🌐 Entry-to-Mid Level · Vendor-Neutral Networking
Why Network+ Matters
CompTIA Network+ is the definitive baseline certification for anyone pursuing a career in networking, IT support, systems administration, or cybersecurity. Unlike vendor-specific certifications (Cisco CCNA, Juniper JNCIS), Network+ teaches concepts that apply across all vendors and platforms. It is recognized by the U.S. DoD (DoDD 8570/8140) for IAT Level I roles, required by thousands of employers as a minimum qualification, and serves as the perfect bridge between the foundational CompTIA A+ and the more advanced Security+ or CCNA. Professionals who earn Network+ demonstrate they can design, configure, manage, and troubleshoot networks in both wired and wireless enterprise environments.
✅ Recommended Prerequisites
- CompTIA A+ certification or equivalent hands-on IT experience (9–12 months recommended)
- Understanding of basic IP addressing and binary mathematics (subnetting)
- Familiarity with Windows and Linux operating systems at a user level
- No formal prerequisites — Network+ is open to all candidates
- Access to a lab environment: Packet Tracer (free) or GNS3 (free) for hands-on practice
🗺️ CompTIA Certification Pathway
ITF+
→
A+ Core 1 & 2
→
Network+ N10-009
→
Security+
→
CySA+ / CCNA
1.0 Network Fundamentals
24%
- OSI and TCP/IP models, protocols, and port numbers
- IPv4 and IPv6 addressing, subnetting, VLSM, CIDR
- Routing concepts — static, dynamic (OSPF, BGP, EIGRP, RIP)
- Switching concepts — VLANs, trunking, STP/RSTP
- Wireless standards — 802.11a/b/g/n/ac/ax, RF characteristics
- Network services — DHCP, DNS, NTP, SNMP, Syslog
- Cloud concepts and network virtualization (SDN, VXLAN)
2.0 Network Implementations
19%
- WAN technologies — MPLS, SD-WAN, DMVPN, Metro Ethernet, leased lines
- Network devices — switches, routers, firewalls, load balancers, proxies
- VLAN and inter-VLAN routing, voice VLANs, QoS (DSCP, 802.1p)
- NAT types — static, dynamic, PAT/overload
- VPN technologies — IPsec, SSL/TLS, GRE, DMVPN
- Wireless implementations — APs, controllers, antenna types, site survey
- PoE standards (802.3af/at/bt), LACP EtherChannel
3.0 Network Operations
16%
- Network documentation — logical/physical diagrams, wiring plans, baselines
- Change management — change advisory board (CAB), rollback procedures
- Monitoring tools — SNMP, NetFlow, sFlow, syslog, NMS platforms
- IPAM (IP Address Management) and network inventory
- High availability — MTBF, MTTR, RTO, RPO, failover clustering
- Backup types — full, incremental, differential
- Disaster recovery sites — hot, warm, cold
4.0 Network Security
20%
- Security concepts — CIA triad, defense in depth, zero trust, least privilege
- Firewalls — stateful vs stateless, NGFW, WAF, DMZ architecture
- Authentication — 802.1X/EAP, RADIUS, TACACS+, MFA
- Wireless security — WPA2/WPA3, EAP-TLS, PEAP, rogue AP detection
- Network attacks — MITM, ARP spoofing, VLAN hopping, DNS poisoning, DoS/DDoS
- Mitigation — DHCP snooping, DAI, IPS, port security, ACLs
- PKI and cryptography — symmetric/asymmetric, TLS, certificates, DNSSEC
5.0 Network Troubleshooting
21%
- CompTIA 7-step troubleshooting methodology
- Physical layer tools — toner probe, cable tester, cable certifier, OTDR, loopback plug
- Interface issues — runts, giants, CRC errors, input/output drops, duplex mismatch
- CLI tools — ping, traceroute, ipconfig/ifconfig, netstat, arp, nslookup, nmap
- Wireless troubleshooting — SNR, channel interference, sticky client, hidden node
- Routing and switching issues — VLAN misconfig, OSPF adjacency, STP loops
- DHCP, DNS, VPN, and MTU troubleshooting
Core Skills to Master
OSI 7-Layer Model
TCP vs UDP
IPv4 Subnetting (CIDR)
IPv6 Addressing
RFC 1918 Private Ranges
DHCP Operation
DNS Record Types
Port Numbers
APIPA (169.254.x.x)
NTP Hierarchy
Binary/Hex Math
VLSM Design
Key Port Numbers to Memorize
⚡ Critical Port Numbers
- 20/21 — FTP (data/control) | 22 — SSH | 23 — Telnet | 25 — SMTP
- 53 — DNS | 67/68 — DHCP (server/client) | 69 — TFTP | 80 — HTTP
- 110 — POP3 | 143 — IMAP | 161/162 — SNMP (get/trap)
- 443 — HTTPS | 445 — SMB | 3389 — RDP | 3306 — MySQL
- 1433 — MSSQL | 5060/5061 — SIP (VoIP) | 1701 — L2TP | 1723 — PPTP
Study Resources
- Professor Messer's Network+ Course (Free on YouTube) — Sections 1.1-1.5 for fundamentals
- Subnet Calculator (subnet.a.com or subnettingpractice.com) — drill subnetting daily
- Mike Meyers' CompTIA Network+ All-in-One Exam Guide (McGraw Hill)
- Cisco Packet Tracer (free at netacad.com) — set up basic topologies
🏋️ Lab 1: Subnetting Challenge
Given 192.168.10.0/24, subnet it into 6 networks of at least 30 hosts each. Calculate network, broadcast, and usable host range for each subnet. Time yourself — aim for under 5 minutes. Then repeat with 10.0.0.0/8 for enterprise-scale VLSM design.
