CyberOps Associate (Version 1.0) - Modules 5 - 10: Network Fundamentals Group Exam

A network administrator is testing network connectivity by issuing the ping command on a router. Which symbol will be displayed to indicate that a time expired during the wait for an ICMP echo reply message? U . ! $

.

A PC is downloading a large file from a server. The TCP window is 1000 bytes. The server is sending the file using 100-byte segments. How many segments will the server send before it requires an acknowledgment from the PC? 1000 segments 100 segments 1 segment 10 segments

10 segments

A device has been assigned the IPv6 address of 2001:0db8:cafe:4500:1000:00d8:0058:00ab/64. Which is the host identifier of the device? 2001:0db8:cafe:4500:1000:00d8:0058:00ab 00ab 2001:0db8:cafe:4500 1000:00d8:0058:00ab

1000:00d8:0058:00ab

What are the three ranges of IP addresses that are reserved for internal private use? (Choose three.) 64.100.0.0/14 192.168.0.0/16 192.31.7.0/24 172.16.0.0/12 10.0.0.0/8 127.16.0.0/12

192.168.0.0/16 172.16.0.0/12 10.0.0.0/8

What is the full decompressed form of the IPv6 address 2001:420:59:0:1::a/64? 2001:4200:5900:0:1:0:0:a000 2001:0420:0059:0000:0001:0000:000a 2001:0420:0059:0000:0001:000a 2001:0420:0059:0000:0001:0000:0000:000a 2001:420:59:0:1:0:0:a 2001:4200:5900:0000:1000:0000:0000:a000

2001:0420:0059:0000:0001:0000:0000:000a

Refer to the exhibit. A network security analyst is examining captured data using Wireshark. The captured frames indicate that a host is downloading malware from a server. Which source port is used by the host to request the download? 66 1514 6666 48598

48598

How many host addresses are available on the 192.168.10.128/26 network? 30 32 60 62 64

62

What are the two sizes (minimum and maximum) of an Ethernet frame? (Choose two.) 128 bytes 64 bytes 1024 bytes 56 bytes 1518 bytes

64 bytes, 1518 bytes

How is a DHCPDISCOVER transmitted on a network to reach a DHCP server? A DHCPDISCOVER message is sent with the broadcast IP address as the destination address. A DHCPDISCOVER message is sent with a multicast IP address that all DHCP servers listen to as the destination address. A DHCPDISCOVER message is sent with the IP address of the default gateway as the destination address. A DHCPDISCOVER message is sent with the IP address of the DHCP server as the destination address.

A DHCPDISCOVER message is sent with the broadcast IP address as the destination address.

What is the result of an ARP poisoning attack? Network clients are infected with a virus. Network clients experience a denial of service. Client memory buffers are overwhelmed. Client information is stolen.

Client information is stolen.

Which process failed if a computer cannot access the internet and received an IP address of 169.254.142.5? DNS IP HTTP DHCP

DHCP

What three application layer protocols are part of the TCP/IP protocol suite? (Choose three.) DHCP PPP FTP DNS NAT ARP

DHCP FTP DNS

A host PC is attempting to lease an address through DHCP. What message is sent by the server to let the client know it is able to use the provided IP information? DHCPDISCOVER DHCPOFFER DHCPREQUEST DHCPACK DHCPNACK

DHCPACK

What network service uses the WHOIS protocol? HTTPS DNS SMTP FTP

DNS

Which field in an IPv4 packet header will typically stay the same during its transmission? Flag Time-to-Live Packet Length Destination Address

Destination Address

A technician is configuring email on a mobile device. The user wants to be able to keep the original email on the server, organize it into folders, and synchronize the folders between the mobile device and the server. Which email protocol should the technician use? SMTP MIME POP3 IMAP

IMAP

What type of information is contained in an ARP table? domain name to IP address mappings switch ports associated with destination MAC addresses routes to reach destination networks IP address to MAC address mappings

IP address to MAC address mappings

Which statement describes a feature of the IP protocol? IP relies on Layer 2 protocols for transmission error control. MAC addresses are used during the IP packet encapsulation. IP relies on upper layer services to handle situations of missing or out-of-order packets. IP encapsulation is modified based on network media.

IP relies on upper layer services to handle situations of missing or out-of-order packets.

A user gets an IP address of 192.168.0.1 from the company network administrator. A friend of the user at a different company gets the same IP address on another PC. How can two PCs use the same IP address and still reach the Internet, send and receive email, and search the web? ISPs use Domain Name Service to change a user IP address into a public IP address that can be used on the Internet. Both users must be using the same Internet Service Provider. Both users must be on the same network. ISPs use Network Address Translation to change a user IP address into an address that can be used on the Internet.

