Choose free AP Networking topic tests with 25 Easy, 25 Medium, and 25 Hard questions each, immediate explanations, evidence-based examples, and a practical review plan.
Independent practice · Published October 1, 2026 · Updated October 17, 2026 · Free for students and teachers
A broad practice exam can tell you that networking questions are costing points, but its total score may hide the cause. A missed question could be a subnet-boundary error, an incorrect assumption about a VLAN, a route lookup mistake, or a conclusion that goes beyond what a successful ping proves. Topic practice makes that missing step visible.
This library now covers twenty-two connected subjects and 1,650 explained questions across Phases 1–6. Every test offers 25 Easy, 25 Medium, and 25 Hard items. The split lets you distinguish direct-rule uncertainty from trouble combining evidence. Students who recognize a gateway definition may still need practice deciding whether a host will ARP locally, which installed route wins, and whether a reply can return.
Use this directory for diagnosis and targeted repetition. The existing practice questions provide broader review, unit guides organize teaching, and full practice exams help test transfer across subjects. These resources serve different stages of study rather than being interchangeable lists of questions.
All questions here are independent instructional items. They are not released College Board questions, and these local difficulty labels or scores do not predict a national exam score.
Taking the May 2027 pilot? Start with the 2027 pilot exam practice test and study guide: 32 original scenarios across all four units, with immediate feedback. Use its result to choose a specific topic test below; the diagnostic is not an official full-length exam.
Practice 75 network components and media questions: NICs, switches, routers, copper, fiber, Wi-Fi, PoE budgets, link evidence, and capacity troubleshooting.
25 Easy + 25 Medium + 25 Hard
Diagnose errors in link evidence, media compatibility, capacity. Use the worked explanation before retrying a missed decision.
Work through 75 IP addressing and subnetting questions with subnet boundaries, host ranges, VLSM, masks, gateway checks, overlapping networks, and IPv6 scope.
25 Easy + 25 Medium + 25 Hard
Diagnose errors in boundary calculation, address planning, scope. Use the worked explanation before retrying a missed decision.
Test switching, VLANs, and Ethernet with 75 explained questions on MAC learning, flooding, trunks, native VLANs, STP, port security, and segmented LAN evidence.
25 Easy + 25 Medium + 25 Hard
Diagnose errors in MAC forwarding, VLAN path, policy boundary. Use the worked explanation before retrying a missed decision.
Practice 75 DNS, DHCP, and protocol questions: DORA evidence, relays, lease options, resolver views, caching, TCP fallback, ports, and application failure stages.
25 Easy + 25 Medium + 25 Hard
Diagnose errors in service stage, resolver context, protocol evidence. Use the worked explanation before retrying a missed decision.
Choose by the evidence you find confusing. If the symptom is a missing link or uncertain power budget, begin with components/media. If the client chooses the wrong local or remote path, begin with addressing. If the intended segment disappears across a trunk, choose switching/VLANs. If the next hop or reply path is uncertain, choose routing. If an address or name-dependent stage is missing, choose DNS/DHCP.
Phase 2: diagnose wireless, policy, command, transport, and IPv6 failures
After the foundation tests, use Phase 2 to investigate the missing boundary in a more specific troubleshooting problem. A wireless client can associate yet lose its VLAN service path; a route can exist yet policy deny one transport; an IPv6 address can form without a usable default router.
Practice 75 Wi-Fi troubleshooting questions on RSSI, SNR, airtime, roaming, authentication, SSID-to-VLAN mapping, and distinguishing RF from service failures.
25 Easy + 25 Medium + 25 Hard
Focus on RF interpretation, access stages, controlled comparison.
Answer 75 firewall and ACL questions on first-match rule order, source/destination scope, transport ports, stateful return traffic, placement, and least privilege.
25 Easy + 25 Medium + 25 Hard
Focus on rule order, flow scope, enforcement evidence.
Work through 75 CLI troubleshooting questions using address output, route lookups, neighbor state, DNS replies, traceroute limits, socket listeners, and capture context.
25 Easy + 25 Medium + 25 Hard
Focus on tool selection, output scope, path context.
Test TCP and UDP reasoning with 75 questions on handshakes, endpoint tuples, retries, flow control, congestion, jitter, MTU feedback, and application-stage failures.
25 Easy + 25 Medium + 25 Hard
Focus on transport stages, performance constraints, return tuple.
