wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

Network Analysis Quiz

Total questions: 49

Worksheet time: 25mins

Name
Class
Date
1.

Abigail is investigating slow web responses from a server for her online business. Which type of network analysis would help her identify whether the issue is client-side or server-side?

a)

Behavioral analysis

b)

Traffic flow analysis

c)

Vulnerability analysis

d)

Network enumeration

2.

During a network performance review, Maya notices frequent retransmissions in the captured traffic. What could this indicate?

a)

Misconfigured DNS server

b)

Packet loss on the network

c)

High CPU usage on server

d)

Duplicate IP address

3.

As a network administrator, you’re tasked with monitoring bandwidth usage between the headquarters and a remote office. Which network analysis focus area applies?

a)

Topology mapping

b)

Performance monitoring

c)

Security auditing

d)

Log analysis

4.

A network admin named Aiden uses Wireshark to analyze packets from a DDoS attack. What kind of network analysis is being performed?

a)

Fault analysis

b)

Security analysis

c)

Load analysis

d)

Latency analysis

5.

During a routine network check, Zoe notices unusual behavior in her LAN. She suspects ARP spoofing might be occurring. What data would confirm this?

a)

Large packet sizes

b)

Repeated DNS queries

c)

Duplicate MAC addresses for different IPs

d)

SYN flood patterns

6.

During a network troubleshooting session, Arjun notices that a packet capture shows multiple TCP connections being reset (RST flag set). This typically indicates:

a)

Successful data transfers

b)

Connection interruptions

c)

ICMP redirections

d)

ARP cache poisoning

7.

A security engineer named Liam captures traffic and sees payloads encrypted via TLS. Which statement is true?

a)

Full packet inspection can still read content

b)

Only metadata can be analyzed

c)

TCPdump can decrypt it automatically

d)

Layer 2 headers contain payload info

8.

During a network maintenance session, Avery notices that packets are seen looping endlessly between routers. Which network issue is likely?

a)

DNS failure

b)

Routing loop

c)

ARP cache timeout

d)

MTU mismatch

9.

While troubleshooting VoIP call issues at a busy call center, Arjun discovers that packets are delayed and arriving out of order during customer calls. The problem relates to:

a)

TCP handshake

b)

Jitter and latency

c)

DNS resolution

d)

Packet duplication

10.

While monitoring a server, Sophia notices constant ICMP Echo requests. What could this mean?

a)

Port scanning activity

b)

DNS amplification

c)

SMTP relay

d)

TLS handshake failure

11.

Mason, a network administrator, studies packet structure to identify malformed headers in his company's network traffic. Which analysis type is used?

a)

Statistical analysis

b)

Protocol analysis

c)

Behavioral analysis

d)

Predictive analysis

12.

Elijah is responsible for monitoring the network performance in his organization. He regularly checks the throughput trends over time to detect any signs of congestion that might affect the user experience. This process is known as:

a)

Security analysis

b)

Performance analysis

c)

Fault analysis

d)

Event analysis

13.

In a cybersecurity firm, James is tasked with identifying potential threats in the network. He spends his days comparing normal vs abnormal network behavior to detect any anomalies. This process is part of:

a)

Behavioral analysis

b)

Signal analysis

c)

Routing analysis

d)

Port mapping

14.

Abigail, a network analyst, is tasked with identifying possible future outages based on the traffic history of the company's network. This analysis is crucial for maintaining optimal performance and preventing downtime. What type of analysis is Abigail performing?

a)

Predictive network analysis

b)

Post-mortem analysis

c)

Passive monitoring

d)

Packet reconstruction

15.

While troubleshooting network issues at a tech company, Mia, an engineer, checks connectivity between devices using ping and traceroute. She performs:

a)

Logical topology analysis

b)

Performance analysis

c)

Signature analysis

d)

Forensic analysis

16.

During a cybersecurity audit, Ava is tasked with understanding how data packets move through various firewalls and routers in the network. She needs to document this process accurately. What is this process called?

a)

Physical layer mapping

b)

Path analysis

c)

Encapsulation tracking

d)

Network mirroring

17.

