CS240 Exam 2

The following is a valid method for creating an image:

-Issuing interactive commands-Using a dockerfile-Importing from a tarball file

A small firm wants to use port address translation (PAT) to enable the office computers to access the Internet. The computers use internal private addresses in the range of 192.68.1.100 through 192.68.1.200. The shared public IP address is 172.124.10.10. Computers on this network can send data to and from the internet using the shared public IP address and a _____?

172.122.40.41:1055192.168.1.18:1055

All of the following are true of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP), except: A) UDP's primary service is packet routing. B) UDP provides best effort with no guarantee of delivery. C) TCP provides a reliable end-to-end communication channel for IP packets. D) TCP guarantees the delivery of each IP packet via a TCP envelope.

A

Containers provide all of the following advantages except:

A better UI for application code

What is a wireless access point?

A hardware device that allows WiFi devices to connect to a wired network. It acts as a bridge between the wireless and wired network

When a wireless access point point transmits data, all computers within range will receive it. What wired network device that we studied transmits data in this manner?

A hub is a wired network device that transmits data to all connected devices, similar to how a wireless access point broadcasts data to all computers within range

Carl is a network engineer. He is hardening a server to make it less vulnerable to attacks. What is the most secure method of handling open ports?

Apply the deny-all principle and enable those ports that are needed

What allows the Internet Assigned Numbers Authority (IANA) to segment any address space to define larger or smaller networks as needed, giving far more flexibility to allocate networks of virtually any size without wasting large blocks of IP addresses?

Classless Inter-Domain Routing (CIDR)

Which application architecture leverages workstation processing, balances network I/O, and separates processing functions from data?

Client/server

In which application architecture was the application server (appServer) introduced?

Cloud computing/ N-tier

Which of the following is true about Docker containers:

Containers optimize the software supply chain

All of the following are valid states for a Docker process except _____________. running deleted paused exited

Deleted

Which Application Layer threat occurs when an attacker consumes the resources on a target computer for things it was not intended to be doing, thus preventing normal use of network resources for legitimate purposes?

Denial of service (DoS)

The Docker Development Platform automates all of the following except: creating code shipping code testing code deploying code

Deploying code

By default, your Docker environment is configured to pull images from _____________.

Docker hub

Which of the following converts fully qualified domain names (FQDNs) into numeric IP addresses or IP addresses into FQDNs?

Domain Name System (DNS)

True or False? A Network Layer address and a Media Access Control (MAC) address are the same thing.

False

True or False? In half-duplex mode, both ends of a connection can communicate simultaneously.

False

Which of the following is an OSI Layer 4 (Transport Layer) service that manages the pacing of data transmissions to avoid collisions and congestion?

Flow control Fragmentation / reassembly

Which of the following is an OSI Layer 3 (Network Layer) protocol suite that authenticates and encrypts each IP packet to provide secure IP communication?

Internet Protocol Security (IPSec)

Which of the following is an OSI Layer 3 (Network Layer) protocol that queries the status of devices or services and reports on those that are not available?

Internet control message protocol (ICMP)

Docker is often used to containerize legacy applications (previously created/released applications). This is done for the following reasons, except: Question options: the return on investment is huge it takes no time or effort to do this yields more than 50% savings in maintenance costs yeilds up to 90% reduction in time between deployments of new releases

It takes no time or effort to do this

Which OSI layer is 802.11

Layer 2, data link

Which OSI layer is 802.3 in?

Layer 2, data link

Which OSI layer is ICMP in?

Layer 3, network

Which OSI layer is IPv4 in?

Layer 3, network

Which OSI layer is TCP in?

Layer 4, transport

Which OSI layer is PAP in?

Layer 5, session

Alpine is a Docker image based on the ___________ operating system.

Linux

Daniel is planning to switch his network from IPv4 to IPv6. He currently runs Address Resolution Protocol (ARP) to manage local Media Access Control (MAC) addresses. When he moves to IPv6, what protocol must he use instead of ARP?

Neighbor discovery protocol (NDP)

The Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) operate at the:

OSI Transport Layer

The Application Layer of the OSI model:

Serves as the primary interface for application software to interact with networks

The Session Layer of the OSI model:

Sets up, manages, and terminates connections between applications on source and destination computers

Docker containers have revolutionized the __________________________.

Software supply chain

The Linux command to see all users who are currently logged in is _____________.

THIS IS WRONG

What is the one common goal of the protocols WEP, WPA, WPA2, WPA3? What are the two main functions they perform to achieve their goal?

The common goal is to secure wireless communications. They achieve this by providing encryption (confidentiality) and authentication (ensuring the identity of the parties involved)

Which Application Layer threat is typically disguised as a useful program to trick the user into downloading it?

Trojan Horse

True or False? A dual stack operating system supports both IPv4 and IPv6 using two separate network stacks for IP.

True

True or False? A port is a number that tells a server what type of service the client is requesting.

True

True or False? An instance of a service listening for traffic on a specific port is called a socket.

True

True or False? Cloud computing makes it possible for organizations of any size to lease data center infrastructure and implement an N-tier architecture.

