Read the evidence · explain the choice

AP Networking Practice Tests by Topic

Choose free AP Networking topic tests with 25 Easy, 25 Medium, and 25 Hard questions each, immediate explanations, evidence-based examples, and a practical review plan.

Independent practice · Published October 1, 2026 · Updated October 17, 2026 · Free for students and teachers

Start with a decision you need to improve

A broad practice exam can tell you that networking questions are costing points, but its total score may hide the cause. A missed question could be a subnet-boundary error, an incorrect assumption about a VLAN, a route lookup mistake, or a conclusion that goes beyond what a successful ping proves. Topic practice makes that missing step visible.

This library now covers twenty-two connected subjects and 1,650 explained questions across Phases 1–6. Every test offers 25 Easy, 25 Medium, and 25 Hard items. The split lets you distinguish direct-rule uncertainty from trouble combining evidence. Students who recognize a gateway definition may still need practice deciding whether a host will ARP locally, which installed route wins, and whether a reply can return.

Use this directory for diagnosis and targeted repetition. The existing practice questions provide broader review, unit guides organize teaching, and full practice exams help test transfer across subjects. These resources serve different stages of study rather than being interchangeable lists of questions.

All questions here are independent instructional items. They are not released College Board questions, and these local difficulty labels or scores do not predict a national exam score.

Taking the May 2027 pilot? Start with the 2027 pilot exam practice test and study guide: 32 original scenarios across all four units, with immediate feedback. Use its result to choose a specific topic test below; the diagnostic is not an official full-length exam.

The Phase 1 topic library

Network components and media

Practice 75 network components and media questions: NICs, switches, routers, copper, fiber, Wi-Fi, PoE budgets, link evidence, and capacity troubleshooting.

25 Easy + 25 Medium + 25 Hard

Diagnose errors in link evidence, media compatibility, capacity. Use the worked explanation before retrying a missed decision.

IP addressing and subnetting

Work through 75 IP addressing and subnetting questions with subnet boundaries, host ranges, VLSM, masks, gateway checks, overlapping networks, and IPv6 scope.

25 Easy + 25 Medium + 25 Hard

Diagnose errors in boundary calculation, address planning, scope. Use the worked explanation before retrying a missed decision.

Switching, VLANs, and Ethernet

Test switching, VLANs, and Ethernet with 75 explained questions on MAC learning, flooding, trunks, native VLANs, STP, port security, and segmented LAN evidence.

25 Easy + 25 Medium + 25 Hard

Diagnose errors in MAC forwarding, VLAN path, policy boundary. Use the worked explanation before retrying a missed decision.

Routing and default gateway

Answer 75 routing and default gateway questions on longest-prefix matches, next hops, return paths, traceroute limits, NAT, route preference, and traffic policy.

25 Easy + 25 Medium + 25 Hard

Diagnose errors in route selection, next-hop evidence, return path. Use the worked explanation before retrying a missed decision.

DNS, DHCP, and protocols

Practice 75 DNS, DHCP, and protocol questions: DORA evidence, relays, lease options, resolver views, caching, TCP fallback, ports, and application failure stages.

25 Easy + 25 Medium + 25 Hard

Diagnose errors in service stage, resolver context, protocol evidence. Use the worked explanation before retrying a missed decision.

Choose by the evidence you find confusing. If the symptom is a missing link or uncertain power budget, begin with components/media. If the client chooses the wrong local or remote path, begin with addressing. If the intended segment disappears across a trunk, choose switching/VLANs. If the next hop or reply path is uncertain, choose routing. If an address or name-dependent stage is missing, choose DNS/DHCP.

Phase 2: diagnose wireless, policy, command, transport, and IPv6 failures

After the foundation tests, use Phase 2 to investigate the missing boundary in a more specific troubleshooting problem. A wireless client can associate yet lose its VLAN service path; a route can exist yet policy deny one transport; an IPv6 address can form without a usable default router.

Wi-Fi and wireless troubleshooting

Practice 75 Wi-Fi troubleshooting questions on RSSI, SNR, airtime, roaming, authentication, SSID-to-VLAN mapping, and distinguishing RF from service failures.