ISPs use Network Address Translation to change a user IP address into an address that can be used on the Internet.

How does network scanning help assess operations security? It can detect open TCP ports on network systems. It can detect weak or blank passwords. It can simulate attacks from malicious sources. It can log abnormal activity.

It can detect open TCP ports on network systems.

What mechanism is used by a router to prevent a received IPv4 packet from traveling endlessly on a network? It checks the value of the TTL field and if it is 100, it discards the packet and sends a Destination Unreachable message to the source host. It decrements the value of the TTL field by 1 and if the result is 0, it discards the packet and sends a Time Exceeded message to the source host. It checks the value of the TTL field and if it is 0, it discards the packet and sends a Destination Unreachable message to the source host. It increments the value of the TTL field by 1 and if the result is 100, it discards the packet and sends a Parameter Problem message to the source host.

It decrements the value of the TTL field by 1 and if the result is 0, it discards the packet and sends a Time Exceeded message to the source host.

What is done to an IP packet before it is transmitted over the physical medium? It is tagged with information guaranteeing reliable delivery. It is segmented into smaller individual pieces. It is encapsulated in a Layer 2 frame. It is encapsulated into a TCP segment.

It is encapsulated in a Layer 2 frame.

Which two functions or operations are performed by the MAC sublayer? (Choose two.) It is responsible for Media Access Control. It performs the function of NIC driver software. It adds a header and trailer to form an OSI Layer 2 PDU. It handles communication between upper and lower layers. It adds control information to network protocol layer data.

It is responsible for Media Access Control. It adds a header and trailer to form an OSI Layer 2 PDU.

What action does a DHCPv4 client take if it receives more than one DHCPOFFER from multiple DHCP servers? It sends a DHCPNAK and begins the DHCP process over again. It accepts both DHCPOFFER messages and sends a DHCPACK. It discards both offers and sends a new DHCPDISCOVER. It sends a DHCPREQUEST that identifies which lease offer the client is accepting.

It sends a DHCPREQUEST that identifies which lease offer the client is accepting.

Match each characteristic to the appropriate email protocol. (Not all options are used.) POP, IMAP desirable for an ISP or large business mail is deleted as it is downloaded can be used to send and receive email downloads copies of email messages to the client requires a larger amount of disk space original messages must be manually deleted does not require a centralized backup solution

POP: does not require a centralized backup solution. mail is deleted as it is downloaded. desirable for an ISP or large business. IMAP: download copies of messages to be the client. original messages must be manually deleted. requires a larger a mount of disk space.

Refer to the exhibit. PC1 issues an ARP request because it needs to send a packet to PC3. In this scenario, what will happen next? RT1 will send an ARP reply with its own Fa0/1 MAC address. SW1 will send an ARP reply with its Fa0/1 MAC address. RT1 will send an ARP reply with the PC3 MAC address. RT1 will forward the ARP request to PC3. RT1 will send an ARP reply with its own Fa0/0 MAC address.

RT1 will send an ARP reply with its own Fa0/0 MAC address.

Which protocol is a client/server file sharing protocol and also a request/response protocol? FTP UDP TCP SMB

SMB

Match the characteristic to the protocol category. (Not all options are used.) TCP, UDP, Both window size checksum including IP addresses in the header best for VolP port number connectionless 3-way handshake

TCP: 3-wayhandshake window size UDP: connectionless best for VoIP Both UDP and TCP: Port number checksum

Match the application protocols to the correct transport protocols. TCP, UDP DHCP, FTP, HTTP, SMTP, TFTP

TCP: FTP, HTTP, SMTP. UDP: TFTP, DHCP.

An employee complains that a Windows PC cannot connect to the Internet. A network technician issues the ipconfig command on the PC and is shown an IP address of 169.254.10.3. Which two conclusions can be drawn? (Choose two.) The PC is configured to obtain an IP address automatically. The default gateway address is not configured. The DNS server address is misconfigured. The enterprise network is misconfigured for dynamic routing. The PC cannot contact a DHCP server.

The PC is configured to obtain an IP address automatically. The PC cannot contact a DHCP server.

Refer to the exhibit. This PC is unable to communicate with the host at 172.16.0.100. What information can be gathered from the displayed output? The target host is turned off. The communication fails after the default gateway. 172.16.0.100 is only a single hop away. This PC has the wrong subnet configured on its NIC

The communication fails after the default gateway.