Practice 75 IPv6 questions on Neighbor Discovery, Router Advertisements, SLAAC, address lifetimes, default-router state, dual-stack policy, and link-local scope.
25 Easy + 25 Medium + 25 Hard
Focus on control-message evidence, address lifecycle, dual-stack path.
Use the existing command-output lesson for a guided reading of artifacts, then take the CLI test to check selection and inference across difficulty levels. Use first-match policy practice for a narrower rule-order exercise before the broader ACL diagnostic. The new tests extend these lessons with structured self-assessment rather than replace them.
Phase 3: trace evidence, evaluate access, and verify resilient service
Phase 3 moves from a single connectivity symptom to evidence collection and operational decisions. Trace rewritten tuples through NAT, evaluate what a capture can see, calculate valid monitoring rates, distinguish identity from action permission, and test whether a redundant design recovers the required task.
Practice 75 NAT and PAT questions on translated tuples, port forwarding, double NAT, hairpin paths, mapping lifetimes, attribution, and failover state.
25 Easy + 25 Medium + 25 Hard
Focus on tuple rewriting, state and return paths, publication boundaries.
Practice 75 secure-access questions on authentication versus authorization, device posture, least privilege, certificate identity, session revocation, and alternate access paths.
25 Easy + 25 Medium + 25 Hard
Focus on identity versus permission, credential lifecycle, effective access boundaries.
Test network-design reasoning with 75 questions on failure domains, alternate-path capacity, loop prevention, state continuity, growth, recovery, and acceptance testing.
25 Easy + 25 Medium + 25 Hard
Focus on failure-domain reasoning, degraded capacity, task-level recovery.
Phase 4: resolve protocol state and document a verified repair
Phase 4 examines protocol state and the reasoning behind a repair. Use DNS when the exact query, authority path or cached result is uncertain. Use DHCP when assignment, timers, relay delivery or allocation capacity is the missing step. ARP practice separates route-selected neighbors from switch forwarding and competing ownership. Encapsulation follows fields and size budgets across processing boundaries. Troubleshooting practice tests the experiment, acceptance condition and handoff that make a result defensible.
Work through 75 DNS questions on authoritative and recursive roles, delegation, record types, negative caching, alias chains, resolver views, validation, and migration verification.
25 Easy + 25 Medium + 25 Hard
Focus on record and delegation paths, cache timelines, resolution policy.
Practice 75 ARP and address-conflict questions on local next hops, neighbor caches, switch MAC tables, probes, competing claims, proxy behavior, virtual gateways, and ownership verification.
25 Easy + 25 Medium + 25 Hard
Focus on next-hop selection, neighbor versus MAC tables, conflict ownership.
Answer 75 OSI and encapsulation questions on protocol wrappers, per-hop framing, transport endpoints, checksums, TTL, packet budgets, fragmentation, tunnels, and observation limits.
25 Easy + 25 Medium + 25 Hard
Focus on protocol-field boundaries, packet-size arithmetic, per-hop framing.
Test troubleshooting judgment with 75 questions on symptom scope, hypotheses, controlled comparisons, timelines, effective changes, rollback, representative verification, and evidence-based handoffs.
25 Easy + 25 Medium + 25 Hard
Focus on controlled comparisons, causal evidence, verification and handoff.
The earlier broad protocol test checks initial protocol selection. These focused sets go further into state, conflicting observations and controlled verification. Use troubleshooting methods and documentation across the technical topics: record the exact attempt, separate evidence from interpretation, and test both recovery and the restrictions that must remain.
Phase 5: troubleshoot HTTPS, TLS, and certificate failures
A responding server is not enough: students must distinguish a reachable listener, an authenticated service name, an accepted trust path, and a successful application task. This focused set adds 75 questions and a practical guide to testing those boundaries.
Practice certificate names and wildcards, client trust differences, SNI and ALPN, missing intermediates, proxy-to-origin TLS, renewal rollouts, IPv4/IPv6 differences, and complete workflow verification.
25 Easy + 25 Medium + 25 Hard
Includes instant feedback, score review, an attempt-log download, and a detailed troubleshooting guide.
Phase 6: troubleshoot MTU, MSS, and path-size failures
Small requests can pass while a large transfer stalls. This focused set connects packet budgets, feedback delivery, tunnel overhead, and evidence from both directions.
