CompTIA Network+ N10-009 Course and Labs

The N10-009 exam has five domains. Use the official objectives to check each topic before scheduling your exam. This course is a study guide, not a substitute for supervised configuration practice.

Resources #

• Tips for Passing CompTIA Exams
• Network+ Practice Test
• Official Network+ N10-009 Exam Objectives
• Professor Messer’s Network Plus Videos
• Additional Learning Resources

Domain 1: Networking Concepts (23%) #

Introduction to Networking Fundamentals #

• Introduction to the importance of Networking Fundamentals
• Overview of the OSI model and encapsulation concepts
• Exploring network topologies and their characteristics
• Detailed explanation of the seven layers of the OSI model
• Functions, protocols, and examples associated with each layer
• Emphasizing the role of encapsulation in data transmission
• Exploring various network topologies: bus, star, ring, mesh, and hybrid
• Advantages, disadvantages, and use cases for each topology
• Discussing the impact of topology on network performance and fault tolerance
• Comparing and contrasting LAN, WAN, MAN, PAN, and WLAN
• Understanding the scope and typical use cases for each network type
• Differentiating between client-server and peer-to-peer networks

Cables, Connectors, and IP Addressing #

• Overview of different cable types and their appropriate usage
• Explaining connectors, termination standards, and fiber types
• Configuring subnets and understanding IP addressing schemes

Ports, Protocols, and Network Services #

• Explaining common ports and protocols and their applications
• Introducing encrypted alternatives for secure communication
• Understanding IP protocol types and connection-oriented vs. connectionless

Network Services, Connectivity Options, and Architecture #

• Exploring DHCP, DNS, and NTP services and their functionalities
• Understanding basic corporate and datacenter network architecture
• Summarizing cloud concepts and connectivity options
• Explaining different connection types in storage area networks
• Discussing Fibre Channel, FCoE, and iSCSI technologies

Cloud Computing and Infrastructure Concepts #

• Understanding deployment models: public, private, hybrid, and community
• Explaining service models: SaaS, IaaS, PaaS, and DaaS
• Introduction to infrastructure as code and its importance in automation
• Exploring security implications in cloud computing and multitenancy
• Understanding the concepts of elasticity and scalability in networks
• Highlighting the importance of network security measures

Domain 2: Network Implementation (20%) #

Introduction to Networking Devices #

• Overview of networking devices and their roles
• Explanation of Layer 2 switches, routers, hubs, access points, etc.
• Comparison of various networking devices and their features

Routing Technologies and Concepts #

• Understanding dynamic routing protocols: RIP, OSPF, EIGRP, BGP
• Explaining link state, distance vector, and hybrid routing protocols
• Configuration and usage of static routing and default routes

Bandwidth Management and QoS #

• Introduction to bandwidth management and traffic shaping
• Explaining quality of service (QoS/) principles and techniques
• Implementation of QoS for prioritizing network traffic

Ethernet Switching Features and Configurations #

• Configuration and deployment of VLANs and Voice VLANs
• Explaining port configurations, tagging, and aggregation
• Implementation of port security, mirroring, and jumbo frames

Address Resolution Protocol (ARP) and Neighbor Discovery Protocol #

• Understanding ARP and its role in resolving IP addresses to MAC addresses
• Explaining Neighbor Discovery Protocol (NDP/) in IPv6 networks
• Troubleshooting common issues related to ARP and NDP

Wireless Standards and Technologies #

• Exploring different 802.11 standards: a, b, g, n, ac, ax
• Frequencies, range, and channel bonding in wireless networks
• Overview of antenna types, encryption standards, and SSID configurations

Cellular Technologies and Wireless Communication #

• Understanding cellular technologies: CDMA, GSM, LTE, 3G, 4G, 5G
• Exploring the concepts of MIMO and MU-MIMO in wireless communication
• Analyzing the advancements and implications of cellular networks

