🇬🇧 CompTIA A+ / Network+ / Security+ · subject
CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009) Syllabus
The CompTIA Network+: Networking Concepts & Models (N10-009) syllabus for CompTIA A+ / Network+ / Security+ in full: 5 chapters, 16 topics and 31 sub-topics, every one listed below, plus 51 CompTIA Network+: Networking Concepts & Models (N10-009) flashcards with answers.
CompTIA Network+: Networking Concepts & Models (N10-009) syllabus: all 5 chapters
Expand any chapter to see its topics and sub-topics.
-
OSI and Networking Models
3 topics- The Seven-Layer OSI Model
- Layer functions from physical to application
- Encapsulation and de-encapsulation
- TCP/IP Model and Protocol Data Units
- Frames, packets, segments and data
- Mapping TCP/IP to OSI
- Network Topologies and Architectures
- Star, mesh, hybrid and spine-and-leaf
- Three-tier and collapsed-core designs
- Traffic flows: north-south and east-west
- The Seven-Layer OSI Model
-
Cabling, Connectivity and Media
3 topics- Copper and Fibre Media
- Twisted pair categories and shielding
- Single-mode versus multi-mode fibre
- Connectors and Transceivers
- RJ45, LC, SC, MPO and BNC
- SFP, SFP+, QSFP and media converters
- Termination Standards and Tools
- T568A and T568B wiring
- Cable testers, OTDR and crimpers
- Copper and Fibre Media
-
IP Addressing and Subnetting
4 topics- IPv4 Addressing
- Classful, classless and CIDR notation
- Public, private and APIPA ranges
- Subnetting and VLSM
- Calculating subnets, hosts and broadcast addresses
- Variable-length subnet masking and supernetting
- IPv6 Addressing
- Address types: global unicast, link-local, multicast
- SLAAC, EUI-64 and dual stack
- Network Address Translation
- Static NAT, dynamic NAT and PAT/overload
- IPv4 Addressing
-
Network Services and Applications
3 topics- Core Network Services
- DHCP scopes, reservations and relay
- DNS record types: A, AAAA, CNAME, MX, PTR, TXT, SRV
- NTP and time synchronisation
- Ports and Protocols Reference
- Well-known, registered and dynamic port ranges
- Secure versus insecure protocol pairs
- Network Architecture Services
- Load balancers, proxies and content delivery networks
- Core Network Services
-
Cloud and Datacentre Concepts
3 topics- Cloud Deployment and Service Models
- IaaS, PaaS, SaaS and the responsibility matrix
- Public, private, hybrid and multi-cloud
- Cloud Connectivity and Networking
- Virtual private cloud, subnets and gateways
- Direct connect and VPN to cloud
- Network Function Virtualisation
- Virtual switches, routers and firewalls
- Cloud Deployment and Service Models
CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009) flashcards — 51 questions with answers
List the seven layers of the OSI model in order from Layer 1 to Layer 7.
Layer 1 Physical, Layer 2 Data Link, Layer 3 Network, Layer 4 Transport, Layer 5 Session, Layer 6 Presentation, Layer 7 Application. A common mnemonic is 'Please Do Not Throw Sausage Pizza Away'.
At which OSI layer do routers operate and what addressing do they use?
Routers operate at Layer 3 (Network) and use logical IP addresses to make forwarding/path-selection decisions between networks.
What is the Protocol Data Unit (PDU) name at each of these layers: Transport, Network, Data Link, Physical?
Transport = Segment (TCP) or Datagram (UDP); Network = Packet; Data Link = Frame; Physical = Bits.
Which OSI layer is responsible for MAC addressing, framing, and error detection via the FCS, and what are its two sublayers?
Layer 2, the Data Link layer. Its two sublayers are the LLC (Logical Link Control) and the MAC (Media Access Control).
How do the four layers of the TCP/IP model map to the seven OSI layers?
Network Access/Link = OSI Physical + Data Link; Internet = OSI Network; Transport = OSI Transport; Application = OSI Session + Presentation + Application.