Calculate inner and outer packet budgets, interpret IPv4 DF and IPv6 Packet Too Big, trace MSS direction, distinguish capture offload artifacts, and verify TCP and UDP repairs.
25 Easy + 25 Medium + 25 Hard
Includes immediate explanations, score review, a downloadable attempt log, and a detailed troubleshooting guide.
Progress from a rule to an evidence-based decision
Easy: Identify a device function, apply a stated prefix, read one direct observation, or recognize a protocol stage. Explain the rule before advancing. A correct guess based on a familiar word is a signal to review, not a reason to skip the explanation.
Medium: Combine two pieces of evidence. A powered AP without a link separates power from data. A host address and mask must be read together before deciding whether its gateway is local. A DHCP exchange that ends after Offer calls for a different next observation from one that reaches ACK with wrong options.
Hard: Choose among plausible decisions while respecting the limits of the observations. You may need to consider a return path, an overlapping subnet, a VLAN-specific failure on an otherwise healthy trunk, or a resolver cache that differs from authoritative data. Difficulty comes from the reasoning burden, not merely a longer prompt.
You can start at any level, but a useful diagnostic order is Easy, then Medium, then Hard on one topic. Each selected level contains exactly 25 questions. Switching levels resets the attempt, so download the attempt log before changing if you want a record. Every answer receives immediate feedback; the first selection is scored. There is no time limit in these diagnostic activities.
Read a result as a dependency map
Compare the pattern of misses, not only the percentage. Strong Easy performance with weaker Medium results often calls for combining artifacts: address plus mask, VLAN assignment plus trunk allowance, or DNS response plus transport test. Strong Medium performance with weaker Hard results may expose overclaiming or difficulty handling an alternative explanation.
For example, a gateway ping proves a local ICMP exchange with that gateway at that time. It does not prove that a remote website's DNS answer is correct, that TCP 443 is permitted, or that the server returns traffic to the client's source subnet. When reviewing an answer, name the tested boundary and the next dependency instead of writing “the network works.”
A route table proves which installed prefix a lookup can select under its current state. It does not prove that the next-hop neighbor answers, the policy permits traffic, or downstream routers have a reply path. A DHCPACK proves an allocation response was observed; its address, mask, gateway, and resolver values still need validation against the intended network.
If you are unsure which inference was excessive, use the site's Wrong Answer Detective to practice comparing observations with conclusions. Then return to the topic that produced the misunderstanding and explain the repair in a narrower sentence.
Apply the Skill • 120 Missions
Take the next step from a question to a working repair
A correct route-table answer is useful; choosing the next test in a broken network asks more of you. The Browser Troubleshooting Simulator gives students 120 missions to investigate symptoms, compare evidence, and test a repair after reviewing a topic here.
Build an error log that changes the next study session
After each attempt, use the download control for a CSV containing question ID, difficulty, selected answer, correct answer, result, and explanation. Add your own reasoning note in a spreadsheet or notebook. Keep one line per reasoning failure; copying the entire explanation without naming your original mistake makes the log less useful.
Swipe to see the full error-log example.
Observation
Incorrect inference
Repair to the method
Next evidence
A host is .77/26
Assumed .0/24 boundaries
Find the 64-address block first
Write network .64, last host .126, broadcast .127
VLAN 10 crosses the trunk
Assumed VLAN 30 also crosses
Check each VLAN's effective path
Compare allowed lists and forwarding state on both ends
Gateway ping succeeds
Declared the remote service healthy
Keep the conclusion local and protocol-specific
Test the destination service and return path
Server sends DHCP Offer
Assumed the client received it
Distinguish transmission from delivery
Compare client-side and server-side captures
Label the mistake as a rule error, calculation error, observation error, path error, or overclaim. Include one tempting distractor and the evidence that rules it out. That entry gives the next session a task: recalculate a boundary, trace a VLAN, compare two source addresses, or identify the missing protocol message.
Mixed Review • Exams and Artifact Labs
Check whether the skill holds up outside its topic
After a focused test exposes a weak step, review that mechanism before returning to mixed practice. The Complete Exam Prep Vault adds practice exams, multiple-choice questions, and artifact labs for combining addressing, routing, protocols, and policy in broader course review.
Revisit a question without rehearsing its answer letter
On the first review, hide the choices. Write the strongest observation, your bounded conclusion, and the next test. Then open the explained item and compare the method. If you can remember the correct letter but cannot explain why an alternative fails, the reasoning still needs attention.
