HomePBQ examplesNetwork+ N10-009
Network+ N10-009 PBQ examples: 9 formats
What a Network+ N10-009 performance-based question looks like, how it is scored item by item, and a real scenario you can work right here before you decide anything about studying.
N10-009 is 90 questions in 90 minutes, 720 on the 100 to 900 scale. Facts checked 16 October 2026 against comptia.org.
Exam code
N10-009
Format
90 questions in 90 minutes
Passing
720 on the 100 to 900 scale
PBQ formats
9
Scenarios in the bank
39
Facts checked
16 October 2026
Try a real N10-009 PBQ now
Scored in the browserThis is one scenario from the N10-009 bank, running with the same interaction and the same item-by-item grader the app uses. No account, no timer, and you can retry as often as you like.
Ports and Services Round 2
Matching · 8 min · mediumA firewall audit lists six services seen on the wire. Pair each service with its standard port and protocol.
Task. Match every service to its port. All pairs come from the IANA registry as cited in the pack.
0 of 6 matched
0 of 6 matched
Pick a left card first, then its match. Or use the dropdowns below.
What a Network+ N10-009 PBQ actually asks for
Network+ PBQs are almost always a small topology you have to make behave: address it, trunk it, route it, then prove it with the show output or a packet test.
A performance-based question is a task, not a question with options: you are handed a workspace and a deliverable, and the scoring reads the state you leave behind. On N10-009 the bank carries 39 authored scenarios across 9 formats, and a simulated sitting serves 5 of them alongside the multiple-choice section.
The formats below are the ones this exam uses. Matching pairs is the format in the free scenario further down this page, so you can try the interaction before you decide whether Network+ N10-009 is the right exam for you.
| Format | What you do | Where it happens |
|---|---|---|
| Topology build | You build and address a small network until the simulated traffic behaves: routes resolve, VLANs stay separate, the guest network stays off the management subnet. | A topology canvas wired to a packet simulator |
| Terminal investigation | You work a real shell: read the state, change it with the commands the job uses, then write the findings the task asks for. | A Linux or device console with a findings form |
| Configuration form | You fill in the settings a device or policy needs: VLANs, addresses, backup windows, scan scope, retention or policy values. | A device or policy form with typed and selected fields |
| Sequence and procedure | You put the steps of a procedure into the order a professional would run them: containment, escalation, recovery, or the correct fix-then-verify sequence. | A draggable list of steps |
| Matching pairs | You pair prompts with the option that belongs to each one: a port with its service, a symptom with its cause, a control with the risk it treats. | Two columns with one selection per prompt |
| Diagram placement | You place the right control, device or component into the gaps of a topology or an incident-response diagram. | A diagram with labelled drop slots |
| Log and indicator triage | You read a host or traffic log, mark each host as clean or compromised, and name the origin of the activity. | A log viewer with per-host verdicts |
| Firewall and ACL rules | You edit an ordered rule list until a fixed set of test packets is allowed or denied the way the ticket asks, first match wins and an implicit deny closes the list. | A rule table beside the packet verdicts it produces |
| Classification bins | You file each item into the right category: risk treatment, control type, recovery site, attack stage or severity band. | A list of items, each with a category selector |
How PBQs are graded
Every scenario is scored item by item, and the total is points earned over points available. There is no penalty for a wrong item beyond the point it was worth, and no bonus for speed: the clock decides when you stop, not how much each item is worth. A blank row and a wrong row score the same, which is why leaving a workspace half-finished is the most expensive habit on this exam.
The score report lists each item, the value you gave and the value required. On N10-009 a matching item is one point, a log origin can be worth two, and a ranked field pays half when at least half the sequence is right. Partial credit is why a half-finished scenario still tells you something: it shows which line of the deliverable you actually understood.
The pass mark is 720 on the 100 to 900 scale. CompTIA and Cisco do not publish how many PBQ points that represents, and anyone who quotes an exact PBQ weighting is guessing. What the published facts do tell you is the scale you are working against: 90 questions in 90 minutes, with the Troubleshooting domain carrying 24% of the marks.