What is the OSI Layer 4 difference between TCP and UDP?
TCP is connection-oriented, reliable, sequenced, and uses a three-way handshake with acknowledgements and flow/congestion control. UDP is connectionless, best-effort, unsequenced, with lower overhead and latency.
What three steps make up the TCP three-way handshake?
1) SYN (client to server), 2) SYN-ACK (server to client), 3) ACK (client to server). The connection is then established.
Which OSI layer handles encryption, compression, and data format translation (e.g., ASCII, JPEG, SSL/TLS presentation)?
Layer 6, the Presentation layer.
Define a star, mesh, and bus physical topology.
Star: every node connects to a central switch/hub (most common in modern LANs). Mesh: nodes interconnect with multiple/redundant paths (full mesh = every node to every node). Bus: all nodes share a single backbone cable.
In a full-mesh network of $n$ nodes, how many direct links are required?
$\frac{n(n-1)}{2}$ links.
What is the difference between a three-tier and a spine-and-leaf data-centre architecture?
Three-tier uses core, distribution (aggregation), and access layers, optimized for north-south traffic. Spine-and-leaf is a two-tier design where every leaf connects to every spine, optimized for low-latency east-west traffic with predictable hop counts.
Compare single-mode fibre (SMF) and multimode fibre (MMF).
SMF has a small core (about $9\,\mu m$), uses laser light, supports long distances (km) and high bandwidth, typically yellow jacket. MMF has a larger core ($50/62.5\,\mu m$), uses LED/VCSEL, supports shorter distances (hundreds of metres), typically aqua/orange jacket.
What does the category rating of twisted-pair copper (Cat 5e, Cat 6, Cat 6a) determine, and what speed/distance does Cat 6a support?
The category rating determines bandwidth/frequency and supported speed. Cat 6a supports 10GBASE-T (10 Gbps) up to 100 m, at 500 MHz.
What is the difference between UTP and STP copper cabling?
UTP (Unshielded Twisted Pair) relies only on the twist to cancel interference. STP (Shielded Twisted Pair) adds metallic shielding (foil/braid) around pairs or the whole cable to reduce EMI/crosstalk, requiring proper grounding.
What is the maximum standard cable run length for copper Ethernet (twisted pair) and why?
100 metres (90 m of solid horizontal cable plus 10 m of patch cords). Beyond this, attenuation and signal degradation make reliable communication unlikely.
Match these fibre connectors to their description: LC, SC, ST, MPO.
LC = small form-factor (little/Lucent connector), push-pull latch, common in high density. SC = square 'subscriber/standard' push-pull connector. ST = round bayonet 'straight tip' twist-lock. MPO = multi-fibre push-on, carries many fibres (e.g., 12/24) for 40/100G.
What is a transceiver, and what do the SFP, SFP+, QSFP, and QSFP28 form factors typically support?
A transceiver is a hot-swappable module that converts between electrical and optical (or copper) signals. SFP supports up to 1 Gbps, SFP+ up to 10 Gbps, QSFP up to 40 Gbps (4x10G), and QSFP28 up to 100 Gbps.
What are the pin assignments difference between T568A and T568B wiring standards?
They differ by swapping the green and orange pairs. T568B (most common in the US) order: white-orange, orange, white-green, blue, white-blue, green, white-brown, brown. T568A swaps orange and green pairs. Both ends matching makes a straight-through cable.
What tools are used to terminate, attach, and test copper cabling: punchdown, crimper, cable tester, TDR?
Punchdown tool seats wires into 66/110 blocks or keystone jacks. Crimper attaches RJ45 connectors to cable. Cable tester verifies continuity/wiremap. A TDR (Time-Domain Reflectometer) locates cable faults/breaks by distance.
What are the three default classful IPv4 address ranges (Class A, B, C) by first octet?
Class A: 1–126 (default mask /8). Class B: 128–191 (default mask /16). Class C: 192–223 (default mask /24). 127 is reserved for loopback.
Show the other 31 CompTIA Network+: Networking Concepts & Models (N10-009) flashcards
List the three RFC 1918 private IPv4 address ranges.
