Multiple-choice question
Standard question format with several options, one or more correct.
Getting Started: How the Exam Works
Free knowledge base
CompTIA Network+ (N10-009) — key terms, tricks & tips
Everything from the course in one searchable place: 295 entries. Use it to review before a practice test or look up a word you forgot.
295 results
Performance-Based Question (PBQ)
Interactive, hands-on simulation requiring task completion in a virtual environment.
Getting Started: How the Exam Works
Exam domain
A major topic area covered by the certification exam.
Getting Started: How the Exam Works
Domain weighting
The percentage of exam questions allocated to a specific domain.
Getting Started: How the Exam Works
Scaled score
A statistically adjusted score that accounts for question difficulty.
Getting Started: How the Exam Works
Passing score
The minimum scaled score required to achieve certification (720 for N10-009).
Getting Started: How the Exam Works
CompTIA
Computing Technology Industry Association, creator of Network+.
Getting Started: How the Exam Works
N10-009 Exam Format, Domains & Scoring
To remember the Network+ domains, think: 'Fun Implementations Operate Securely, Troubleshooting problems.' (Fundamentals, Implementations, Operations, Security, Troubleshooting)
Getting Started: How the Exam Works
N10-009 Exam Format, Domains & Scoring
The N10-009 exam has a maximum of 90 questions and a 90-minute time limit. The passing score is 720 on a scale of 100-900. Remember these precise numbers for the exam.
Getting Started: How the Exam Works
N10-009 Exam Format, Domains & Scoring
Not reading multiple-choice questions carefully to see if they require one or multiple answers.
Getting Started: How the Exam Works
N10-009 Exam Format, Domains & Scoring
Spending too much time on a single PBQ and running out of time for other questions.
Getting Started: How the Exam Works
N10-009 Exam Format, Domains & Scoring
Ignoring the domain weightings and spending equal time on all topics, rather than prioritizing.
Getting Started: How the Exam Works
Exam Objectives
Official CompTIA document detailing all topics covered on the exam.
Getting Started: How the Exam Works
Active Learning
Engaging with material through note-taking, teaching, or practice.
Getting Started: How the Exam Works
Network Simulator
Software that emulates network devices for practice.
Getting Started: How the Exam Works
Performance-Based Questions (PBQs)
Exam questions requiring hands-on configuration or troubleshooting.
Getting Started: How the Exam Works
Feynman Technique
Learning by explaining a concept in simple terms to others.
Getting Started: How the Exam Works
Home Lab
Personal setup of physical networking hardware for practice.
Getting Started: How the Exam Works
How to Study, Practice, and Pass Network+
To PASS Network+: P-ractice, A-ctive study, S-imulate, S-ucceed!
Getting Started: How the Exam Works
How to Study, Practice, and Pass Network+
The exam often tests your ability to apply knowledge, not just recall facts. Look for keywords like 'troubleshoot,' 'configure,' 'implement,' or 'recommend' in questions, indicating you need to think like a network professional.
Getting Started: How the Exam Works
How to Study, Practice, and Pass Network+
Relying solely on memorization without understanding the underlying concepts.
Getting Started: How the Exam Works
How to Study, Practice, and Pass Network+
Skipping hands-on labs and practice, leading to difficulty with performance-based questions.
Getting Started: How the Exam Works
How to Study, Practice, and Pass Network+
Not reviewing incorrect answers on practice tests to understand the 'why' behind the correct answer.
Getting Started: How the Exam Works
OSI Model
A 7-layer conceptual framework for network communication.
Networking Concepts
Encapsulation
Adding headers to data as it moves down the OSI layers.
Networking Concepts
Decapsulation
Removing headers from data as it moves up the OSI layers.
Networking Concepts
Switch
Layer 2 device that forwards frames based on MAC addresses.
Networking Concepts
Router
Layer 3 device that forwards packets based on IP addresses.
Networking Concepts
Firewall
Network security system controlling traffic based on rules.
Networking Concepts
Load Balancer
Distributes network traffic across multiple servers for performance.
Networking Concepts
IDS/IPS
Systems detecting/preventing malicious network activity.
Networking Concepts
OSI Model, Devices, and Network Appliances
Please Do Not Throw Sausage Pizza Away: Physical, Data Link, Network, Transport, Session, Presentation, Application.
Networking Concepts
OSI Model, Devices, and Network Appliances
Memorize the order of the OSI layers and at least one key function for each. The exam often asks which layer a specific device or protocol operates at. Keywords like 'MAC address' point to Layer 2, 'IP address' to Layer 3, and 'port numbers' to Layer 4.
Networking Concepts
OSI Model, Devices, and Network Appliances
Confusing the OSI model with the TCP/IP model; they are related but distinct conceptual frameworks.
Networking Concepts
OSI Model, Devices, and Network Appliances
Incorrectly assigning a device to an OSI layer (e.g., calling a router a Layer 2 device).
