WorksheetsFirewall Functions and Threat Protection
Total questions: 50
Worksheet time: 25mins
Which firewall technique primarily blocks unsolicited incoming sessions by allowing only packets that are part of established connections?
Stateful packet inspection tracking connection state
Application filtering using specific application port numbers
Packet filtering based on source or destination addresses
URL filtering with predefined domain or keyword categories
Users are reporting longer delays in authentication and in accessing network resources during certain time periods of the week. What kind of information should network engineers check to find out if this situation is part of a normal network behavior?
network configuration files
debug output and packet captures
the network performance baseline
syslog records and messages
How does the service password-encryption command enhance password security on Cisco routers and switches?
It encrypts passwords as they are sent across the network.
It requires encrypted passwords to be used when connecting remotely to a router or switch with Telnet.
It encrypts passwords that are stored in router or switch configuration files.
It requires that a user type encrypted passwords to gain console access to a router or switch.
Which two statements are correct in a comparison of IPv4 and IPv6 packet headers? (Choose two.)
The Time-to-Live field from IPv4 has been replaced by the Hop Limit field in IPv6.
The Header Checksum field name from IPv4 is kept in IPv6.
The Destination Address field is new in IPv6.
The Version field from IPv4 is not kept in IPv6.
The Source Address field name from IPv4 is kept in IPv6.
A network administrator wants to have the same network mask for all networks at a particular small site. The site has the following networks and number of devices: IP phones – 22 addresses; PCs – 20 addresses needed; Printers – 2 addresses needed; Scanners – 2 addresses needed. The network administrator has deemed that 192.168.10.0/24 is to be the network used at this site. Which single subnet mask would make the most efficient use of the available addresses to use for the four subnets?
255.255.255.248
255.255.255.252
255.255.255.240
255.255.255.192
What characteristic describes identity theft?
the use of stolen credentials to access private data
software on a router that filters traffic based on IP addresses or applications
software that identifies fast-spreading threats
a tunneling protocol that provides remote users with secure access into the network of an organization
A network administrator is adding a new LAN to a branch office. The new LAN must support 200 connected devices. What is the smallest network mask that the network administrator can use for the new network?
255.255.255.0
255.255.255.224
255.255.255.240
What are three commonly followed standards for constructing and installing cabling? (Choose three.)
cost per meter (foot)
cable lengths
pinouts
connector color
connector types
Refer to the exhibit. What is wrong with the displayed termination?
The wires are too thick for the connector that is used.
The wrong type of connector is being used.
The untwisted length of each wire is too long.
The woven copper braid should not have been removed.
Which IPv6 header field serves the same function as the IPv4 Time-to-Live field?
Flow Label
Hop Limit
Fragment Offset
Traffic Class
During RJ-45 connector termination, which action ensures a reliable crimp and prevents exposed conductors at the plug tip?
Untwist pairs fully to ease wire insertion
Trim pairs short and crimp onto bare copper
Leave colored wires slightly visible past the plug
Crimp the flexible sheath, not the bare wires
Which statement correctly distinguishes IP and MAC addresses in standard networks?
IP addresses are hardware-burned; MAC addresses are assigned by DHCP
IP addresses appear in Layer 2; MAC addresses in Layer 3 headers
IP addresses are 48 bits; MAC addresses are 32 or 128 bits
IP addresses split into network and host; MAC split into OUI and device
A server receives a packet with destination port 143. Which service is being requested?
IMAP email retrieval service
FTP file transfer control
SSH secure remote shell
Telnet unencrypted terminal access
Which feature is common to both TCP and UDP when directing data to the correct application?
Sequence numbering of segments for ordering
Use of source and destination port numbers
Three-way handshake before data transfer
Flow control with sliding window
A subnet must support 10 usable hosts within 10.18.10.0/24 without overlapping existing 10.18.10.0/26 and 10.18.10.192/29. Which network is a valid choice that wastes fewest addresses?
10.18.10.224/27 using larger block
10.18.10.240/27 using larger block
10.18.10.208/28 aligned to a /28 boundary
10.18.10.200/28 within the upper range
A server receives a packet with destination port 21. Which service is being requested?
