COMPTIA

NETWORK+ N10-009
STUDY GUIDE

Written by Scott Prieto

From the creator of PowerCert Animated Videos
on
 Version 1.0

This ebook is designed to study for the

CompTIA Network+ N10-009 exam.

Check out my youtube channel:

PowerCert Animated Videos

© PowerCert 2026. All rights reserved. No part of this document

may be reproduced nor transmitted in any form, by any means
(electronic, photocopying, recording, or otherwise) without the prior
written permission of the author.
 TABLE OF CONTENTS

1 network topologies & types 68 IPv4 address

Star, mesh, point-to-point, hybrid, IPv4, octet, binary numbers, subnet
spine-leaf, three-tier hierarchical mask.
model, collapsed core model, traffic
flow.
77 modern network environments
SDN, SD-WAN, application aware,
8 osi model
zero-touch provisioning, transport
Data flow, application, presentation,
agnostic, zero trust architecture,
session, transport, network, data link,
least privilege access, SASE, SSE, IaC.
& physical layers.

85 IPv6 address
12 Network Devices, Applications, &
IPv6, compression, tunneling,
Functions NAT64.
Switch, router, firewall, ACL, IDS/IPS,
load balancer, QoS, proxy, NAS, SAN,
90 VLAN
wireless access point, wireless LAN
controller, CDN. VLANs, 802.1Q tagging, trunks and
trunk ports, native VLAN, VXLAN,
DCI.
25 Virtualization & the cloud
Virtualization, VPC, cloud models. 98 switch technology
Layer 2 vs layer 3 switches, link
35 Ports, Protocols, Services, & Traffic aggregation, duplex, interface speed
Types ratings, MTU, jumbo frames.

Ports, TCP vs UDP, IPsec, GRE, traffic

types. 101 routing tables
Directly connected, static, dynamic,
45 Wireless technology dynamic routing protocols, RIP,
Wireless standards, 802.11, cellular OSPF, BGP, EIGRP, route selection,
networks, satellite. administrative distance, prefix
length, metric.

48 Wired technology
802.3 Ethernet standards, twisted 106 wireless devices & technologies
pair cables, UTP, STP, DAC, plenum, Wi-Fi bands, channels, 802.11h, DFS,
coaxial, fiber modes. TPC, band steering, SSID, BSSID,
ESSID, wireless network types, WEP,
57 networking connectors WPA, WPA2, WPA3, guest network,
RJ-11, RJ-45 BNC, F-type, ST, MPO, LC, captive portal, PSK, enterprise
SC. authentication, RADIUS, antennas,
lightweight vs autonomous APs.
60 IP addressing methods
DHCP, static vs dynamic IP, APIPA,
SLAAC, scope, reservation, exclusion,
lease, DHCP relay/IP helper.
121 Factors of physical installations 173 Network Security Concepts
Server racks, UPS, UDP, port-side Encryption, data in transit/rest, PKI,
intake/exhaust, patch panel, MDF, CA, certificates, IAM, LDAP,
IDF, humidity, temperature, fire authentication, MFA, SSO, TACACS+,
suppression. cameras, locks, honeypots, risk,
exploit, threat, CIA triad, data
locality, PCIDSS, GDPR, IOT/IIOT,
128 Purpose of organizational processes & BYOD.
procedures
Physical, logical, & rack diagrams,
182 Types of Attacks
cable map, layer network diagrams, DDOS, VLAN hopping, MAC
asset inventory, IPAM, SLA, wireless flooding, ARP spoofing, DNS
survey heat map, EOL, EOS, poisoning, rogue DHCP, rogue AP,
decommissioning, software evil twin attack, dumpster diving,
management, baselines. shoulder surfing, phishing, malware,
tailgating.
137 Networking Monitoring Technologies
SNMP, flow of data, packet capture, 189 Network Security, Defense Techniques,
baseline metrics, log aggregation, and Solutions
syslog , SIEM, port mirroring, Device hardening, NAC, port
network discovery, traffic analysis, security, 802.1x, MAC filtering, ACL,
monitoring. content filtering, trusted & untrusted
zones, screened subnet (DMZ).
131 Disaster Recovery
RPO, RTO, MTTR, MTBF, hot site, 193 Common Performance Issues
warm site, cold site, high availability, Congestion, contention,
tabletop exercises. bottlenecking, bandwidth, latency
(lag), packet loss, jitter, channel
151 DNS & DNS Records overlap, signal degradation, client
DNS, root server, top-level domain disassociation, insufficient wireless
server, authoritative name server, coverage, roaming misconfiguration.
DNS zone file, DNS records,
DNSSEC, DOH, DOT, forward & 199 Software / Hardware Tools &
reverse zones, host file, NTP, NTS.
Commands
161 VPN Ping, traceroute, nslookup, arp,
netstat, ipconfig, tcpdump, nmap,
VPN, site-to-site, client-to-site, full &
LLDP, CDP, speed tester, cable
split tunneling, clientless.
tester, tone generator, WI-FI
analyzer, visual fault locator,
166 Connection Methods network tap, show commands.
SSH, GUI, API integration, console,
jump box, in-band & out-of-band
management. 216 Troubleshooting Methodology
 Topologies & Types
The layout of how a network communicates with different
devices is called a topology. The most common
topology is the star topology. In a star topology, all
computers are connected to a central wiring point, such
as a hub or a switch. All data on a star network passes
through this central point before continuing to its
destination. One of the major benefits of this topology is
that if one computer failed or if there was a break in the
cable, the other computers would not be affected
because each computer has their own cable connection.
However, a disadvantage of the star topology is that if
the central hub or switch fails, then all the computers on
that central point would be affected. This is called a
single point of failure. If this happens the entire network
goes down.