Networking Concepts
OSI Model, Devices, and Network Appliances
Believing the OSI model is a physical implementation rather than a conceptual guide.
Networking Concepts
Cloud Computing
On-demand delivery of computing services over the Internet.
Networking Concepts
IaaS
Infrastructure as a Service; virtualized computing resources.
Networking Concepts
PaaS
Platform as a Service; platform for developing and running applications.
Networking Concepts
SaaS
Software as a Service; software applications delivered over the Internet.
Networking Concepts
SDN
Software-Defined Networking; separates control and data planes.
Networking Concepts
SD-WAN
Software-Defined Wide Area Network; applies SDN to WAN.
Networking Concepts
Zero Trust
Security model: never trust, always verify.
Networking Concepts
Hybrid Cloud
Combines public and private cloud environments.
Networking Concepts
Cloud Concepts, SDN, SD-WAN, and Zero Trust
For Cloud Service Models: 'I P S' - Infrastructure, Platform, Software. Remember what you 'own' less and less as you go up!
Networking Concepts
Cloud Concepts, SDN, SD-WAN, and Zero Trust
The exam often asks to differentiate between IaaS, PaaS, and SaaS. Memorize what the customer manages versus the provider for each. Also, know the core principles of Zero Trust and the benefits of SDN/SD-WAN.
Networking Concepts
Cloud Concepts, SDN, SD-WAN, and Zero Trust
Confusing IaaS, PaaS, and SaaS responsibilities. Remember IaaS gives you the most control, SaaS the least.
Networking Concepts
Cloud Concepts, SDN, SD-WAN, and Zero Trust
Thinking Zero Trust means no access at all. It means no *unverified* access.
Networking Concepts
Cloud Concepts, SDN, SD-WAN, and Zero Trust
Believing SDN is a physical device. It's an architectural approach to network management.
Networking Concepts
Port
A logical endpoint for network communication on a device, identified by a number.
Networking Concepts
Protocol
A set of rules governing data formatting, transmission, and reception in a network.
Networking Concepts
TCP
Transmission Control Protocol; a reliable, connection-oriented transport layer protocol.
Networking Concepts
UDP
User Datagram Protocol; a fast, connectionless transport layer protocol.
Networking Concepts
Unicast
One-to-one network communication from a single source to a single destination.
Networking Concepts
Multicast
One-to-many network communication to a specific group of recipients.
Networking Concepts
Fiber Optic Cable
Transmission medium using light pulses for high-speed, long-distance data.
Networking Concepts
Ports, Protocols, Traffic Types, and Transmission Media
To remember common TCP/UDP ports: 'HTTP Hears 80, HTTPS Hears 443, FTP For 20/21, SSH Secures 22, SMTP Sends 25, DNS Does 53, POP3 Picks 110, IMAP Is 143.'
Networking Concepts
Ports, Protocols, Traffic Types, and Transmission Media
The N10-009 exam expects you to know the default port numbers for common protocols like HTTP (80), HTTPS (443), FTP (20, 21), SSH (22), Telnet (23), SMTP (25), DNS (53), DHCP (67, 68), TFTP (69), POP3 (110), NTP (123), NetBIOS (137-139), IMAP (143), SNMP (161, 162), LDAP (389), RDP (3389), and SMB/CIFS (445). Focus on memorizing these specific values.
Networking Concepts
Ports, Protocols, Traffic Types, and Transmission Media
Confusing TCP and UDP: Remember TCP is like a registered letter (guaranteed delivery), while UDP is like a postcard (faster, but no guarantee).
Networking Concepts
Ports, Protocols, Traffic Types, and Transmission Media
Forgetting that port numbers are associated with specific services and protocols, not just random numbers.
Networking Concepts
Ports, Protocols, Traffic Types, and Transmission Media
Underestimating the impact of transmission media choice on network performance and troubleshooting.
Networking Concepts
Physical Topology
Actual layout of network cables and devices.
Networking Concepts
Logical Topology
How data flows through the network, independent of physical layout.
Networking Concepts
Subnetting
Dividing a larger network into smaller, more manageable subnetworks.
Networking Concepts
Subnet Mask
32-bit number distinguishing network and host portions of an IP address.
Networking Concepts
CIDR
Classless Inter-Domain Routing; notation indicating network bits (e.g., /24).
Networking Concepts
Private IP Address
Non-routable IP addresses reserved for internal networks (RFC 1918).
Networking Concepts
Public IP Address
Globally unique, internet-routable IP addresses.
Networking Concepts
Broadcast Address
IP address used to send data to all hosts on a subnet.
Networking Concepts
Network Topologies and IPv4 Subnetting/CIDR
To remember the private IP ranges: 'Ten Cars Sixteen Miles Per Hour, One-Ninety-Two to One-Sixty-Eight'. (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
Networking Concepts
Network Topologies and IPv4 Subnetting/CIDR
The exam expects you to identify common topologies (Star, Mesh, Bus, Ring) and their characteristics. For IPv4 subnetting, be prepared to calculate network addresses, broadcast addresses, and the number of usable hosts given an IP address and a CIDR prefix or subnet mask. Memorize the private IP address ranges.
