Free CompTIA Network+ Practice Test

CompTIA Network+ Practice Test 1

CompTIA Network+ Practice Test

1 / 90

A company needs to allow employees to securely access internal resources from outside the office using a web browser. What should they implement?

2 / 90

A technician needs to determine the path that network packets take to a destination. What command should they use?

3 / 90

A user is unable to access internal company resources when connected to a VPN. The user can access the internet. What should the technician check first?

4 / 90

A technician is installing a new wireless network in a warehouse with large metal shelves. What issue might they encounter?

5 / 90

A user reports that they cannot access a secure website. Other websites load fine. What should the technician check first?

6 / 90

A technician is troubleshooting an IP address conflict between two devices. What is the best way to resolve the issue?

7 / 90

A company wants to segment its network without adding additional physical hardware. What should they implement?

8 / 90

A technician is troubleshooting a connectivity issue on a network switch. They suspect a faulty port. What tool can be used to test the network cable?

9 / 90

A user is experiencing slow speeds on a gigabit Ethernet network. The network adapter is set to auto-negotiate. What setting should the technician check next?

10 / 90

A technician is configuring a VPN connection that encrypts all data traffic between remote users and the corporate network. What protocol should they use?

11 / 90

A company needs to ensure VoIP traffic has priority over regular web browsing. What networking feature should be configured?

12 / 90

A technician needs to verify which network ports are open on a remote server. What command should they use?

13 / 90

A technician is configuring a router with a new subnet to separate voice and data traffic. What subnet mask should be used for a network that supports 62 usable hosts?

14 / 90

A user reports that their workstation cannot obtain an IP address from the DHCP server. Other users on the same network are unaffected. What should the technician check first?

15 / 90

A technician needs to identify a cable that runs through the ceiling and terminates in a server room. What tool should they use?

16 / 90

A company is implementing a secure network that requires authentication before allowing devices to connect via Wi-Fi. What security protocol should be used?

17 / 90

A technician suspects a failing network switch is causing connectivity issues. What tool can be used to check for excessive packet loss and latency?

18 / 90

A network administrator needs to allow remote access to an internal web server using port 443. What type of configuration should they use on the firewall?

19 / 90

A user reports intermittent connectivity issues on a Wi-Fi network. Other devices are not affected. What should the technician check first?

20 / 90

A technician is troubleshooting a network issue where users are unable to access the internet, but they can access internal resources. The technician pings an external IP address and receives "Request Timed Out." What is the most likely cause?

21 / 90

Which WAN technology uses software-based control to dynamically route traffic across multiple underlying transport links, such as MPLS and broadband internet, based on real-time application performance?

22 / 90

Which cloud-delivered architecture combines SD-WAN networking capabilities with cloud-based security services, such as secure web gateways and zero trust network access, into a single unified service?

23 / 90

Which core Zero Trust networking principle states that a device or user should never be automatically trusted, even if it is located on the internal corporate network?

24 / 90

Which IPv6 address type is used for one-to-many communication, delivering a packet to all interfaces in a defined multicast group?

25 / 90

A cloud architect is designing an isolated, logically defined network within a public cloud provider where the organization can deploy resources with its own IP addressing scheme and subnets. Which concept does this describe?

26 / 90

Which port number is used by default for unencrypted HTTP web traffic?

27 / 90

Which port number is used by the Simple Mail Transfer Protocol (SMTP) for sending email between mail servers?

28 / 90

Which network type spans a limited geographic area, such as a single building or campus, connecting devices with high-speed links typically owned and managed by a single organization?

29 / 90

Which type of traffic is sent to a single specific destination host, representing the most common form of network communication such as a typical web browsing session?

30 / 90

A network administrator needs to configure a switch port to carry traffic for multiple VLANs simultaneously between two switches. Which port configuration should be used?

31 / 90

Which wireless frequency band offers greater range and better ability to penetrate walls, but is more prone to interference from common household devices like microwaves and cordless phones?

32 / 90

Which routing protocol type builds a complete topological map of the network and uses an algorithm like Dijkstra's SPF to calculate the shortest path, converging faster than distance-vector protocols?

33 / 90

Which software-defined networking (SDN) concept separates the decision-making logic of how traffic should be forwarded from the actual hardware that forwards the traffic?

