CompTIA Network+ N10-009 Cert Guide

Anthony Sequeira (CCIE No. 15626) began his IT career in 1994 with IBM in Tampa, Florida. He quickly formed his own computer consultancy, Computer Solutions, and then discovered his true passion: teaching and writing about networking technologies. Anthony lectured to massive audiences around the world while working for Mastering Computers. Anthony has never been happier in his career than he is now, as a senior technical instructor for ACI Learning. ACI is a leader in audit, cybersecurity, and IT pro training in self-paced and instructor-led formats.

• Introduction xxxvPart I: Networking ConceptsChapter 1 The OSI Model and Encapsulation 3Foundation Topics 4The Purpose of Reference Models 4The OSI Model 6Layer 1: The Physical Layer 7Layer 2: The Data Link Layer 11Media Access Control 12Logical Link Control 13Layer 3: The Network Layer 14Layer 4: The Transport Layer 17Layer 5: The Session Layer 19Layer 6: The Presentation Layer 20Layer 7: The Application Layer 21The TCP/IP Stack 22Layers of the TCP/IP Stack 22Common Application Protocols in the TCP/IP Stack 26Real-World Case Study 27Summary 28Exam Preparation Tasks 28Chapter 2 Networking Appliances, Applications, and Functions 35Foundation Topics 36Physical and Virtual Appliances 36Routers 36Switches 36Firewalls 45Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) 46IDS Versus IPS 46IDS and IPS Device Categories 47Signature-Based Detection 48Policy-Based Detection 48Anomaly-Based Detection 48Load Balancer 49Proxy Servers 49Network-attached Storage (NAS) 51Storage Area Networks (SANs) 51Access Points (APs) 52Controllers 53Networking Device Summary 53Applications and Functions 54Content Delivery Network (CDN) 54Virtual Private Network (VPN) 55Quality of Service (QoS) 55Time to Live (TTL) 57Real-World Case Study 57Summary 58Exam Preparation Tasks 58Chapter 3 Cloud Concepts 65Foundation Topics 66Network Functions Virtualization (NFV) 66Cloud Networking Components 67Virtual Private Cloud (VPC) 67Network Security Groups 68Network Security Lists 69Cloud Gateways 69Deployment Models 71Service Models 72Key Cloud Concepts 73Cloud Connectivity Options 73Multitenancy 74Elasticity 74Scalability 75Real-World Case Study 75Summary 75Exam Preparation Tasks 76Chapter 4 Networking Ports, Protocols, Services, and Traffic Types 81Foundation Topics 82Ports and Protocols 82FTP (File Transfer Protocol) 82SFTP 82SSH 82Telnet 82SMTP 83DNS (Domain Name System) 83DHCP (Dynamic Host Configuration Protocol) 83TFTP 83HTTP 83NTP 83SNMP 84LDAP 84HTTPS 84SMB 84Syslog 84SMTPS 85LDAPS 85Structured Query Language (SQL) Server 85RDP 85SIP 85Protocol/Port Summary 85Internet Protocol (IP) Types 87Internet Control Message Protocol (ICMP) 87Transmission Control Protocol (TCP) 88User Datagram Protocol (UDP) 88Generic Routing Encapsulation (GRE) 88Internet Protocol Security (IPsec) 89Internet Protocol (IP) Types Summary 89Traffic Types 90Unicast 90Broadcast 91Multicast 91Anycast 92Traffic Types Summary 94Summary 95Exam Preparation Tasks 95Chapter 5 Transmission Media and Transceivers 101Foundation Topics 102Wireless 102Transmission Methods 105WLAN Standards (802.11) 106802.11a 106802.11b 106802.11g 106802.11n (Wi-Fi 4) 106802.11ac (Wi-Fi 5) 107802.11ax (Wi-Fi 6) 107802.11 Standards Summary 108Cellular 108Satellite 109Copper and Fiber Media and Connectors 111Coaxial Cable 111Twisted-Pair Cable 113Shielded Twisted Pair 113Unshielded Twisted Pair 114Twisted-Pair Cable Connectors 116Plenum Versus Non-plenum Cable 117Fiber-Optic Cable 117Multimode Fiber 118Single-Mode Fiber 120Fiber-Optic Cable Connectors 120Fiber Connector Polishing Styles 121Ethernet and Fiber Standards (802.3) 122Distance and Speed Limitations 124Transceivers 126Multiplexing in Fiber-Optic