N10-010 — CompTIA Network+ V10 Exam Blueprint

How to Use This Exam Blueprint

Use this independent Exam Blueprint as a practical readiness map for CompTIA Network+ V10 (N10-010). It is designed to help you confirm that you can recognize networking concepts, make implementation decisions, interpret symptoms, and select appropriate troubleshooting steps.

For each area, ask three questions:

1. Can I explain it clearly?
2. Can I apply it in a scenario?
3. Can I troubleshoot it when the symptom is indirect?

Mark an area as ready only when you can handle diagrams, short scenarios, command output, and “best next step” decisions without relying on memorized definitions alone.

Topic-Area Readiness Table

Core Networking Concepts Checklist

Models, Layers, and Traffic Flow

• Explain the difference between a frame, packet, segment, and datagram.
• Identify which OSI layer is involved when a question mentions MAC addresses, IP addresses, ports, encryption, routing, or applications.
• Describe encapsulation as traffic moves from an application to the wire.
• Explain why switches primarily forward based on MAC addresses and routers forward based on IP addresses.
• Distinguish unicast, broadcast, multicast, and anycast concepts.
• Explain collision domains and broadcast domains in modern switched networks.
• Recognize how ARP supports IPv4 local network communication.
• Recognize how Neighbor Discovery supports IPv6 local network communication.
• Explain the purpose of MTU and why fragmentation or dropped packets can occur.
• Identify when a symptom is likely physical, data link, network, transport, or application related.

OSI Layer Readiness Map

Addressing and Subnetting Readiness

IPv4 Skills

• Convert between dotted-decimal subnet masks and CIDR notation.
• Identify network, broadcast, first usable, and last usable IPv4 addresses.
• Determine whether two IPv4 addresses are in the same subnet.
• Recognize private IPv4 ranges and why they commonly require NAT/PAT for internet access.
• Recognize APIPA/link-local symptoms when DHCP fails.
• Explain the difference between a default gateway and a DNS server.
• Understand why overlapping IP ranges can break routing, VPNs, and cloud connectivity.
• Interpret host configuration output and spot wrong IP, mask, gateway, or DNS values.

IPv6 Skills

• Recognize compressed IPv6 notation.
• Identify the role of link-local addresses.
• Distinguish IPv6 concepts from IPv4 habits, especially the lack of broadcast in IPv6.
• Explain when SLAAC, DHCPv6, or static addressing may be used.
• Recognize dual-stack as a transition or coexistence approach.
• Avoid assuming NAT is required in IPv6 designs.

Subnetting Formulas to Know

For traditional IPv4 subnetting, the common usable-host calculation is:

Where \(h\) is the number of host bits. Be aware that special-purpose subnets, point-to-point addressing, and host routes may be treated differently depending on context.

To estimate transfer time:

Use this as an approximation. Real throughput is affected by protocol overhead, congestion, retransmissions, and device limitations.

Fast Subnetting Self-Check

Protocols, Ports, and Services Checklist

You do not need to memorize ports in isolation. Know what the service does, whether it commonly uses TCP, UDP, or both, and what a failure looks like.

Switching, VLANs, and Local Network Implementation

Switching Checklist

• Explain how a switch learns MAC addresses.
• Describe what happens when a switch receives an unknown unicast frame.
• Distinguish access ports from trunk ports.
• Explain VLAN tagging and why mismatched trunk settings cause outages.
• Recognize symptoms of native VLAN or allowed VLAN mismatches.
• Explain why inter-VLAN routing requires a Layer 3 function.
• Describe Spanning Tree Protocol concepts at a high level and why loops are dangerous.
• Recognize broadcast storm symptoms.
• Explain link aggregation and why both ends must be compatible.
• Understand port security concepts and common violation symptoms.
• Recognize PoE use cases and basic troubleshooting concerns.

VLAN Decision Checks

Routing and WAN Readiness

Routing Concepts

• Explain the purpose of a default route.
• Recognize longest-prefix match as a route-selection concept.
• Distinguish static routing from dynamic routing.
• Compare internal routing and external routing at a high level.
• Understand next hop, route metric, route redistribution concept, and route summarization concept.
• Explain why missing return routes can cause one-way or failed communication.
• Recognize asymmetric routing as a troubleshooting concern.
• Understand basic high-availability routing concepts such as redundant gateways or failover paths.
• Identify when NAT/PAT is part of the path and when it is not.
• Explain the difference between a routing issue and a firewall policy issue.

WAN and Site Connectivity Checklist

• Compare private WAN, broadband, cellular, satellite, and VPN-based connectivity at a conceptual level.
• Recognize site-to-site VPN versus remote-access VPN use cases.
• Understand split tunnel versus full tunnel as design choices.
• Identify where encryption, authentication, and routing decisions apply in a VPN.
• Recognize latency-sensitive traffic and why link quality matters.
• Understand redundancy options such as multiple providers, multiple paths, and failover links.
• Explain why overlapping address spaces complicate site-to-site connectivity.

