.8.8. This indicates that the workstation has a valid route to its local subnet, but the router lacks a default route (0.0.0.0/0) to forward traffic to the internet. Firewall logs confirm outbound ICMP is permitted, so the issue is at Layer 3 routing, not filtering.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Incorrect DNS configuration on the workstation

    Why it's wrong here

    DNS (Domain Name System) is responsible for translating human-readable domain names (e.g., google.com) into numerical IP addresses. If a workstation's DNS configuration is incorrect, it would fail to resolve hostnames, preventing access to websites by name. However, when a user attempts to ping an external resource using its direct IP address, DNS resolution is entirely bypassed, meaning an incorrect DNS setting would not hinder the ability to reach an external IP.

    When this WOULD be correct

    A user can access the internet by IP but not by domain name. Pinging 8.8.8.8 succeeds, but pinging google.com fails. The technician checks DNS settings and finds the workstation is configured with an invalid DNS server.

  • Missing default route on the router

    Why this is correct

    When a router receives a packet for a destination not on its directly connected networks or within its specific routing table entries, it consults its default route. If this route (often 0.0.0.0/0) is absent, the router has no "gateway of last resort" and will drop all traffic intended for external networks, such as the internet. This directly prevents any device behind that router from accessing resources outside the local network, including public IP addresses.

  • Duplicate IP address on the local network

    Why it's wrong here

    A duplicate IP address on a local network occurs when two devices are configured with the same IP, leading to conflicts and intermittent connectivity problems for both. While this can disrupt network communication, it typically manifests as sporadic disconnections or difficulty reaching local resources, and often a device can still ping its default gateway. The primary symptom of being unable to reach any external IP address consistently points away from a local IP conflict and towards a broader routing failure.

    When this WOULD be correct

    This would be correct in a scenario where a user reports intermittent connectivity or 'address conflict' errors, and the technician finds that pinging the default gateway sometimes fails or returns inconsistent results, with ARP table showing multiple MAC addresses for the same IP.

  • Proxy server configuration is required

    Why it's wrong here

    Proxy servers operate at the application layer (Layer 7) of the OSI model, primarily handling specific protocols like HTTP, HTTPS, and FTP. While they can control web access, they do not process lower-layer protocols such as ICMP, which is used by the ping utility. Therefore, the absence or misconfiguration of a proxy server would not prevent a device from successfully pinging an external IP address directly, as ping traffic bypasses proxy mechanisms.

    When this WOULD be correct

    A proxy server configuration would be the correct answer if the question stated that the user can access internal resources but not external websites, and pinging public IPs fails while pinging internal IPs succeeds, with the firewall blocking direct outbound traffic and requiring proxy settings for internet access.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Missing default route on the routerCorrect answer

Why this is correct

When a router receives a packet for a destination not on its directly connected networks or within its specific routing table entries, it consults its default route. If this route (often 0.0.0.0/0) is absent, the router has no "gateway of last resort" and will drop all traffic intended for external networks, such as the internet. This directly prevents any device behind that router from accessing resources outside the local network, including public IP addresses.

Incorrect DNS configuration on the workstationWrong answer — click to see why

Why this is wrong here

Incorrect DNS configuration would prevent name resolution but not direct IP pings; the user can ping the gateway (IP) but not a public IP, so the issue is routing, not DNS.

★ When this WOULD be the correct answer

A user can access the internet by IP but not by domain name. Pinging 8.8.8.8 succeeds, but pinging google.com fails. The technician checks DNS settings and finds the workstation is configured with an invalid DNS server.

Why candidates choose this

Candidates often associate internet access problems with DNS, especially when the symptom is 'cannot access the internet' without distinguishing between name resolution and IP connectivity.

Duplicate IP address on the local networkWrong answer — click to see why

Why this is wrong here

A duplicate IP address would cause intermittent connectivity or address conflict errors, but here pinging the default gateway succeeds, indicating the workstation has valid IP communication locally. The failure is specifically to external IPs, which points to a routing issue, not a duplicate address.

★ When this WOULD be the correct answer

This would be correct in a scenario where a user reports intermittent connectivity or 'address conflict' errors, and the technician finds that pinging the default gateway sometimes fails or returns inconsistent results, with ARP table showing multiple MAC addresses for the same IP.

Why candidates choose this

Candidates may confuse duplicate IP issues with general connectivity problems, especially if they've experienced cases where duplicate IPs cause network disruptions, but they overlook that the symptom here (successful gateway ping) rules out a duplicate address conflict.

Proxy server configuration is requiredWrong answer — click to see why

Why this is wrong here

The issue is that pinging a public IP (8.8.8.8) fails while the default gateway is reachable, indicating a routing problem beyond the local network. Proxy server configuration affects application-layer traffic, not ICMP to a public IP, and the firewall permits outbound ICMP, so a proxy is not the cause.

★ When this WOULD be the correct answer

A proxy server configuration would be the correct answer if the question stated that the user can access internal resources but not external websites, and pinging public IPs fails while pinging internal IPs succeeds, with the firewall blocking direct outbound traffic and requiring proxy settings for internet access.

Why candidates choose this

Candidates may confuse internet access issues with proxy requirements, especially if they have encountered environments where a proxy is mandatory for outbound traffic. They might incorrectly assume that a missing proxy configuration explains the inability to reach external IPs, even when ICMP is permitted.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 30, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.