COMPTIA NETWORK+ EXAM – EXAM-STYLE QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED
PASS | 2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
SECTION ONE: QUESTIONS 1-50
1. A network administrator is configuring a new switch and needs to prevent
unauthorized devices from accessing the network. Which of the following
features should be configured to limit network access based on the physical
address of a connecting device?
A. Port Security
B. ACL
C. VLAN
D. STP
Correct Answer: A. Port Security
*Rationale: Port Security is a feature on switches that restricts input to a specific
port by limiting the number of MAC addresses allowed on that port or by specifying
which MAC addresses are permitted to connect. This effectively limits access based
on the physical address of the device. An ACL (B) operates at a higher layer, filtering
traffic based on IP addresses, protocols, or ports, and is not inherently tied to the
physical switch port. VLANs (C) are used for network segmentation, not for direct
port access control. STP (D) is a protocol used to prevent loops in a switched
network, not for security or access control.
,2. Which of the following IEEE standards defines the operation of a wireless
LAN using the 5 GHz frequency band and supports data rates up to 1.3 Gbps?
A. 802.11ac
B. 802.11n
C. 802.11g
D. 802.11b
Correct Answer: A. 802.11ac
*Rationale: 802.11ac is the IEEE standard that operates exclusively in the 5 GHz
band and, with its Wave 2 enhancements, can support multi-gigabit speeds,
typically up to 1.3 Gbps per spatial stream. 802.11n (B) can operate in both 2.4 and
5 GHz bands, with a maximum data rate of 600 Mbps. 802.11g (C) and 802.11b (D)
are legacy standards that operate solely in the 2.4 GHz band.
3. A technician is troubleshooting a slow network and believes a device is
sending out excessive broadcast traffic. Which of the following commands can
be used on a Windows machine to display the number of packets sent and
received, including errors and broadcasts?
A. arp -a
B. netstat -e
C. ipconfig /all
D. nbtstat -n
Correct Answer: B. netstat -e
,*Rationale: The netstat -e command provides Ethernet statistics for the interface,
which includes details on the number of bytes, unicast packets, non-unicast packets
(broadcasts and multicasts), discards, and errors. This is useful for identifying
excessive non-unicast traffic. The arp -a (A) command displays the ARP cache.
ipconfig /all (C) shows network configuration details for all adapters.
nbtstat -n (D) displays NetBIOS name tables, which is rarely used in modern
networks.
4. An organization is implementing a new network that requires high fault
tolerance and redundancy. Which of the following topologies provides the
highest level of redundancy by creating a network where every node has a
point-to-point connection to every other node?
A. Ring
B. Star
C. Bus
D. Mesh
Correct Answer: D. Mesh
*Rationale: A full mesh topology provides the highest level of redundancy because
every node has a dedicated connection to every other node. If one link fails,
multiple alternate paths are available for data to reach its destination. A ring
topology (A) provides redundancy via a second ring or dual-ring configuration but
is not as robust as a full mesh. A star topology (B) has a single point of failure in the
central switch/hub. A bus topology (C) is non-redundant and a single break in the
cable can bring down the entire network.
, 5. A network administrator is designing a subnetting scheme for a new office.
The network is using the private IP address range 192.168.1.0/24. They need to
create five subnets, each capable of supporting at least 25 hosts. Which of the
following subnet masks would fulfill this requirement?
A. 255.255.255.0
B. 255.255.255.224
C. 255.255.255.240
D. 255.255.255.192
Correct Answer: B. 255.255.255.224
*Rationale: A /24 network (255.255.255.0) needs to be subnetted further. The
number of hosts needed is 25, so the host portion must provide at least 2^5 - 2 =
30 usable addresses. This requires 5 host bits, leaving 3 bits for the network portion
in the fourth octet. A /27 subnet mask (255.255.255.224) provides 2^3 = 8 subnets
and 30 hosts each. 255.255.255.240 (C) is a /28, which only provides 14 usable
hosts. 255.255.255.192 (D) is a /26, which provides 62 hosts, but only creates 4
subnets, which is insufficient for the requirement of five subnets.
6. A user reports that they cannot access a particular website, but they can
access other websites. After pinging the website's IP address and receiving a
successful response, what is the most likely cause of the issue?
