Font size
WorksheetsNET6201 Final Exam - Questions Only
Total questions: 100
Worksheet time: 50mins
A company has two offices. Office A uses network 192.168.1.0/24 and Office B uses network 192.168.1.0/24. When they connect both offices via a VPN, devices cannot communicate properly. What is the problem and how should it be solved?
Both offices are using the same network address, causing an IP conflict. The solution is to use different network addresses for each office.
The VPN is not configured to allow traffic between the offices. The solution is to enable inter-office routing.
The devices are not compatible with VPN connections. The solution is to upgrade the devices.
The internet connection is too slow for VPN communication. The solution is to increase bandwidth.
A technician configures PC-A with IP 192.168.10.65/26 and PC-B with IP 192.168.10.130/26. Both are connected to the same switch. PC-A cannot ping PC-B. The technician believes the switch is faulty. Is this correct? Explain.
No, because PC-A and PC-B are on different subnets and cannot communicate directly.
Yes, because a faulty switch can prevent communication between devices.
No, because both PCs should be able to communicate on the same switch regardless of subnet.
Yes, because the IP addresses are incorrectly configured for the switch.
An administrator needs to create 4 subnets from network 10.0.0.0/8. Which subnet mask is more appropriate: /10 or /30, and why?
/10 mask, because it creates 4 large subnets suitable for the requirement.
/30 mask, because it creates 4 usable subnets with maximum hosts.
/30 mask, because it creates 4 subnets with only 2 hosts each.
/10 mask, because it creates 4 subnets with only 2 hosts each.
Host A (10.1.1.50/16) sends a packet to Host B (10.2.1.50/16). No router exists between them. Will the communication succeed?
No, because they are on different subnets and need a router to communicate.
Yes, because they are both in the 10.0.0.0/8 network.
Yes, because their subnet masks are the same.
No, because their IP addresses are not compatible.
Can the administrator use 172.16.5.128/28 from the original 172.16.0.0/16 network to create a subnet for Finance with only 10 hosts? Why or why not?
Yes, because 172.16.5.128/28 is a valid subnet within the original /16 and provides enough addresses for 10 hosts.
No, because 172.16.5.128/28 overlaps with the Sales subnet 172.16.5.0/24.
No, because 172.16.5.128/28 does not provide enough addresses for 10 hosts.
Yes, because any subnet within 172.16.0.0/16 can be used regardless of existing subnets.
A router has interface with IP 192.168.1.1/24. A host on that network is configured with IP 192.168.1.1/24. What will happen and why?
There will be an IP address conflict, causing network issues.
The host will be able to communicate normally with the router.
The router will automatically change its IP address to avoid conflict.
The host will be assigned a new IP address by DHCP.
A VLSM design requires: LAN-A (100 hosts), LAN-B (50 hosts), LAN-C (25 hosts), and 2 WAN links (2 hosts each). Starting with 192.168.1.0/24, a technician allocates /25 for LAN-A, then /26 for LAN-B starting at 192.168.1.128. What mistake was made?
The /26 subnet for LAN-B overlaps with the /25 subnet for LAN-A.
The /26 subnet for LAN-B does not provide enough host addresses.
The /25 subnet for LAN-A is too large for the required number of hosts.
The WAN links were not allocated any address space.
8. Two routers are connected via a serial link. Router A interface has 10.0.0.1/30 and Router B interface has 10.0.0.5/30. Routers cannot ping each other. What is wrong?
The interfaces are on different subnets.
The serial link is down.
The IP addresses are not configured.
The routers have a routing loop.
A student calculates that 192.168.1.64/26 has a broadcast address of 192.168.1.128. Is this correct? Explain your reasoning.
No, the correct broadcast address is 192.168.1.127.
Yes, 192.168.1.128 is the correct broadcast address.
No, the correct broadcast address is 192.168.1.191.
No, the correct broadcast address is 192.168.1.255.
A network administrator notices that host 172.16.45.130/20 cannot communicate with host 172.16.33.200/20. Both hosts are connected to the same router. What should the administrator check first?