34 / 90

A network engineer wants to combine two or more physical switch ports into a single logical link to increase available bandwidth and provide redundancy between two switches. Which technology accomplishes this?

35 / 90

Which wireless security protocol introduced Simultaneous Authentication of Equals (SAE) to provide stronger protection against offline password-guessing attacks compared to earlier WPA2 pre-shared key implementations?

36 / 90

Which network device operates primarily at Layer 2, forwarding frames based on MAC addresses learned in its address table, and creates separate collision domains per port?

37 / 90

An organization wants to allow employees to authenticate to the wireless network using their existing corporate Active Directory credentials, rather than a single shared pre-shared key. Which wireless authentication mode supports this?

38 / 90

Which disaster recovery metric represents the maximum acceptable amount of time that a system or service can be down after a disruptive event before causing unacceptable business impact?

39 / 90

Which disaster recovery metric represents the maximum acceptable amount of data loss, measured in time, that an organization can tolerate, directly informing backup frequency decisions?

40 / 90

Which metric represents the average time a repairable system operates before experiencing a failure, commonly used to gauge hardware reliability?

41 / 90

A disaster recovery site that has some hardware and connectivity pre-installed but requires data restoration and configuration before becoming operational is best described as which type of site?

42 / 90

Which practice involves using code-based definitions, such as Terraform or Ansible playbooks, to provision and configure network infrastructure in a repeatable, version-controlled way?

43 / 90

Which network operations practice involves establishing a documented record of normal network performance metrics, which can later be compared against current performance to identify anomalies?

44 / 90

Before implementing a significant network configuration change, which formal process should typically be followed to assess risk, document the change, and obtain appropriate approval?

45 / 90

Which type of network documentation visually represents the logical or physical layout of network devices and their interconnections, aiding troubleshooting and planning?

46 / 90

Which network security concept involves dividing a network into small, isolated zones so that even if one segment is compromised, an attacker cannot easily move laterally to other segments?

47 / 90

Which type of attack involves an attacker intercepting and potentially altering communication between two parties who believe they are communicating directly with each other?

48 / 90

Which switch port security feature prevents an unauthorized rogue DHCP server from handing out incorrect or malicious IP addressing information to clients on untrusted ports?

49 / 90

Which practice of reducing a system's attack surface by disabling unnecessary services, closing unused ports, and applying secure configuration baselines is known as?

50 / 90

Which type of denial-of-service attack leverages many distributed, compromised systems (a botnet) to simultaneously flood a target with traffic, making mitigation more difficult than a single-source attack?

51 / 90

Which security concept restricts a network device's or user's access to only the specific resources and permissions required to perform their designated job function?

52 / 90

According to the standard network troubleshooting methodology, which step should be performed immediately after identifying the problem and before implementing a solution?

53 / 90

A technician has tested a theory of probable cause and confirmed it, but the proposed fix could impact other users during business hours. Which step of the troubleshooting methodology should be performed next?

54 / 90

A technician suspects a fiber optic cable is faulty due to excessive signal loss. Which tool would most directly help measure the cable's actual signal loss and identify the location of a break?

55 / 90

A user reports intermittent wireless disconnections in an area where multiple nearby access points are broadcasting on overlapping, adjacent channels. Which issue is most likely causing this problem?

56 / 90

Which fiber connector type has a bayonet-style twist-lock mechanism and was commonly used in older fiber installations, though it has largely been replaced by push-pull connectors like LC and SC?

57 / 90

A technician measures a copper Ethernet cable run and finds it exceeds 100 meters between the switch and the end device, causing intermittent connectivity. Which troubleshooting solution most directly addresses this specific issue?

58 / 90

A technician wants to trace the path and measure latency at each hop between a workstation and a remote destination, in order to identify which specific point in the path is introducing delay. Which utility should be used?

59 / 90

A user reports they cannot resolve any website by name, but can successfully ping a known public IP address directly. Which issue is most likely occurring?

60 / 90

Which command would a technician use on a Windows workstation to view and manually clear the locally cached ARP table entries when troubleshooting a suspected stale ARP entry?

61 / 90

A network administrator needs to subnet the 192.168.50.0/24 network into subnets that each support at least 50 usable hosts, while wasting as few addresses as possible. Which subnet mask should be used?

62 / 90

Which DNS record type is used to specify an alias hostname that points to another canonical hostname, rather than directly to an IP address?