Networking Concepts
Network Topologies and IPv4 Subnetting/CIDR
Confusing physical and logical topologies; they describe different aspects of a network.
Networking Concepts
Network Topologies and IPv4 Subnetting/CIDR
Forgetting to subtract 2 from 2^h when calculating usable hosts (for network and broadcast addresses).
Networking Concepts
Network Topologies and IPv4 Subnetting/CIDR
Mixing up public and private IP address ranges and their routability on the internet.
Networking Concepts
IPv6
Internet Protocol version 6, using 128-bit addresses.
Networking Concepts
Global Unicast Address (GUA)
Globally unique and routable IPv6 address.
Networking Concepts
Link-Local Address (LLA)
IPv6 address for communication on a single network segment.
Networking Concepts
SLAAC
Stateless Address Auto-configuration for IPv6 addresses.
Networking Concepts
Dual Stack
Running both IPv4 and IPv6 protocols simultaneously.
Networking Concepts
Tunneling
Encapsulating one protocol's packets within another's.
Networking Concepts
NAT64
Translates IPv6 packets to IPv4 and vice-versa for communication.
Networking Concepts
EUI-64
Method to derive an IPv6 interface ID from a MAC address.
Networking Concepts
IPv6 Addressing and Coexistence with IPv4
For IPv6 address types, remember 'G.L.U.M.A.': Global, Link-Local, Unique Local, Multicast, Anycast.
Networking Concepts
IPv6 Addressing and Coexistence with IPv4
Memorize the common starting prefixes for IPv6 address types: fe80::/10 for Link-Local, fc00::/7 for Unique Local, and ff00::/8 for Multicast. The exam often tests your ability to identify these.
Networking Concepts
IPv6 Addressing and Coexistence with IPv4
Confusing Link-Local addresses (fe80::) with routable Global Unicast addresses.
Networking Concepts
IPv6 Addressing and Coexistence with IPv4
Believing NAT is still required or desirable in a pure IPv6 environment.
Networking Concepts
IPv6 Addressing and Coexistence with IPv4
Forgetting that the double colon (::) can only be used once in an IPv6 address.
Networking Concepts
Static Routing
Manually configured routes on a router.
Network Implementation
Dynamic Routing
Automatic path discovery using protocols.
Network Implementation
Autonomous System (AS)
A collection of IP networks under one administration.
Network Implementation
OSPF
Link-state IGP, uses areas, Dijkstra's algorithm.
Network Implementation
BGP
Path-vector EGP, routes between ASes on the internet.
Network Implementation
EIGRP
Cisco hybrid protocol, fast convergence with DUAL.
Network Implementation
Interior Gateway Protocol (IGP)
Routes within a single Autonomous System.
Network Implementation
Exterior Gateway Protocol (EGP)
Routes between different Autonomous Systems.
Network Implementation
Routing Concepts: Static, OSPF, BGP, and EIGRP
OSPF: 'Open Shortest Path First' – like finding the quickest way on a map. BGP: 'Big Global Paths' – for the internet's huge routes. EIGRP: 'Enhanced Interior Good Reliable Protocol' – for Cisco networks.
Network Implementation
Routing Concepts: Static, OSPF, BGP, and EIGRP
The exam often tests the distinction between IGPs (OSPF, EIGRP) and EGPs (BGP). Remember that OSPF and EIGRP operate *within* an AS, while BGP operates *between* ASes.
Network Implementation
Routing Concepts: Static, OSPF, BGP, and EIGRP
Confusing the scope of IGPs and EGPs (e.g., trying to use OSPF to route between ISPs).
Network Implementation
Routing Concepts: Static, OSPF, BGP, and EIGRP
Underestimating the administrative overhead of static routing in large, dynamic networks.
Network Implementation
Routing Concepts: Static, OSPF, BGP, and EIGRP
Not understanding that BGP is policy-driven, not just metric-driven, for inter-AS routing.
Network Implementation
VLAN
Logical grouping of network devices, segmenting broadcast domains.
Network Implementation
Trunking
Configuring a switch port to carry traffic for multiple VLANs.
Network Implementation
802.1Q
IEEE standard for VLAN tagging, adding a VLAN ID to frames.
Network Implementation
Access Port
Switch port configured for a single VLAN, connects end devices.
Network Implementation
Spanning Tree Protocol (STP)
Protocol preventing network loops by blocking redundant paths.
Network Implementation
Root Bridge
The central switch elected by STP in a spanning tree topology.
Network Implementation
Broadcast Domain
Network segment where all devices receive each other's broadcasts.
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
VLANs 'Vary' your LANs. Trunking 'Transports' all VLANs. STP 'Stops' the 'Spirals' (loops).