25 Easy + 25 Medium + 25 Hard

Focus on RF interpretation, access stages, controlled comparison.

Firewall and ACL policy

Answer 75 firewall and ACL questions on first-match rule order, source/destination scope, transport ports, stateful return traffic, placement, and least privilege.

25 Easy + 25 Medium + 25 Hard

Focus on rule order, flow scope, enforcement evidence.

CLI command output troubleshooting

Work through 75 CLI troubleshooting questions using address output, route lookups, neighbor state, DNS replies, traceroute limits, socket listeners, and capture context.

25 Easy + 25 Medium + 25 Hard

Focus on tool selection, output scope, path context.

TCP and UDP transport troubleshooting

Test TCP and UDP reasoning with 75 questions on handshakes, endpoint tuples, retries, flow control, congestion, jitter, MTU feedback, and application-stage failures.

25 Easy + 25 Medium + 25 Hard

Focus on transport stages, performance constraints, return tuple.

IPv6 and Neighbor Discovery

Practice 75 IPv6 questions on Neighbor Discovery, Router Advertisements, SLAAC, address lifetimes, default-router state, dual-stack policy, and link-local scope.

25 Easy + 25 Medium + 25 Hard

Focus on control-message evidence, address lifecycle, dual-stack path.

Use the existing command-output lesson for a guided reading of artifacts, then take the CLI test to check selection and inference across difficulty levels. Use first-match policy practice for a narrower rule-order exercise before the broader ACL diagnostic. The new tests extend these lessons with structured self-assessment rather than replace them.

Phase 3: trace evidence, evaluate access, and verify resilient service

Phase 3 moves from a single connectivity symptom to evidence collection and operational decisions. Trace rewritten tuples through NAT, evaluate what a capture can see, calculate valid monitoring rates, distinguish identity from action permission, and test whether a redundant design recovers the required task.

NAT and PAT troubleshooting

Practice 75 NAT and PAT questions on translated tuples, port forwarding, double NAT, hairpin paths, mapping lifetimes, attribution, and failover state.

25 Easy + 25 Medium + 25 Hard

Focus on tuple rewriting, state and return paths, publication boundaries.

Packet capture analysis

Answer 75 packet-capture questions on observation points, bidirectional filters, collection loss, TCP stages, offload artifacts, encryption limits, and reproducible inference.

25 Easy + 25 Medium + 25 Hard

Focus on collection scope, cross-boundary correlation, evidence limits.

Network monitoring and performance

Solve 75 monitoring and performance questions on counter rates, utilization, baselines, queue bursts, latency distributions, synthetic tasks, and measurement validity.

25 Easy + 25 Medium + 25 Hard

Focus on counter arithmetic, sampling validity, service outcomes.

Secure access and identity decisions

Practice 75 secure-access questions on authentication versus authorization, device posture, least privilege, certificate identity, session revocation, and alternate access paths.

25 Easy + 25 Medium + 25 Hard

Focus on identity versus permission, credential lifecycle, effective access boundaries.

Network design and redundancy

Test network-design reasoning with 75 questions on failure domains, alternate-path capacity, loop prevention, state continuity, growth, recovery, and acceptance testing.

25 Easy + 25 Medium + 25 Hard

Focus on failure-domain reasoning, degraded capacity, task-level recovery.

Use the NAT lesson for the translation foundation and the guided packet-capture practice for an initial artifact reading. The new tests add scored diagnostic sets and wider evidence combinations. Choose monitoring practice for measurement uncertainty; choose design and redundancy practice when the question is whether an alternate path meets the required workload and failure case.

Phase 4: resolve protocol state and document a verified repair

Phase 4 examines protocol state and the reasoning behind a repair. Use DNS when the exact query, authority path or cached result is uncertain. Use DHCP when assignment, timers, relay delivery or allocation capacity is the missing step. ARP practice separates route-selected neighbors from switch forwarding and competing ownership. Encapsulation follows fields and size budgets across processing boundaries. Troubleshooting practice tests the experiment, acceptance condition and handoff that make a result defensible.

DNS resolution

Work through 75 DNS questions on authoritative and recursive roles, delegation, record types, negative caching, alias chains, resolver views, validation, and migration verification.