LDAP directory service
SLP service discovery
SNMP management service
FTP file transfer service
Which network interface card attribute operates at the OSI Data Link layer?
Attached Ethernet cable
RJ-45 physical port
IP address configuration
MAC address identifier
A new LAN must support 10 devices. What is the smallest subnet mask you can use?
255.255.255.224 mask
255.255.255.240 mask
255.255.255.248 mask
255.255.255.192 mask
What UTP cable construction helps reduce crosstalk between wires?
Twisting the wires into pairs
Wrapping pairs with foil shield
Encasing in plastic sheath
Using grounded terminations
A network 192.168.10.0/24 is subnetted with a /29 mask. The fifth subnet is used, the router gets the first usable address, and a server gets the last usable address. What IP, mask, and gateway should be configured on the server?
192.168.10.65, 255.255.255.240, 192.168.10.76
192.168.10.41, 255.255.255.248, 192.168.10.46
192.168.10.38, 255.255.255.240, 192.168.10.33
192.168.10.254, 255.255.255.0, 192.168.10.1
In the shown topology, host A needs the MAC of its default gateway. Which devices will receive A’s ARP request on the local segment?
only hosts A, B, and C on the LAN
only hosts B, C, and router R1
only hosts A, B, C, and D everywhere
only router R1 on the local LAN
only host D on the remote LAN
Which statement correctly contrasts a peer-to-peer network with a peer-to-peer application?
Both models force one fixed role for each device
A peer-to-peer application never runs a background service
A peer-to-peer application never needs any user interface
A peer-to-peer network sets roles per request without a server
A peer-to-peer network requires a dedicated server always
Two LANs require 30 hosts and 14 hosts. You design four subnets: A with 30 hosts, D with 14 hosts, and point-to-point links B and C with 2 hosts each. If you allocate a /24 block, how many host addresses remain unused after subnetting?
88 addresses remain available for future growth
224 addresses remain available for future growth
200 addresses remain available for future growth
158 addresses remain available for future growth
72 addresses remain available for future growth
Which connector is typically used with twisted‑pair Ethernet cabling for LAN devices?
LC connector for duplex fiber links
RJ‑11 connector for telephone handsets
RJ‑45 connector for copper Ethernet
SC connector for multimode fiber runs
BNC connector for legacy coax segments
A server receives a TCP packet with destination port 22. Which service is the client attempting to use?
HTTPS secure web pages
TELNET unencrypted shell
SMB/CIFS file sharing
SSH remote shell access
SLP service discovery
Which statement best describes an intrusion prevention system (IPS)?
A tunneling protocol for secure remote access
Software that only identifies fast‑spreading malware
A passive sensor that only logs suspicious events
A device that filters and blocks malicious network traffic
A router feature filtering by IPs or applications
What core function does DHCP provide on an IP network?
Real‑time chat for remote users
Secure remote access to servers
Dynamic assignment of IP configuration
File and printer sharing on subnets
Encrypting traffic between endpoints
Which OSI layer contains the TTL field in an IPv4 packet header?
Layer 3 Network layer
Layer 2 Data Link layer
Layer 7 Application layer
Layer 4 Transport layer
Host A sends an ARP request to learn the MAC of its default gateway. In a LAN with two switches and router R1 on Host A’s switch, which devices receive the ARP broadcast?
Hosts B, C, and router R1
Only hosts B and C on the local switch
Only hosts A, B, C, and D
Only host D on the remote switch
Which two ICMPv6 message types must be allowed through IPv6 ACLs to map Layer 3 IPv6 addresses to Layer 2 MAC addresses? (Choose two.)
echo requests and echo replies
redirect messages and time exceeded
neighbor solicitations and neighbor advertisements
router solicitations and router advertisements
A host uses SLAAC to configure its IPv6 address. After forming and assigning the address, what must it do before using that address on the network?
