Chapter 9
17) In tunnel mode, IPsec provides protection ________. A) all the way between the two hosts B) only between the IPsec servers C) at a higher cost D) none of the above
only between the IPsec servers
28) Dynamic _____ protocols allow routers to transmit routing table information to one another. A) routing B) transport C) synchronization D) none of the above
routing
19) In IPsec, agreements about how security will be done are called ________. A) tranches B) security contracts C) service-level agreements D) security associations
security associations
30) ________ is used for supervisory messages at the internet layer. A) TCP B) DNS C) DHCP D) ICMP
ICMP
4) You have an 8-bit network part/8-bit subnet part. How many hosts can you have per subnet? A) 126 B) 254 C) 534 D) 65,534
65534
2) In IP subnet planning, you need to have at least 130 subnets. How large (how many bits) should your subnet part be [what must your subnet part size be]? A) 6 B) 7 C) 8 D) none of the above
8
9) Which of the following is a private IP address range? A) 10.x.x.x B) 128.171.x.x C) both A and B D) neither A nor B
10.x.x.x
14) The highest-level DNS servers are called ________. A) root servers B) top-level servers C) both A and B D) neither A nor B
root servers
13) Most corporations wish to have ________ domain names. A) top-level B) second-level C) third-level D) none of the above
second level
15) How many DNS root servers are there? A) 1 B) 2 C) 10 D) 13
13
24) If the subnet ID in an IPv6 address is 32 bits, how long is the routing prefix? A) 16 bits B) 32 bits C) 64 bits D) none of the above
32 bits
26) In an IPv6 global unicast address, the interface ID is ________ bits long. A) 32 B) 64 C) 128 D) It varies.
64
27) A step in creating an IEEE EUI-64 is dividing a 48-bit MAC address in half and inserting ________ in the center. A) the interface ID B) the subnet ID C) fffe D) 0000
ffe
25) The part of an IPv6 global unicast address that designates the host is called the ________. A) host part B) routing prefix C) interface ID D) none of the above
interface ID
1) If your subnet part is 8 bits long, you can have ________ subnets. A) 64 B) 128 C) 256 D) 254
254
5) You have a 20-bit network part/4-bit subnet part. How many hosts can you have per subnet? A) 14 B) 16 C) 254 D) none of the above
254
11) In DNS, a group of resources under the control of an organization is called a ________. A) network B) subnet C) scope D) domain
domain
31) Pinging is to send ICMP ________ messages to the target host. A) echo request B) error advisement C) ping D) echo
echo request
7) In NAT, the ________ creates new external source IP addresses and port numbers. A) router B) firewall C) source host D) destination host
firewall
21) If a host is to be able to communicate via IPv4 and IPv6, it is said to ________. A) be bilingual B) have a dual-stack C) be IPv6-ready D) be IP-agile
have a dual stack
29) A company is free to select whatever ________ dynamic routing protocol it wishes. A) interior B) exterior C) both A and B D) neither A nor B
interior
23) The routing prefix in IPv6 is like the ________ part in an IPv4 address. A) network B) subnet C) host D) both A and B
network
8) NAT enhances security by ________. A) preventing sniffers from learning internal IP addresses B) encryption C) both A and B D) neither A nor B
preventing snifers from learning internal IP addresses
12) ".edu" is a ________. A) root domain B) top-level domain C) second-level domain D) none of the above
to-level domain
18) Which mode of IPsec may be more expensive if a company has a large number of computers? A) transport mode B) tunnel mode C) Both A and B are equally expensive.
transport mode
20) Which has stronger security? A) SSL/TLS B) IPsec C) Both have about equal security.
IPsec
6) ________ is the process of presenting external IP addresses that are different from internal IP addresses used within the firm. A) DNS B) NAT C) DHCP D) none of the above
NAT
16) A company receives its domain name from ________. A) IETF B) its ISP C) a domain registrar D) its parents
a domain registrar
22) Today, it can be problematic to have only a single IPv6 stack because ________. A) a single IPv4 stack is out of date B) a single IPv6 stack could not communicate with a single IPv4 stack C) a dual stack has become a common solution D) all of the above
a single IPv6 stack could not communicate with a single IPv4 stack
3) Your firm has an 8-bit network part. If you need at least 250 subnets, how large (how many bits) should your subnet part be [what must your subnet part size be]? A) 5 B) 6 C) 7 D) 8
D
10) The domain name system ________. A) is a way to find a host's IP addresses if your computer only knows the host's host name B) is a general naming system for the Internet C) both A and B D) neither A nor B
both A and B