Home › Certifications › CompTIA Network+ › Network Operations
51 multiple-choice questions and 22 flashcards on Network Operations, about 19% of the CompTIA Network+ bank. Every one carries a written rationale.
Network Operations is one of 7 chapters in CoStudy's CompTIA Network+ bank, and it holds 51 of the bank's 270 multiple-choice questions — roughly 19% of the total. That proportion is not arbitrary: chapters follow the certifying body's published exam outline, and the number of questions in each is set by that domain's published weight, so the share of your practice time this chapter takes matches the share of the real exam it accounts for.
Studying by chapter is worth doing once you have a diagnostic score. A single overall percentage tells you whether you are close; it does not tell you which domain is dragging. Working a weak chapter in isolation, and re-testing it in isolation, is the fastest way to move a score that has stalled — and it is why the mock exams in CoStudy report by domain rather than as one number.
10 questions drawn from this chapter, with the full rationale shown — the controlling principle behind the right answer, and why each wrong option tempts and fails.
Which metric measures variation in packet delay over time and most directly affects VoIP quality?
Answer: C — Jitter
Jitter is delay variation; VoIP is highly sensitive. Latency is absolute one-way/RTT. Throughput is sustained rate. MTU is frame size. Confusing jitter with latency is a Network+ trap.
A network diagram serves what primary purpose?
Answer: B — Document physical and logical topology for troubleshooting and planning
B is right: physical diagrams show cabling and rack layout while logical diagrams show IP addressing, VLANs, routing, and trust boundaries, and both support change management, incident response, and recovery. A is not a purpose. C fails because a diagram summarizes intent but never replaces device configuration. D confuses documentation with billing.
A monitoring platform must programmatically retrieve wireless client counts from a vendor controller every minute and store them for reporting. Which interface is the MOST appropriate integration point?
Answer: D — The controller's REST API
D) Correct — a REST API returns structured, parseable state data and is the intended programmatic integration path for modern controllers. A) A set writes values rather than reading them; a get would be closer but SNMP is the legacy path here. B) Screen-scraping a console is brittle and unsuited to per-minute automation. C) A config pull returns settings, not live client counts.
Which statement BEST describes the purpose of a maintenance window in change management?
Answer: B — A pre-agreed period in which stakeholders accept possible service disruption
B) Correct — the window is the negotiated slot where risk of impact is acceptable to the business, which is why changes are scheduled into it. A) That describes a change freeze, the near-twin concept often confused with a window. C) Backup jobs may run nightly but that schedule is not a change window. D) Credit thresholds live in the SLA and are unrelated to change scheduling.
At 02:00 an on-call engineer reconfigured a failed firewall interface to restore service, bypassing the normal approval queue as the emergency policy allows. Under a formal change management process, what must happen NEXT?
Answer: D — Submit retroactive change documentation for review and approval by the board
D) Correct — emergency changes defer approval, they do not eliminate it; the record and review still have to be completed after the fact. A) Treating emergency work as exempt is the common misconception that destroys the audit trail. B) The disruption already happened, so scheduling a window afterward addresses nothing. C) Backdating a request falsifies the record rather than documenting an emergency honestly.
A network engineer must produce a document that shows which VLANs and IP subnets ride over which routed links between two campuses. Cable runs, patch-panel ports and cabinet positions are deliberately out of scope. Which document BEST fits this requirement?
Answer: C — Logical network diagram showing VLANs, subnets and routed paths
C) Correct — a logical diagram abstracts away media and placement and shows addressing, segmentation and traffic paths, which is exactly the stated scope. A) A rack elevation answers 'where is the box mounted', a physical concern explicitly excluded. B) A physical topology map is the near-twin document for cabling, which the question rules out. D) A floor plan documents drop locations for installers, not routing or VLAN membership.
A WAN interface flaps down and back up for roughly twenty seconds. The monitoring system polls interface state every five minutes. Which mechanism is MOST likely to have captured the event?
Answer: C — An SNMP trap sent by the router at the moment the link changed state
C) Correct — traps are asynchronous and fire on the state change itself, which is why they cover events shorter than the polling interval. A) A poll five minutes later sees an interface that is up again and reports nothing unusual. B) Discovery inventories reachable devices periodically; it is far too coarse for a twenty-second event. D) A baseline report describes aggregate trends and would smooth a brief flap away entirely.
Before rolling a new firmware release to eighty access switches, which step is the MOST important for the operations team to complete?
Answer: D — Validate the image on a non-production switch of the same model first
D) Correct — testing on identical, non-production hardware is what converts an eighty-device gamble into a controlled rollout. A) User notification matters but does not reduce the technical risk of a bad image. B) Faster polling adds visibility during the change without preventing a defective image from bricking devices. C) Clearing logs destroys the very history you would need if the upgrade misbehaves.
A design team is choosing between active-active and active-passive firewall pairs. Which consideration is MOST important when evaluating active-active?
Answer: A — Each node must still absorb the full load alone after its partner fails
A) Correct — the classic active-active sizing trap is running both nodes above fifty percent, so a single failure creates an overloaded survivor. B) Modern active-active pairs do synchronize session state; this reverses the actual behavior. C) In active-passive the standby is precisely the node that is not forwarding, so the reasoning is backwards. D) Both models depend on a heartbeat to detect peer failure.
A newly added switch reports its statistics to the monitoring system only as numeric object identifiers, with no human-readable names or units. What is required to fix the display?
Answer: A — Load the vendor's MIB into the management system so OIDs resolve to named objects
A) Correct — the MIB is the dictionary that maps OIDs to object names, types and units; without it the manager can only show raw numbers. B) Traps are event notifications and would not change how polled objects are labeled. C) Polling interval affects sample frequency, never naming. D) A community mismatch would prevent data from arriving at all, yet data is clearly arriving.
4 cards from the 22 in this chapter.
What is the role of syslog?
Standard for forwarding log messages from network devices to a centralized server. Severity levels 0–7 (Emergency to Debug).
What is a runbook in network operations?
Documented procedure for routine tasks (failover, restart, backup). Reduces errors and accelerates recovery during incidents.
What is high availability (HA)?
Designing a system to minimize downtime via redundancy and failover. Common in pairs (active/active or active/standby) or N+1 clusters.
What is latency vs. jitter?
Latency: one-way or round-trip delay. Jitter: variation in latency. Voice/video tolerate moderate latency but are very sensitive to jitter.
These are a sample. The full Network Operations chapter runs 73 items with per-chapter progress tracking, on the web and in the iOS app.
Open CompTIA Network+ in CoStudy →