True

True or False? The Presentation Layer of the OSI model converts data into standard formats, such as American Standard Code for Information Interchange (ASCII), for application program use.

True

True or False? The Session Layer (OSI Layer 5) is the first layer that connects packets together into conversations.

True

True or False? The term "3-tier architecture" refers to the separate tiers represented by the client, appServer, and database server.

True

True or False? The user interface is where front-end software interfaces with a computer user.

True

True or False? When a web browser initiates a connection, it sends an HTTP request to a web server.

True

What is a WLAN

Wireless Local Area Network, is a type of network that allows devices to connect and communicate wirelessly within a limited geographic area

The layer of the OSI model that interacts with a human rather than another technological element is:

application

For the command: $docker container run -d --name helloThere alpine /bin/sh -c "while true; do prinf 'hello there.../n'; sleep 5; done" -d tells docker to run the container as a _________________________.

background process

Each image starts with a _____________________layer. Some examples are: Alpine, Ubuntu, and CentOS

base

The Linux command to display the contents of a file to the screen is _____________.

cat

The Linux command to go back to the parent directory is ____________________.

cd

The Linux command used to change directory is _______________.

cd

Images are stored in repositories on the Docker ___________________ .

hub

The Docker ___________________ is a public registry that anyone can use to store images.

hub

The layers of a container image are ______________________________.

immutable (layer cannot ever be changed)

A container has lots of associated data that characterizes its behavior, this is called its metadata. To obtain the metadata for a container use the _______________ command.

inspect

The command $docker container ls will ____________________.

list all running containers on the host system

The Linux command used to create a new directory (folder) is __________.

mkdir

For the command: $docker container run -d --name helloThere alpine /bin/sh -c "while true; do prinf 'hello there.../n'; sleep 5; done" --name is used to ___________________.

name the process

The Linux OS is compatible with the editor _________________.

nano, vi, and emacs

The Presentation Layer of the OSI model:

on the sending computer, is responsible for formatting and coding high level data that comes from applications into a form that is acceptable for transmitting on the network

Each virtual machine requires it's own _______________________.

operating system

Containers reduce the complexity of the software supply chain by _______________________________.

packaging software the same way, regardless of the OS distributing software the same way, regardless of the setup testing software the same way, regardless of the platform

The command to upload an image to a registry so it can shared with others, is docker image _______________.

push

The Linux command used to delete a file is ________________.

rm

The Linux command to delete a directory is _____________.

rmdir

If a Docker container is stopped, it can be restarted using the command _____________________________.

start

The Linux command to get the tree for the current directory is _______________.

tree .

A container name must be ______________.

unique

The following is an example of custom image for a _________________________.

web application

The Linux OS is basically a ____________________________.

file system

To ship a custom image, it must be assigned a _______________________________.

globally unique name

True or False? IP supports both connectionless and connection-oriented upper layer protocols.

True

True or False? IPv4 addresses are written as four separate 8-bit numbers separated by periods or dots.

True

True or False? IPv6 addresses are expressed as eight groups of four hexadecimal digits with each group separated by colons.

True

True or False? Placing nodes that communicate frequently in the same subnetwork can reduce the overhead required to route packets between the nodes.

True

True or False? The OSI Network Layer provides network IP addressing for packets.

True

True or False? The OSI Transport Layer provides flow control, fragmentation/reassembly, error control, and acknowledgment of delivery.

True

True or False? When the Time To Live (TTL) value in an IP packet header reaches zero, the current router drops the packet.

True

Which of the following is a hierarchical naming system that allows organizations to associate host names with IP address name spaces?

Domain name systems (DNS)

Which of the following is an OSI Layer 4 (Transport Layer) service that ensures the source and destination computers work together to detect when packets do not arrive within a reasonable time period, and then retransmit missing packets?

Error control

Which OSI layer is SSL in?

Layer 6, presentation

Which OSI layer is DHCP in?

Layer 7, application

Which OSI layer is DNS in?

Layer 7, application

Which OSI layer is FTP in?

Layer 7, application

Which OSI layer is HTTP in?

Layer 7, application

Which OSI layer is SMTP in?

Layer 7, application

The Linux Operating System is _____________.

Open source, stable, and secure

In the 1990's, the computer industry shifted from the use of mainframes to ________________.

PC's

A mobile client station uses two main scanning techniques to find an access point sort can be a wireless network. What is the difference between passive scanning and active scanning?

Passive scanning involves listening for beacon frames sent by access points, while active scanning involves the client station sending probe requests to find available access points

What maps internal IP addresses to public or external IP addresses?

Port address translation (PAT)

Maria is a network analyst for an enterprise. She is creating guidelines for network personnel to apply to business issues that may need a new software application to resolve. Which of the following is the best overall approach?

Understand the business problem, identify a business solution, and then identify a technical solution

The Docker ______________ is the primary way that Docker users interact with Docker.

client

Images are templates from which _____________________ are created.

containers

Docker containers are assigned IDs that are created using SHA-256. SHA-256 is all of the following except _________________. a hash function used to create unique IDs irreversible and secure easy to hack

easy to hack