Wireless Networking Checklist

Wireless Fundamentals

• Compare 2.4 GHz, 5 GHz, and 6 GHz bands at a practical level.
• Understand channel overlap and interference.
• Distinguish signal strength from signal quality.
• Recognize common sources of RF interference.
• Explain SSID, BSSID, roaming, and controller-based management concepts.
• Identify when a site survey or spectrum analysis is appropriate.
• Understand antenna directionality at a high level.
• Recognize the effect of building materials, distance, and client density.
• Compare personal and enterprise wireless authentication models.
• Understand why shared passwords may not be appropriate for enterprise access.

Wireless Scenario Checks

Network Services and Name Resolution

DNS Readiness

• Explain recursive versus authoritative DNS roles.
• Recognize A, AAAA, CNAME, MX, TXT, PTR, and SRV record use cases.
• Understand forward and reverse lookup concepts.
• Explain TTL at a practical level.
• Diagnose “can ping IP but not hostname” as a likely name-resolution issue.
• Recognize split DNS or internal/external DNS design concepts.
• Understand why stale DNS, wrong search suffixes, or wrong DNS servers create confusing symptoms.

DHCP Readiness

• Explain the basic DHCP discovery and lease process.
• Identify DHCP scope, exclusion, reservation, and lease concepts.
• Recognize why DHCP relay/helper configuration is needed across subnets.
• Diagnose APIPA/link-local assignment as a likely DHCP reachability problem.
• Distinguish a DHCP problem from a DNS or gateway problem.
• Understand risks from rogue DHCP servers.

NAT, Time, and Monitoring Services

• Explain static NAT, dynamic NAT, and PAT concepts.
• Identify when NAT hides internal addressing and when it does not provide complete security by itself.
• Explain why accurate time matters for logs, certificates, authentication, and incident investigation.
• Recognize SNMP polling versus trap/inform style notifications.
• Understand syslog collection and why centralized logs help troubleshooting.

Network Security Exam Blueprint

Security Controls

Security Readiness Prompts

• Choose where to place a firewall, ACL, IDS/IPS, or VPN gateway in a diagram.
• Explain why segmentation reduces blast radius.
• Identify management-plane protections for switches, routers, firewalls, and wireless controllers.
• Recognize insecure protocols and select safer alternatives.
• Understand basic hardening: disable unused ports, change defaults, restrict admin access, update firmware/software, and log administrative actions.
• Distinguish authentication from authorization.
• Recognize social engineering, rogue devices, evil twin APs, credential theft, and misconfiguration risks.
• Explain why physical security still matters for network closets, ports, cabling, and devices.
• Understand least privilege and need-to-know access in network policy design.

Cloud, Virtualization, and Modern Network Architecture

Virtual and Cloud Networking Checklist

• Explain virtual switches, virtual NICs, and port groups or logical network segments.
• Understand overlay networking at a conceptual level.
• Distinguish software-defined networking control plane from data plane.
• Recognize cloud equivalents of subnets, route tables, security filtering, NAT, VPNs, and load balancers.
• Understand east-west versus north-south traffic.
• Explain why cloud security filtering may occur at multiple layers.
• Recognize hybrid connectivity issues: overlapping CIDR ranges, missing routes, DNS forwarding, and firewall policy.
• Understand container networking at a high level if presented in a scenario.
• Identify when load balancing, autoscaling, or redundancy changes traffic flow.
• Recognize that cloud networking still requires sound IP, routing, DNS, and security fundamentals.

Architecture Decision Checks

Operations, Monitoring, and Documentation

Operational Readiness Checklist

• Interpret basic network diagrams and identify missing information.
• Create or review an IP address plan.
• Maintain device inventory, interface labels, cable labels, and rack diagrams.
• Understand configuration backup and restore importance.
• Recognize the purpose of baselines for bandwidth, latency, errors, CPU, memory, and wireless utilization.
• Explain alert fatigue and why thresholds should be meaningful.
• Identify useful log sources for troubleshooting and security review.
• Understand change management: request, approval, implementation, backout, validation, and documentation.
• Explain why maintenance windows reduce business risk.
• Distinguish incident, problem, and change concepts at a practical level.
• Recognize when escalation is appropriate and what information should be included.

Monitoring and Observability Tools

Troubleshooting Checklist

Methodical Troubleshooting

Be ready to follow a disciplined process instead of jumping to the most familiar fix.

• Identify the problem and gather symptoms.
• Determine scope: one user, one VLAN, one site, one application, or all users.
• Check recent changes.
• Establish a likely theory.
• Test the theory with the least disruptive method.
• Create a plan of action and consider impact.
• Implement the fix or escalate with evidence.
• Verify full system functionality.
• Apply preventive measures when appropriate.
• Document findings, actions, and outcomes.