Star topology

1
 There is also the mesh topology. In a mesh topology,
each computer is connected to every other computer on
the network. So, with so many connections, it handles
failure very well. In this illustration, there are 4
computers, each with 3 connections, for a total of 12
connections in this network. The advantage of a mesh
topology is that it creates a high redundancy level
because if one or more connections fail, the computers
would still be able to communicate with each other.

Mesh topology

But because of the amount of cabling and network cards

required, mesh topologies can be expensive. So they
are rarely used on local area networks or LANs. They
are mainly used on wide-area networks, such as the
internet. In fact, the internet is a perfect example of a
mesh topology because it consists of numerous routers
worldwide that are interconnected to route data to their
destinations.

2
 Point-to-Point topology

A point-to-point topology is a topology with two hosts

directly connected by a single cable. These hosts could
be computers, routers, switches, servers, and so on. A
point-to-point topology is the simplest topology.

Hybrid topology

Topologies can also be combined with other topologies

as needed; these are known as hybrid topologies. For
example, an organization may use a combination of a
star, mesh, or point-to-point topologies in its network.

A spine-leaf topology creates a full mesh connection in

a network. This consists of two layers. One layer
consists of spine switches, which are the backbone of a
network, and the second layer consists of leaf switches.

3
And then the leaf switches are connected to the servers.

Spine switches

Leaf switches

Spine-leaf topology

In this setup, if a server wanted to communicate with

another server, the data would go from a leaf switch to a
spine switch, then to the leaf switch for the destination
server. So, regardless of how these servers are
connected, the maximum number of hops (steps) will be
a maximum of 2, which minimizes network latency and
improves performance, because all spine and leaf
switches are interconnected, creating multiple paths for
data to travel, creating redundancy and reducing
bottlenecks.

4
When it comes to designing large enterprise networks,
Cisco has created a fast, cost-effective, and reliable
model for achieving this. And it's called the three-tier
hierarchical model. This model serves as the blueprint
for creating large networks by breaking it down into
three layers.

Core

Distribution

Access

Three-tier hierarchical model

The top layer is the core layer. This is the backbone of

a network. This layer consists of high-speed routers and
switches with redundant links that move large amounts
of data. It's essentially the doorway that provides access
to internal and external networks.

The next layer is the distribution layer. The distribution

layer acts as a middleman for exchanging data between
the core and the access layer. This layer provides
intelligent switching, routing, and network access
policies. This layer consists of standard routers and
layer-3 switches.

5
And the last layer is the access layer. In this layer,
users can access network resources, such as
applications, data, and other networks, using their
computers connected to switches. This layer consists of
computers and switches.

Collapsed core model

The collapsed core model is designed for smaller

networks. Instead of having three layers, this combines
the core and distribution layers into a single layer,
creating a two-tier model. A main benefit of using this
model is reducing network costs.

In computer networking, there are terms for the flow of

traffic. For example, there's east-west traffic. This
refers to network traffic between machines in a
particular data center.

East-West traffic

6
So, for example, in this data center (above), when these
servers communicate with the other servers, this would
be an example of east-west traffic.

And then there's also north-south traffic flow. This

refers to data traveling from or to a system that is
physically located outside the data center. So (below), if
data center A wanted to communicate with data center
B that’s in another part of the world, this would be called
north-south traffic.