Core Skills to Master
VLAN Creation
802.1Q Trunking
STP Root Bridge
RSTP Port States
PortFast / BPDU Guard
Inter-VLAN Routing
Router-on-a-Stick
Layer 3 Switch SVIs
Wi-Fi 6 OFDMA/TWT
Wireless Channels
Site Survey
LACP 802.3ad
Wireless Standards Quick Reference
📡 802.11 Standards
- 802.11a: 5 GHz, 54 Mbps, 35m indoor — legacy
- 802.11b/g: 2.4 GHz, 11/54 Mbps — legacy, high interference
- 802.11n (Wi-Fi 4): 2.4+5 GHz, 600 Mbps, MIMO — still common
- 802.11ac (Wi-Fi 5): 5 GHz, 6.9 Gbps, MU-MIMO downlink — modern
- 802.11ax (Wi-Fi 6): 2.4+5 GHz, 9.6 Gbps, OFDMA, TWT, BSS Coloring — current
- 802.11ax (Wi-Fi 6E): adds 6 GHz band for additional capacity
Study Resources
- Professor Messer — Domain 1.4 (Wireless), Domain 1.6 (Network Devices)
- Packet Tracer Lab: Configure VLANs on a switch, set up trunk to router, test inter-VLAN ping
- Jason Dion Network+ Course (Udemy) — VLAN and STP deep dives
- Cisco Networking Academy — Network Essentials free course
🏋️ Lab 2: VLAN and Trunk Configuration
In Packet Tracer: create 3 VLANs (10-HR, 20-IT, 30-Guest), configure trunk between two switches, set up router-on-a-stick for inter-VLAN routing, add a DHCP pool for each VLAN. Verify with pings between VLANs and confirm guest VLAN cannot ping HR VLAN using an ACL.
Core Skills to Master
OSPF Operation
BGP Basics
Administrative Distance
Static vs Dynamic NAT
PAT / NAT Overload
MPLS / SD-WAN
SNMP v3 Monitoring
NetFlow / sFlow
Syslog Logging
MTBF / MTTR
RTO / RPO
Network Baselines
Routing Protocol Cheat Sheet
🛣️ Routing Protocols
- RIP: distance-vector, hop count metric, max 15 hops, AD=120 — legacy
- EIGRP: Cisco proprietary, advanced distance-vector, metric=bandwidth+delay, AD=90 (internal)
- OSPF: link-state, cost metric, unlimited hops, AD=110 — most common IGP
- IS-IS: link-state, used by ISPs, AD=115, similar to OSPF
- BGP: path-vector, used between ASes (ISPs), AD=20 (eBGP), AD=200 (iBGP)
- Static route AD=1 (preferred over all dynamic), Connected AD=0
Study Resources
- Professor Messer — Domains 2.1 (WAN), 3.1 (Documentation), 3.2 (Monitoring)
- GNS3 (free, gns3.com) — configure OSPF between multiple routers
- CompTIA Network+ Study Guide by Todd Lammle — Chapters on Routing and WAN
- Practice lab: Configure OSPF areas, verify show ip route, implement NAT overload
🏋️ Lab 3: OSPF Multi-Area Routing
Build a 3-router GNS3 topology with Area 0 (backbone) and Area 1 (stub). Configure OSPF, verify adjacency using 'show ip ospf neighbor', confirm routes are learned ('show ip route ospf'). Break adjacency by mismatching MTU values and troubleshoot back to Full state. Add NAT overload on the edge router for internet access simulation.