A computer can access devices on the same network but cannot access devices on other networks. What is the probable cause of this problem? The computer has an invalid IP address. The cable is not connected properly to the NIC. The computer has an incorrect subnet mask. The computer has an invalid default gateway address.

The computer has an invalid default gateway address.

What is a function of the tracert command that differs from the ping command when they are used on a workstation? The tracert command is used to test the connectivity between two devices. The tracert command reaches the destination faster. The tracert command shows the information of routers in the path. The tracert command sends one ICMP message to each hop in the path.

The tracert command shows the information of routers in the path.

Which value, that is contained in an IPv4 header field, is decremented by each router that receives a packet? Time-to-Live Fragment Offset Header Length Differentiated Services

Time-to-Live

Which statement describes the ping and tracert commands? Both ping and tracert can show results in a graphical display. Ping shows whether the transmission is successful; tracert does not. Tracert shows each hop, while ping shows a destination reply only. Tracert uses IP addresses; ping does not.

Tracert shows each hop, while ping shows a destination reply only.

5. A cybersecurity analyst believes an attacker is spoofing the MAC address of the default gateway to perform a man-in-the-middle attack. Which command should the analyst use to view the MAC address a host is using to reach the default gateway? route print ipconfig /all netstat -r arp -a

arp -a

A large corporation has modified its network to allow users to access network resources from their personal laptops and smart phones. Which networking trend does this describe? cloud computing video conferencing online collaboration bring your own device

bring your own device

Match the HTTP status code group to the type of message generated by the HTTP server. client error, redirectionsuccess, informational, server error 1xx 2xx 3xx 4xx 5xx

client error: ~~> 4xx redirection: ~~> 3xx success: ~~> 2xx informational: ~~> 1xx server error: ~~> 5xx

Which networking model is being used when an author uploads one chapter document to a file server of a book publisher? peer-to-peer client/server master-slave point-to-point

client/server

What is a basic characteristic of the IP protocol? connectionless media dependent user data segmentation reliable end-to-end delivery

connectionless

At which OSI layer is a source MAC address added to a PDU during the encapsulation process? application layer presentation layer data link layer transport layer

data link layer

What addresses are mapped by ARP? destination IPv4 address to the source MAC address destination MAC address to a destination IPv4 address destination MAC address to the source IPv4 address destination IPv4 address to the destination host name

destination MAC address to a destination IPv4 address

Match each statement about FTP communications to the connection it describes. (Not all options are used.) first connection established, second connection established from client to server via TCP port 20 from server to client via TCP port 21 from server to client via TCP port 20 used for actual file transfer from client to server via TCP port 21 used for commands and replies

first connection established from client to server via TCP port 21 used for commands and replies second connection established from client to server via TCP port 20 used for actual file transfer

Match each IPv4 address to the appropriate address category. (Not all options are used.) network address, host address, broadcast address 192.168.100.161/25 192.168.1.191/26 10.10.10.128/25 224.10 0.254/24 203.0.113.100/24 172.110.12 64/28 10.0.0.159/27

host address 192.168.100.161/25 203.0.113,100/24 network address 10.10.10.128/25 172.110.12.64/28 broadcast address 192 168.1.191/26 10 0 0 159/27

Which two parts are components of an IPv4 address? (Choose two.) logical portion host portion broadcast portion subnet portion network portion physical portion

host portion network portion

A user issues a ping 192.168.250.103 command and receives a response that includes a code of 1 . What does this code represent? port unreachable network unreachable protocol unreachable host unreachable

host unreachable

A user issues a ping 192.168.250.103 command and receives a response that includes a code of 1. What does this code represent? network unreachable port unreachable protocol unreachable host unreachable

host unreachable

What are three responsibilities of the transport layer? (Choose three.) identifying the applications and services on the client and server that should handle transmitted data conducting error detection of the contents in frames meeting the reliability requirements of applications, if any directing packets towards the destination network formatting data into a compatible form for receipt by the destination devices multiplexing multiple communication streams from many users or applications on the same network

identifying the applications and services on the client and server that should handle transmitted data meeting the reliability requirements of applications, if any multiplexing multiple communication streams from many users or applications on the same network

Refer to the exhibit. From the perspective of users behind the NAT router, what type of NAT address is 209.165.201.1? inside global inside local outside global outside local

inside global

Match each description to its corresponding term. (Not all options are used.) message encoding, message encapsulation, message sizing the process of determining when to begin sending messages on a network the process of converting information from one format into another acceptable for transmission the process of placing one message format inside another message format the process of unpacking one message format from another message format the process of breaking up a long message into individual pieces before being sent over the network

message encoding : the process of converting information from one format into another acceptable for transmission message sizing : the process of breaking up a long message into individual pieces before being sent over the network message encapsulation : the process of placing one message format inside another message format (Empty) : the process of determining when to begin sending messages on a network (Empty) : the process of unpacking one message format from another message format

