CTI Chapter 3

Users on a network are complaining that they cannot connect to a Webserver by its name in the Web browser. You can access the Webserver using its IP address. You discover an access list is blocking several UDP ports. Which port should you remove from the access list to allow users to connect to the Webserver? 53 22 530 443

53

A computer is configured with a subnet mask of 255.255.255.192. How many IP addresses, including the network and broadcast addresses, are available in the subnet the computer is in? 128 32 16 64

64 The last octet of a subnet mask of 255.255.255.192 is represented as 11000000 in binary form. This means that the host portion of the address has six bits. This provides a range of 000000 = 0 to 111111 = 63. Including the first value of 0 which is the network address and the last value of 63 which is the broadcast address, there are 64 possible IP addresses in this subnet.

You need to block all unsecured web traffic using its default port from a specific network segment of the enterprise network. Which port would you block to achieve this? 8080 45 80 88 81

80

Refer to the exhibit. Which of the pictured software is a protocol analyzer? A B C D E

A

What type of device does a computer turn to first when attempting to make contact with a host with a known IP address on another network? Root server Default gateway DHCP server DNS server

Default gateway

A network engineer is configuring a network to be able to relay IPv6 packets. The network only supports IPv4 and does not have dual-stack support. Which of the following can be used to successfully relay IPv6 packets over this network? A network engineer is configuring a network to be able to relay IPv6 packets. The network only supports IPv4 and does not have dual-stack support. Which of the following can be used to successfully relay IPv6 packets over this network? IPv6 tunneling GREv3 tunneling OSPFv3 Dual-stack Lite GREv3 tunneling

IPv6 tunneling

You are planning to implement dual stack of IPv4 and IPv6 in your network. Currently, your network consists of servers, routers, and switches that have not been upgraded for several years. You are still running the Windows Server 2003. When implementing dual stack, which of the following will be your primary concerns? [Choose all that apply]. Ensuring that Internet Service Providers (ISPs) work with IPv6 Keeping the hardware and software costs under control Ensuring that the hardware and software support the implementation Ensuring the same service-levels for the dual stack

Keeping the hardware and software costs under control Ensuring that the hardware and software support the implementation

You have configured a DHCP pool to allocate the IP addresses to the system for 3 days. What have you defined? Lease time DHCP Timer DHCP Hold Timer IP Expiry Timer

Lease time

Which type of DNS record identifies an email server? PTR record MX record AAAA record CNAME record

MX record

You have been asked to host a new e-commerce Website. Your manager has asked you to configure the Website with a certificate. After hosting the Website with the certificate, which security protocol have you use? VMC/VMS RDP SSH SSL/TLS

SSL/TLS

Refer to the exhibit. Which of the following command is likely to show the required output? ping netstat DNStranslate nslookup traceroute

nslookup

If you are connected to a network that uses DHCP, and you need to terminate your Windows workstation's DHCP lease, which command would you use? ipconfig /release ifconfig /renew ipconfig /renew ifconfig /release

ipconfig /release

Which of the following format can be considered a valid IPv6 address? 2001:0db8:0000:ff00:0042:8329 2001:0db8:0000:0003:0000:jk00:0042:8329 2001:0db8:0000:0003:0000:ff00:0042:8329 192.168.45.72

2001:0db8:0000:0003:0000:ff00:0042:8329 Because an IPv6 address is 128 bits long and is arranged in eight groups, each of which is 16 bits. It can contain hexadecimals (which end after 'f')

Which of the following IPv4 and IPv6 addresses are correctly portrayed using CIDR notation? [Choose all that apply]. 2001:db8::/132 2001:db8::/32 2001:db8::\32 192.168.2.0/34 192.168.2.0/24 192.168.2.0\24

2001:db8::/32 192.168.2.0/24

What decimal number corresponds to the binary number 11111111? 255 11,111,111 127 256

255

You need to connect to a colleague's system using the default Microsoft Windows remote desktop application to troubleshoot an application issue. Which port should be opened on the colleague's system firewall to ensure successful remote connection? 389 22 3389 33 89