Six common mistakes
These are the six ways learners lose PBQ points that have nothing to do with knowledge. Each one is fixable in a single practice sitting.
- Starting to type before reading the deliverable. The task line, not the story, says what is graded: "allow 443 to the web tier", "mark the compromised hosts", "order the containment". On N10-009 a topology task can look familiar and still ask for the opposite of last time. Read the deliverable twice and say it back to yourself before you touch the workspace.
- Treating a PBQ like a multiple-choice question. There is no partial guess to make. On N10-009 the topology and terminal and config formats are scored item by item, so a blank item and a wrong item cost the same, and a nearly-right answer earns more than an empty one. Fill every item, in your best order, then go back to the ones you flagged.
- Losing the whole task to one stuck item. A single stubborn row can eat the twelve minutes the rest of the scenario needed. Set a hard limit of about ninety seconds on any one item, write your best answer, flag it and move on. The Troubleshooting domain is 24% of N10-009; no single PBQ item is worth failing the rest of the section for.
- Ignoring the order inside an ordered task. Firewall rules are first-match-wins and incident response has a sequence that survives an audit. If the task says order, a correct set in the wrong order is still wrong, and the terminal format scores position by position. Ask which step has to happen before another, then build from the constraint end.
- Never checking your own work. Every workspace can be inspected before you submit: the packet verdicts, the file permissions, the service state, the show output. Re-read the deliverable and prove each line of it in the tool. Learners lose more points to an unchecked second row than to a missing idea.
- Skipping the debrief after a miss. The score report names the item, the value you gave and the value required. That report is the study material. Copy the two or three misses into notes and open the objective page for them the same day, or the same mistake returns in the next N10-009 sitting under a different story.
Where the PBQs sit in the N10-009 sitting
CompTIA puts the performance-based questions in a block at the start of the sitting. That is deliberate: it is the part where a rushed start costs the most, and the clock is already running. Budget your first pass for the PBQs, finish the ones you can complete cleanly, flag the rest, and move to the multiple-choice section with time left to come back.
Practise the whole shape, not just the workspace: a timer, a mixed set, and a decision about what to flag. The app's timed simulations run the 90-question, 90-minute shape, and the free tier gives you three PBQs and thirty questions a day before you decide anything about paying.
A practice plan that fits a week
Day one: open the free scenario on this page and submit it without hints, even if you are unsure. Read the score report line by line. Day two: take the N10-009 practice test on this site and note which domain the misses come from. Day three and four: work the matching labs, which use the same surfaces as the PBQs but grade a job rather than a deliverable. Day five: come back to the scenario and score it again with the hints off; if the second attempt is not clean, the gap is in the Troubleshooting domain, not in the workspace.
Keep a short note per miss: the item, the value you gave, the value required, and the objective id. That note is worth more than a second video course, because it is the only record of what you personally get wrong.
What the workspace looks like
Real captures from the PBQ workspaces in the app, annotated to point at the parts that decide the score. Each caption names the exam and the scenario it shows.

Configuration form. CCNA 200-301, Access Port Reset and a Silent Trunk. The ticket describes the fault; every field in the form is one graded point. 
Terminal investigation. Security+ SY0-701, Key File Permissions. A real bash prompt, a hash to verify, and a finding field: the grader reads the file state you leave behind.
Where to go next
N10-009 PBQ questions
CompTIA does not publish a per-exam PBQ count, so no honest page can give you one. What is published is the shape: 90 questions in 90 minutes, 720 on the 100 to 900 scale. SecLern's simulation serves 5 PBQs from a bank of 39 authored scenarios, so you meet the format rather than memorising one task.
Thirty study questions a day, three PBQs and every free tool, no card.
Work the N10-009 PBQs until the deliverable is automatic
The bank carries every format this exam uses, and each scenario grades item by item so a miss tells you which line of the deliverable you did not understand.
Free tier, no card. Pro starts with a 7-day trial; a card is required and you can cancel before day 7.