10.0.0.0/8, 172.16.0.0/12 (172.16.0.0–172.31.255.255), and 192.168.0.0/16.
What is the APIPA range and when is it assigned?
169.254.0.0/16 (169.254.0.1–169.254.255.254). It is self-assigned by a host when no DHCP server responds, allowing only local-link communication.
Given a network with a $/n$ prefix, what formula gives the number of usable hosts?
$2^{(32-n)} - 2$, subtracting the network address and the broadcast address.
How many usable hosts and what is the subnet mask for a /27 network?
Mask is 255.255.255.224. Usable hosts $= 2^{5} - 2 = 30$.
What is the subnet mask in dotted-decimal for /22, and how many host bits does it have?
/22 = 255.255.252.0, with $32 - 22 = 10$ host bits, giving $2^{10}-2 = 1022$ usable hosts.
What is VLSM and what problem does it solve?
VLSM (Variable Length Subnet Masking) allows subnets of different sizes within the same classful network by using different prefix lengths. It conserves address space by matching subnet size to the actual number of hosts needed.
How many bits must be borrowed to create at least 6 subnets, and how many subnets does that yield?
Borrow 3 bits, since $2^{3} = 8 \geq 6$. This yields 8 subnets (2 bits would only give $2^{2}=4$).
What is the full (uncompressed) length of an IPv6 address and how is it written?
128 bits, written as eight groups of four hexadecimal digits separated by colons, e.g., 2001:0db8:0000:0000:0000:0000:0000:0001.
State the two IPv6 zero-compression rules.
1) Leading zeros in any group may be omitted (0db8 becomes db8). 2) One contiguous run of all-zero groups may be replaced with a double colon '::', and only once per address.
What is the IPv6 prefix for link-local addresses and global unicast addresses?
Link-local addresses use fe80::/10 (auto-configured on every interface). Global unicast addresses currently use 2000::/3.
What is EUI-64 and how does it build the interface ID from a MAC address?
EUI-64 derives a 64-bit interface ID from a 48-bit MAC by splitting it, inserting FFFE in the middle, and flipping the 7th bit (U/L bit) of the first octet. Example: MAC becomes a 64-bit host portion for SLAAC.
What is SLAAC in IPv6?
Stateless Address Autoconfiguration: a host generates its own IPv6 address using the network prefix learned from a Router Advertisement (RA) combined with a self-generated interface ID, without a DHCP server.
What is the difference between NAT, PAT, and static NAT?
Static NAT maps one private address to one public address (one-to-one). Dynamic NAT maps private addresses to a pool of public addresses. PAT (NAT overload) maps many private addresses to one public address using unique source port numbers.
Why is PAT (Port Address Translation) the most common form of NAT for home/small networks?
Because it lets many internal hosts share a single public IPv4 address by tracking unique source-port-to-host mappings, conserving scarce public IPv4 addresses.
In NAT terminology, define 'inside local' and 'inside global'.
Inside local is the private (RFC 1918) address of an internal host as seen on the inside network. Inside global is the public address that represents that host externally after translation.
What is the function of DNS and what default port does it use?
DNS (Domain Name System) resolves human-readable hostnames to IP addresses (and vice versa). It uses port 53, with UDP for most queries and TCP for zone transfers and large responses.
Match these DNS record types to their purpose: A, AAAA, CNAME, MX, PTR, TXT.
A = hostname to IPv4. AAAA = hostname to IPv6. CNAME = alias to another name. MX = mail exchanger for a domain. PTR = reverse lookup (IP to name). TXT = arbitrary text (SPF/DKIM/verification).
What are the four messages in the DHCP DORA process?
Discover (client broadcast), Offer (server proposes a lease), Request (client requests the offered address), Acknowledge (server confirms the lease). Mnemonic: DORA.
What is the purpose of NTP and which port does it use?
NTP (Network Time Protocol) synchronizes clocks across devices using a hierarchy of stratum levels. It uses UDP port 123. Accurate time is essential for logging, certificates, and authentication.
