CompTIA Network+ N10-007

Explore the fundamentals of networking, including components, terminology, and communication concepts, then examine network models, topology, devices, and pathways to becoming a certified network professional.

Identify common network components, distinguish nodes from hosts and explain why bridges, hubs, and some switches may lack IP addresses or NICs, while showcasing resource sharing between clients and servers.

Explore encapsulation across the four layers of the TCAP IP protocol model—application, transport, internet, and network access—by packaging data with headers and footers, enabling extraction at the destination.

Explore peer-to-peer work groups and client-server domains, comparing decentralized administration with centralized security, the domain database, and domain-joined systems for streamlined resource sharing.

Explore common network components and the distinction between nodes and hosts, including network interface cards, IP addresses, and the roles of clients and servers in sharing resources.

Explain the physical mesh topology, including full and partial mesh, and show how multiple paths provide fault tolerance for LAN and WAN connections.

Plan a certification path with a big-picture view and clear 1-, 3-, and 5-year goals. Finish the course, use practice questions and tests, and schedule the exam to stay ready.

Learn about standards organizations such as ISO, IEEE, ANSI, TIA/EIA, and IETF, and how they publish networking and telecommunication standards, including ethernet pin layouts defined by TIA/EIA-568 A and B.

Learn how the transport layer fragments messages, sequences packets, and uses acknowledgments and checksums, while the data link and network layers encapsulate data into frames and datagrams.

Explore IEEE network standards and the role of standards organizations in everyday networking practices, highlighting the most essential standards every networking professional should know.

Compare deterministic and non-deterministic access methods and their equal access to the media. Explore how CSMA/CD uses listen-before-transmit with backoff and collision detection, and how CSMA/CA reduces wireless collisions.

Serial transmission sends bits one by one over a single medium with start and stop signals, while parallel uses multiple lines but faces interference and is rarely used in networks.

Master data units from bits and bytes to nibble and word, and how kilobits and gigabits per second scale with decimal and binary conventions for transmission and network speeds.

Explore transmission media as the communication pathway, comparing wired copper twisted pair to fiber optic backbones, noting wireless networks' rise and how cost, speed, and security shape choices.

Explain straight-through and crossover cables using a RJ-45 connector, where A-stan and B wire one end differently, and how rollover cables connect via rs-232 to a router or switch console.

Fiber optic connections require careful end preparation, including cleaving and splicing, with ferrules to terminate the ends and ease connections, while connectors align the fiber core so light passes through.

Explore specialty cables and connectors, including less common options you may not see often, as part of the CompTIA Network+ topic.

Connect the D-mark to the main distribution frame to distribute signals, then route through intermediate cross-connects to the backbone and IDF, finally delivering horizontal cables to workstation drops.

Explore wireless networking as a radio frequency network medium used in both personal and business environments.

Explore wireless networking components, including stations, wireless cards with MAC addresses, and access points in infrastructure mode, using SSID to identify basic and extended service sets for seamless roaming.

Learn to configure a wireless access point across common devices, find the gateway IP via IP configuration, and set up SSID, channels, DHCP, IPv4/IPv6, and basic security.

Choose wireless antennas to optimize signal quality and coverage across a location. Understand how antenna type, direction (omni directional vs unit directional), and gain affect performance and stay within limits.

Transmission Control Protocol is a connection-oriented, reliable transport used for file transfers via a three-way handshake. It manages window size, sequencing, acknowledgments, and checksums for reliability.

Identify application traffic with sockets, IP address and port number, guiding transport and firewall decisions. Use port numbers like 80 and 25 to classify web and email traffic.

Understand how an IP datagram carries unchanging source and destination IP addresses across about a dozen hops, while each router resolves the next hop's MAC address and forwards frames.

Explore the application layer of TCP/IP and its protocols that let web browsers, email clients, and remote desktop connect to the network, and learn how port numbers identify them.

Identify the function of application layer protocols and the well-known ports, focusing on the 1 to 1024 range, and memorize about 15 to 20 essential ports for the exam.

Identify the most common well-known ports and their protocols, such as http 80/443, ftp 21, ssh 22, telnet 23, smtp 25, dns 53, dhcp 67, and rdp 3389.

Explain how subnet masks separate network id from host id using a 32-bit binary mask with ones on the left and zeros on the right, exemplified by 192.168.1.0 and 255.255.255.0.

