Study Configuration Management & Backups for Network+ (N10-009)

Configuration-management questions are state-control questions. CompTIA is usually testing whether you can keep known-good settings, recover from mistakes, and recognize when undocumented drift has turned the network into a support problem.

Baseline configuration: A known-good standard configuration used as the comparison point for support and compliance.

Configuration drift: The gradual difference between the intended standard state and the actual device state in production.

What CompTIA is really testing

The strongest answers usually depend on whether you can separate:

• the current production config from the approved baseline
• a backup copy from a standardized template or policy baseline
• version control from ad hoc file storage
• fast restore from slow manual rebuild

Keep the config states distinct

A simple config-management workflow

    flowchart LR
	  A["Approved baseline"] --> B["Deploy to production"]
	  B --> C["Back up current state"]
	  C --> D["Monitor for drift or unauthorized changes"]
	  D --> E["Restore or correct when needed"]

What to notice:

• the baseline defines intended state
• backups protect current recoverable state
• drift detection matters because not every bad change causes an immediate outage

Small backup record example

1device: edge-fw-01
2baseline: v3.2-approved
3backup: 2026-03-29-2200
4last-restore-test: 2026-03-01

What to notice:

• a backup with no restore confidence is weaker than it looks
• baseline and backup are related but not identical
• version awareness makes audits and rollback easier

Why drift is so dangerous

CompTIA often likes the scenario where nobody changed the documented design, but the actual device now behaves differently because:

• small exceptions were added over time
• emergency fixes were never normalized
• backups exist, but nobody knows which version is trustworthy

That is why config discipline improves both recovery speed and auditability.

Common traps

• treating a backup as the same thing as a baseline
• storing config files without testing whether restore actually works
• letting undocumented drift become the new norm
• failing to capture the device state before making a change

What strong answers usually do

• keep baseline, backup, and version history distinct
• test restore paths instead of assuming the backup is useful
• track changes so drift can be explained and corrected
• protect recoverability before touching production state

Quiz

Continue with 3.5 Monitoring, Flow Data & Visibility to keep the domain flow intact.