Network Operations

Worth 19% of the CompTIA Network+ (N10-009) exam. CertClue has 74 questions on this objective.

What this objective covers

Network Monitoring, SNMP and Baselines

Objective 3.1 covers monitoring. The recurring exam idea is that you cannot recognise abnormal behaviour without first documenting normal behaviour, which is what a baseline provides.

Exam tip. When a question asks how you would know that current behaviour is abnormal, the answer is the baseline. It appears as the correct option far more often than any monitoring product.

Remote Access Methods for Network Administration

Administering infrastructure remotely has its own set of tools and risks. The exam consistently favours encrypted, authenticated, out-of-band options.

Exam tip. Out-of-band management is the answer whenever the scenario involves needing to reach a device after a change has broken normal connectivity.

Traffic Shaping, QoS and Bandwidth Management

Quality of service ensures that traffic sensitive to delay gets it. Questions describe a symptom affecting voice or video and expect QoS as the mitigation.

Exam tip. QoS reprioritises within existing capacity. If a link is saturated all day rather than at peaks, the correct answer is additional bandwidth, not QoS.

Hardware and Software Tools for Network Work

Tool questions describe a task and expect the right instrument. Group them into cable testing, signal measurement and traffic analysis and the choices become obvious.

Exam tip. Cable tester versus certifier is a favourite distinction. If the requirement mentions meeting a standard or guaranteeing a speed, only a certifier is adequate.

Configuration Management and Network Hardening Baselines

Consistency is what makes a network supportable. Configuration management questions test how changes are controlled, recorded and reversed across many devices.

Exam tip. If devices of the same role behave differently, the answer is configuration drift. The remedy is comparing against the golden configuration, not replacing hardware.

High Availability, Redundancy and Failover

Objective 3.3 covers availability. Know the metrics by name, and the difference between designs that survive a failure and designs that merely recover from one.

Exam tip. RPO drives backup frequency: an RPO of one hour requires backups or replication at least hourly. RTO drives the recovery design, not the backup schedule.

Disaster Recovery Sites and Continuity Planning

Recovery site questions weigh cost against recovery speed. Know what each site type has in place before a disaster, since that is what determines how quickly it can take over.

Exam tip. Match the site type to the stated recovery time objective. If the RTO is measured in minutes, only a hot site or equivalent cloud failover qualifies.

Policies, Agreements and Network Documentation

Objective 3.2 covers the documents that govern and describe a network. Questions describe a purpose and expect the document name, so learn each by what it is for.

Exam tip. SLA and MOU are the confusable pair. An SLA carries enforceable performance commitments; an MOU records intent without them.

Network Access Control and Device Onboarding

Controlling which devices may join the network is an operations concern as much as a security one. Know how 802.1X works and what happens to devices that fail assessment.

Exam tip. MAC filtering appears as a distractor in access control questions. It is trivially bypassed by spoofing, so 802.1X is the correct answer whenever real control is required.

Practice questions

Free, with the answer and the reasoning. No account needed.

1. An organisation wants to correlate authentication failures across firewalls, servers and switches to spot a coordinated attack. What should be deployed?

  • A. A protocol analyser on one switch port
  • B. An additional DHCP server
  • C. A SIEM platformcorrect
  • D. A single syslog server with no analysis

A security information and event management platform aggregates logs from many sources and correlates them, generating alerts from patterns no single device's log would reveal. Plain syslog collection stores events without correlating them, and a single capture point sees only local traffic.

2. A company wants a written document defining acceptable use of company internet and email resources, which employees must agree to before receiving network access. What is this document called?

  • A. MOU
  • B. AUP (Acceptable Use Policy)correct
  • C. SLA
  • D. NDA

An AUP defines what employees are and are not allowed to do with company technology resources, such as internet and email use. An SLA defines expected service performance between a provider and customer, an NDA protects confidential information from disclosure, and an MOU documents a general mutual understanding between parties, none of which specifically govern acceptable resource use.

Work the whole objective

The full CompTIA Network+ bank, the study notes behind these summaries, and a readiness score that tells you which objective to revise next. Free, no paid tier.

Take the free CompTIA Network+ practice test

The other CompTIA Network+ objectives