On a later session, change the representation. Draw the packet path for a routing answer, list subnet boundaries for an addressing answer, sketch the access/trunk chain for a VLAN answer, or mark the last observed message in a DHCP exchange. This is a more useful transfer check than immediately restarting the same 25 items until the score rises.
Use subnetting practice questions when a calculation step is weak, and routing-table analysis when a route decision needs an artifact-based second pass. These existing resources deepen one operation. Return here when you are ready to place that operation inside a larger scenario.
Keep score history separate from evidence of transfer. A higher score on a familiar bank is encouraging, but an unfamiliar artifact, a written explanation, or a mixed-topic task provides stronger information about whether the skill generalizes.
Daily Warm-Ups • 300 Bell Ringers
Use yesterday’s missed decision as tomorrow’s starter
If an error log shows students confusing a local address with a routed destination, open the next class with a short boundary question. The 300 Bell Ringers pack gives teachers ready-to-use prompts and answers for regular retrieval practice before the longer topic tests.
Move from topic practice to unit and full-exam work
Once errors have a clear cause and you can explain a corrected decision, move to the appropriate Unit 1 practice, Unit 2 practice, Unit 3 practice, or Unit 4 practice. Unit work requires choosing the relevant tool among related course concepts.
Then use full practice exams for mixed-topic selection and endurance. If the missed question concerns an explanation rather than only a selection, pair it with free-response practice or artifact analysis. State what the artifact proves, what remains uncertain, and which observation would distinguish your leading explanations.
A practical sequence is topic diagnosis, a focused guide, explained topic practice, an unfamiliar unit task, then a mixed exam or written artifact response. Move backward when a result reveals a missing prerequisite. There is no benefit in continuing full exams while repeating the same unchecked subnet assumption.
Teacher Feedback • Artifact Reasoning
Look past the score to the student’s explanation
Ask students to explain the observation that supports their answer and why one tempting choice fails. The Artifact Analysis Grading Copilot helps teachers review written claims and evidence, identify missing reasoning, and prepare feedback. The teacher makes the final grading decision.
The current pilot framework organizes AP Networking around four units: Managing My Connections, Managing Shared Connections, Managing Many Connections, and Managing Global Connections. Components and addressing support decisions about individual and shared connections; switching and segmentation become especially important when managing many connections; routing and service protocols help explain broader paths.
Those are teaching connections, not claims that each topic belongs exclusively to one unit or carries a fixed exam weight. A single troubleshooting scenario may combine a client's interface, address, VLAN, route, resolver, and security policy. The topic names help isolate a weak operation before students recombine those dependencies.
College Board currently describes the national exam for May 2028 as fully digital in Bluebook, with scenario-based multiple choice and artifact/evidence-based free response. These browser activities support the underlying reasoning; they are not a Bluebook simulator or a reproduction of official exam timing and scoring. Consult the site's exam guide for the broader preparation context and the official exam overview for current national assessment guidance.
Phases 1–4 are complete; Phase 5 adds a focused secure-service diagnostic to this provisional ten-phase project. Later topics should be checked against the live inventory and current framework before publication. No unbuilt tests are listed as available here.
Course Planning • 180 Teaching Days
Place targeted practice inside a full teaching sequence
A subnetting miss and a firewall-order miss call for different follow-up lessons. The Complete 180-Day Teacher Curriculum includes daily teaching notes, student activities, and simulators so teachers can connect the gaps found in these tests to a planned course.
Assign one level rather than all 75 items at once when the purpose is diagnosis. Collect a brief explanation for two choices: one correct answer with a tempting distractor and one missed answer after review. That combination shows whether the student understood the decision or merely recognized an answer pattern.
Group students by the missing step. One group may need prefix boundaries; another may need to separate VLAN forwarding from routing; another may need to distinguish resolver success from application availability. Use projected configurations and annotated paths when a live lab is unavailable. The static explained library remains readable even when JavaScript is disabled.
For paired work, ask one student to defend the bounded conclusion and another to propose a plausible alternative. They should identify the next observation that separates the two. A useful exit ticket is a three-sentence account: evidence, conclusion with limits, and next test. The site’s teacher resources can support the follow-up lesson after the diagnostic reveals which operation needs practice.
Require students to record the topic, level, question ID, and attempt date if you need a review trail. These pages do not submit results to a teacher dashboard. The student can download the current attempt log and attach it through the classroom system you already use.