ISM 4220 CH 9

22) NAT ________. A) allows a firm to have more internal IP addresses B) provides some security C) both A and B D) neither A nor B

C) both A and B

7) Your firm has a 22-bit network part. What subnet part would you select to give at least 10 subnets?

4 bits

14) If your routing prefix is 16 bits, how long is your subnet ID?

48 bits

4) In IP subnet planning, you need to have at least 130 subnets. How large should your subnet part be?

8

5) Your firm has an 8-bit network part. If you need at least 200 subnets, what must your subnet part size be?

8

23) NAT ________. A) allows a firm to have more internal IP addresses B) reduces cost C) both A and B D) neither A nor B

A) allows a firm to have more internal IP addresses

42) The DNS ________ record is for the host name's ________ address

A; IPv4

43) The DNS ________ record is for the host name's ________ address

AAAA; IPv6

25) Which of the following is a private IP address range?

10.x.x.x

8) Your firm has a 22-bit network part and a 6-bit subnet part. How many hosts can you have per subnet?

14

1) If your subnet part is 8 bits long, you can have ________ subnets.

254

3) Your subnet part is 8 bits long. How many hosts can you have per subnet?

254

6) You have a 20-bit network part and a 4-bit subnet part. How many hosts can you have per subnet?

254

26) Which of the following IPv4 addresses would be used for Internet transmission?

128.171.x.x

12) If the subnet ID in an IPv6 address is 32 bits, how long is the routing prefix?

32 bits

16) In an IPv6 global unicast address, the interface ID is ________ bits long.

64

55) Which of the following can route non-IP packets?

EIGRP

64) IPsec protects ________ layer content.

application

13) In a large company, you want ________.

as small a routing prefix as you can have

36) Which is a type of top-level domain?

generic TLD

61) Ping is for ________ messages.

supervisory

31) The domain name system ________. A) is a way to find a host's IP addresses if your computer only knows the host's host name B) is a general naming system for the Internet C) both A and B D) neither A nor B

C) both A and B

40) A company has a domain name. What else must it have before it can make a website available to the public? A) a DNS server to host its domain name B) the website itself C) both A and B D) neither A nor B

C) both A and B

44) A DHCP server provides a client with ________. A) one or more IP addresses for it to use B) the IP address of one or more DNS servers C) both A and B D) neither A nor B

C) both A and B

48) Which of the following would be an SNMP object? A) number of rows in routing table B) system uptime (since last reboot) C) both A and B D) neither A nor B

C) both A and B

67) IPsec is used for ________ VPNs. A) remote-access B) site-to-site C) both A and B D) neither A nor B

C) both A and B

70) In transport mode, ESP fields surround an IPv4 packet's ________.

C) data field

69) Which of the following is used in ESP? A) ESP header B) ESP trailer C) Integrity check value D) all of the above

D) all of the above

58) The almost-universal exterior dynamic routing protocol is ________. A) EIGRP B) OSPF C) both A and B D) neither A nor B

D) neither A nor B

2) If your subnet part is 7 bits long, how many subnets can you have? A) 128 B) 256 C) 512 D) none of the above

D) none of the above

32) ________ is a general naming system for the Internet.

DNS

65) Which of the following is more widely used?

ESP

17) The IEEE calls a 64-bit interface addresses that it designed a(n) ________ address.

Extended Unique Identifier-64

27) For an internal client to use NAT to communicate with an external webserver, the client must be configured to do so.

FALSE

28) NAT is transparent to all applications.

FALSE

51) Good security is an enabler if a company wishes to use SNMP ________ commands.

Get

68) In remote access VPNs, IPsec has an ________ at the corporate site.

IPsec gateway

20) ________ is the process of presenting external IP addresses that are different from internal IP addresses used within the firm.

NAT

53) ________ is an interior dynamic routing protocol.

OSPF

50) In SNMP, companies are often reluctant to use ________ commands because of security dangers.

Set

33) In DNS, a group of resources under the control of an organization is called a ________.

domain

39) Companies get second-level domains from ________.

domain registrars

62) Pinging is to send ICMP ________ messages to the target host.

echo request

60) ICMP is used for ________.

error messages

18) A step in creating an EUI-64 is dividing a 48-bit MAC address in half and inserting ________ in the center.

fffe

21) In NAT, the ________ creates new external source IP addresses and port numbers.

firewall

9) Which is NOT one of the three parts of a public IPv6 unicast address?

host part

15) The part of an IPv6 global unicast address that designates the host is called the ________.

interface ID

54) A company is free to select whatever ________ dynamic routing protocol it wishes.

interior

57) A company is free to select its ________.

interior dynamic routing protocol

41) For a particular domain name, a DNS server will have ________.

multiple records

10) The routing prefix in IPv6 is like the ________ part in an IPv4 address.

network

47) Which of the following would be an SNMP object?

number of rows in routing table

34) ".com" is a ________.

top-level domain

35) ".edu" is a ________.

top-level domain

66) Which protects more of the original IP packet?

tunnel mode

49) Which of the following would be an SNMP interface object?

whether the interface is undergoing testing

19) Convert the following EUI-48 address to a modified EUI-64 address: AA-00-00-FF-FF-00.

ae00:00ff:feff:ff0

46) In SNMP, the manager communicates directly with a(n) ________.

agent

63) What security concern do ICMP echo request messages and echo response messages bring?

attackers can learn that the other host's IP address is in use

29) If your local DNS server does not know the host name of an IP address, it will get the address from a(n) ________.

authoritative DNS server

24) NAT enhances security by ________.

preventing sniffers from learning internal IP addresses

38) The highest-level DNS servers are called ________.

root servers

59) In the Border Gateway Protocol, "gateway" means ________.

router

52) Dynamic ________ protocols allow routers to transmit routing table information to one another.

routing

37) Corporations wish to have ________ domain names.

second-level

56) You need to use EIGRP if ________.

some of your traffic is TCP/IP traffic

11) What field in an IPv6 global unicast address corresponds to the subnet part of an IPv4 address?

subnet ID

45) An advantage of using DHCP to configure clients is that ________.

the configuration information will be up-to-date

30) If the local DNS server does not know an IP address and must contact a remote DNS server, which DNS server will return the response to the client?

the local DNS server