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
The exam often tests the purpose of VLANs (segmentation, security, broadcast control) and the function of 802.1Q for trunking. For STP, know its primary goal (preventing loops) and the concept of a root bridge. Be able to distinguish between access and trunk ports.
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
Forgetting to configure trunk ports on both ends of an inter-switch link, leading to VLAN communication failures.
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
Not enabling STP or disabling it on switches, which can lead to catastrophic network loops and outages.
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
Confusing the purpose of an access port (single VLAN, end device) with a trunk port (multiple VLANs, inter-switch/router).
Network Implementation
Switching Concepts: VLANs, Trunking, and STP
Assuming VLANs provide complete security isolation without additional firewall rules or Layer 3 filtering.
Network Implementation
Link Aggregation (LAG)
Combining multiple physical links into one logical link for bandwidth and redundancy.
Network Implementation
LACP (802.3ad/802.1AX)
Protocol for dynamic negotiation and management of aggregated links.
Network Implementation
802.11ax (Wi-Fi 6)
Latest Wi-Fi standard, offering higher speeds and efficiency in dense environments.
Network Implementation
2.4 GHz band
Wireless frequency with longer range but more interference and fewer channels.
Network Implementation
5 GHz band
Wireless frequency with higher speeds, less interference, but shorter range.
Network Implementation
MIMO
Multiple-Input, Multiple-Output; uses multiple antennas for improved wireless performance.
Network Implementation
Channel Planning
Strategically selecting wireless channels to minimize interference and optimize performance.
Network Implementation
Link Aggregation and Wireless Networking Standards
To remember Wi-Fi standards: 'A Big Gorilla Naps ACtually AXing.' (a, b, g, n, ac, ax) – each letter reminds you of a standard in rough chronological order!
Network Implementation
Link Aggregation and Wireless Networking Standards
For the Network+ exam, memorize the key characteristics (frequency, max speed) of 802.11a/b/g/n/ac/ax. Pay close attention to which standards operate on 2.4 GHz, 5 GHz, or both, and the benefits of each frequency band. Understand that LACP is the dynamic method for link aggregation.
Network Implementation
Link Aggregation and Wireless Networking Standards
Forgetting that both ends of a link aggregation must be configured for it to work.
Network Implementation
Link Aggregation and Wireless Networking Standards
Confusing the 2.4 GHz and 5 GHz bands' characteristics, especially regarding range vs. speed and interference.
Network Implementation
Link Aggregation and Wireless Networking Standards
Assuming that simply upgrading an AP will fix all wireless issues without proper channel planning or site survey.
Network Implementation
WEP
Wired Equivalent Privacy, an outdated and insecure wireless security protocol.
Network Implementation
WPA2
Wi-Fi Protected Access 2, current industry standard using AES encryption.
Network Implementation
WPA3
Wi-Fi Protected Access 3, latest standard with enhanced security features like SAE.
Network Implementation
SSID
Service Set Identifier, the name of a wireless network.
Network Implementation
Rogue AP
An unauthorized access point connected to a network, posing a security risk.
Network Implementation
802.1X
An IEEE standard for port-based network access control, often used with RADIUS.
Network Implementation
Site Survey
Process of planning and designing a wireless network to provide optimal coverage.
Network Implementation
Captive Portal
A web page that requires users to agree to terms or authenticate before network access.
Network Implementation
Wireless Security and Physical Installation Practices
WPA is 'Way Protected, Always' – remember WPA3 is the best, then WPA2, then WPA. WEP is 'Weak, Easily Penetrated'.
Network Implementation
Wireless Security and Physical Installation Practices
The exam often tests the progression of wireless security protocols. Remember WEP is bad, WPA is better but still vulnerable, WPA2 is the current strong standard, and WPA3 is the newest and most secure. Keywords like 'AES', 'TKIP', 'SAE', and '802.1X' are critical to associate with the correct protocol.
Network Implementation
Wireless Security and Physical Installation Practices
Relying on SSID hiding as a primary security measure; it provides minimal actual protection.
Network Implementation
Wireless Security and Physical Installation Practices
Using outdated security protocols like WEP or WPA (TKIP) for new deployments.
Network Implementation
Wireless Security and Physical Installation Practices
Ignoring physical security of APs, making them vulnerable to tampering or theft.
Network Implementation
Network Documentation
Records of network design, configuration, and operation.
Network Operations
Network Lifecycle
Structured process of managing a network from design to retirement.
Network Operations
Logical Diagram
Illustrates data flow, IP addressing, and logical network segments.
Network Operations
Physical Diagram
Shows actual device placement, cabling, and rack layouts.
Network Operations
IPAM
IP Address Management; tracks assigned IP addresses and subnets.
Network Operations
Change Management Log
Record of all modifications made to the network infrastructure.
Network Operations
Baseline Configuration
A snapshot of a network's normal operating state for comparison.
Network Operations
Documentation and Network Lifecycle Management
To remember the network lifecycle phases, think: 'P.I.O.O.D.' - Planning, Implementation, Operation, Optimization, Decommissioning. Like a 'P.I.' (Private Investigator) who's 'O.O.D.' (Out Of Duty) after a case!