A B

North-South Traffic

7
 Network Devices,
Applications, &
Functions
A switch is a networking device that connects all of
your network devices on a local network. It's a device
that has multiple ports that accept Ethernet connections
from network devices.

Switch

A switch is considered intelligent because it can actually

learn the physical addresses of the devices that are
connected to it, and it stores these physical addresses,
called MAC addresses, in its table.

MAC Address table

12
So when data is sent to a switch, it's directed only to the
intended destination port. So (below) if computer A
wanted to communicate with computer B, the data
would arrive at the switch. And then the switch would
look at its table of MAC addresses and matching ports,
and deliver the data to the correct port that computer B
is connected to.

A router does exactly what its name implies. A router is

a device that routes or forwards data from one network
to another based on IP addresses. When a data packet
is received from the router, the router inspects the data

Router

13
packet's IP address and determines whether the packet
is destined for its own network or another network. If the
router determines that the data packet is meant for its
own network, it'll receive it. But if it's not meant for its
own network, it sends it off to another network. So a
router is essentially the gateway for a network.

A firewall is a system that's designed to prevent

unauthorized access from entering a private network
by filtering the information that comes in from the
internet. It blocks unwanted traffic and permits wanted
traffic. So, a firewall's purpose is to create a safety
barrier between a private network and the public
internet.

Firewall being used to

protect a network.

Because on the internet, there will always be hackers

and malicious traffic that may try to penetrate a
private network and cause harm. A firewall is the main
component on a network that prevents this. A firewall
that's used on a computer networks is similar to

14
how a firewall works in a building structure. In fact,
this is where the word firewall came from. A firewall in
a building structure provides a barrier that, in the
event of a fire on either side, helps keep it contained
and from spreading to the other side. So, it would
keep the fire from destroying the whole building.

Firewall in a building structure

A firewall works by filtering incoming network data

and, based on its rules, determines whether it is
allowed to enter a network. These rules are also
known as an access control list. These rules are
customizable and configured by the network
administrator. The administrator not only decides
what can enter a network, but also what can leave a
network. So these rules will either allow or deny
permission.

15
 ACL - Access Control Listi

An intrusion detection or prevention system is a

hardware tool that's typically placed between the
internet and the firewall. Its job is to alert and protect
a network from outside attacks. These attacks include
viruses, malware, and hackers who are trying to
sabotage an internal network. It monitors traffic
flowing through a network, looking for suspicious
patterns. And if it finds any, it alerts the network
administrator to a potential threat.

IDS / IPS

16
A load balancer is a piece of hardware or software
that distributes network traffic evenly across a
network, preventing any single server or computer
from becoming overwhelmed with the workload. For
example, if a network has 2 servers and one of those
servers is receiving more network traffic than the
other, we can add a load balancer so that both
servers share network traffic evenly.

Load Balancer

QoS stands for quality of service, and this feature is

built into many routers and switches. It's used to
prioritize bandwidth on a local network for specific
applications and devices, a process known as traffic
shaping. With QoS, a network administrator can
decide if an application, such as voice
communication, is more important than web

17
browsing, and then the administrator can configure
voice communication as a higher priority, which will
make sure it gets more bandwidth than other
applications.
QoS

Apps with equal priority Voice app has priority

A proxy is someone or something that has the

authority to act on behalf of another person or thing.
So, in terms of computers and networks, a proxy is a
server, and a proxy server acts on behalf of clients
on a network, such as retrieving data for those clients.
A proxy is a middleman that sits between a private
network and the public internet.

Proxy Server

18
 Networking
Connectors
This is the RJ-11 connector. RJ
stands for registered jack. This is
a 4-wire connector, used mainly to
connect telephone equipment. But
as far as networking, the RJ-11 is
used to connect computers to local
area networks through the RJ-11
computer's modem. The RJ-11
locks itself and to place by a single locking tab, and it
resembles an RJ-45, but it's a little bit smaller.

The RJ-45 is by far the

most common network
connector. This is an 8-wire
connector, used to connect
computers to local area
networks. Like the RJ-11, it
locks itself into place with a
RJ-45 single locking tab and
resembles it, but it's a little
bit larger.

The BNC connector is a common type of RF connector

that is used on coaxial cable. BNC stands for bayonet

57
neill concelman. The BNC
is used for both analog and
digital video transmissions,
as well as audio.

