Free CompTIA Network+ N10-009 Network Security Practice Test 2026 — CompTIA Network+ (N10-009) Questions
This free CompTIA Network+ N10-009 Network Security practice test covers Net+ Domain 4 (~19%) — network security, covering firewalls, IDS/IPS, VPN technologies, NAC, common attacks, and zero trust. Each question includes a detailed explanation aligned to the N10-009 exam objectives — perfect for Network+ exam prep.
Key Topics in CompTIA Network+ N10-009 Network Security
- Firewalls & ACLs
- IDS / IPS
- VPN Technologies (IPsec, SSL/TLS)
- Network Access Control (802.1X)
- Common Attacks (DoS, MITM, DNS Poisoning)
- Zero Trust Network Access (ZTNA)
6 Free CompTIA Network+ N10-009 Network Security Practice Questions with Answers
Sample Question 1 — Network Security
A network administrator wants to implement a security measure that ensures data cannot be read if intercepted during transmission. Which protocol should be used to encrypt data between a client and a server?
- A. HTTP
- B. HTTPS (Correct answer)
- C. FTP
- D. SNMP
Correct answer: B
Explanation: HTTPS (Hypertext Transfer Protocol Secure) uses SSL/TLS to encrypt data transmitted between a client and a server, ensuring confidentiality and integrity. HTTP, FTP, and SNMP do not inherently provide encryption.
Sample Question 2 — Network Security
During a security audit, it was discovered that unauthorized devices are connecting to the company's wireless network. What access control method can be implemented to prevent this?
- A. MAC filtering (Correct answer)
- B. Static IP addressing
- C. SSID hiding
- D. Port mirroring
Correct answer: A
Explanation: MAC filtering allows the network administrator to specify which devices are allowed to connect to the network based on their MAC addresses, effectively preventing unauthorized devices from gaining access.
Sample Question 3 — Network Security
A network engineer notices a significant amount of ICMP traffic on the network, which seems to be part of a DDoS attack. Which mitigation technique should be implemented to reduce this traffic?
- A. Disable ICMP on all routers
- B. Implement rate limiting for ICMP traffic (Correct answer)
- C. Increase bandwidth capacity
- D. Enable port security on switches
Correct answer: B
Explanation: Rate limiting ICMP traffic helps mitigate DDoS attacks by restricting the amount of ICMP traffic allowed, thus preventing the network from being overwhelmed without completely disabling ICMP, which is often necessary for network diagnostics.
Sample Question 4 — Network Security
A company wants to secure its internal communications using a protocol that provides confidentiality, integrity, and authentication. Which of the following protocols should be used?
- A. FTP
- B. IPsec (Correct answer)
- C. Telnet
- D. SMTP
Correct answer: B
Explanation: IPsec (Internet Protocol Security) provides confidentiality, integrity, and authentication of data at the IP packet level, making it suitable for securing internal communications. FTP, Telnet, and SMTP do not inherently provide these security features.
Sample Question 5 — Network Security
While reviewing server logs, a security analyst notices repeated failed login attempts from an unknown IP address. What immediate action should be taken to protect the server?
- A. Change the server's IP address
- B. Block the IP address using a firewall (Correct answer)
- C. Reboot the server
- D. Increase the server's processing power
Correct answer: B
Explanation: Blocking the suspicious IP address using a firewall prevents further unauthorized access attempts, effectively mitigating the immediate threat without affecting legitimate users.
Sample Question 6 — Network Security
A network administrator needs to ensure that only authorized devices can connect to the network switch. Which of the following features should be enabled?
- A. VLAN tagging
- B. Port mirroring
- C. Port security (Correct answer)
- D. Link aggregation
Correct answer: C
Explanation: Port security is a feature that restricts input to an interface by limiting and identifying MAC addresses of the devices that are allowed to access the port. This helps ensure that only authorized devices can connect.
About the CompTIA Network+ N10-009 / CompTIA Network+ (N10-009) Exam
- Questions: Up to 90 (multiple choice + PBQs)
- Time: 90 minutes
- Passing score: 720 / 900
- Cost: $358 USD (voucher)
- Validity: 3 years (renew with CEUs or higher cert)
- Provider: CompTIA
Other CompTIA Network+ N10-009 Practice Domains
Start the free CompTIA Network+ N10-009 Network Security practice test now | 10-question quick start | All CompTIA Network+ N10-009 domains