Which type of transmission is used to transmit a single video stream such as a web-based video conference to a select number of users? anycast broadcast unicast multicast

multicast

Which two commands can be used on a Windows host to display the routing table? (Choose two.) netstat -r show ip route netstat -s route print tracert

netstat -r route print

When a wireless network in a small office is being set up, which type of IP addressing is typically used on the networked devices? private public network wireless

private

A user issues a ping 2001:db8:FACE:39::10 command and receives a response that includes a code of 2 . What does this code represent? host unreachable port unreachable network unreachable protocol unreachable

protocol unreachable

Which two operations are provided by TCP but not by UDP? (Choose two.) retransmitting any unacknowledged data acknowledging received data reconstructing data in the order received identifying the applications tracking individual conversations

retransmitting any unacknowledged data acknowledging received data

Which two ICMP messages are used by both IPv4 and IPv6 protocols? (Choose two.)​ route redirection neighbor solicitation router solicitation router advertisement protocol unreachable

route redirection, protocol unreachable

Refer to the exhibit. A cybersecurity analyst is viewing captured packets forwarded on switch S1. Which device has the MAC address 50:6a:03:96:71:22? PC-A router DG DSN server router ISP web server

router DG

Which method would an IPv6-enabled host using SLAAC employ to learn the address of the default gateway? router advertisement messages received from the link router router solicitation messages received from the link router neighbor advertisement messages received from link neighbors neighbor solicitation messages sent to link neighbors

router advertisement messages received from the link router

Which PDU is processed when a host computer is de-encapsulating a message at the transport layer of the TCP/IP model? segment packet frame bits

segment

What message informs IPv6 enabled interfaces to use stateful DHCPv6 for obtaining an IPv6 address? the ICMPv6 Router Solicitation the DHCPv6 Advertise message the DHCPv6 Reply message the ICMPv6 Router Advertisement

the ICMPv6 Router Advertisement

Refer to the exhibit. PC1 attempts to connect to File_server1 and sends an ARP request to obtain a destination MAC address. Which MAC address will PC1 receive in the ARP reply? the MAC address of the G0/0 interface on R2 the MAC address of S2 the MAC address of S1 the MAC address of File_server1 the MAC address of the G0/0 interface on R1

the MAC address of the G0/0 interface on R1

A user sends an HTTP request to a web server on a remote network. During encapsulation for this request, what information is added to the address field of a frame to indicate the destination? the network domain of the destination host the MAC address of the destination host the IP address of the default gateway the MAC address of the default gateway

the MAC address of the default gateway

What type of information is contained in a DNS MX record? the IP address of an authoritative name server the FQDN of the alias used to identify a service the domain name mapped to mail exchange servers the IP address for an FQDN entry

the domain name mapped to mail exchange servers

What is the purpose of ICMP messages? to inform routers about network topology changes to ensure the delivery of an IP packet to provide feedback of IP packet transmissions to monitor the process of a domain name to IP address resolution

to provide feedback of IP packet transmissions

What is the function of the HTTP GET message? to upload content to a web server from a web client to retrieve client email from an email server using TCP port 110 to request an HTML page from a web server to send error information from a web server to a web client

to request an HTML page from a web server

A user who is unable to connect to the file server contacts the help desk. The helpdesk technician asks the user to ping the IP address of the default gateway that is configured on the workstation. What is the purpose for this ping command? to resolve the domain name of the file server to its IP address to request that gateway forward the connection request to the file server to obtain a dynamic IP address from the server to test that the host has the capability to reach hosts on other networks

to test that the host has the capability to reach hosts on other networks

What is a description of a DNS zone transfer? transferring blocks of DNS data from a DNS server to another server the action taken when a DNS server sends a query on behalf of a DNS resolver forwarding a request from a DNS server in a subdomain to an authoritative source finding an address match and transferring the numbered address from a DNS server to the original requesting client

transferring blocks of DNS data from a DNS server to another server

A user is executing a tracert to a remote device. At what point would a router, which is in the path to the destination device, stop forwarding the packet? when the router receives an ICMP Time Exceeded message when the RTT value reaches zero when the values of both the Echo Request and Echo Reply messages reach zero when the host responds with an ICMP Echo Reply message when the value in the TTL field reaches zero

when the value in the TTL field reaches zero