Exam Domains

1.0 Networking concepts 23%

1.1OSI model layers
physical; data link; network; transport; session; presentation; application
1.2Networking appliances
routers; switches; firewalls; IDS/IPS; load balancers; proxies; NAS; SAN; wireless devices
1.3Cloud concepts
NFV; VPC; network security groups; cloud gateways; deployment models (public, private, hybrid); service models (SaaS, IaaS, PaaS)
1.4Ports and protocols
FTP; SFTP; SSH; Telnet; SMTP; DNS; DHCP; HTTP; HTTPS; SNMP; LDAP; RDP; SIP
1.5Traffic types
unicast; multicast; anycast; broadcast
1.6Transmission media
wireless (802.11, cellular, satellite); wired (fiber, coaxial, DAC)
1.7Transceivers and connectors
SC; LC; ST; MPO; RJ11; RJ45; F-type; BNC
1.8Network topologies
mesh; hybrid; star/hub and spoke; spine and leaf; point-to-point; three-tier; collapsed core
1.9IPv4 addressing
public vs. private; APIPA; RFC1918; loopback; subnetting (VLSM, CIDR); address classes (A, B, C, D, E)

2.0 Network implementation 20%

2.1Routing technologies
static and dynamic routing (BGP, EIGRP, OSPF); route selection; NAT; PAT; FHRP; VIP; subinterfaces
2.2Switching technologies
VLANs; interface configuration; spanning tree; MTU; jumbo frames
2.3Wireless devices
channels; frequency options; SSID; network types; encryption; guest networks; authentication; antennas; access points
2.4Physical installations
installation implications; power considerations; environmental factors

3.0 Network operations 19%

3.1Documentation
physical vs. logical diagrams; rack diagrams; cable maps; network diagrams; asset inventory; IPAM; SLA; wireless surveys
3.2Life-cycle management
EOL; EOS; software management; decommissioning
3.3Change management
request process tracking
3.4Configuration management
production; backup; baseline configurations
3.5Network monitoring
SNMP; flow data; packet capture; baseline metrics; log aggregation; API integration; port mirroring
3.6Disaster recovery
RPO; RTO; MTTR; MTBF; cold/warm/hot sites; active-active/passive; testing
3.7Network services
DHCP; SLAAC; DNS; NTP; PTP; NTS
3.8Access and management
VPNs; SSH; GUI; API; console

4.0 Network security 14%

4.1Logical security
encryption (data in transit/rest); PKI; IAM; MFA; SSO; RADIUS; LDAP; SAML; TACACS+; time-based authentication; authorization; least privilege; role-based access control; geofencing
4.2Physical security
cameras and locks
4.3Deception technologies
honeypot; honeynet
4.4Security terminology
risk; vulnerability; exploit; threat; CIA triad
4.5Audits and compliance
data locality; PCI DSS; GDPR
4.6Network segmentation
IoT; IIoT; SCADA; ICS; OT; guest; BYOD
4.7Types of attacks
DoS/DDoS; VLAN hopping; MAC flooding; ARP poisoning/spoofing; DNS poisoning/spoofing; rogue devices/services; evil twin; on-path attack; social engineering (phishing, dumpster diving, shoulder surfing, tailgating)
4.8Security features and defense
device hardening; NAC; key management; ACL; URL/content filtering; trusted vs. untrusted zones; screened subnet

5.0 Network troubleshooting 24%

5.1Troubleshooting methodology
identifying the problem; establishing a theory; testing; planning; implementing a solution; verifying functionality; documenting findings
5.2Cabling and physical interface issues
cable issues (incorrect type, signal degradation, improper termination, TX/RX transposed); interface issues (increasing counters, port status); hardware issues (PoE, transceiver mismatch, signal strength)
5.3Network services issues
switching issues (STP, VLAN assignment, ACLs); routing issues (routing table and default routes); address pool exhaustion; incorrect gateway/IP/subnet mask
5.4Performance issues
congestion; latency; packet loss; wireless interference
5.5Tools and protocols
protocol analyzers; command line tools; cable testers; Wi-Fi analyzers

Exam Details

Question TypesMultiple Choice (single), Multiple Choice (multiple), Performance-Based

FormatLinear

Online ProctoringAvailable

ID RequirementsTwo forms of ID are required. Primary ID must be government-issued, include candidate's name, photo, and signature (e.g. passport, driver's license). Secondary ID must include candidate's name and signature or name and photo.

RenewalRequired -- Earn CE credits through CompTIA CE program (training, conferences, publishing, teaching, higher certs) or retake the current exam version before expiry.

PrerequisitesCompTIA A+ certification; 9 to 12 months of hands-on experience in a junior network administrator or network support technician role

Retake PolicyNo waiting period required before first retake. After the second failed attempt, candidates must wait 14 calendar days before any subsequent attempt. No limit on total attempts.

LanguagesEnglish, Japanese, Portuguese, Simplified Chinese

CompTIA Network+ (N10-009) Exam Blueprint

Exam Domains

Exam Details

Official Study Resources