CompTIA Network+ CompTIA Network+ Practice Test 2025
This is the official CompTIA Network+ CompTIA Network+ question paper for 2025, as set in the Model questions examination. It carries 90 full marks and a time allowance of 90 minutes, across 10 questions. On Kekkei you can attempt this CompTIA Network+ past paper online with a timer, get instant AI feedback and step-by-step solutions, and track the topics where you lose marks — completely free. Whether you are revising for your CompTIA Network+ CompTIA Network+ exam or solving previous years' question papers, this 2025 paper is a great way to practise under real exam conditions.
| Level | CompTIA Network+ |
|---|---|
| Subject | CompTIA Network+ |
| Year | 2025 BS |
| Exam session | Model questions |
| Full marks | 90 |
| Time allowed | 90 minutes |
| Questions | 10, all with step-by-step solutions |
CompTIA Network+ Core
Select the best answer.
Which layer of the OSI model is responsible for logical addressing and routing? Protocols such as IP, ICMP, and ARP operate at this layer.
Layer 3 — Network
Layer 3 (Network layer) handles logical addressing (IP addresses) and routing. IP, ICMP, and ARP all operate at this layer to facilitate packet forwarding between networks.
A network administrator needs to divide the 10.0.0.0/8 network into subnets that each support exactly 30 hosts. What is the correct subnet mask?
255.255.255.224 (/27)
A /27 subnet mask (255.255.255.224) provides 32 addresses per subnet (2^5 = 32), yielding 30 usable host addresses after subtracting the network and broadcast addresses. A /28 only gives 14 hosts, while /26 gives 62.
Which of the following protocols provides encrypted remote access to network devices using TCP port 22?
SSH
SSH (Secure Shell) provides encrypted remote terminal access over TCP port 22. Telnet (port 23) is unencrypted, SNMP (ports 161/162) is for network management, and RDP (port 3389) is for Windows remote desktop.
During a TCP three-way handshake, what is the correct sequence of flag exchanges between client and server?
SYN, SYN-ACK, ACK
The TCP three-way handshake proceeds as: (1) Client sends SYN, (2) Server responds with SYN-ACK, (3) Client sends ACK. This establishes a reliable connection before data transfer begins.
A network technician runs the command nslookup example.com and receives a non-authoritative answer. What does this indicate?
The response came from the DNS server cache, not from the authoritative name server
A non-authoritative answer from nslookup means the DNS resolver returned a cached response rather than querying the authoritative name server for the domain directly. The information is still valid but may not reflect the very latest changes.
A user can ping 8.8.8.8 but cannot access websites by name. Which of the following is the MOST likely cause?
DNS server misconfiguration
If a user can reach external IPs (8.8.8.8) but cannot resolve hostnames, the issue is DNS resolution. The default gateway and physical connectivity are working, as evidenced by successful pings to an external IP.
Which command-line tool displays the path that packets take to reach a destination host, showing each hop along the route?
traceroute (tracert on Windows)
traceroute (Linux/macOS) or tracert (Windows) sends packets with incrementing TTL values to discover each router hop along the path to a destination, helping identify where network issues occur.
Which IEEE standard defines the operation of VLANs by inserting a 4-byte tag into Ethernet frames?
IEEE 802.1Q
IEEE 802.1Q defines VLAN tagging by adding a 4-byte field to Ethernet frames. 802.1X is port-based network access control, 802.3af is Power over Ethernet (PoE), and 802.11ac is a Wi-Fi standard.
An organization wants to segment its network so that IoT devices cannot communicate directly with servers in the data center. Which of the following should be implemented?
Network Access Control (NAC) with VLANs and firewall rules
Network segmentation using VLANs combined with firewall rules or ACLs is the proper way to isolate IoT devices from sensitive data center resources. NAC can further enforce policy-based access.
Which dynamic routing protocol uses the Diffusing Update Algorithm (DUAL) and is classified as an advanced distance-vector (hybrid) protocol?
EIGRP
EIGRP (Enhanced Interior Gateway Routing Protocol) uses the DUAL algorithm for loop-free path computation. It is classified as an advanced distance-vector or hybrid protocol. OSPF is link-state, BGP is path-vector, and RIPv2 is a traditional distance-vector protocol.
Frequently asked questions
- Where can I find the CompTIA Network+ CompTIA Network+ question paper 2025?
- The full CompTIA Network+ CompTIA Network+ 2025 (Model questions) question paper is available free on Kekkei. You can read every question online and attempt the paper under timed exam conditions.
- Does the CompTIA Network+ 2025 paper come with solutions?
- Yes. Every question on this CompTIA Network+ past paper includes a step-by-step solution, plus instant AI feedback when you attempt it on Kekkei.
- How many marks is the CompTIA Network+ CompTIA Network+ 2025 paper?
- The CompTIA Network+ CompTIA Network+ 2025 paper carries 90 full marks and is meant to be completed in 90 minutes, across 10 questions.
- Is practising this CompTIA Network+ past paper free?
- Yes — reading and attempting this CompTIA Network+ past paper on Kekkei is completely free.