Networks 127Media Converters 127Real-World Case Study 128Summary 128Exam Preparation Tasks 128Chapter 6 Network Topologies, Architectures, and Types 135Foundation Topics 136Defining a Network 136The Purpose of Networks 136Network Types and Characteristics 137LAN 137WAN 138WLAN 138SAN 139Other Categories of Networks 139CAN 139MAN 139PAN 139Networks Defined Based on Resource Location 140Client/Server Networks 140Peer-to-Peer Networks 141Cloud Networking 143Networks Defined by Topology 143Physical Versus Logical Topology 143Point-to-Point Topology 145Star Topology 145Hub-and-Spoke Topology 146Full-Mesh Topology 147Partial-Mesh Topology 148The Three-Tier Hierarchical Model 150The Access/Edge Layer 150The Distribution/Aggregation Layer 151The Core Layer 152Spine and Leaf 153Traffic Flows 155Real-World Case Study 155Summary 155Exam Preparation Tasks 156Chapter 7 IPv4 Addressing 163Foundation Topics 164Binary Numbering 164Principles of Binary Numbering 164Converting a Binary Number to a Decimal Number 165Converting a Decimal Number to a Binary Number 165Binary Numbering Practice 167Binary Conversion Exercise 1 167Binary Conversion Exercise 1: Solution 168Binary Conversion Exercise 2 168Binary Conversion Exercise 2: Solution 168Binary Conversion Exercise 3 168Binary Conversion Exercise 3: Solution 169Binary Conversion Exercise 4 169Binary Conversion Exercise 4: Solution 170IPv4 Addressing 170IPv4 Address Structure 171Classes of Addresses 173Assigning IPv4 Addresses 175IP Addressing Components 175Static Configuration 176Dynamic Configuration 180Automatic Private IP Addressing 180Subnetting 181Purpose of Subnetting 182Subnet Mask Notation 182Subnet Notation: Practice Exercise 1 184Subnet Notation: Practice Exercise 1 Solution 184Subnet Notation: Practice Exercise 2 184Subnet Notation: Practice Exercise 2 Solution 185Extending a Classful Mask 185Borrowed Bits 185Calculating the Number of Created Subnets 185Calculating the Number of Available Hosts 186Basic Subnetting Practice: Exercise 1 187Basic Subnetting Practice: Exercise 1 Solution 187Basic Subnetting Practice: Exercise 2 188Basic Subnetting Practice: Exercise 2 Solution 188Calculating New IP Address Ranges 189Advanced Subnetting Practice: Exercise 1 192Advanced Subnetting Practice: Exercise 1 Solution 192Advanced Subnetting Practice: Exercise 2 193Advanced Subnetting Practice: Exercise 2 Solution 193Additional Practice 195Classless Inter-domain Routing 196Real-World Case Study 197Summary 198Chapter 8 Evolving Use Cases 203Foundation Topics 205SDN and SD-WAN 205Software-Defined Networking (SDN) 205Software-Defined Wide Area Network (SD-WAN) 206Virtual Extensible Local Area Network (VXLAN) 208Zero Trust Architecture (ZTA) 209SASE and SSE 211Infrastructure as Code (IaC) 212IP Version 6 215Need for IPv6 216IPv6 Address Structure 217IPv6 Address Types 217IPv6 Data Flows 218Unicast 219Multicast 219Anycast 220Real-World Case Study 221Summary 222Exam Preparation Tasks 223Part II: Network ImplementationChapter 9 Routing Technologies 229Foundation Topics 230Routing 230Sources of Routing Information 233Directly Connected Routes 233Static Routes 234Dynamic Routing Protocols 235Routing Protocol Characteristics 237Believability of a Route 237Metrics 238Interior Versus Exterior Gateway Protocols 238Route Advertisement Method 238Distance Vector 239Link State 242Routing Protocol Examples 242Address Translation 244NAT 244PAT 246First Hop Redundancy Protocol (FHRP) 248Real-World Case Study 250Summary 250Exam Preparation Tasks 251Chapter 10 Ethernet Switching Technologies 257Foundation Topics 258Principles of Ethernet 258Carrier-Sense Multiple Access with Collision Detection 258Distance and Speed Limitations 262Ethernet Switch Features 263Virtual LANs 263Switch Configuration for an