If you’re preparing for the CompTIA A+ Core 1 exam (220-1201), understanding the TCP/IP model isn’t optional — it’s essential. Networking accounts for 20% of the Core 1 exam, and the TCP/IP model sits at the heart of that domain. Everything from how your browser loads a webpage to how a switch routes traffic inside an office network ties back to this model. Let’s break it down layer by layer, with real-world examples and the kind of specificity the exam actually tests.
What Is the TCP/IP Model?
The TCP/IP model (Transmission Control Protocol / Internet Protocol) is a four-layer framework that describes how data travels across a network — from an application on your device all the way to the physical wires (or wireless signals) connecting you to the internet. It’s a simplified, practical version of the older OSI model, and it’s the model that actually drives modern networking.
The four layers of the TCP/IP model are:
- Network Access (Link) Layer
- Internet Layer
- Transport Layer
- Application Layer
Each layer has specific responsibilities, specific protocols, and specific devices associated with it. The CompTIA A+ exam expects you to know not just what each layer does, but how they relate to each other — and how real network devices and protocols map to them.
Layer 1: Network Access Layer
The Network Access layer (sometimes called the Link layer) handles the physical transmission of data on a local network. This is where hardware like network interface cards (NICs), cables, and switches live. It deals with MAC addresses, which are hardware addresses burned into every network device at the factory.
A key concept here: switches operate at this layer. A switch reads the destination MAC address of an incoming data frame and forwards it only to the correct port — not to every device on the network like an old hub would. This makes switched networks significantly more efficient.
Cable standards matter at this layer too. For example, Cat 6 cabling supports up to 10 Gbps at distances of up to 55 meters, while Cat 6a extends that same 10 Gbps speed to 100 meters. These specs come up directly on the exam, so know them cold.
Layer 2: Internet Layer
The Internet layer is responsible for logical addressing and routing — getting data packets from one network to another. This is where IP addresses live, and where routers do their work.
Key protocols at this layer include:
- IP (Internet Protocol) — Assigns source and destination IP addresses to packets
- ICMP (Internet Control Message Protocol) — Used by tools like
pingandtracertfor diagnostics - ARP (Address Resolution Protocol) — Resolves IP addresses to MAC addresses, bridging the Internet and Network Access layers
When your computer sends data to a server in another country, the Internet layer is what ensures the packet knows where it’s going and how to get there — hop by hop across routers.
Layer 3: Transport Layer
The Transport layer manages end-to-end communication between applications. It breaks data into segments and ensures they’re delivered reliably (or quickly, depending on the protocol). There are two main protocols here:
- TCP (Transmission Control Protocol) — Connection-oriented. Establishes a session using a three-way handshake (SYN, SYN-ACK, ACK), guarantees delivery, and retransmits lost packets. Used for web browsing, email, file transfers.
- UDP (User Datagram Protocol) — Connectionless. Faster but no delivery guarantee. Used for video streaming, VoIP, DNS queries, and online gaming where speed matters more than perfection.
Port numbers also live at the Transport layer. The exam expects you to know these cold:
- Port 80: HTTP
- Port 443: HTTPS
- Port 22: SSH/SFTP
- Port 53: DNS
- Port 25: SMTP
- Port 3389: RDP
- Port 67/68: DHCP
Quality of Service (QoS) is also a concept tied to how traffic is managed at this layer. QoS doesn’t increase your total bandwidth — it prioritizes certain types of traffic (like a video call over a file download) so critical applications maintain acceptable performance even when the network is congested.
Layer 4: Application Layer
The Application layer is where end-user protocols live — the ones your applications use to communicate. This layer doesn’t refer to the apps themselves (like Chrome or Outlook), but to the protocols those apps use to send and receive data.
Common Application layer protocols include:
- HTTP/HTTPS — Web browsing (ports 80 and 443)
- SMTP, POP3, IMAP — Email sending and receiving (ports 25, 110, 143)
- DNS — Translates domain names like certcy.app into IP addresses (port 53)
- DHCP — Automatically assigns IP addresses to devices (ports 67/68)
- FTP/SFTP — File transfers (ports 20/21 and 22)
- RDP — Remote desktop access (port 3389)
How the Layers Work Together: A Real Example
Here’s what happens when you type certcy.app into your browser and hit Enter:
- Application layer: Your browser uses DNS (port 53) to resolve certcy.app to an IP address, then sends an HTTPS request on port 443.
- Transport layer: TCP breaks that request into segments, adds port numbers, and performs a three-way handshake with the server.
- Internet layer: IP adds your device’s IP address and the server’s IP address to each packet. Routers read these addresses to forward the packet toward its destination.
- Network Access layer: Your NIC converts the packet into a frame using MAC addresses and sends it out over your Wi-Fi or Ethernet cable.
On the receiving end, the server processes the layers in reverse order — this is called encapsulation (sending) and decapsulation (receiving).
Test Your Knowledge
Let’s see how this translates to exam-style questions. Try these before reading the answers:
Question 1: A network administrator is setting up a new office and needs a device that intelligently forwards traffic to specific devices based on their hardware addresses. Which device should they deploy?
- A) Router
- B) Hub
- C) Switch
- D) Modem
Answer: C — Switch. Switches operate at the Network Access layer and use MAC addresses (hardware addresses) to forward frames only to the intended destination port. Routers operate at the Internet layer using IP addresses. Hubs blindly broadcast to all ports — they don’t make intelligent forwarding decisions at all.
Question 2: A company’s VoIP calls are dropping in quality during peak business hours, even though the internet connection has plenty of available bandwidth. What technology would most directly address this issue?
- A) Adding a second ISP connection
- B) Implementing Quality of Service (QoS)
- C) Upgrading to Cat 6a cabling
- D) Enabling a firewall rule for port 443
Answer: B — Quality of Service (QoS). QoS prioritizes time-sensitive traffic like VoIP over less critical traffic like file downloads. It doesn’t add more bandwidth — it ensures critical applications get first access to the bandwidth that already exists.
Want more practice? Certcy has 110+ questions like these — download free and start today.
Study Tips for TCP/IP on the CompTIA A+ Exam
- Map devices to layers: Switches = Layer 2 (MAC), Routers = Layer 3 (IP). This distinction appears repeatedly.
- Memorize ports with context: Don’t just memorize
Ready to Pass Your Certification?
Practice with 310+ expert-written questions across CompTIA A+, ISC2 CC, and SSCP.
Free to start — no credit card required.Related Study Guides