If both hosts are in the same subnet
If the router is powered on
If the hosts are using the same default gateway
If the hosts have the same MAC address
During troubleshooting, a technician discovers that PC (192.168.5.67/27) has gateway set to 192.168.5.1. The actual router interface on this network is 192.168.5.65/27. Why can't the PC reach other networks?
The PC's gateway is set outside its subnet, so it cannot reach other networks.
The PC's IP address is incorrect for the subnet.
The router interface is down.
The subnet mask is not compatible with the PC's IP address.
What will the router do and why?
The router will forward the packet based on its routing table because it determines the best path for the destination address.
The router will drop all packets because it cannot process any data.
The router will broadcast the packet to all connected devices because it does not use routing tables.
The router will only send packets to the source device because it ignores destination addresses.
TTL=128 tells you about the source operating system.
It is likely Windows.
It is likely Linux.
It is likely macOS.
It is likely a network device.
What will happen?
An event will occur.
Nothing will change.
The system will stop.
A new process will start.
15. Wireshark capture shows two packets from same source: Packet 1 - ID: 0x5F3A, Flags: 0x20 (More Fragments), Offset: 0, Length: 1500. Packet 2 - ID: 0x5F3A, Flags: 0x00, Offset: 185, Length: 700. What can you conclude?
The packets are fragments of a larger IP datagram.
The packets are part of a TCP handshake.
The packets are retransmissions due to loss.
The packets are unrelated and from different sessions.
Which path will the packet take and why?
The packet will take the shortest available path due to routing protocols.
The packet will take the longest path to avoid congestion.
The packet will randomly select a path each time.
The packet will always follow a predetermined static route.
17. Routing table shows: C 192.168.1.0/24 is directly connected, GigabitEthernet0/0 and S 0.0.0.0/0 [1/0] via 192.168.1.254. A packet arrives for 192.168.1.50. Which route is used and why?
The packet uses the directly connected route C 192.168.1.0/24 because the destination IP is within this subnet.
The packet uses the static route S 0.0.0.0/0 because it is a default route.
The packet is dropped because there is no matching route in the table.
The packet is forwarded to 192.168.1.254 because it matches the next hop.
What is AA:BB:CC:DD:EE:99?
A MAC address
An IP address
A subnet mask
A port number
Protocol: 1 is used for which purpose in a packet?
It is used for ICMP packets.
It is used for TCP packets.
It is used for UDP packets.
It is used for HTTP packets.
Will this route be used?
Yes, this route will be used.
No, this route will not be used.
This route is not relevant.
The route is under construction.
Wireshark shows packet: Total Length: 60, Header Length (IHL): 5, Data: 20 bytes of payload. Is this header information consistent?
Yes, the header information is consistent.
No, the header information is not consistent because the payload size does not match.
No, the header length is incorrect for the given total length.
No, the total length should be greater than 60 for this header and payload.
What is the difference between the C and L entries?
C entries refer to credits, while L entries refer to liabilities.
C entries refer to credits, while L entries refer to loans.
C entries refer to charges, while L entries refer to losses.
C entries refer to credits, while L entries refer to ledgers.
The asterisk (*) in a route indicates which of the following, and when will this route be used?
It acts as a wildcard and is used when no other route matches.
It specifies a default route and is always used first.
It marks a secure route and is used for admin access only.
It is used for static file routing and is always used for images.
Router has these entries: S 10.0.0.0/8 [1/0] via 192.168.1.1 and S 10.0.0.0/8 [5/0] via 192.168.1.2. The link to 192.168.1.1 fails. What happens to traffic destined for 10.5.5.5?
Traffic is routed via 192.168.1.2.
Traffic is dropped.
Traffic is routed via 192.168.1.1.
Traffic is sent to both 192.168.1.1 and 192.168.1.2.
What can you conclude about the source host?
The source host is actively sending data.
The source host is offline.
The source host is experiencing network issues.
The source host is receiving data only.
IHL: 7 indicates that this packet has a header length of how many bytes?
28 bytes
20 bytes
14 bytes
7 bytes
A network administrator needs to determine if host 192.168.45.67/28 and host 192.168.45.72/28 are in the same subnet. Without using a calculator, how should the administrator approach this problem?
Compare the network addresses of both hosts after applying the subnet mask.
Ping both hosts to see if they respond to each other.
Check if both IP addresses are in the same class.