Domain 3: Network Operations (19%) #

Performance Monitoring and Management #

• Introduction to performance metrics and sensors
• Understanding device/chassis performance metrics
• Monitoring temperature, CPU usage, and memory
• Network metrics: bandwidth, latency, and jitter
• Overview of SNMP (Simple Network Management Protocol/)
• Using traps, OIDs, and MIBs for monitoring

Network Logs and Logging #

• Importance of network device logs
• Log reviews and their significance
• Types of logs: traffic logs, audit logs, syslog
• Logging levels/severity levels
• Interface statistics/status and their interpretation
• Monitoring interface errors or alerts

Environmental Factors and Sensors #

• Monitoring environmental factors: temperature, humidity, electrical
• Importance of monitoring flooding and its impact on the network
• Baselines and their significance in network monitoring
• Overview of NetFlow data for network analysis
• Tracking network uptime and downtime

Plans, Procedures, and Policies #

• Introduction to plans and procedures in network operations
• Change management and its role in maintaining network stability
• Incident response plan, disaster recovery plan, and business continuity plan
• System life cycle and its impact on network operations
• Standard operating procedures (SOPs/) for network management

Documentation and Policies #

• Importance of organizational documents and policies
• Overview of common documentation: network diagrams, wiring diagrams
• Site survey reports and audit/assessment reports
• Baseline configurations and their role in network management
• Understanding common agreements: NDA, SLA, MOU

Network Availability and Resilience #

• Explaining high availability (HA/) and disaster recovery (DR/) concepts
• Load balancing and its role in ensuring network availability
• Multipathing and NIC teaming for redundancy
• Redundant hardware and clustering for improved network resilience
• Facilities and infrastructure support for network uptime

Backup and Restore #

• Importance of network device backup and restore
• Backing up and restoring device state and configuration
• Understanding the different recovery sites: cold, warm, hot, and cloud
• Implementing redundancy and high availability (HA/) mechanisms
• MTTR, MTBF, RTO, and RPO in network operations

Domain 4: Network Security (14%) #

Network Hardening Techniques #

• Introduction to network hardening
• Best practices for network hardening
• Securing SNMP (Simple Network Management Protocol/)
• Implementing Router Advertisement (RA/) Guard
• Configuring port security and dynamic ARP inspection
• Control plane policing and private VLANs

Physical Security and Its Importance #

• Understanding the significance of physical security
• Implementing best practices for physical security
• Securing switchports and disabling unneeded services
• Changing default passwords and enforcing password complexity
• Implementing DHCP snooping and changing default VLAN

Patch and Firmware Management #

• Importance of patch and firmware management in network security
• Best practices for managing patches and firmware updates
• Configuring access control lists and role-based access
• Understanding firewall rules and implicit/explicit deny
• Wireless security considerations and best practices

Wireless Security and IoT Access #

• Implementing MAC filtering and proper antenna placement
• Setting appropriate power levels for wireless networks
• Configuring wireless client isolation and guest network isolation
• Understanding preshared keys (PSKs/) and EAP (Extensible Authentication Protocol/)
• Exploring geofencing and captive portal for enhanced wireless security
• Considerations for IoT access and securing IoT devices

Detection and Prevention Methods #

• Exploring various detection methods for network security
• Implementing camera-based detection and motion detection
• Using asset tags and tamper detection mechanisms
• Employee training and its role in prevention
• Implementing access control hardware such as badge readers and biometrics
• Importance of locking racks, cabinets, and access control vestibules

Asset Disposal and Sanitization #

• Best practices for asset disposal in network security
• Performing factory reset and wiping configurations
• Sanitizing devices before disposal to ensure data security
• Proper methods for disposing of network assets securely