Network Operations
Documentation and Network Lifecycle Management
The exam often tests your understanding of *why* documentation is important and *what types* of documents are used in different scenarios (e.g., troubleshooting vs. planning). Be ready to identify the purpose of logical vs. physical diagrams.
Network Operations
Documentation and Network Lifecycle Management
Neglecting to update documentation after network changes.
Network Operations
Documentation and Network Lifecycle Management
Relying solely on tribal knowledge instead of formal documentation.
Network Operations
Documentation and Network Lifecycle Management
Failing to back up configuration files or IPAM databases.
Network Operations
SNMP
Protocol for managing and monitoring network devices.
Network Operations
MIB
Management Information Base; database of device variables.
Network Operations
OID
Object Identifier; unique address for MIB variables.
Network Operations
SNMPv3
Most secure SNMP version with authentication and encryption.
Network Operations
Syslog
Standard for sending and receiving centralized log messages.
Network Operations
NetFlow
Protocol for collecting and analyzing IP traffic flow data.
Network Operations
Flow
Sequence of packets with common characteristics.
Network Operations
Community String
Plain-text password for SNMPv1/v2c authentication.
Network Operations
Monitoring with SNMP, Syslog, and NetFlow
SNMP is like a 'Smart Network Monitor Protocol' for device health. Syslog is 'System Log' for events. NetFlow 'Nets' all the traffic details.
Network Operations
Monitoring with SNMP, Syslog, and NetFlow
Memorize the default ports: SNMP (UDP 161/162), Syslog (UDP 514, TCP 6514 for secure), NetFlow (UDP 2055/4739/9995). Understand that SNMPv3 is the secure version.
Network Operations
Monitoring with SNMP, Syslog, and NetFlow
Confusing SNMP traps (alerts from agent to manager) with SNMP queries (manager asking agent for data).
Network Operations
Monitoring with SNMP, Syslog, and NetFlow
Assuming Syslog provides built-in security; it requires TLS for encryption and authentication.
Network Operations
Monitoring with SNMP, Syslog, and NetFlow
Thinking NetFlow provides packet-level detail; it's flow-level summaries, not full packet captures.
Network Operations
Recovery Point Objective (RPO)
Maximum acceptable data loss in time.
Network Operations
Recovery Time Objective (RTO)
Maximum acceptable downtime after a disaster.
Network Operations
Hot Site
Fully equipped, operational DR site with real-time replication.
Network Operations
Warm Site
Partially equipped DR site with some data/hardware.
Network Operations
Cold Site
Basic facility, no equipment, requires setup after disaster.
Network Operations
DRaaS
Disaster Recovery as a Service, cloud-based DR solutions.
Network Operations
Disaster Recovery: RPO, RTO, and Site Types
RPO is 'Point' (data point in time), RTO is 'Time' (time to get back up). Hot is 'Hot and ready,' Warm is 'Warming up,' Cold is 'Cold and empty.'
Network Operations
Disaster Recovery: RPO, RTO, and Site Types
The Network+ exam often presents scenarios and asks you to identify the best DR site type based on given RPO and RTO values. Memorize the characteristics and trade-offs of hot, warm, and cold sites.
Network Operations
Disaster Recovery: RPO, RTO, and Site Types
Confusing RPO and RTO: RPO is about data loss, RTO is about downtime.
Network Operations
Disaster Recovery: RPO, RTO, and Site Types
Underestimating the cost implications of hot sites versus cold sites.
Network Operations
Disaster Recovery: RPO, RTO, and Site Types
Failing to regularly test disaster recovery plans, leading to unexpected issues during an actual event.
Network Operations
DHCP
Dynamically assigns IP addresses and network config.
Network Operations
DNS
Translates domain names to IP addresses.
Network Operations
VPN
Creates secure, encrypted tunnel over public network.
Network Operations
RDP
Microsoft protocol for graphical remote desktop control.
Network Operations
SSH
Secure protocol for remote command-line access.
Network Operations
IPsec
VPN protocol providing strong network layer security.
Network Operations
DHCPv6
DHCP for IPv6, can be stateful or stateless.
Network Operations
IPv4/IPv6 Services and Remote Access Solutions
To remember the DHCP DORA process: 'DORA the Explorer DISCOVERS an OFFER, REQUESTS it, and ACKNOWLEDGES it!'
Network Operations
IPv4/IPv6 Services and Remote Access Solutions
For the exam, remember that DHCP is UDP port 67 (server) and 68 (client), while DNS uses UDP/TCP port 53. RDP uses TCP port 3389, and SSH uses TCP port 22. These port numbers are frequently tested.
Network Operations
IPv4/IPv6 Services and Remote Access Solutions
Confusing the roles of DHCP and DNS: DHCP assigns IPs, DNS resolves names to IPs.