Count the number of hosts in the subnet.
A junior administrator sees subnet mask 255.255.255.240 and needs to find the CIDR notation. Walk through the conversion process.
/28
/24
/30
/27
What is the decimal notation of the Source IP C0.A8.01.64 shown in Wireshark and what type of address is it?
The decimal notation is 192.168.1.100 and it is a private IP address.
The decimal notation is 192.168.1.100 and it is a public IP address.
The decimal notation is 192.168.1.64 and it is a private IP address.
The decimal notation is 192.168.1.64 and it is a public IP address.
A router receives a packet and sends back an ICMP message with Type 3, Code 0. What happened and what should the source host understand from this message?
The destination network is unreachable, and the source host should stop sending packets to that network.
The packet was successfully delivered to the destination.
The router is overloaded and cannot process the packet.
The source host needs to resend the packet with a different protocol.
A host sends a ping to a remote server. After some time, it receives an ICMP message with Type 11, Code 0. What does this tell the administrator about the network path?
The packet's TTL expired before reaching the destination.
The destination port is unreachable.
The remote server is down.
The packet was successfully delivered to the destination.
Network documentation shows a subnet mask as 0xFFFFFF00. An administrator needs to configure a device that only accepts dotted decimal format. What should be entered?
255.255.255.0
255.255.0.0
255.0.0.0
255.255.255.255
A student needs to determine how many hosts can exist in a /20 network. Explain the calculation process.
4096
2048
1024
8192
An administrator pings a host and receives the reply Destination Host Unreachable from the local router (192.168.1.1). What does this indicate compared to receiving no response at all?
The local router has no route to the destination host.
The destination host is powered off.
The local router is unreachable.
The ping request was blocked by a firewall.
A packet arrives at a router with TTL=0. What does the router do and why might this situation occur?
The router discards the packet because it has exceeded its maximum allowed hops, preventing routing loops.
The router forwards the packet to the next hop to continue its journey.
The router increases the TTL value and sends the packet back to the sender.
The router stores the packet for future delivery when TTL is reset.
Wireshark shows a packet with Protocol field = 6. What protocol is being used above the IP layer?
TCP (Transmission Control Protocol)
UDP (User Datagram Protocol)
ICMP (Internet Control Message Protocol)
IGMP (Internet Group Management Protocol)
A routing table shows: O IA 10.1.0.0/16 [110/30] via 192.168.1.1. What does IA indicate about this route?
IA indicates that the route is an OSPF Inter-Area route.
IA indicates that the route is an Internal Area route.
IA indicates that the route is an IS-IS Area route.
IA indicates that the route is an OSPF Intra-Area route.
Host A (192.168.1.10/24) sends data to Host B (192.168.2.10/24). The packet leaves Host A with destination MAC set to Host A's default gateway. Why?
Because Host B is on a different subnet and Host A must send the packet to its gateway for routing.
Because Host A does not know Host B's MAC address.
Because Host B is on the same subnet as Host A.
Because the default gateway always handles all traffic, regardless of destination.
A router receives packets for 10.0.0.0/8 and has two equal-cost paths. What is this called and what happens?
This is called equal-cost multipath routing, and the router will load-balance the packets across both paths.
This is called route summarization, and the router will drop the packets.
This is called static routing, and the router will send all packets through one path only.
This is called route poisoning, and the router will block both paths.
An IP packet has Total Length: 576, IHL: 5, and 20 bytes of options. Is this consistent?
No, this is not consistent because IHL: 5 means no options are present.
Yes, this is consistent because the total length allows for options.
No, this is not consistent because the options exceed the header length specified by IHL: 5.
Yes, this is consistent because the IHL value matches the options length.
A network administrator sees ARP entries for IP addresses that don't exist on the local network. What might cause this?
ARP spoofing or poisoning
Incorrect subnet mask configuration
Physical cable fault
DNS server misconfiguration
Wireshark shows an IP packet with source address 127.0.0.1 arriving at a router from the internet. What should the router do?
Drop the packet as it is not valid from the internet.
Forward the packet to the local network.
Send the packet back to the source.
Route the packet to the destination address.
A packet fragmented into 3 fragments arrives at the destination, but fragment 2 is missing. What happens?