Domain 5: Network Troubleshooting (24%) #

Network Troubleshooting Methodology #

• Introduction to network troubleshooting
• Identify the problem: Gathering information, questioning users, and determining symptoms
• Establish a theory of probable cause: Considering multiple approaches and using the OSI model
• Test the theory to determine the cause: Confirming or reestablishing theories
• Establish a plan of action: Resolving the problem and identifying potential effects
• Implement the solution or escalate: Fixing the problem or escalating as necessary
• Verify full system functionality: Ensuring the problem is resolved and implementing preventive measures
• Document findings, actions, outcomes, and lessons learned

Troubleshooting Cable Connectivity Issues #

• Common cable considerations: Throughput, speed, and distance
• Understanding shielded and unshielded cables, plenum, and riser-rated cables
• Exploring cable applications: Rollover/console cables, crossover cables, and Power over Ethernet
• Troubleshooting common cable issues: Attenuation, interference, incorrect pinout, bad ports, open/short, and more
• Essential tools for cable troubleshooting: Cable crimper, punchdown tool, tone generator, cable tester, and more

Network Software Tools and Commands #

• Exploring essential network software tools: WiFi analyzer, protocol analyzer, bandwidth speed tester, and more
• Understanding command line tools: ping, ipconfig/ifconfig/ip, nslookup/dig, traceroute/tracert, and more
• Basic network platform commands for troubleshooting: show interface, show config, show route, and more
• Considerations when using network software tools and commands: Device configuration review, routing tables, and more

Troubleshooting General Networking Issues #

• Common networking issues: Collisions, broadcast storms, duplicate MAC/IP addresses, asymmetrical routing, and more
• Troubleshooting techniques for specific issues: Switching loops, routing loops, DHCP server issues, and more
• Network performance considerations and baselines
• Addressing security-related issues: Firewall settings, blocked services/ports/addresses, and more
• Exploring DNS, NTP, BYOD, and licensed feature challenges

Progressive N10-009 Lab #

Use Cisco Packet Tracer, the latest stable non-beta release offered through Cisco Networking Academy. The baseline uses only built-in Packet Tracer devices. No IOS image download is needed. Keep the project isolated from production networks.

Prerequisites: A computer supported by the current Packet Tracer release, a free Cisco Networking Academy account, and permission to install software and save project files.

Time: Plan 20 to 30 hours for the 29 checkpoints and 3 hours for the practical final.

Topology #

Internet cloud
     |
    R2
     |
    R1
     |
    SW1 ===== SW2 ---- SRV1
     |         | \
   PC-A      PC-B AP1 )) LAP1
                  AP2 )) IOT1

• R1 routes campus VLANs and connects to R2 through 10.255.0.0/30.
• R2 represents the WAN edge. Its loopback 198.51.100.1/32 represents an external test target.
• SW1 and SW2 use two links for later VLAN, spanning-tree, and aggregation work.
• AP1 serves the staff SSID on VLAN 10. AP2 serves the IoT SSID on VLAN 40.
• PC-A, PC-B, LAP1, and IOT1 provide test endpoints.
• SRV1 attaches to SW2 in VLAN 30 at 10.10.30.10/24. It provides supported Packet Tracer services as lessons add them.

Address plan #

The 2001:db8::/32 block is reserved for documentation. The lab uses it to avoid collisions with real IPv6 assignments.

Obtain Packet Tracer legally #

1. Create or use a Cisco Networking Academy account.
2. Enroll in Cisco’s free Getting Started with Cisco Packet Tracer course.
3. Download the latest stable non-beta installer from the course. Use no mirror, shared installer, or third-party IOS image.
4. Install the package for your operating system, accept Cisco’s license, and sign in.
5. Open Help > About. Record the version in 00-environment.md.

Device inventory #

Add these built-in devices:

Exact port map #

Use copper straight-through links for all wired connections. Packet Tracer handles Ethernet medium-dependent crossover on these device models.

