Chapter 9

17) In tunnel mode, IPsec provides protection ________. A) all the way between the two hosts B) only between the IPsec servers C) at a higher cost D) none of the above

only between the IPsec servers

28) Dynamic _____ protocols allow routers to transmit routing table information to one another. A) routing B) transport C) synchronization D) none of the above

routing

19) In IPsec, agreements about how security will be done are called ________. A) tranches B) security contracts C) service-level agreements D) security associations

security associations

30) ________ is used for supervisory messages at the internet layer. A) TCP B) DNS C) DHCP D) ICMP

ICMP

4) You have an 8-bit network part/8-bit subnet part. How many hosts can you have per subnet? A) 126 B) 254 C) 534 D) 65,534

65534

2) In IP subnet planning, you need to have at least 130 subnets. How large (how many bits) should your subnet part be [what must your subnet part size be]? A) 6 B) 7 C) 8 D) none of the above

8

9) Which of the following is a private IP address range? A) 10.x.x.x B) 128.171.x.x C) both A and B D) neither A nor B

10.x.x.x

14) The highest-level DNS servers are called ________. A) root servers B) top-level servers C) both A and B D) neither A nor B

root servers

13) Most corporations wish to have ________ domain names. A) top-level B) second-level C) third-level D) none of the above

second level

15) How many DNS root servers are there? A) 1 B) 2 C) 10 D) 13

13

24) If the subnet ID in an IPv6 address is 32 bits, how long is the routing prefix? A) 16 bits B) 32 bits C) 64 bits D) none of the above

32 bits

26) In an IPv6 global unicast address, the interface ID is ________ bits long. A) 32 B) 64 C) 128 D) It varies.

64

27) A step in creating an IEEE EUI-64 is dividing a 48-bit MAC address in half and inserting ________ in the center. A) the interface ID B) the subnet ID C) fffe D) 0000

ffe

25) The part of an IPv6 global unicast address that designates the host is called the ________. A) host part B) routing prefix C) interface ID D) none of the above

interface ID

1) If your subnet part is 8 bits long, you can have ________ subnets. A) 64 B) 128 C) 256 D) 254

254

5) You have a 20-bit network part/4-bit subnet part. How many hosts can you have per subnet? A) 14 B) 16 C) 254 D) none of the above

254

11) In DNS, a group of resources under the control of an organization is called a ________. A) network B) subnet C) scope D) domain

domain

31) Pinging is to send ICMP ________ messages to the target host. A) echo request B) error advisement C) ping D) echo

echo request

7) In NAT, the ________ creates new external source IP addresses and port numbers. A) router B) firewall C) source host D) destination host

firewall

21) If a host is to be able to communicate via IPv4 and IPv6, it is said to ________. A) be bilingual B) have a dual-stack C) be IPv6-ready D) be IP-agile

have a dual stack

29) A company is free to select whatever ________ dynamic routing protocol it wishes. A) interior B) exterior C) both A and B D) neither A nor B

interior

23) The routing prefix in IPv6 is like the ________ part in an IPv4 address. A) network B) subnet C) host D) both A and B

network

8) NAT enhances security by ________. A) preventing sniffers from learning internal IP addresses B) encryption C) both A and B D) neither A nor B

preventing snifers from learning internal IP addresses

12) ".edu" is a ________. A) root domain B) top-level domain C) second-level domain D) none of the above

to-level domain

18) Which mode of IPsec may be more expensive if a company has a large number of computers? A) transport mode B) tunnel mode C) Both A and B are equally expensive.

transport mode

20) Which has stronger security? A) SSL/TLS B) IPsec C) Both have about equal security.

IPsec

6) ________ is the process of presenting external IP addresses that are different from internal IP addresses used within the firm. A) DNS B) NAT C) DHCP D) none of the above

NAT

16) A company receives its domain name from ________. A) IETF B) its ISP C) a domain registrar D) its parents

a domain registrar

22) Today, it can be problematic to have only a single IPv6 stack because ________. A) a single IPv4 stack is out of date B) a single IPv6 stack could not communicate with a single IPv4 stack C) a dual stack has become a common solution D) all of the above

a single IPv6 stack could not communicate with a single IPv4 stack

3) Your firm has an 8-bit network part. If you need at least 250 subnets, how large (how many bits) should your subnet part be [what must your subnet part size be]? A) 5 B) 6 C) 7 D) 8

D

10) The domain name system ________. A) is a way to find a host's IP addresses if your computer only knows the host's host name B) is a general naming system for the Internet C) both A and B D) neither A nor B

both A and B