Network Operations
IPv4/IPv6 Services and Remote Access Solutions
Underestimating the security risks of remote access; always use strong authentication and encryption.
Network Operations
IPv4/IPv6 Services and Remote Access Solutions
Forgetting that while SLAAC provides IPv6 addresses, stateless DHCPv6 is often used alongside it for other configuration details like DNS servers.
Network Operations
CIA Triad
Confidentiality, Integrity, and Availability; core security principles.
Network Security
Confidentiality
Protecting information from unauthorized disclosure.
Network Security
Integrity
Ensuring data is accurate, complete, and untampered.
Network Security
Availability
Ensuring authorized users can access resources when needed.
Network Security
DoS Attack
Denial of Service; overwhelms a system, making it unavailable.
Network Security
DDoS Attack
Distributed DoS; uses multiple sources to overwhelm a system.
Network Security
Man-in-the-Middle
Intercepts and potentially alters communication between parties.
Network Security
Zero-day Exploit
Exploits a vulnerability unknown to the vendor or public.
Network Security
CIA Triad and Common Network Attacks
Remember 'CIA' for Confidentiality, Integrity, Availability. Think of a 'C'overt agent (confidentiality), an 'I'nvestigator (integrity), and an 'A'ir Traffic Controller (availability).
Network Security
CIA Triad and Common Network Attacks
The CompTIA Network+ exam frequently tests your understanding of the CIA Triad and how different attack types relate to each principle. Be ready to identify which principle (Confidentiality, Integrity, or Availability) is compromised by a given attack scenario.
Network Security
CIA Triad and Common Network Attacks
Confusing Integrity with Confidentiality: Integrity is about data being correct and unaltered, while Confidentiality is about who can see it.
Network Security
CIA Triad and Common Network Attacks
Underestimating the impact of Availability attacks: Downtime can be extremely costly for businesses, not just data breaches.
Network Security
CIA Triad and Common Network Attacks
Forgetting that insider threats can compromise all three CIA principles, even with robust external defenses.
Network Security
VLAN Hopping
Bypassing VLAN segmentation to access unauthorized VLANs.
Network Security
ARP Spoofing
Falsifying ARP messages to associate an attacker's MAC with another IP.
Network Security
Rogue Device
Any unauthorized hardware connected to a network.
Network Security
Switch Spoofing
Attacker's device pretends to be a trunk port to gain VLAN access.
Network Security
Double-Tagging
Embedding a malicious VLAN tag inside a legitimate one for hopping.
Network Security
Dynamic ARP Inspection (DAI)
Security feature validating ARP packets to prevent spoofing.
Network Security
Port Security
Limits MAC addresses per port, preventing unauthorized device connections.
Network Security
Man-in-the-Middle (MitM)
Attacker intercepts and relays communication between two parties.
Network Security
VLAN Hopping, ARP Spoofing, and Rogue Devices
VLANs, ARPs, Rogues: Very Annoying Risks, Protect Securely!
Network Security
VLAN Hopping, ARP Spoofing, and Rogue Devices
The exam expects you to differentiate between VLAN hopping methods (switch spoofing vs. double-tagging) and understand that ARP spoofing is a Layer 2 attack that enables MitM. For rogue devices, focus on the security implications and detection methods like WIPS and NAC.
Network Security
VLAN Hopping, ARP Spoofing, and Rogue Devices
Confusing VLAN hopping with simple misconfiguration; it's an attack.
Network Security
VLAN Hopping, ARP Spoofing, and Rogue Devices
Underestimating the impact of ARP spoofing beyond just eavesdropping (e.g., session hijacking).
Network Security
VLAN Hopping, ARP Spoofing, and Rogue Devices
Forgetting that rogue devices aren't just Wi-Fi APs, but can be any unauthorized hardware.
Network Security
Network Hardening
Process of securing a system by reducing its attack surface.
Network Security
Attack Surface
Sum of all possible points where an unauthorized user can access a system.
Network Security
Vulnerability Assessment
Process of identifying and quantifying security weaknesses.
Network Security
Penetration Testing
Simulated cyberattack to find exploitable vulnerabilities.
Network Security
Access Control List (ACL)
Rules defining which users or systems can access resources.
Network Security
Default Password
Pre-set password, often a major security risk if unchanged.
Network Security
Security Patch
Software update to fix security vulnerabilities.
Network Security
Secure Protocols
Protocols designed with encryption and authentication (e.g., SSH).
Network Security
Network Hardening Techniques and Best Practices
To remember hardening steps, think 'D.U.P.S.': Default passwords changed, Unused services disabled, Patches applied, Secure protocols used.
Network Security
Network Hardening Techniques and Best Practices
The exam often tests your knowledge of specific hardening steps. Memorize that changing default passwords, disabling unused services/ports, and applying patches are fundamental and immediate actions.
Network Security
Network Hardening Techniques and Best Practices
Forgetting to change default credentials on new devices.