Baseline router configuration #

Enter this configuration on R1:

enable
configure terminal
hostname R1
no ip domain-lookup
ipv6 unicast-routing
interface g0/0
 description Transit_to_R2
 ip address 10.255.0.1 255.255.255.252
 ipv6 address 2001:db8:255::1/64
 no shutdown
interface g0/1
 no shutdown
interface g0/1.10
 encapsulation dot1Q 10
 ip address 10.10.10.1 255.255.255.0
 ipv6 address 2001:db8:10::1/64
interface g0/1.20
 encapsulation dot1Q 20
 ip address 10.10.20.1 255.255.255.0
 ipv6 address 2001:db8:20::1/64
interface g0/1.30
 encapsulation dot1Q 30
 ip address 10.10.30.1 255.255.255.0
 ipv6 address 2001:db8:30::1/64
interface g0/1.40
 encapsulation dot1Q 40
 ip address 10.10.40.1 255.255.255.0
 ipv6 address 2001:db8:40::1/64
interface g0/1.99
 encapsulation dot1Q 99
 ip address 10.10.99.1 255.255.255.0
 ipv6 address 2001:db8:99::1/64
ip route 0.0.0.0 0.0.0.0 10.255.0.2
end
copy running-config startup-config

Enter this configuration on R2:

enable
configure terminal
hostname R2
no ip domain-lookup
interface g0/0
 description Transit_to_R1
 ip address 10.255.0.2 255.255.255.252
 no shutdown
interface loopback0
 ip address 198.51.100.1 255.255.255.255
ip route 10.10.0.0 255.255.0.0 10.255.0.1
end
copy running-config startup-config

Baseline switch configuration #

Enter this shared block on both switches:

enable
configure terminal
vlan 10
 name USERS
vlan 20
 name VOICE
vlan 30
 name SERVERS
vlan 40
 name IOT
vlan 99
 name MANAGEMENT
end

On SW1, enter:

configure terminal
hostname SW1
interface g0/1
 description Trunk_to_R1
 switchport mode trunk
 switchport trunk allowed vlan 10,20,30,40,99
interface g0/2
 description Trunk_to_SW2
 switchport mode trunk
 switchport trunk allowed vlan 10,20,30,40,99
interface f0/1
 description PC-A
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast
interface vlan 99
 ip address 10.10.99.11 255.255.255.0
 no shutdown
ip default-gateway 10.10.99.1
end
copy running-config startup-config

On SW2, enter:

configure terminal
hostname SW2
interface g0/1
 description Trunk_to_SW1
 switchport mode trunk
 switchport trunk allowed vlan 10,20,30,40,99
interface f0/1
 description SRV1
 switchport mode access
 switchport access vlan 30
 spanning-tree portfast
interface f0/2
 description PC-B
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast
interface f0/3
 description AP1_STAFF
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast
interface f0/4
 description AP2_IOT
 switchport mode access
 switchport access vlan 40
 spanning-tree portfast
interface vlan 99
 ip address 10.10.99.12 255.255.255.0
 no shutdown
ip default-gateway 10.10.99.1
end
copy running-config startup-config

Endpoint setup #

Use Desktop > IP Configuration on each endpoint:

Open each access point’s Config tab. Give AP1 the SSID LAB-STAFF and AP2 the SSID LAB-IOT. Select WPA2-PSK when available. Create a lab-only key and keep it out of submitted screenshots. Join LAP1 to AP1 and IOT1 to AP2. Assign LAP1 10.10.10.30/24 and IOT1 10.10.40.30/24 with their VLAN gateways.

Baseline verification #

Run:

R1# show ip interface brief
R1# show ip route
SW1# show vlan brief
SW1# show interfaces trunk
SW2# show mac address-table dynamic
PC-A> ping 10.10.10.1
PC-A> ping 10.10.30.10
PC-A> tracert 198.51.100.1

Expected facts:

• R1 G0/0 and G0/1 show up/up.
• R1 lists connected routes for all five VLANs and 10.255.0.0/30.
• SW1 and SW2 list VLANs 10, 20, 30, 40, and 99.
• The trunks allow all five VLANs.
• PC-A reaches its gateway, SRV1, and R2 loopback.
• The trace to 198.51.100.1 crosses 10.10.10.1 and 10.255.0.2.

