N10-009 - Network Troubleshooting (24% of the exam) - Section 5.2

Troubleshoot common cable connectivity issues and explain the use of the appropriate diagnostic tools and physical-layer indicators.

Diagnose physical-layer faults: attenuation, crosstalk, EMI, incorrect pinout (straight-through versus crossover), open/short pairs, and transceiver or duplex/speed mismatches. Select the right physical tool - cable tester, toner probe, OTDR, or loopback adapter - and read interface counters such as CRC errors and runts to localise the failing segment.

Cable faultsCrosstalk and attenuationDuplex/speed mismatchCable tester and toner

Practice question for this objective

Free sampleNetwork Troubleshootingmedium

A technician investigates a workstation that copies files very slowly across a 100 Mbps copper link. The switch port, configured for full duplex, reports rising CRC and runt frame errors, while the workstation NIC, which has fallen back to half duplex, logs rising late collisions. What is the most likely cause of these symptoms?

  • AThe run exceeds the 100 metre limit for twisted-pair copper, so attenuation is corrupting frames.
  • BExcessive crosstalk between adjacent wire pairs in the patch cable is corrupting the signal.
  • CA duplex mismatch, with the switch forced to full duplex while the NIC operates in half duplex. Correct
  • DA speed mismatch between a 100 Mbps interface and a 10 Mbps interface on the same link.
A duplex mismatch pairs a full-duplex end with a half-duplex end, showing late collisions on the half-duplex side and CRC errors, with poor throughput. Full duplex disables carrier sense and collision detection, so the full-duplex switch port transmits without deferring; the half-duplex NIC, still running CSMA/CD, records these as late collisions, while the truncated frames appear as CRC and runt errors on the full-duplex end, and effective throughput drops sharply.

Why A is wrong: An over-length run does raise errors, which makes this tempting, but attenuation does not force one end into half duplex or generate late collisions, so it does not fit the counters described.

Why B is wrong: Crosstalk can cause CRC errors, so it is a plausible guess, but it does not drive one interface into half duplex nor produce late collisions, which are the distinguishing symptoms here.

Why C is correct: With the switch forced to full duplex it transmits without carrier sense, so the half-duplex NIC detects those transmissions as late collisions while both ends log CRC and runt errors from the truncated frames, and throughput collapses.

Why D is wrong: A true speed mismatch usually prevents the link from coming up at all rather than passing traffic slowly, and it would not produce the late-collision counters seen here.

See more N10-009 practice questions, answers explained.

Exam traps in Network Troubleshooting

Answers that look right on this material and are not. Each one is a distractor from a different question in the N10-009 bank for this domain.

  • The interface is receiving giant frames from a host that has jumbo frames misconfigured.

    Why it is wrong: Jumbo-frame misconfiguration would raise the giants counter, not late collisions, so while it is a real fault it does not explain the specific counters incrementing here.

  • Runts are frames larger than 1518 bytes, usually caused by a host sending jumbo frames that the port was never configured to accept.

    Why it is wrong: This reverses the definitions; oversized frames are counted as giants, not runts, so a candidate who confuses the two size counters will pick this incorrectly.

  • A straight-through cable of a shorter length, because the previous lead exceeded the 100 metre channel limit.

    Why it is wrong: Length is not the issue, since both ports have power and the run is a short patch, and a straight-through lead of any length still presents the wrong pinout between two like devices.

Examworthy is not affiliated with or endorsed by CompTIA. Original, blueprint-aligned practice material only.