3389

Suppose you send data to the 11111111 11111111 11111111 11111111 IP address on an IPv4 network. To which device(s) are you transmitting? The one device that is configured with this IP address All devices on your local network No devices All devices on the Internet

All devices on your local network

Refer to the exhibit. Which of the pictured software is a port scanner? A B C D E

C

What is the first thing you should check if you discover that domain names are not resolving into IP addresses on a PC or workstation? Check connectivity to the default DNS server Check connectivity to the Webserver Check connectivity to the default gateway Check connectivity to the device loopback address

Check connectivity to the default DNS server

When your computer first joins an IPv6 network, what is the prefix of the IPv6 address the computer first configures for itself? 2001::/3 FE80::/10 FF00::/8 2001::/64

FE80::/10

DNS clients can use this zone to obtain information such as IP address that correspond to DNS domain names or services. What type of DNS zone is this? Resource mapping zone Reverse lookup zone DNS lookup zone Forward lookup zone

Forward lookup zone

Which of the following describes the configuring of MAC reservation in a DHCP server? Dynamically allocate the MAC address to a range of desired IP addresses in the DHCP server Exclude the MAC address of the host in question from DHCP allocation Manually configure the IP parameters of the host Manually allocate the MAC address to a desired IP address in the DHCP server

Manually allocate the MAC address to a desired IP address in the DHCP server

The network administrator has configured the enterprise firewall to permit port 21 to allow FTP transfers to occur from outside the enterprise. Users can connect to the FTP server that is located on the enterprise network. However, file transfers fails. Why could this be? Both inbound and outbound port 21 and 22 must be permitted Port 20 along with port 21 must also be permitted Port 69 must also be permitted Open the inbound port 25 along with port 21

Open the inbound port 25 along with port 21

You are the network administrator for a small organization of 100 users. Users till now were freely browsing the Internet. You want to put a provision in place where you can monitor their visits to the different Websites and block all unwanted Websites. Which of the following should you install and configure? Firewall Web server Proxy server IDS server

Proxy server

Your organization has multiple remote offices. The users at the remote office often remotely connect to the application servers. Which of the protocols should you enforce for encrypted communication? [Choose all that apply]. RDP Telnet HTTP Interface SSH

RDP SSH

Which computers are the highest authorities in the Domain Name System hierarchy? Primary DNS servers Authoritative name servers Top-level domain servers Root servers

Root servers

You are a network administrator for an organization. You are asked to create a shared folder on a Microsoft Windows system so that other users on the same network are able to access its contents. To be able to meet this requirement, which protocol is likely to be used? SMBP NetBIOS FTP SMB

SMB

You are a network administrator and you need to access the secure command line interface access of an edge router on your network. The router uses cryptography for remote authentication. Which protocol is the router configured with for this purpose? HTTPS Telnet RDP SSH

SSH

What method of IP network configuration would you use for devices such as servers and printers so that all users on a network will always be able to reach these resources using the same network address? DHCPv6 Dynamic IP address allocation DNS SLAAC Static IP address allocation

Static IP address allocation

Your network firewall currently allows only HTTP traffic to pass through. You need to allow FTP traffic to pass through the firewall. Which of the following should be allowed? [Choose all that apply]. UDP port 20 UDP port 21 TCP port 20 TCP port 21

TCP port 20, TCP port 21

Which part of a MAC address is unique to each manufacturer? The physical address The device identifier The OUI The network identifier

The OUI

You have just brought online a new secondary DNS server and notice your network-monitoring software reports a significant increase in network traffic. Which two hosts on your network are likely to be causing the increased traffic and why? The root and primary DNS servers, because the primary server is requesting zone transfers from the root server The web server and primary DNS server, because the web server is requesting zone transfers from the primary DNS server The caching and primary DNS servers, because the caching server is requesting zone transfers from the primary server The secondary and primary DNS servers, because the secondary server is requesting zone transfers from the primary server

The secondary and primary DNS servers, because the secondary server is requesting zone transfers from the primary server

Which of these commands is available only in Linux? ipconfig nslookup dig ping

dig