Priya, a network analyst, uses packet timestamps to measure latency in her company's network. Which analysis is she conducting?

a)

Time analysis

b)

Fault analysis

c)

Predictive analysis

d)

Correlation analysis

18.

During a cybersecurity investigation, Charlotte is tasked with capturing packets during a suspected attack to determine the exploit pattern. This process belongs to:

a)

Security analysis

b)

Performance monitoring

c)

Configuration management

d)

Routing optimization

19.

Before capturing packets, what’s the first requirement?

a)

Install antivirus

b)

Have appropriate interface access

c)

Disable DHCP

d)

Clear DNS cache

20.

Daniel is a network administrator who needs to analyze network traffic using tcpdump on a Linux server. What permission does he require to use tcpdump?

a)

sudo/root privileges

b)

Read-only user rights

c)

Network guest access

d)

Group policy assignment

21.

During a cybersecurity workshop, Charlotte is tasked with analyzing HTTPS packets to understand the data being transmitted. What does she need to do this effectively?

a)

Private key for decryption

b)

DNS resolver access

c)

Proxy server

d)

ARP table

22.

Oliver is a network analyst tasked with monitoring network traffic. What must he know before interpreting packets correctly?

a)

MAC address of NIC

b)

Network topology and IP schema

c)

Size of the hard disk

d)

Default gateway password

23.

To prevent capture file corruption, which prerequisite is essential?

a)

Enough disk space

b)

SSH enabled

c)

Default route set

d)

Cron jobs configured

24.

Jackson is a network administrator who needs to analyze specific VLAN traffic in his organization. To do this effectively, he must:

a)

Enable promiscuous mode

b)

Disable DHCP

c)

Change MTU size

d)

Enable DNS caching

25.

During a network analysis lab, Noah is tasked with capturing packets to analyze network traffic. However, he notices that the system firewall is active. Why should Noah disable the system firewalls during packet capture?

a)

To block outgoing traffic

b)

To prevent filtering legitimate packets

c)

To increase speed

d)

To avoid ARP poisoning

26.

In a network setup where multiple devices are capturing data packets, Michael needs to ensure that the timestamps of these packets are synchronized for accurate analysis. What setup is necessary for this synchronization?

a)

NTP time synchronization

b)

DNS caching

c)

SSL certificate

d)

VLAN tagging

27.

During a network troubleshooting session, Ava is using tcpdump to analyze the traffic flowing through her network. At which OSI layer does tcpdump primarily capture data?

a)

Layer 7

b)

Layer 4

c)

Layer 2

d)

Layer 3 (Network layer)

28.

During a networking workshop, Anika explained the different layers of the OSI model. She mentioned that at the Transport layer, data is organized into specific units. What is the name of the unit that Anika referred to?

a)

Frame

b)

Packet

c)

Segment

d)

Bit

29.

Aiden is using a packet analyzer to troubleshoot a network issue. He notices that the analyzer is showing “SYN” and “ACK” flags in the captured packets. At which layer of the OSI model is this communication taking place?

a)

Session

b)

Transport

c)

Network

d)

Data Link

30.

During a software development project, Anika is tasked with understanding how data is transmitted over a network. She learns that the PDU at the Application layer is best described as:

a)

Data

b)

Packet

c)

Frame

d)

Bitstream

31.

While monitoring network traffic in a local area network, Maya notices a significant amount of ARP requests and replies. She wonders which OSI layer this traffic is associated with.

a)

Layer 3

b)

Layer 2

c)

Layer 4

d)

Layer 7

32.

During a network troubleshooting session, Zoe is analyzing ICMP packets to diagnose connectivity issues. She wonders at which layer of the OSI model she is operating.

a)

Transport layer

b)

Network layer

c)

Data link layer

d)

Session layer

33.