The packet cannot be reassembled and is discarded.
The remaining fragments are processed and delivered.
Fragment 2 is requested again from the sender.
The packet is partially reassembled and delivered.
Routing table shows: S 10.0.0.0/8 [1/0] via 192.168.1.1 and O 10.1.0.0/16 [110/20] via 192.168.1.2. A packet for 10.1.5.5 arrives. Which route is used?
The packet is routed via 192.168.1.2 (O 10.1.0.0/16)
The packet is routed via 192.168.1.1 (S 10.0.0.0/8)
The packet is dropped
The packet is routed via both 192.168.1.1 and 192.168.1.2
Wireshark shows ICMP Type 3, Code 4 with Next-Hop MTU: 1400. What is the host being told?
The packet is too large and must be fragmented, but fragmentation is not allowed.
The destination port is unreachable.
The packet was successfully delivered.
The source IP address is invalid.
A network has two routers: R1 and R2. R1's routing table shows 10.0.0.0/8 via R2. R2's routing table shows 10.0.0.0/8 via R1. What happens to packets destined for 10.5.5.5?
Packets will loop indefinitely between R1 and R2.
Packets will be delivered successfully to 10.5.5.5.
Packets will be dropped by R1.
Packets will be dropped by R2.
Wireshark shows TCP segment with flags SYN, ACK set, Seq=0, Ack=1. What stage of TCP connection is this?
This is the second step of the TCP three-way handshake (SYN-ACK).
This is the first step of the TCP three-way handshake (SYN).
This is the third step of the TCP three-way handshake (ACK).
This is the termination phase of the TCP connection (FIN-ACK).
A TCP connection shows: Host A Seq=100, sends 50 bytes. What should Host B's acknowledgment number be?
150
100
149
151
Wireshark shows TCP RST flag set. Source port 80, destination port 45678. What likely happened?
The web server closed the connection abruptly.
The client successfully completed the connection.
A SYN flood attack was detected.
The connection was encrypted using SSL.
What do these options tell you about the connection?
They indicate the status of the connection.
They show the speed of the connection.
They display the type of device connected.
They provide information about the connection's security.
Wireshark shows source port 53, destination port 49152, protocol UDP. What application is likely involved?
DNS
FTP
HTTP
SMTP
What protocol is this?
HTTP
FTP
SMTP
TCP
Wireshark shows ICMP Port Unreachable (Type 3, Code 3) following a UDP packet. What happened?
The destination port is closed and cannot receive the UDP packet.
The UDP packet was successfully delivered to the destination port.
The source port is unreachable due to network congestion.
The UDP packet was dropped due to a firewall rule.
A TCP capture shows window size going from 65535 to 32768 to 16384 to 0 across several segments. What is happening?
The receiver's buffer is filling up and eventually becomes full, causing the window size to reach zero.
The sender is increasing its transmission rate due to congestion control.
The network is experiencing packet loss, causing retransmissions.
The TCP connection is being reset by the sender.
A capture shows TCP retransmission after 200ms, then 400ms, then 800ms. What pattern is this?
Exponential backoff
Linear backoff
Constant interval retransmission
Random retransmission
A UDP header shows Length: 8. Is this valid? What does it mean?
Yes, it is valid. It means the UDP packet contains only the header and no data.
No, it is invalid. The minimum length should be greater than 8.
Yes, it is valid. It means the UDP packet contains both header and data.
No, it is invalid. The length should be less than 8.
Wireshark shows duplicate ACKs: Ack=5000, Ack=5000, Ack=5000. What is the receiver signaling?
The receiver is signaling that a packet was lost and is requesting retransmission.
The receiver is confirming successful receipt of all packets.
The receiver is indicating a connection termination.
The receiver is requesting a new connection.
A capture shows SACK blocks: 6000-6500, 7000-7500. The ACK number is 5000. What has been received?
Data up to 5000 and blocks 6000-6500, 7000-7500
Data up to 7500
Only blocks 6000-6500 and 7000-7500
Data up to 6500 and block 7000-7500
Wireshark shows TCP PSH flag set on a segment. What does this indicate and when is it typically used?
It indicates that the sender wants the data to be pushed to the receiving application immediately, typically used for interactive data transfer.