25 Easy + 25 Medium + 25 Hard

Focus on record and delegation paths, cache timelines, resolution policy.

DHCP leases and relays

Solve 75 DHCP questions on allocation stages, renewal and rebinding, relay subnet selection, effective options, pool capacity, identity matching, conflicts, and lifecycle verification.

25 Easy + 25 Medium + 25 Hard

Focus on lease state and timers, relay path evidence, pool ownership.

ARP and address conflicts

Practice 75 ARP and address-conflict questions on local next hops, neighbor caches, switch MAC tables, probes, competing claims, proxy behavior, virtual gateways, and ownership verification.

25 Easy + 25 Medium + 25 Hard

Focus on next-hop selection, neighbor versus MAC tables, conflict ownership.

OSI and encapsulation

Answer 75 OSI and encapsulation questions on protocol wrappers, per-hop framing, transport endpoints, checksums, TTL, packet budgets, fragmentation, tunnels, and observation limits.

25 Easy + 25 Medium + 25 Hard

Focus on protocol-field boundaries, packet-size arithmetic, per-hop framing.

Troubleshooting methods and documentation

Test troubleshooting judgment with 75 questions on symptom scope, hypotheses, controlled comparisons, timelines, effective changes, rollback, representative verification, and evidence-based handoffs.

25 Easy + 25 Medium + 25 Hard

Focus on controlled comparisons, causal evidence, verification and handoff.

The earlier broad protocol test checks initial protocol selection. These focused sets go further into state, conflicting observations and controlled verification. Use troubleshooting methods and documentation across the technical topics: record the exact attempt, separate evidence from interpretation, and test both recovery and the restrictions that must remain.

Phase 5: troubleshoot HTTPS, TLS, and certificate failures

A responding server is not enough: students must distinguish a reachable listener, an authenticated service name, an accepted trust path, and a successful application task. This focused set adds 75 questions and a practical guide to testing those boundaries.

HTTPS, TLS, and certificate troubleshooting

Practice certificate names and wildcards, client trust differences, SNI and ALPN, missing intermediates, proxy-to-origin TLS, renewal rollouts, IPv4/IPv6 differences, and complete workflow verification.

25 Easy + 25 Medium + 25 Hard

Includes instant feedback, score review, an attempt-log download, and a detailed troubleshooting guide.

Phase 6: troubleshoot MTU, MSS, and path-size failures

Small requests can pass while a large transfer stalls. This focused set connects packet budgets, feedback delivery, tunnel overhead, and evidence from both directions.

MTU, MSS, and path MTU troubleshooting

Calculate inner and outer packet budgets, interpret IPv4 DF and IPv6 Packet Too Big, trace MSS direction, distinguish capture offload artifacts, and verify TCP and UDP repairs.

25 Easy + 25 Medium + 25 Hard

Includes immediate explanations, score review, a downloadable attempt log, and a detailed troubleshooting guide.

Progress from a rule to an evidence-based decision

Easy: Identify a device function, apply a stated prefix, read one direct observation, or recognize a protocol stage. Explain the rule before advancing. A correct guess based on a familiar word is a signal to review, not a reason to skip the explanation.

Medium: Combine two pieces of evidence. A powered AP without a link separates power from data. A host address and mask must be read together before deciding whether its gateway is local. A DHCP exchange that ends after Offer calls for a different next observation from one that reaches ACK with wrong options.

Hard: Choose among plausible decisions while respecting the limits of the observations. You may need to consider a return path, an overlapping subnet, a VLAN-specific failure on an otherwise healthy trunk, or a resolver cache that differs from authoritative data. Difficulty comes from the reasoning burden, not merely a longer prompt.

You can start at any level, but a useful diagnostic order is Easy, then Medium, then Hard on one topic. Each selected level contains exactly 25 questions. Switching levels resets the attempt, so download the attempt log before changing if you want a record. Every answer receives immediate feedback; the first selection is scored. There is no time limit in these diagnostic activities.

Read a result as a dependency map

Compare the pattern of misses, not only the percentage. Strong Easy performance with weaker Medium results often calls for combining artifacts: address plus mask, VLAN assignment plus trunk allowance, or DNS response plus transport test. Strong Medium performance with weaker Hard results may expose overclaiming or difficulty handling an alternative explanation.