Access Port 266Trunks 267Switch Configuration for a Trunk Port 268Spanning Tree Protocol 269Corruption of a Switch’s MAC Address Table 269Broadcast Storms 270STP Operation 271Modern Enhancements to STP 274Link Aggregation 275LACP Configuration 276Power over Ethernet 277Other Switch Features 278Real-World Case Study 279Summary 279Exam Preparation Tasks 280Chapter 11 Configure Wireless Devices and Technologies 285Foundation Topics 286Introducing Wireless LANs 286WLAN Concepts and Components 286Wireless Routers 286Wireless Access Point 287Guest Networks 289Antennas 289Channel and Frequency Options 292Deploying Wireless LANs 293Types of WLANs 293IBSS 293BSS 294ESS 295Mesh Topology 295Sources of Interference 296Wireless AP Placement 297Securing Wireless LANs 299Security Issues 299Approaches to WLAN Security 300Security Standards 303WPA2 303WPA3 303Additional Wireless Options 303Real-World Case Study 304Summary 305Exam Preparation Tasks 305Chapter 12 Physical Installations 311Foundation Topics 312Important Installation Implications 312Locations 313Power 315Environmental Factors 317Real-World Case Study 318Summary 320Exam Preparation Tasks 320Part III: Network OperationsChapter 13 Organizational Processes and Procedures 325Foundation Topics 326Documentation 326Processes and Procedures 329Life-cycle Management 329Change Management 332Configuration Management 333Real-World Case Study 334Summary 335Exam Preparation Tasks 336Chapter 14 Network Monitoring 341Foundation Topics 342Network Monitoring Methods 342SNMP 342Performance Metrics/Sensors 345Port Mirroring 348Port Mirroring Configuration 350Logging 350Syslog 351Other Logs 353NetFlow 354API Integration 354Monitoring Solutions 355Real-World Case Study 357Summary 357Exam Preparation Tasks 358Chapter 15 Disaster Recovery 363Foundation Topics 364High Availability 364High-Availability Measurement 364DR Metrics 364Fault-Tolerant Network Design 365Hardware Redundancy 367Design Considerations for High-Availability Networks 368High-Availability Best Practices 369Content Caching 370Load Balancing 370Hardware Redundancy 370Testing 372Real-World Case Study: Network Design 372Case Study Scenario 373Suggested Solution 375IP Addressing 375Layer 1 Media 376Layer 2 Devices 376Layer 3 Devices 377Wireless Design 378Environmental Factors 379Cost Savings Versus Performance 379Topology 379Summary 380Exam Preparation Tasks 380Chapter 16 IPv4 and IPv6 Network Services 385Foundation Topics 386Dynamic Addressing 386DHCP 386SLAAC 389Name Resolution 390DNS 391Hosts File 396Time Protocols 397NTP 397PTP 398NTS 399Real-World Case Study 399Summary 400Exam Preparation Tasks 400Chapter 17 Network Access and Management Methods 405Foundation Topics 406Virtual Private Networks (VPNs) 406IPsec 408IKE 408Authentication Header and Encapsulating Security Payload 410The Five Steps in Setting Up and Tearing Down an IPsec Site-to-Site VPN Using IKEv1 412IKEv2 413Other VPN Technologies 413Other Network Access Technologies 414Authentication and Authorization Considerations 417In-Band vs. Out-of-Band Management 418Real-World Case Study 418Summary 419Exam Preparation Tasks 419Part IV: Network SecurityChapter 18 Network Security Concepts 425Foundation Topics 426Core Security Concepts 426Confidentiality, Integrity, and Availability (CIA) 426Confidentiality 426Symmetric Encryption 427Asymmetric Encryption 428Integrity 430Availability 431Threats, Vulnerabilities, Risks, and Exploits 431Threats 432Vulnerabilities 432Risks 433Exploits 433Least Privilege 433Role-Based Access Control 434Defense in Depth 434Screened Subnet 435Separation of Duties 435Network Access Control 435Honeypot 435Network Segmentation Enforcement 436IoT and IIoT 436SCADA, ICS, and OT 437Guest Networks 437BYOD 437Authentication Methods 438Multifactor 