Core Skills to Master
Stateful Firewall
DMZ Architecture
802.1X / RADIUS
IDS vs IPS
IPsec Modes
WPA3 / SAE
DHCP Snooping
Dynamic ARP Inspection
ACL Design
SIEM
MFA Factors
DNSSEC / PKI
Security Attack Categories
🚨 Common Network Attacks
- ARP spoofing / poisoning → mitigate with Dynamic ARP Inspection (DAI)
- DHCP starvation / rogue DHCP → mitigate with DHCP snooping
- VLAN hopping (double tagging) → change native VLAN from VLAN 1
- DNS poisoning → mitigate with DNSSEC
- SYN flood (DoS) → mitigate with SYN cookies, rate limiting
- MAC flooding → mitigate with port security (max MAC count)
- Rogue AP → mitigate with wireless IPS, 802.1X for wireless
- Evil twin / deauth attack → WPA3 Management Frame Protection (MFP)
Study Resources
- Professor Messer — Domain 4.1 (Security Concepts), 4.2 (Attacks), 4.3 (Mitigations)
- FreeRADIUS (freeradius.net) — set up a RADIUS server for 802.1X lab with Packet Tracer
- CompTIA Security+ SY0-701 Study Guide overlap (Security+ builds on Network+ security sections)
- Draw a DMZ architecture diagram: internet → outer FW → DMZ (web server, mail relay) → inner FW → internal
🏋️ Lab 4: Firewall ACL with DMZ
In Packet Tracer: create a 3-zone network (Internet, DMZ, Internal). Configure ACLs: permit TCP 80/443 from internet to DMZ web server, deny DMZ-to-Internal traffic, permit Internal-to-DMZ management (port 22). Verify ACL hit counters using 'show access-lists'. Add optional logging for denied traffic visibility.
Core Troubleshooting Tools
ping (ICMP test)
traceroute/tracert
ipconfig /all
netstat -an
arp -a
nslookup / dig
nmap (host scan)
Wireshark (packet)
Cable Tester (wire map)
OTDR (fiber fault)
Toner Probe
Cable Certifier
Exam Tips
🎯 Exam Strategy
- 90 questions in 90 minutes — budget ~60 seconds per question
- Performance-based questions (PBQs) appear first — don't spend 20 minutes here; mark and return
- Subnetting: you MUST be able to calculate quickly — use binary shortcut or prefix table
- OSI model: know which technologies operate at each layer (switches=L2, routers=L3, etc.)
- Troubleshooting questions: eliminate answers that skip steps (must identify before implementing)
- Documentation is always the LAST step in the 7-step methodology
- Port numbers: focus on 25–30 most common (see Phase 1 cheat sheet)
- Flag difficult questions, answer all, and review — never leave blank
Final Week Study Resources
- Jason Dion Network+ Practice Exams (Udemy) — 6 full-length 90-question tests
- Professor Messer Network+ Practice Exams (professormesser.com)
- Professor Messer — Full Course Playlist on YouTube (free, 90+ videos)
- Boson Ex-Sim for Network+ — highest fidelity practice questions, direct CompTIA collaboration
- CompTIA Network+ exam objectives PDF (get directly from comptia.org — free)
🏋️ Final Lab: Full Troubleshooting Simulation
Set up a working network in Packet Tracer. Ask a friend or use a timer: break 5 different things (wrong VLAN, bad IP, incorrect gateway, wrong DNS server, blocked port). Time yourself to diagnose and fix each issue using only CLI commands. Document each: symptom → investigation → root cause → fix → verification.
💼 Career Paths with Network+
Network Administrator
$55K – $90K
Systems Administrator
$60K – $100K
Help Desk / IT Support
$40K – $65K
Network Technician
$50K – $80K
Security Analyst (Jr)
$60K – $95K
Cloud Network Engineer
$85K – $135K
Salary data based on US market averages (2024). Actual compensation varies by location, company size, and total experience.
🚀 Ready to Earn Your Network+?
Practice questions, flashcards, and hands-on projects are available now to accelerate your preparation.