For example, a gateway ping proves a local ICMP exchange with that gateway at that time. It does not prove that a remote website's DNS answer is correct, that TCP 443 is permitted, or that the server returns traffic to the client's source subnet. When reviewing an answer, name the tested boundary and the next dependency instead of writing “the network works.”

A route table proves which installed prefix a lookup can select under its current state. It does not prove that the next-hop neighbor answers, the policy permits traffic, or downstream routers have a reply path. A DHCPACK proves an allocation response was observed; its address, mask, gateway, and resolver values still need validation against the intended network.

If you are unsure which inference was excessive, use the site's Wrong Answer Detective to practice comparing observations with conclusions. Then return to the topic that produced the misunderstanding and explain the repair in a narrower sentence.

Apply the Skill • 120 Missions

Take the next step from a question to a working repair

A correct route-table answer is useful; choosing the next test in a broken network asks more of you. The Browser Troubleshooting Simulator gives students 120 missions to investigate symptoms, compare evidence, and test a repair after reviewing a topic here.

AP Networking Browser Troubleshooting Simulator
$29.99
120 Missions • 60 Failure Patterns • Offline Copy
BUY NOW — INSTANT ACCESS → See all 120 missions & features

Build an error log that changes the next study session

After each attempt, use the download control for a CSV containing question ID, difficulty, selected answer, correct answer, result, and explanation. Add your own reasoning note in a spreadsheet or notebook. Keep one line per reasoning failure; copying the entire explanation without naming your original mistake makes the log less useful.

Swipe to see the full error-log example.

ObservationIncorrect inferenceRepair to the methodNext evidence
A host is .77/26Assumed .0/24 boundariesFind the 64-address block firstWrite network .64, last host .126, broadcast .127
VLAN 10 crosses the trunkAssumed VLAN 30 also crossesCheck each VLAN's effective pathCompare allowed lists and forwarding state on both ends
Gateway ping succeedsDeclared the remote service healthyKeep the conclusion local and protocol-specificTest the destination service and return path
Server sends DHCP OfferAssumed the client received itDistinguish transmission from deliveryCompare client-side and server-side captures

Label the mistake as a rule error, calculation error, observation error, path error, or overclaim. Include one tempting distractor and the evidence that rules it out. That entry gives the next session a task: recalculate a boundary, trace a VLAN, compare two source addresses, or identify the missing protocol message.

Mixed Review • Exams and Artifact Labs

Check whether the skill holds up outside its topic

After a focused test exposes a weak step, review that mechanism before returning to mixed practice. The Complete Exam Prep Vault adds practice exams, multiple-choice questions, and artifact labs for combining addressing, routing, protocols, and policy in broader course review.

AP Networking Complete Exam Prep Vault
$39.99
BUY NOW — INSTANT ACCESS → See the Exam Prep Vault contents →
4 Practice Exams • 320 MCQs • 60 Artifact Labs

Revisit a question without rehearsing its answer letter

On the first review, hide the choices. Write the strongest observation, your bounded conclusion, and the next test. Then open the explained item and compare the method. If you can remember the correct letter but cannot explain why an alternative fails, the reasoning still needs attention.

On a later session, change the representation. Draw the packet path for a routing answer, list subnet boundaries for an addressing answer, sketch the access/trunk chain for a VLAN answer, or mark the last observed message in a DHCP exchange. This is a more useful transfer check than immediately restarting the same 25 items until the score rises.

Use subnetting practice questions when a calculation step is weak, and routing-table analysis when a route decision needs an artifact-based second pass. These existing resources deepen one operation. Return here when you are ready to place that operation inside a larger scenario.

Keep score history separate from evidence of transfer. A higher score on a familiar bank is encouraging, but an unfamiliar artifact, a written explanation, or a mixed-topic task provides stronger information about whether the skill generalizes.

Daily Warm-Ups • 300 Bell Ringers

Use yesterday’s missed decision as tomorrow’s starter

If an error log shows students confusing a local address with a routed destination, open the next class with a short boundary question. The 300 Bell Ringers pack gives teachers ready-to-use prompts and answers for regular retrieval practice before the longer topic tests.