Evelyn, an analyst studying SSL/TLS handshake messages, is working at:

a)

Transport layer

b)

Session layer

c)

Presentation layer

d)

Network layer

34.

During a network troubleshooting session, Liam is using tcpdump to analyze the traffic on his local network. He notices that the output includes Ethernet headers. What’s the PDU type?

a)

Frame

b)

Packet

c)

Segment

d)

Bit

35.

In a city, when a delivery truck needs to find the best route to reach a specific address, at which layer of the city's transportation system does this routing happen?

a)

Network

b)

Data Link

c)

Transport

d)

Physical

36.

In a busy office, Abigail is trying to send a package to Jackson, but she needs to ensure it reaches the correct department. At which layer does MAC addressing operate to help Abigail identify the right destination for her package?

a)

Network

b)

Data Link

c)

Transport

d)

Session

37.

During a network troubleshooting session, Ethan needs to analyze the traffic flowing through his network. He decides to use a tool that can capture and display the packets being transmitted. Tcpdump is best described as:

a)

A traffic generator

b)

A command-line packet analyzer

c)

A router configuration tool

d)

A DNS server

38.

During a network troubleshooting session, Liam is trying to capture network packets to analyze traffic. He wonders which platform he can use that supports tcpdump natively.

a)

Windows only

b)

Linux/Unix

c)

iOS

d)

Android

39.

During a network security workshop, Evelyn demonstrated how to capture network packets using a tool. She explained that the tool relies on a specific library for packet capture. Which library underpins tcpdump for packet capture?

a)

OpenSSL

b)

libpcap

c)

netlib

d)

libc

40.

During a network security audit, Aria needs to capture all network packets on a specific interface to analyze potential vulnerabilities. To achieve this, she must configure tcpdump to operate in a certain mode. What mode does she need to enable?

a)

Promiscuous mode

b)

ARP mode

c)

Passive mode

d)

Filter mode

41.

Ethan is analyzing network traffic and wants to save the captured data for later analysis. Which option should he use to save the output to a pcap file?

a)

-c

b)

-w

c)

-r

d)

-i

42.

During a network analysis session, Anika needs to examine the data captured in a saved pcap file. Which option should she use to read the packets from that file?

a)

-r

b)

-x

c)

-w

d)

-p

43.

Aiden is a network administrator who needs to monitor the traffic on his company's network. He decides to use Tcpdump to capture the traffic. Tcpdump captures traffic by:

a)

Sniffing packets directly from network interface

b)

Analyzing system logs

c)

Reading firewall configurations

d)

Scanning for open ports

44.

Mia is a network engineer who needs to analyze network traffic for a specific issue. She wants to capture 50 packets only. Which command is correct?

a)

tcpdump -i eth0 -c 50

b)

tcpdump -n 50

c)

tcpdump -p 50

d)

tcpdump -f eth0 50

45.

During a network analysis session, Evelyn wants to focus solely on the TCP traffic to troubleshoot a connectivity issue. To achieve this, she needs to use the correct filter. What filter should she apply?

a)

icmp

b)

tcp

c)

udp

d)

arp

46.

Emma is monitoring network traffic and needs to filter packets to/from a specific host (192.168.1.10). Which filter works?

a)

src 192.168.1.10

b)

host 192.168.1.10

c)

dst 192.168.1.10 only

d)

ip 192.168.1.10

47.

You are a network administrator monitoring the web server's traffic. You want to view traffic on port 80. What’s the filter?

a)

port 80

b)

src port 80

c)

dstport 80

d)

tcp port any

48.

During a network security assessment, Liam needs to capture traffic without resolving the DNS names to IP addresses. To achieve this, he should use:

a)

-r

b)

-n

c)

-N

d)

-d

49.

During a network troubleshooting session, Mason needs to identify which network interfaces are available for capturing packets. He decides to use a command-line tool to help him with this task. Which command should he use to show the interfaces available for capture?

a)

tcpdump -I

b)

tcpdump -D

c)

tcpdump -L

d)

tcpdump -i