Explore classless addressing and variable length subnet masking, using CIDR slash notation to describe how subnet masks of varying lengths optimize IP address space, with no default mask.

Extend the subnet mask to create multiple subnet IDs from a single address space, enabling unique router interfaces and client addresses. View masks in binary to master complex subnetting.

Explore IPv6 addresses, comparing 128-bit space to IPv4, and learn about a slash 64 prefix, 64/64 network-host split, hex notation, and zero compression with double colons.

unique local unicast addresses in ipv6, the private addresses that start with fd00::/8, use a 40-bit global ID, 16-bit subnets, and 64-bit interface IDs, replacing site local addresses.

Explore assigning addresses with DHCP and discuss the benefits it provides for the local area network.

Learn how IP addresses are leased via DHCP, with a finite lease period and renewal options, and follow the four-step lease generation process: discover, offer, request, and acknowledge.

Describe how DHCP lease renewal works: renew at 50 percent and, if needed, use an 87.5 percent renewal or a DHCP Discover to maintain the IP address.

Place dhcp servers where client broadcasts are heard before address assignment, since routers block broadcasts; small networks can use routers or firewalls, while larger networks may centralize with relay agents.

Explore how DNS resolves hostnames through recursive queries by the client and iterative queries by servers, from root to dot com to the authoritative server to obtain the IP address.

Connect devices to share resources such as files, folders, printers, web sites, and databases, using switches, routers, and wireless access points as the primary network devices today.

Explore how physical layer devices like repeaters, hubs, wireless range extenders, and NICs connect systems in simple networks, extend signals, and do not perform data forwarding or segmentation.

Explore data link layer devices that filter and forward traffic based on MAC address. Learn how these devices operate at the data link layer to manage local network traffic.

A bridge connects LAN segments at layer 2, learning MAC addresses and forwarding traffic only to destinations on the other segment, making network segmentation possible.

Compare unmanaged, smart, and hybrid switches and their management options. Learn to use console ports, web or command-line management, SMP protocol, authentication, and VLANs for secure, scalable networks.

Discover switch characteristics, including port mirroring for diagnostics and traffic monitoring, and channel bonding or link aggregation using multiple nics to increase throughput, with lacp handling it automatically.

Learn how VLANs separate network segments using port-based, protocol-based, and subnet-based groupings, enabling routing-like layer 3 switching that forwards traffic without physical changes.

Implement the spanning tree protocol to create a loop-free, root-switch topology on layer-two switches and prevent loops and broadcast storms by enforcing one active connection between any two network nodes.

Explore layer 3 network layer devices, focusing on addressing and routing of packets within the internet and IP.

Explore how routing metrics determine route selection, balancing hop count, bandwidth, MTU, and cost, with administrative distance guiding which protocol's routes prevail.

Examine router redundancy protocols that create a virtual default gateway with two routers, including Cisco's proprietary HSRP and the open VRRP standard, with a master and backup for seamless failover.

Explore a few additional network devices that don't necessarily fit cleanly into this reference model package.

Explore additional network devices, including gateways that translate between systems, layer 2 and layer 3 switches, multilayer switches, and how DSCP-based QoS enables load balancing for servers and firewalls.

Explain how load balancers distribute traffic across multiple servers to boost capacity, improve performance, and provide fault tolerance, using an IP address clients connect to.

Introduce the fundamentals of wide area networks and build foundational knowledge for subsequent WAN topics.

Frame relay is a packet switching network for long-distance communications. It uses permanent virtual circuits and a logical point to point connection for routing traffic through a cloud of switches.

Explore WiMAX, the worldwide interoperability for microwave access standard that enables last mile wireless broadband up to 50 kilometers with speeds of 40 Mbps, a cable and DSL alternative.

Explore cellular connections that provide ultra mobile internet access across generations from 1g to 4g, enabling roaming and internet connectivity for smartphones, laptops, and tablets via public providers.

Explore 3g technologies, from umts on 2g through 3.5g, with downlink up to 42 mbps and 7 mbps, plus edge and hspa+ upgrades up to 14–84 mbps with multiple antennas.

Explore 4g technology and IMT-advanced standards, including WiMax and LTE, the prominent 4g standard today. See how GSM successors like HSPA+ deliver downstream speeds up to 300 Mbps on phones.

Examine the final category of connections that use optical media or fiber, and understand how fiber-based networking enables WAN connections.