300 AP Networking Bell Ringers
$74.99
BUY NOW — INSTANT ACCESS → See what is included in the 300 Bell Ringers →
Instant Access • Full-Year Teacher Resource

Move from topic practice to unit and full-exam work

Once errors have a clear cause and you can explain a corrected decision, move to the appropriate Unit 1 practice, Unit 2 practice, Unit 3 practice, or Unit 4 practice. Unit work requires choosing the relevant tool among related course concepts.

Then use full practice exams for mixed-topic selection and endurance. If the missed question concerns an explanation rather than only a selection, pair it with free-response practice or artifact analysis. State what the artifact proves, what remains uncertain, and which observation would distinguish your leading explanations.

A practical sequence is topic diagnosis, a focused guide, explained topic practice, an unfamiliar unit task, then a mixed exam or written artifact response. Move backward when a result reveals a missing prerequisite. There is no benefit in continuing full exams while repeating the same unchecked subnet assumption.

Teacher Feedback • Artifact Reasoning

Look past the score to the student’s explanation

Ask students to explain the observation that supports their answer and why one tempting choice fails. The Artifact Analysis Grading Copilot helps teachers review written claims and evidence, identify missing reasoning, and prepare feedback. The teacher makes the final grading decision.

AP Networking Artifact Analysis Grading Copilot
$49.99
8 Criteria • 5 Task Modes • Offline Premium Copy
BUY NOW — INSTANT ACCESS → See the free Copilot preview

How the library connects to the course

The current pilot framework organizes AP Networking around four units: Managing My Connections, Managing Shared Connections, Managing Many Connections, and Managing Global Connections. Components and addressing support decisions about individual and shared connections; switching and segmentation become especially important when managing many connections; routing and service protocols help explain broader paths.

Those are teaching connections, not claims that each topic belongs exclusively to one unit or carries a fixed exam weight. A single troubleshooting scenario may combine a client's interface, address, VLAN, route, resolver, and security policy. The topic names help isolate a weak operation before students recombine those dependencies.

College Board currently describes the national exam for May 2028 as fully digital in Bluebook, with scenario-based multiple choice and artifact/evidence-based free response. These browser activities support the underlying reasoning; they are not a Bluebook simulator or a reproduction of official exam timing and scoring. Consult the site's exam guide for the broader preparation context and the official exam overview for current national assessment guidance.

Phases 1–4 are complete; Phase 5 adds a focused secure-service diagnostic to this provisional ten-phase project. Later topics should be checked against the live inventory and current framework before publication. No unbuilt tests are listed as available here.

Course Planning • 180 Teaching Days

Place targeted practice inside a full teaching sequence

A subnetting miss and a firewall-order miss call for different follow-up lessons. The Complete 180-Day Teacher Curriculum includes daily teaching notes, student activities, and simulators so teachers can connect the gaps found in these tests to a planned course.

AP Networking Complete 180-Day Teacher Curriculum
$199.99
180 Lessons • 180 Daily Simulators • 36 Teaching Weeks
BUY NOW — INSTANT ACCESS → See 3 free curriculum examples

Use the tests in a classroom

Assign one level rather than all 75 items at once when the purpose is diagnosis. Collect a brief explanation for two choices: one correct answer with a tempting distractor and one missed answer after review. That combination shows whether the student understood the decision or merely recognized an answer pattern.

Group students by the missing step. One group may need prefix boundaries; another may need to separate VLAN forwarding from routing; another may need to distinguish resolver success from application availability. Use projected configurations and annotated paths when a live lab is unavailable. The static explained library remains readable even when JavaScript is disabled.

For paired work, ask one student to defend the bounded conclusion and another to propose a plausible alternative. They should identify the next observation that separates the two. A useful exit ticket is a three-sentence account: evidence, conclusion with limits, and next test. The site’s teacher resources can support the follow-up lesson after the diagnostic reveals which operation needs practice.

Require students to record the topic, level, question ID, and attempt date if you need a review trail. These pages do not submit results to a teacher dashboard. The student can download the current attempt log and attach it through the classroom system you already use.