Send an ICMPv6 Router Solicitation for default route
Send a DHCPv6 REQUEST to obtain permission
Send a DHCPv6 INFORMATION-REQUEST for DNS
Send an ICMPv6 Neighbor Solicitation for DAD
A host pings its default gateway and the ping fails. It then pings a host outside the local network and that ping succeeds. What is a plausible cause?
Gateway has wrong IP configured
Gateway is powered off entirely
TCP/IP stack on gateway is broken
Security policy blocks ICMP to gateway
An organization is allocated 2001:db8:0:ca00::/56. Without using interface ID bits, how many /64 subnets can it create?
1024
256
4096
512
What is the smallest IPv4 subnet mask that supports 40 usable host addresses without wasting address space?
255.255.255.240
255.255.255.0
255.255.255.224
255.255.255.192
Refer to the diagram. Host A sends an IP packet to remote host B on a different subnet. What destination MAC address should Host A place in the outbound Ethernet frame?
The MAC address of host B NIC
The MAC address of router R1 LAN
The MAC address of router R2 LAN
The broadcast MAC FF:FF:FF:FF:FF:FF
Which statement best describes a key benefit of adopting cloud computing in an enterprise network?
Users must avoid personal tools to access information
Daily home wiring use reduces the need for data cables
Appliances become smart and interconnect more easily
Network capabilities expand without large new infrastructure costs
During end-to-end delivery without NAT, which addressing behavior is correct?
Source MAC address remains constant across all LAN segments
Both IP and MAC addresses change at each router hop
Destination MAC address stays the same across every hop on the path
IP addresses remain constant across all routers on the path
Which statement best describes the role of the data link layer?
It generates optical signaling from binary data on fiber links
It shields upper layers from the specifics of the physical medium
It determines the path across remote networks using routing metrics
It provides end-to-end connection-oriented transport for applications
Which three actions characterize CSMA/CD on Ethernet after a collision is possible or detected?
All devices on the segment can detect traffic on the shared medium
Hosts attempt retransmission after a random backoff interval
A device with a token transmits first after each collision
Devices wait for idle media before any transmission attempts
A host on an Ethernet LAN sends a frame to a remote network through a router. What happens to the MAC and IP addresses at the router interface?
MAC addresses are rewritten, IP addresses remain unchanged
Both MAC and IP addresses are rewritten
Both MAC and IP addresses remain unchanged
IP addresses are rewritten, MAC addresses remain unchanged
Which Windows commands display the local routing table?
tracert and netstat -s
route print and netstat -r
show ip route and tracert
ipconfig and arp -a
Which pair describes two core functions of the network layer?
Forwarding packets to other networks and assigning unique logical addresses
Providing reliable end-to-end sessions and port multiplexing
Encoding signals onto copper or fiber and error detection
Framing bits and controlling access to the shared medium
Which command displays the IPv4 routing table on a router?
debug ip routing output
show ip route command output
netstat -r command output
show mac address-table output
What does a default static route add to the IPv4 routing table when configured?
An entry with source code S
An entry listing MAC addresses
An entry with source code C
An entry with the highest metric
Which statement best describes a VPN in enterprise networking?
A switch feature sending local broadcast frames
An antivirus identifying fast-spreading threats
A router feature filtering by IP applications
A tunneling protocol enabling secure remote access
Why might a Layer 2 switch require an IP address configured on a virtual interface?
To allow remote management access
To forward frames between hosts
To operate as a default gateway
To increase broadcast forwarding
Which statement best defines message encapsulation in networking?
Placing one message format inside another format
Splitting a long message into smaller pieces
Converting data into a transmittable format
Encrypting data for confidentiality
Why is message sizing used when sending data across a network?
To reduce processing by removing headers entirely
To break a long message into smaller pieces
To convert analog signals into digital bits
To avoid using the default gateway address
During LAN-to-remote communication, what destination is typically placed in the Layer 2 frame address when forwarding the first hop?
MAC address of the default gateway
Network domain of the destination host
MAC address of the remote server
IP address of the default gateway
What is a primary benefit of protocols defined by open standards?
They avoid regulation by standards bodies
They run only on a single-vendor platform
They allow one company to control the market
They encourage competition and promote choices