63 / 90

Which DNS record type is used to perform a reverse lookup, resolving an IP address back to its associated hostname?

64 / 90

Which OSI model layer is responsible for establishing, managing, and terminating communication sessions between two devices?

65 / 90

Which protocol is responsible for synchronizing the system clocks of network devices to a common, accurate time reference?

66 / 90

Which cloud service model provides customers with fundamental computing resources, such as virtual machines and storage, while the customer remains responsible for managing the operating system and above?

67 / 90

Which QoS mechanism prioritizes latency-sensitive traffic, such as VoIP, by marking packets so that network devices can apply consistent, appropriate treatment as the traffic traverses the network?

68 / 90

Which NAT technique allows many internal hosts to share a single public IP address by tracking and translating unique port numbers for each simultaneous connection?

69 / 90

Which type of firewall tracks the state of active connections and makes filtering decisions based on the context of traffic within an established session, rather than evaluating each packet in isolation?

70 / 90

Which load balancing algorithm distributes incoming requests to servers sequentially, one after another in a repeating cycle, regardless of each server's current load?

71 / 90

Which type of VPN connects an individual remote user's device to a central corporate network over an encrypted tunnel, commonly used by employees working from home?

72 / 90

Which Power over Ethernet standard increased the maximum power delivered per port compared to the original 802.3af standard, supporting higher-power devices such as pan-tilt-zoom cameras?

73 / 90

Which type of wireless antenna radiates signal equally in all horizontal directions, making it well-suited for providing general coverage in an open office area?

74 / 90

Which protocol allows a network management system to query devices for status information and receive unsolicited trap messages when a significant event occurs, such as an interface going down?

75 / 90

Which centralized logging protocol allows network devices to send event and diagnostic messages to a remote server for aggregation, long-term storage, and analysis?

76 / 90

Which technology allows a network administrator to capture and analyze a summary of traffic flow information, such as source/destination pairs and byte counts, without capturing full packet payloads?

77 / 90

Which practice involves managing network devices through a completely separate physical or logical path, distinct from the production data network, ensuring devices remain reachable even during a major network outage?

78 / 90

Which lifecycle management practice involves formally tracking a device from acquisition through deployment, maintenance, and eventual decommissioning or disposal?

79 / 90

Which practice involves periodically reviewing current network utilization trends against historical data to proactively identify when additional bandwidth or hardware resources will be needed?

80 / 90

Which attack technique involves an attacker exploiting Dynamic Trunking Protocol negotiation or double-tagging frames to gain unauthorized access to traffic on VLANs the attacker should not otherwise reach?

81 / 90

Which security tool is intentionally designed to look like a legitimate, vulnerable system in order to attract and study attacker behavior without exposing real production assets?

82 / 90

Which wireless attack involves a malicious access point mimicking the SSID and configuration of a legitimate network, tricking users into connecting to it so their traffic can be intercepted?

83 / 90

Which physical security control uses a small, enclosed space with two interlocking doors, ensuring only one door can be open at a time, to prevent unauthorized tailgating into a secure facility?

84 / 90

Two hosts on the same subnet have accidentally been assigned the exact same static IP address, causing intermittent connectivity for both. Which issue is occurring?

85 / 90

A network is experiencing a routing loop where packets are continuously forwarded between two routers without ever reaching their destination. Which field in the IP header is designed to eventually stop this from continuing indefinitely?

86 / 90

A technician is troubleshooting a cable run and needs to identify exactly which physical port on a patch panel corresponds to a specific wall jack. Which tool is most appropriate for this task?

87 / 90

A wireless user far from the access point reports a weak signal and slow performance, while users closer to the access point have no issues. Which wireless troubleshooting concept best explains this scenario?

88 / 90

A network is experiencing intermittent slowdowns traced to a nearby industrial machine that generates significant electrical noise. Which issue is most likely affecting the network cabling?

89 / 90

A technician configures two routers running a distance-vector routing protocol and later observes a routing loop forming after a link failure, temporarily causing packets to bounce between the two routers. Which mechanism, if properly enabled, is specifically designed to help prevent this?

90 / 90

A technician suspects a specific application is generating an unusually high volume of traffic and wants to capture and inspect the actual packet contents to confirm this. Which tool is most appropriate?

Your score is

The average score is 75%

0%