Network Security
Network Hardening Techniques and Best Practices
Leaving unused ports or services enabled, creating unnecessary attack vectors.
Network Security
Network Hardening Techniques and Best Practices
Neglecting regular security updates and patches, leaving known vulnerabilities unaddressed.
Network Security
Network Access Control (NAC)
Enforces policies on devices connecting to a network.
Network Security
Supplicant
The client device requesting network access.
Network Security
Authenticator
The network device (e.g., switch) controlling port access.
Network Security
Authentication Server
Validates user/device credentials (e.g., RADIUS).
Network Security
Network Segmentation
Dividing a network into smaller, isolated subnets.
Network Security
NAC, 802.1X, and Network Segmentation
To remember the 802.1X components, think 'S-A-S': Supplicant Asks Server. The supplicant (client) asks the authenticator (switch/AP), which forwards to the Server (RADIUS).
Network Security
NAC, 802.1X, and Network Segmentation
The exam often tests your understanding of the components in an 802.1X setup: the supplicant (client), authenticator (switch/AP), and authentication server (RADIUS). Remember that NAC is a broader concept that uses 802.1X as one of its enforcement mechanisms.
Network Security
NAC, 802.1X, and Network Segmentation
Confusing 802.1X as a complete NAC solution; it's a key component, but NAC is broader.
Network Security
NAC, 802.1X, and Network Segmentation
Underestimating the importance of network segmentation for containing breaches.
Network Security
NAC, 802.1X, and Network Segmentation
Forgetting that NAC can perform both pre-admission (before connecting) and post-admission (continuous monitoring) checks.
Network Security
Troubleshooting Methodology
A systematic, step-by-step process for solving problems.
Network Troubleshooting
Identify the Problem
First step: gather info, symptoms, and scope of the issue.
Network Troubleshooting
Establish a Theory
Second step: formulate a probable cause, starting simple.
Network Troubleshooting
Test the Theory
Third step: perform actions to confirm or deny the hypothesis.
Network Troubleshooting
Plan of Action
Fourth step: develop and implement a solution to the problem.
Network Troubleshooting
Verify Functionality
Fifth step: ensure the system works fully after the fix.
Network Troubleshooting
Preventive Measures
Sixth step: actions taken to stop the problem from recurring.
Network Troubleshooting
Documentation
Seventh step: recording findings, actions, and lessons learned.
Network Troubleshooting
The Network Troubleshooting Methodology
I Eat Tasty Tacos, Please Verify Proper Digestion. (Identify, Establish, Test, Plan, Verify, Prevent, Document)
Network Troubleshooting
The Network Troubleshooting Methodology
The CompTIA Network+ exam specifically tests the seven-step troubleshooting methodology. Memorize the order and a brief description of each step. Keywords like 'escalate' or 'document' are often tied to specific steps.
Network Troubleshooting
The Network Troubleshooting Methodology
Jumping directly to a solution without fully understanding the problem or testing theories.
Network Troubleshooting
The Network Troubleshooting Methodology
Failing to document findings, leading to repeated troubleshooting efforts for similar issues.
Network Troubleshooting
The Network Troubleshooting Methodology
Not verifying full system functionality after a fix, potentially introducing new problems.
Network Troubleshooting
Physical Layer (Layer 1)
The lowest OSI layer, dealing with physical transmission of raw bit streams over a medium.
Network Troubleshooting
Link Light
An indicator on network devices showing physical connection status and activity.
Network Troubleshooting
Cable Continuity Tester
A tool to verify if a cable is intact and correctly wired end-to-end.
Network Troubleshooting
Cable Certifier
An advanced tool that measures cable performance against industry standards.
Network Troubleshooting
Electromagnetic Interference (EMI)
Disruption caused by electromagnetic radiation from external sources.
Network Troubleshooting
Radio Frequency Interference (RFI)
Disruption caused by radio waves, often affecting wireless signals.
Network Troubleshooting
Attenuation
The loss of signal strength over distance, common in long cable runs.
Network Troubleshooting
Diagnosing Cabling and Physical Layer Issues
L-V-C-E: Link lights, Visual, Cable test, Environment. Always check these in order for physical layer issues!
Network Troubleshooting
Diagnosing Cabling and Physical Layer Issues
The N10-009 exam expects you to identify common physical layer issues (e.g., bad cables, damaged connectors, incorrect cable types, faulty transceivers, or environmental factors like EMI/RFI) and know how to use tools like cable testers and visual inspection for diagnosis. Look for keywords like 'no link light' or 'intermittent connection' as strong indicators of physical layer problems.
Network Troubleshooting
Diagnosing Cabling and Physical Layer Issues
Jumping to complex software troubleshooting before checking basic physical layer components.
Network Troubleshooting
Diagnosing Cabling and Physical Layer Issues
Assuming a cable is good without testing it, especially if it's an older or frequently moved cable.
Network Troubleshooting
Diagnosing Cabling and Physical Layer Issues
Ignoring environmental factors like nearby electronics or long cable runs as potential causes of intermittent issues.