438TACACS+ 439Single Sign-On 439RADIUS 439LDAP 440Kerberos 440SAML 441Time-based Authentication 441Local Authentication 441Risk Management and SIEM 441Risk Management 441Security Risk Assessments 442Threat Assessment 442Vulnerability Assessment 442Penetration Testing 442Posture Assessment 442Business Risk Assessment 442Process Assessment 443Vendor Assessment 443Security Information and Event Management (SIEM) 443Physical Security 444Detection Methods 444Prevention Methods 445Audits and Regulatory Compliance 447Real-World Case Study 448Summary 449Exam Preparation Tasks 449Chapter 19 Types of Network Attacks 457Foundation Topics 458Technology-Based Attacks 458Denial-of-Service (DoS) 458Distributed Denial-of-Service (DDoS) 459On-Path Attack 459DNS Poisoning 460VLAN Hopping 460ARP Poisoning 460ARP Spoofing 461Rogue DHCP 461Rogue Access Point 461Evil Twin 461Ransomware 461Password Attacks 462MAC Spoofing 462MAC Flooding 462IP Spoofing 463Deauthentication 463Malware 463Social Engineering Attacks 464Other Miscellaneous Attacks 465Real-World Case Study 469Summary 470Exam Preparation Tasks 470Chapter 20 Network Security Features 475Foundation Topics 476Device Hardening 476Best Practices 476Network Access Control (NAC) 480Other Network Security Features 482Real-World Case Study 483Summary 483Exam Preparation Tasks 484Part V: Network TroubleshootingChapter 21 A Network Troubleshooting Methodology 489Foundation Topics 490Troubleshooting Basics 490Troubleshooting Fundamentals 490Structured Troubleshooting Methodology 492Real-World Case Study 495Summary 495Exam Preparation Tasks 496Chapter 22 Troubleshoot Common Cabling Problems 501Foundation Topics 502Specifications and Limitations 502Common Cable Issues 502Common Interface Issues 505Common Hardware Issues 506Common Tools 507Real-World Case Study 511Summary 512Exam Preparation Tasks 512Chapter 23 Troubleshoot Common Issues with Network Services 517Foundation Topics 518Considerations for General Network Troubleshooting 518Common Network Service Issues 519Real-World Case Study 523Summary 524Exam Preparation Tasks 524Chapter 24 Troubleshoot Common Performance Issues 529Foundation Topics 530Network Performance Considerations 530Wireless Performance Considerations 531Other Wireless Considerations 533Antennas 533Frequencies and Channels 533More Considerations 534Common Wireless Issues 534Wireless Network Troubleshooting 536Wireless Network Troubleshooting Solution 536Real-World Case Study 537Summary 538Exam Preparation Tasks 538Chapter 25 Network Troubleshooting Tools 543Foundation Topics 544Software Tools 544Protocol Analyzer/Packet Capture 544Bandwidth Speed Tester 544Port Scanner 544iperf 545NetFlow Analyzers 546TFTP Server 546Terminal Emulator 546IP Scanner 546LLDP/CDP 546Command-Line Tools 547ping 547ping with IPv6 549ipconfig 549ifconfig 553ip 554nslookup 554dig 556traceroute 557traceroute for IPv6 558arp 558netstat 560hostname 562route 562telnet 567tcpdump 567nmap 567Basic Networking Device Commands 567Hardware Tools 568Wi-Fi Analyzer 568Tone Generator 569Cable Tester 569Tap 569Visual Fault Locator 569Real-World Case Study 570Summary 570Exam Preparation Tasks 570Part VI: Final Preparation and Exam UpdatesChapter 26 Final Preparation 577Tools for Final Preparation 577Video Training 578Memory Tables 578End-of-Chapter Review Tools 579Suggested Plan for Final Review and Study 579Strategies for Taking the Exam 581Summary 582Chapter 27 CompTIA Network+ N10-009 Cert Guide Exam Updates 585Always Get the Latest at the Book’s Product Page 585Technical Content 586Part VII: AppendixesAppendix A Answers to Review Questions 587 Online ElementsAppendix B Memory TablesAppendix C Memory Tables Answer KeyAppendix D Study PlannerGlossary of Key Terms 9780135367889 TOC 10/30/2024