It indicates that the connection is being reset, typically used during connection termination.
It indicates that the segment is part of a retransmission, typically used for lost packets.
It indicates that the sender is requesting a new connection, typically used during connection setup.
Wireshark capture shows a TCP connection with consistently high RTT (500ms+) but no packet loss. What might cause this?
Long physical distance between endpoints
High packet loss
TCP window size too small
Network congestion causing retransmissions
Including IP addresses in a transport layer checksum is important because:
It helps detect misrouted packets by verifying the source and destination addresses.
It increases the speed of packet transmission.
It allows for encryption of the data payload.
It reduces the size of the packet header.
Why does DNS use UDP while HTTP uses TCP? Explain the fundamental transport needs that drive this choice.
DNS uses UDP because it requires fast, connectionless queries, while HTTP uses TCP for reliable, ordered data transfer.
DNS uses TCP because it needs reliable connections, while HTTP uses UDP for speed.
Both DNS and HTTP use UDP because it is faster than TCP.
DNS uses UDP for security, while HTTP uses TCP for simplicity.
Two applications on the same host both try to bind() to TCP port 8080. The second bind() fails with Address already in use. Why does the OS prevent this, and what would happen if it were allowed?
The OS prevents this to avoid ambiguity in delivering incoming packets; if allowed, packets could be delivered to the wrong application.
The OS prevents this to save memory; if allowed, both applications would crash.
The OS prevents this to increase network speed; if allowed, the network would slow down.
The OS prevents this to allow multiple connections; if allowed, only one connection would be possible.
A client socket is identified by 4-tuple (192.168.1.10, 50000, 10.0.0.1, 80). The client host has one network interface. Can the same client create another connection with 4-tuple (192.168.1.10, 50000, 10.0.0.2, 80)?
Yes, because the destination IP address is different.
No, because the source port and IP are the same.
No, because the client has only one network interface.
Yes, because the destination port is the same.
Port ranges are divided into well-known (0-1023), registered (1024-49151), and dynamic/ephemeral (49152-65535) because:
They help organize and manage network services and applications.
They are assigned randomly by network devices.
They are used only for internal communication within a computer.
They are reserved for military and government use only.
Wireshark shows TCP segment: Source Port: 443, Dest Port: 51234, Seq: 1000, Ack: 5000, Flags: ACK, PSH. What does the PSH flag tell us about this data and what should the receiver do?
The PSH flag indicates that the data should be pushed to the application immediately by the receiver.
The PSH flag means the receiver should wait for more segments before processing the data.
The PSH flag tells the receiver to close the connection after receiving this segment.
The PSH flag indicates that the data is encrypted and should be decrypted by the receiver.
An application developer creates a UDP socket and sends a 10,000-byte message. The developer expects one recv() call to receive all 10,000 bytes. Will this work? How does UDP handle large messages compared to TCP?
No, UDP may fragment or drop large messages, and recv() may not receive all 10,000 bytes in one call.
Yes, UDP guarantees that recv() will receive all 10,000 bytes in one call.
No, TCP is used for large messages, not UDP.
Yes, both UDP and TCP handle large messages identically.
A firewall administrator sees thousands of half-open TCP connections (SYN received, SYN-ACK sent, no final ACK). The server is slow and memory is exhausted. What type of attack is this, and why does it target the transport layer specifically?
It is a SYN flood attack, which exploits the TCP handshake process at the transport layer.
It is a DNS amplification attack, which targets the application layer.
It is a brute force attack, which targets the network layer.
It is a phishing attack, which targets the presentation layer.
Explain why three different protocols are involved in loading one web page.
Because each protocol handles a different aspect: HTTP for data transfer, TCP for reliable connection, and IP for addressing and routing.
Because all protocols are used for encryption only.
Because only one protocol is needed for loading a web page.
Because protocols are randomly selected for each web page.
Under what circumstances does DNS switch to TCP, and why not use TCP always?
DNS switches to TCP when the response data size exceeds 512 bytes, and TCP is not always used because it is slower and requires more resources than UDP.
DNS switches to TCP when the client requests it, and TCP is not always used because UDP is more secure.