Learn how OC levels function as a memorization task, using base 52 and multiplication to estimate bandwidth in megabits per second.

Explore wide area network options by comparing wired, wireless, and fiber solutions, routers and firewalls, and the bandwidth, cost, and availability considerations for real-world scenarios.

Explain how remote access servers act as connection endpoints for dial-up and vpn, performing authentication and authorization, with examples like Windows servers and vendor vpn endpoints.

Enable remote desktop on Windows business editions to access systems locally or remotely. Configure external firewalls to forward remote desktop traffic, port forwarding, and consider third-party tools for easier access.

Explain VPN tunnels as logical paths between endpoints for site-to-site and remote access, detailing compulsory site-to-site VPNs between gateways and voluntary client-initiated tunnels with supported protocols.

Explain GRE encapsulation, the most common VPN encapsulation, used to tunnel protocols over a virtual point-to-point link and by PPTP and site-to-site VPNs, also used by IP SAQ VPNs.

Explore the two main encryption types for vpn: Microsoft point-to-point encryption (mppe) and ipsec, covering des, 3des, aes-128, aes-256, and transport versus tunnel mode.

Discover network security fundamentals and outline the essential knowledge needed to start your journey toward securing networks.

Identify network threats by examining events that could breach confidentiality, modify data, or disrupt service, including unauthorized access and physical damage to facilities.

Learn how authentication verifies your identity, how authorization and access control determine and enforce what you can do, and how auditing tracks actions across systems and cloud services.

Learn how regulatory requirements govern confidential data transmission and how organizations meet HIPAA and GLBA through data loss prevention in email.

Identify threats and vulnerabilities to understand what they are and how attacks occur in real-world networks.

Explore two main network threat types—reconnaissance and active attacks—and understand how vulnerability scanning and penetration testing fit into securing technology-dependent businesses.

Explore reconnaissance attacks by port scanning and eavesdropping, revealing open ports, running services, and potential vulnerabilities, and learn how packet sniffers like Wireshark aid defenders and attackers.

Discover how IP spoofing uses fake header addresses to fool victims, enabling man-in-the-middle attacks and illustrating MAC address spoofing and VLAN hopping risks.

Explains man-in-the-middle attacks and spoofing, where attackers eavesdrop between two hosts to steal data. Covers ARP and DNS poisoning, ICMP redirects, and IP header spoofing that enable hijacking.

Explore wireless vulnerabilities and threats such as data emanation, eavesdropping, bluejacking and blue snarfing, rogue access points and evil twins, wardriving, and insecure configurations.

Implement physical protection by aligning barriers to asset value, using locked doors, cameras, fencing, server rooms access controls, and badges with escorts, while considering security posture and budget.

Outline man traps and other physical security options, including locked data center cabinets, motion-detection video surveillance, door access controls with biometrics, guards, fences, lighting, and asset-tracking tags.

Explore physical security devices used in networks, including mantrap, key fobs, token cards, biometrics, and secure server room measures like locks, cameras, guards, and fencing.

Validate user identities and enable seamless access using Kerberos and ticket-based authentication within a domain. Centralize remote access with VPN support and protocols like PAP, MS-CHAP v2, EAP, and RADIUS.

Network access control enforces a policy at initial connection to ensure endpoint compliance. It uses 802.1x authentication and checks like PIN, encryption, and remote wipe.

Define and apply network security fundamentals, identify threats and risks, and evaluate defenses against network-based, software-based, and social engineering attacks. Implement secure protocols, network devices, and technologies to enforce security.

Explore topic a: maintaining business continuity. Understand how keeping business continuity is addressed within the CompTIA Network+ N10-007 context.

Maintain availability and business continuity by implementing high availability, redundancy, disaster recovery, backups, proactive monitoring, and patch management to secure systems and support user productivity.

Learn how to monitor network devices to maintain business continuity by tracking normal performance, detecting issues early with proactive and reactive monitoring, and auditing security events.

Patch management protects business continuity by keeping operating systems and network device firmware up to date, addressing vulnerabilities, and enabling centralized patch management with compliant updates and reporting.

Discover why storage matters in virtualization, how shared storage moves virtual machines between hosts, and how nas, das, and san differ in access and performance.

Explore cloud offerings such as Office 365 and Azure, view subscriptions in the admin center, and learn pay-as-you-go provisioning of Windows Server VMs and WordPress sites.