A. The default gateway is misconfigured.
B. The DNS server is not resolving the domain name correctly.
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED
PASS | 2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
SECTION ONE: QUESTIONS 1-50
1. A network administrator is configuring a new switch and needs to prevent
unauthorized devices from accessing the network. Which of the following
features should be configured to limit network access based on the physical
address of a connecting device?
A. Port Security
B. ACL
C. VLAN
D. STP
Correct Answer: A. Port Security
*Rationale: Port Security is a feature on switches that restricts input to a specific
port by limiting the number of MAC addresses allowed on that port or by specifying
which MAC addresses are permitted to connect. This effectively limits access based
on the physical address of the device. An ACL (B) operates at a higher layer, filtering
traffic based on IP addresses, protocols, or ports, and is not inherently tied to the
physical switch port. VLANs (C) are used for network segmentation, not for direct
port access control. STP (D) is a protocol used to prevent loops in a switched
network, not for security or access control.
,2. Which of the following IEEE standards defines the operation of a wireless
LAN using the 5 GHz frequency band and supports data rates up to 1.3 Gbps?
A. 802.11ac
B. 802.11n
C. 802.11g
D. 802.11b
Correct Answer: A. 802.11ac
*Rationale: 802.11ac is the IEEE standard that operates exclusively in the 5 GHz
band and, with its Wave 2 enhancements, can support multi-gigabit speeds,
typically up to 1.3 Gbps per spatial stream. 802.11n (B) can operate in both 2.4 and
5 GHz bands, with a maximum data rate of 600 Mbps. 802.11g (C) and 802.11b (D)
are legacy standards that operate solely in the 2.4 GHz band.
3. A technician is troubleshooting a slow network and believes a device is
sending out excessive broadcast traffic. Which of the following commands can
be used on a Windows machine to display the number of packets sent and
received, including errors and broadcasts?
A. arp -a
B. netstat -e
C. ipconfig /all
D. nbtstat -n
Correct Answer: B. netstat -e
,*Rationale: The netstat -e command provides Ethernet statistics for the interface,
which includes details on the number of bytes, unicast packets, non-unicast packets
(broadcasts and multicasts), discards, and errors. This is useful for identifying
excessive non-unicast traffic. The arp -a (A) command displays the ARP cache.
ipconfig /all (C) shows network configuration details for all adapters.
nbtstat -n (D) displays NetBIOS name tables, which is rarely used in modern
networks.
4. An organization is implementing a new network that requires high fault
tolerance and redundancy. Which of the following topologies provides the
highest level of redundancy by creating a network where every node has a
point-to-point connection to every other node?
A. Ring
B. Star
C. Bus
D. Mesh
Correct Answer: D. Mesh
*Rationale: A full mesh topology provides the highest level of redundancy because
every node has a dedicated connection to every other node. If one link fails,
multiple alternate paths are available for data to reach its destination. A ring
topology (A) provides redundancy via a second ring or dual-ring configuration but
is not as robust as a full mesh. A star topology (B) has a single point of failure in the
central switch/hub. A bus topology (C) is non-redundant and a single break in the
cable can bring down the entire network.
, 5. A network administrator is designing a subnetting scheme for a new office.
The network is using the private IP address range 192.168.1.0/24. They need to
create five subnets, each capable of supporting at least 25 hosts. Which of the
following subnet masks would fulfill this requirement?
A. 255.255.255.0
B. 255.255.255.224
C. 255.255.255.240
D. 255.255.255.192
Correct Answer: B. 255.255.255.224
*Rationale: A /24 network (255.255.255.0) needs to be subnetted further. The
number of hosts needed is 25, so the host portion must provide at least 2^5 - 2 =
30 usable addresses. This requires 5 host bits, leaving 3 bits for the network portion
in the fourth octet. A /27 subnet mask (255.255.255.224) provides 2^3 = 8 subnets
and 30 hosts each. 255.255.255.240 (C) is a /28, which only provides 14 usable
hosts. 255.255.255.192 (D) is a /26, which provides 62 hosts, but only creates 4
subnets, which is insufficient for the requirement of five subnets.
6. A user reports that they cannot access a particular website, but they can
access other websites. After pinging the website's IP address and receiving a
successful response, what is the most likely cause of the issue?
A. The default gateway is misconfigured.
B. The DNS server is not resolving the domain name correctly.