DNS switches to TCP for all queries, and TCP is not always used because it is less reliable than UDP.
DNS switches to TCP when the server is overloaded, and TCP is not always used because UDP is faster.
A user sends email from alice@gmail.com to bob@yahoo.com. The email travels through multiple servers. Which protocol is used between Gmail's server and Yahoo's server, and why is this different from what Bob uses to read the email?
SMTP is used between Gmail's server and Yahoo's server, while Bob uses IMAP or POP3 to read the email.
IMAP is used between Gmail's server and Yahoo's server, while Bob uses SMTP to read the email.
POP3 is used between Gmail's server and Yahoo's server, while Bob uses SMTP to read the email.
FTP is used between Gmail's server and Yahoo's server, while Bob uses IMAP to read the email.
A company's internal DNS server cannot resolve external domains. Nslookup for internal.company.com works, but google.com fails. What DNS concept is likely misconfigured?
DNS forwarding
DHCP lease time
MX record
TTL value
When a browser makes an HTTPS request to port 443, the HTTP content is encrypted. But TCP and IP headers remain unencrypted. Why can't we encrypt everything including port numbers and IP addresses?
Because routers and switches need to read IP addresses and port numbers to route packets correctly.
Because encryption of headers is technically impossible.
Because browsers do not support header encryption.
Because HTTPS automatically encrypts all headers.
User clicks a link. Browser has IP cached (no DNS needed). Wireshark shows HTTP GET sent, but HTTP response takes 3 seconds. TCP handshake completed in 50ms. Where should the administrator look for the delay?
Web server processing time
DNS resolution issues
TCP handshake latency
Browser cache problems
What layer is likely blocking this?
Application Layer
Transport Layer
Network Layer
Data Link Layer
Why do application layer protocols define their own message formats instead of using a universal format?
Because different applications have unique requirements and functionalities.
To make network communication slower.
To avoid compatibility with other protocols.
Because universal formats are always less secure.
What mechanism caused the improvement, and what determines how long the improvement lasts?
The underlying biological process and the duration of exposure determine the improvement and its longevity.
The improvement is caused by random chance and lasts indefinitely.
The mechanism is unknown and the duration is fixed for all cases.
Improvement is caused by external factors and lasts only for a short period.
If P2P has no server, how does a new peer find other peers to connect to? Explain the bootstrap problem and solutions.
By using a bootstrap mechanism such as a list of known peers or a bootstrap server.
By randomly generating IP addresses until a connection is made.
By relying solely on broadcast messages to the entire network.
By waiting for other peers to initiate contact.
A web server log shows client IP 203.0.113.50 made requests, but the actual user is behind NAT with private IP 192.168.1.100. The application layer (HTTP) only sees the public IP. Why can't the server see the user's real IP, and what header might help?
Because NAT hides the private IP; the 'X-Forwarded-For' header can help reveal the real IP.
Because the server is misconfigured; the 'User-Agent' header can help reveal the real IP.
Because the client is using a VPN; the 'Referer' header can help reveal the real IP.
Because the server only logs public IPs; the 'Content-Type' header can help reveal the real IP.
The purpose of the TTL (Time To Live) field in an IP packet is:
To limit the lifetime of a packet in the network
To specify the packet's destination address
To indicate the protocol used in the packet
To define the size of the packet
A router receives a packet for destination 10.5.5.5. The routing table has: 10.0.0.0/8 via 192.168.1.1, 10.5.0.0/16 via 192.168.1.2, 10.5.5.0/24 via 192.168.1.3. Which route is selected?
10.5.5.0/24 via 192.168.1.3
10.0.0.0/8 via 192.168.1.1
10.5.0.0/16 via 192.168.1.2
192.168.1.1 via 10.0.0.0/8
A default route is used in networking. What is a default route and when is it used?
A default route is a route that directs packets to a gateway when no specific route is found in the routing table.
A default route is a route that is used only for local network traffic.
A default route is a route that blocks all outgoing traffic from a network.
A default route is a route that is used only for incoming traffic.
What is the difference between a routing table in a router and a routing table in a regular computer (host)?
A router's routing table contains routes for forwarding packets to different networks, while a host's routing table mainly contains routes for reaching its default gateway.