Network Troubleshooting
APIPA
Automatic Private IP Addressing; a self-assigned IP when DHCP fails.
Network Troubleshooting
Latency
The time delay for data to travel from source to destination.
Network Troubleshooting
Bandwidth
The maximum data transfer rate of a network path.
Network Troubleshooting
Bottleneck
The slowest component in a network path, limiting overall performance.
Network Troubleshooting
QoS
Quality of Service; manages network traffic to ensure performance for critical apps.
Network Troubleshooting
Netstat
Command-line tool to display network connections and statistics.
Network Troubleshooting
Troubleshooting Network Services & Performance
To remember the common troubleshooting steps: 'I Gather Info, Isolate, Test, Implement, Verify, Document' – or I G.I.T. I.V.D. for short!
Network Troubleshooting
Troubleshooting Network Services & Performance
On the Network+ exam, expect questions that present a scenario with specific symptoms and ask you to identify the most likely cause or the next troubleshooting step. Keywords like 'APIPA address,' 'slow performance,' 'cannot access website,' or 'authentication failed' are critical clues. Memorize common service ports (e.g., DNS 53, DHCP 67/68, HTTP 80, HTTPS 443) and their functions.
Network Troubleshooting
Troubleshooting Network Services & Performance
Jumping to conclusions without gathering enough information or isolating the problem.
Network Troubleshooting
Troubleshooting Network Services & Performance
Blaming the network immediately without checking local client or server issues first.
Network Troubleshooting
Troubleshooting Network Services & Performance
Failing to document troubleshooting steps and solutions, leading to repeated work.
Network Troubleshooting
ping
Tests host reachability and measures round-trip time using ICMP.
Network Troubleshooting
traceroute
Maps the path an IP packet takes to a destination, showing each hop.
Network Troubleshooting
nslookup
Queries the Domain Name System (DNS) for domain name or IP address mapping.
Network Troubleshooting
dig
A more advanced and flexible tool for querying DNS name servers.
Network Troubleshooting
tcpdump
A command-line packet analyzer for capturing and displaying network traffic.
Network Troubleshooting
ICMP
Internet Control Message Protocol, used by ping and traceroute.
Network Troubleshooting
TTL
Time To Live, a value in IP packets that limits their lifespan on a network.
Network Troubleshooting
Command-Line Tools: ping, traceroute, nslookup, dig, tcpdump
P-T-N-D-T: **P**lease **T**ry **N**etwork **D**iagnostics **T**horoughly! (Ping, Traceroute, Nslookup, Dig, Tcpdump)
Network Troubleshooting
Command-Line Tools: ping, traceroute, nslookup, dig, tcpdump
The exam often asks you to identify the best tool for a specific troubleshooting scenario. Remember that `ping` tests reachability, `traceroute` shows the path, `nslookup`/`dig` resolve DNS, and `tcpdump` captures packets.
Network Troubleshooting
Command-Line Tools: ping, traceroute, nslookup, dig, tcpdump
Forgetting to specify the network interface when using `tcpdump`, leading to capturing traffic on the wrong interface.
Network Troubleshooting
Command-Line Tools: ping, traceroute, nslookup, dig, tcpdump
Misinterpreting `traceroute` output, especially when firewalls block ICMP, causing asterisks (*) to appear instead of hop details.
Network Troubleshooting
Command-Line Tools: ping, traceroute, nslookup, dig, tcpdump
Using `nslookup` for complex DNS issues when `dig` would provide more comprehensive and accurate information.
Network Troubleshooting
Cable Tester
Device to check network cable continuity and wiring.
Network Troubleshooting
Wire Map
Diagram showing pin-to-pin connections in a cable.
Network Troubleshooting
Wi-Fi Analyzer
Tool to scan and visualize wireless network signals.
Network Troubleshooting
RSSI
Received Signal Strength Indicator; measures Wi-Fi signal strength.
Network Troubleshooting
nmap
Network Mapper; scans networks for hosts, open ports, and OS.
Network Troubleshooting
Port Scanning
Process of identifying open ports on a network device.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
To remember the tools, think 'C-W-N': **C**able for wires, **W**i-Fi for air, **N**map for network insights.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
For the Network+ exam, memorize the primary function of each tool: Cable testers for physical cable integrity, Wi-Fi analyzers for wireless signal and channel issues, and nmap for host/service discovery and security auditing. Pay attention to scenario questions that describe symptoms and ask for the best tool.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
Using a simple continuity tester for advanced performance issues (like crosstalk) when a certifier is needed.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
Assuming a Wi-Fi issue is always signal strength when channel congestion or interference is the real culprit.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
Using nmap without proper authorization, which can be perceived as a security threat and lead to disciplinary action.
Network Troubleshooting
Hardware Tools: Cable Testers, Wi-Fi Analyzers, and nmap
Confusing the capabilities of a basic cable tester with an advanced cable certifier.
Network Troubleshooting