List the well-known ports for FTP, SSH, Telnet, SMTP, HTTP, and HTTPS.
FTP = 20/21 (TCP), SSH = 22 (TCP), Telnet = 23 (TCP), SMTP = 25 (TCP), HTTP = 80 (TCP), HTTPS = 443 (TCP).
List the ports for DNS, DHCP, TFTP, SNMP, and RDP.
DNS = 53 (UDP/TCP), DHCP = 67/68 (UDP), TFTP = 69 (UDP), SNMP = 161/162 (UDP), RDP = 3389 (TCP).
What ports do POP3, IMAP, and their secure (TLS) versions use?
POP3 = 110, POP3S = 995. IMAP = 143, IMAPS = 993. All are TCP.
What ports do LDAP, LDAPS, and SMB use?
LDAP = 389 (TCP/UDP), LDAPS = 636 (TCP), SMB = 445 (TCP).
What is the difference between SDN and traditional networking in terms of control and data planes?
Traditional devices have the control plane (decision-making) and data plane (forwarding) on each device. SDN (Software-Defined Networking) centralizes the control plane in a controller that programs the forwarding/data plane of devices via APIs (e.g., OpenFlow / southbound interface).
Define the three cloud service models: IaaS, PaaS, and SaaS.
IaaS provides virtualized infrastructure (VMs, storage, networking) — you manage OS and up. PaaS provides a development/runtime platform — you manage only your app and data. SaaS delivers ready-to-use applications over the web — the provider manages everything.
Compare public, private, hybrid, and community cloud deployment models.
Public: shared multi-tenant infrastructure owned by a provider. Private: dedicated to a single organization. Hybrid: a mix of public and private connected together. Community: shared by several organizations with common concerns (e.g., compliance).
What is multitenancy in cloud computing?
A single instance of software/infrastructure serves multiple customers (tenants), with logical isolation keeping each tenant's data and configuration separate while sharing the underlying physical resources.
What is a VPC and what is a cloud gateway/transit gateway?
A VPC (Virtual Private Cloud) is a logically isolated virtual network within a public cloud. A transit/cloud gateway interconnects multiple VPCs and on-premises networks, acting as a central routing hub.
What is Direct Connect / ExpressRoute and how does it differ from a site-to-site VPN to the cloud?
Direct Connect (AWS) / ExpressRoute (Azure) is a dedicated private physical connection between on-prem and the cloud, offering consistent low latency and bandwidth. A site-to-site VPN is an encrypted tunnel over the public internet, cheaper but with variable performance.
What is Network Function Virtualization (NFV)?
NFV replaces dedicated hardware appliances (routers, firewalls, load balancers) with software functions (VNFs) running on standard servers/VMs, enabling flexible, scalable, and rapidly deployable network services.
What is a VXLAN and what problem does it solve versus traditional VLANs?
VXLAN (Virtual Extensible LAN) encapsulates Layer 2 frames in UDP (port 4789) to tunnel them over a Layer 3 network. It provides up to about $2^{24}$ (16 million) segments via a 24-bit VNI, far beyond the 4094-VLAN limit of the 12-bit 802.1Q tag, enabling large multitenant overlays.
CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009) FAQ
What is in the CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009) syllabus?
CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009) is split into 5 chapters: OSI and Networking Models, Cabling, Connectivity and Media, IP Addressing and Subnetting, Network Services and Applications and Cloud and Datacentre Concepts. Together they contain 16 topics and 31 sub-topics.
How many chapters are in CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009)?
5 chapters, containing 16 topics and 31 sub-topics. The largest chapter is IP Addressing and Subnetting, with 4 topics.
Are there flashcards for CompTIA A+ / Network+ / Security+ CompTIA Network+: Networking Concepts & Models (N10-009)?
Yes — a 51-card CompTIA Network+: Networking Concepts & Models (N10-009) deck, printed in full in the flashcards section of this page and available in the Examius app with spaced repetition. The free plan covers one exam of your choice, including its flashcards; Examius Pro, a one-time purchase, unlocks every other exam and deck.