A router's routing table only contains local network routes, while a host's routing table contains routes for all networks.
A host's routing table is used to forward packets between networks, while a router's routing table is only used for local communication.
Both router and host routing tables are identical and serve the same purpose.
A packet needs to travel from Network A through Router 1, Router 2, and Router 3 to reach Network B. At each router, what decision is made?
The router decides which path the packet should take next.
The router encrypts the packet for security.
The router changes the packet's destination address.
The router stores the packet for future delivery.
What is the difference between directly connected and static routes in a routing table?
Directly connected routes are learned automatically from interfaces, while static routes are manually configured by an administrator.
Directly connected routes require manual configuration, while static routes are learned automatically.
Static routes are always preferred over directly connected routes in routing decisions.
Directly connected routes are used only for external networks, while static routes are used for internal networks.
A client application wants to communicate with a server. What two pieces of information does the client need to reach the correct application on the server?
IP address and port number
Username and password
MAC address and protocol
Hostname and subnet mask
At the transport layer, what happens when a client connects to a server running a web service on port 80?
A TCP connection is established between the client and server.
An HTTP request is sent directly to the server.
The server assigns a new port number to the client.
A UDP connection is established between the client and server.
TCP provides which feature that UDP does not?
Connection-oriented communication
Faster data transmission
Lower overhead
Broadcast capability
An application might choose UDP over TCP despite UDP being unreliable because:
UDP offers lower latency and faster transmission for time-sensitive data.
UDP guarantees reliable delivery of packets.
UDP automatically corrects transmission errors.
UDP provides built-in congestion control mechanisms.
DNS is necessary for internet communication because:
It translates domain names into IP addresses, allowing devices to locate each other on the network.
It encrypts all internet traffic for secure communication.
It provides wireless connectivity between devices.
It stores all website data on the internet.
A user types www.example.com in a browser. What is the first thing that must happen before the browser can send an HTTP request?
The browser must resolve the domain name to an IP address using DNS.
The browser must establish a TCP connection to the server.
The browser must load the website from cache.
The browser must authenticate the user.
A computer has DNS server configured as 8.8.8.8. The user browses to www.example.com. The basic DNS resolution process involves:
The computer sends a DNS query to 8.8.8.8, which resolves www.example.com to its IP address.
The computer sends a DNS query to www.example.com, which resolves 8.8.8.8 to its IP address.
The computer sends a DNS query to its local router, which always resolves the domain name.
The computer sends a DNS query to 8.8.8.8, which redirects the request to another DNS server.
What is the difference between a DNS recursive query and an iterative query?
A DNS recursive query requires the DNS server to respond with either the requested resource record or an error, while an iterative query allows the server to refer the client to another DNS server.
A DNS recursive query allows the client to refer the server to another DNS server, while an iterative query requires the server to respond with the requested resource record.
A DNS recursive query is only used for internal networks, while an iterative query is used for external networks.
A DNS recursive query is faster than an iterative query because it skips intermediate servers.
94. A DNS A record is:
a record that maps a domain name to an IPv4 address
a record that maps a domain name to an IPv6 address
a record that stores mail server information
a record that provides alias names for domains
A company's email address is user@company.com but their mail server is mail.company.com. How does a sending server know to deliver email to mail.company.com?
By looking up the MX record for company.com in DNS
By checking the IP address of user@company.com
By using the SMTP header in the email
By contacting the web server at company.com
DNS caching is important because:
It speeds up domain name resolution by storing previous lookups locally.
It prevents all DNS attacks.
It eliminates the need for DNS servers.
It increases internet bandwidth usage.
An HTTP GET request is used for:
Retrieving data from a server
Sending data to a server
Deleting data from a server
Updating data on a server
A server responds with: HTTP/1.1 200 OK. What does the status code 200 indicate?
The request was successful
The server encountered an error
The resource was not found
The request was redirected
99. HTTP status code 500 indicates:
A server error occurred.
The requested resource was not found.
The request was successful.
The client is not authorized.
The difference between HTTP and HTTPS is:
HTTPS is secure while HTTP is not.
HTTP uses encryption while HTTPS does not.
HTTP is faster than HTTPS because it is secure.
HTTPS is used only for file transfers.