Command Recognition Checks

Know what each command or tool is used for and what kind of evidence it provides.

ipconfig /all        Show Windows IP configuration details
ping                 Test basic reachability and latency
tracert / traceroute Show path toward a destination
nslookup / dig       Test DNS queries and responses
arp                  View or troubleshoot local IP-to-MAC resolution
route / ip route     View routing table information
netstat / ss         View connections, listening ports, and socket details
tcpdump / Wireshark  Capture and inspect packets

Hardware and Physical Tools

Scenario and Decision-Point Checks

Performance and Resiliency Readiness

Performance Concepts

• Distinguish bandwidth from throughput.
• Explain latency, jitter, packet loss, retransmissions, and congestion.
• Recognize why duplex or speed mismatches can degrade performance.
• Identify bottlenecks across client, access switch, uplink, firewall, WAN, server, and application layers.
• Understand QoS as traffic classification, marking, queuing, and prioritization concepts.
• Recognize that encryption, inspection, and tunneling can add overhead.
• Understand MTU-related symptoms, especially when tunnels are involved.
• Explain why wireless throughput differs from theoretical maximums.

Resiliency Concepts

• Identify single points of failure in a diagram.
• Explain redundant links, redundant devices, redundant power, and failover.
• Understand link aggregation as both capacity and resiliency depending on design.
• Recognize load balancer use cases and health-check concepts.
• Distinguish backup connectivity from active-active designs at a high level.
• Understand configuration backups and disaster recovery documentation.
• Explain why redundancy must be tested, not assumed.

Common Weak Areas and Exam Traps

“Can You Do This?” Readiness Checklist

Mark each item only when you can do it without notes.

Addressing and Routing

• Given an IP address and CIDR mask, identify the subnet and usable range.
• Decide whether a host’s gateway is valid for its subnet.
• Explain why a host can reach local resources but not remote resources.
• Identify a missing route from a simple routing table.
• Explain how NAT/PAT changes traffic flow.
• Detect overlapping subnet problems in a site-to-site scenario.

Switching and Wireless

• Determine whether a switchport should be access or trunk.
• Identify likely causes of a VLAN-specific outage.
• Explain why a loop can disrupt an entire segment.
• Choose wireless troubleshooting steps for interference, low coverage, and authentication failures.
• Map SSIDs to VLANs in a segmented wireless design.

Services and Security

• Diagnose DHCP versus DNS versus gateway symptoms.
• Choose secure replacements for insecure protocols.
• Place a firewall, ACL, VPN, or IDS/IPS in a scenario.
• Explain segmentation for users, servers, guests, and management networks.
• Identify where logs should be collected for an investigation.

Operations and Troubleshooting

• Select the best tool for cable, wireless, routing, DNS, or packet-level evidence.
• Interpret simple command output and identify the next test.
• Build a troubleshooting sequence that validates each assumption.
• Identify what should be documented after a change or incident.
• Explain how monitoring baselines help identify abnormal behavior.

Final-Week Review Checklist

Seven to Five Days Before the Exam

• Revisit subnetting until it is fast and consistent.
• Review common protocols and ports by scenario, not just number.
• Redraw OSI and TCP/IP models from memory and attach tools, protocols, and devices to each layer.
• Practice distinguishing DNS, DHCP, default gateway, NAT, firewall, and routing failures.
• Review switching and VLAN scenarios, especially trunks and inter-VLAN routing.
• Review wireless authentication, interference, and coverage troubleshooting.
• Review security controls and when to choose each one.

Four to Two Days Before the Exam

• Work mixed scenarios that force you to identify the best next step.
• Review command-line tools and what evidence each provides.
• Review physical tools and media types.
• Practice reading small network diagrams.
• Review cloud, virtualization, and SDN concepts at a practical level.
• Make a one-page sheet of weak topics, then retire it after active recall.

Day Before the Exam

• Do a light pass through ports, subnetting, wireless, VLANs, routing, and troubleshooting.
• Avoid cramming brand-new topics late.
• Review common traps: DNS versus gateway, ACL placement, VLAN tagging, and return routes.
• Sleep and prepare logistics.

Exam-Day Mental Checklist

• Read the full scenario before choosing an answer.
• Identify the scope: one device, one subnet, one site, or all users.
• Look for recent changes.
• Separate symptoms from causes.
• Eliminate answers that fix a different layer or different problem.
• Prefer the least disruptive valid troubleshooting step when the prompt asks for the next action.
• Watch for words such as “most likely,” “best,” “first,” and “next.”

Practical Next Step

Use this checklist to identify your weakest three readiness areas for CompTIA Network+ V10 (N10-010). Review those topics, then practice mixed networking scenarios that require subnetting, tool selection, security control placement, and troubleshooting decisions in the same session.