BNC

This connector is called the

F-type. This is a threaded
connector, typically used on
coaxial cables. These are
primarily used by cable
providers to attach to cable
F-type modems. The F-type hand
tightens by an attached nut.

This fiber-optic connector

is called the ST or straight
tip. This uses a half-twist
bayonet-type lock and is
commonly used with ST
single-mode fiber-optic
cable.

Multiple fibers are combined into a single interface via

an MPO or multi-fiber push-on connector. This is a
type of fiber-optic connector that is used in a high-
density environment and for high-speed data transfer
applications.

58
 Multi-fiber push-on

Our next connector is

called the LC or local
connector. This is also a
fiber-optic connector. It
uses a jack similar to an
RJ-45. This type of
LC connector is commonly
used between floors in a
building.

Our last fiber-optic connector is called the SC or

standard connector. This uses a push-pull connector
similar to audio and
video plugs. And like
the LC connector,
this is also
commonly used
between floors in a
building. SC

59
Factors of physical
installations
A server rack is a frame that holds and arranges IT
equipment like servers, routers, switches, and storage
systems. These racks have an industry-standardized
width of 19 inches, which lets products from different
manufacturers fit on the same
rack. The height of the rack is
measured in rack units. A rack
unit is 1.75 inches. So if a
server rack is labeled 42U, that
makes the height of the rack at
73.5 inches. The depths range
from 20 to 36 inches or more
based on the type of rack and
equipment that will be stored in
it. Server racks are essential for
data centers and other places
that need to keep their IT
systems organized and
scalable. And as a network Server rack
administrator, one of the things
that you have to decide on is the size of the rack, such
as the height and depth, and where the equipment is
going to be mounted on the rack. And this will depend
on how much equipment is going to be mounted in the

121
rack, and the spacing between pieces of the equipment
for adequate airflow.

Racks can be open or closed, and the choice will

depend on the specific needs of that organization.

Open server rack Closed server rack

Open racks provide better air flow and cooling. They

also provide easy access to the equipment mounted on
them and are cheaper. Closed racks or cabinets are
when the equipment is enclosed in a cabinet or box.
The purpose of a cabinet rack is for security. They'll
have a lockable door to ensure only authorized
personnel have access to the equipment inside.

In order to keep a network in constant operation, you

need to make sure that it always has power. But
unfortunately in our world, this doesn’t always happen.

122
Power outages can happen for several reasons, such
as storms and blackouts. So, in order to prevent a
disruption in network operation from a power loss, you
need to use a UPS. UPS stands for uninterrupted
power supply. It's a battery backup that supplies power
to your equipment in the event of a power outage. And
in addition to supplying backup power, a UPS also
protects against surges and spikes.

Rack mounted UPS

You might also find a PDU, or power distribution unit,

on a server rack. A PDU is a device that has a power
cord connected to a box. The power cord plugs into an
electrical wall outlet. And then on the other end, the
cord is connected to a box or a strip with multiple power
outlets, where you would plug in devices that need
power. And then the PDU will distribute power to the
devices plugged into those outlets. So a PDU is
basically a power strip that most of us already have in
our homes. But the main difference is that in the IT
world, these will be rack-mounted. And PDUs are

123
typically plugged into a UPS rather than directly into a
wall outlet.

Rack mounted PDU

When discussing network devices like switches, port-

side intake and port-side exhaust refer to airflow
direction. It's how cool air enters and how hot air leaves
the device. When a switch intakes cool air from the
front, where the ports are, and exhausts hot air out the
back. This is called port-side intake. And when a switch
draws cool air in from the back and exhausts hot air
from the front, where the ports are, this is called port-
side exhaust.

Port side intake/exhaust

A patch panel is a flat piece of hardware with network

ports that is typically located in a server room or wiring

124
closet, and its purpose is to reduce clutter by keeping
your network cables neat and organized. A patch panel
is similar to a keystone jack and wall plate. The
difference is that a patch panel has a large number of
ports and is installed on a server rack near a switch. A
wall plate has a small number of ports and is installed in
a wall near a networking device, such as a computer.

Patch panel

Patch panels also come in different types depending on

what kind of network you're running. There are
Ethernet, fiber optic, and coaxial.

MDF stands for main distribution frame. And this is

the main wiring frame that is used as a distributing point
for all the wiring in a building. All of the internal
communication lines in a building connect to the MDF.
And from there, the external lines also connect, thus
completing the circuit. And there is also the IDF, or
intermediate distribution frame. These are smaller
distribution frames located throughout a building. These
provide better flexibility to distribute wires to the main
distribution frame.

125