Save the file as network-plus-n10-009-baseline.pkt. Then save a second copy for each checkpoint. Do not edit the baseline file.

Packet Tracer limits and supplied-evidence route #

Packet Tracer does not reproduce every N10-009 technology. Use live Packet Tracer work only where the chosen device supports the command or service. Use the filled sample evidence in the matching lesson for the rest.

Baseline setup #

1. Build the exact device inventory and port map.
2. Apply the router and switch configurations.
3. Apply the endpoint and wireless settings.
4. Run every baseline verification command.
5. Fix any mismatch before starting checkpoint 1.
6. Save the read-only baseline and export the device configurations.

Expected baseline evidence: Each endpoint reaches its gateway. PC-A reaches SRV1. R1 reaches R2 at 10.255.0.2. The switch MAC table lists each attached endpoint on the expected access port.

Baseline artifact: Save 00-topology.png, 00-address-plan.md, 00-connectivity.txt, and the exported configurations. Record simulator name and version.

Checkpoint rules #

Every lesson produces a numbered artifact. Each artifact must include:

• Change record with purpose, affected devices, risk, and rollback step
• Before evidence from a command, capture, diagram, counter, or record
• Fault evidence from the assigned controlled failure
• Recovery evidence after the fault is removed
• Cleanup statement naming the restored snapshot or retained approved change

A checkpoint passes when the expected evidence matches, the fault is diagnosed from evidence, service returns after cleanup, and the named artifact exists.

Practical Final #

Start from a copy of network-plus-n10-009-baseline.pkt. Use these three fixed faults so a learner needs no partner:

1. On SW2 enter interface g0/1 and switchport trunk allowed vlan 10,20,40,99.
2. On PC-A open Desktop > IP Configuration and replace the default gateway with 10.10.10.254.
3. On R2 remove ip route 10.10.0.0 255.255.0.0 10.255.0.1 and add ip route 10.10.0.0 255.255.0.0 Null0.

Apply one fault at a time without reading the repair steps below. Save each faulty copy. Diagnose and repair it through the course method.

1. Open a ticket and record scope, affected users, safety limits, and start time.
2. Draw the expected packet path.
3. Collect interface, VLAN, route, address, name-resolution, and service evidence.
4. Rank at least two theories. Test the least disruptive theory first.
5. Repair each confirmed cause through a written change record.
6. Verify user traffic, management traffic, logs, time, and monitoring after the repair.
7. Restore the clean snapshot and repeat the core connectivity tests.

Submit: final-ticket.md, final-topology.png, final-before.txt, final-captures.pcapng, final-changes.md, final-after.txt, and final-configs/.

Expected diagnoses: Fault 1 isolates SRV1 while VLAN 10 traffic still crosses the trunk. Fault 2 stops PC-A beyond its local subnet. Fault 3 permits traffic to leave R1 but breaks the return path from R2.

Repair check: Restore the SW2 allowed list to 10,20,30,40,99, PC-A gateway to 10.10.10.1, remove the R2 Null0 route, and restore ip route 10.10.0.0 255.255.0.0 10.255.0.1. Repeat the baseline commands and compare the output with 00-connectivity.txt.

Pass gate: Identify all three faults, avoid unrelated changes, preserve before and after evidence, restore every required service, explain each packet path, and return to the exact baseline state.

Current Exam Scope #

The official N10-009 objectives list five domains: Networking Concepts at 23%, Network Implementation at 20%, Network Operations at 19%, Network Security at 14%, and Network Troubleshooting at 24%. Check the issuing organization’s document before booking an exam.

• CompTIA Network+ N10-009 exam objectives
• IPv6 documentation prefix, RFC 3849