Quiz
Network Intrusion Mock
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (30)
1How many bits in a byte
- A8
- B16
- C4
- D2
2The Maximum decimal value that can be represented in a byte is:
- A255
- B256
- C128
- D127
3What is a Mac Address
- AThe hardware address assigned to the network card/ interface
- BThe IP address of the host
- CThe embedded IP protocol
- Dthe embedded protocol port address
4What does the Address Resolution Protocol (ARP) do?
- Aresolves a known IP address with a MAC address
- Bresolves a known MAC address with an IP address
- Cresolves a known network interface name with a hardware address
- Dresolves a known MAC address with a vendor type
5A server port of UDP or TCP 53 is typically associated with what service
- ADNS
- BHTTP
- CFTP
- DRPC
6How does a host that has sent TCP data know that the data was received?
- Aa TCP acknowledge is sent from the receiver
- BAn ICMP echo reply is sent from the receiver
- CAn incremented TCP sequence number is sent from the receiver
- DA SYN/ ACK is sent from the receiver
7Which of the following best characterises TCP versus UDP (In most cases)?
- ATCP is slower more reliable and requires more overhead
- BTCP is less reliable and quicker
- CTCP is faster, more reliable and more streamlined
- DTCP is less reliable and connection oriented
8Which of the following best characterises ICMP
- AIt is used to communicate error conditions
- BIt is used for connection oriented communications
- CIt is used for reliable communications
- DIt is used for client / server communications
9A TCP flag of RESET indicates:
- AAn intention to abort a TCP connection
- BAn intention to open a new TCP connection
- CAn intention to gracefully close and acknowledge the termination of both sides of the connection
- DAn intention to close the connection after all in transit data is received
10TCP typically begins a session with:
- AThe three way handshake of client to server with SYN set, the server response of SYN/ ACK, and the client acknowledgement of ACK
- BThe three way handshake of server to client with SYN set, the client response of SYN/ ACK, and the client acknowledgement of ACK
- CTCP is not connection oriented so no handshake is required
- DA handshake consisting of the client request to the server with SYN set and a server response of a SYN
11A value of 6 in the protocol field of IP header represents:
- AAn embedded protocol of TCP follows the IP header
- BAn embedded protocol of ICMP follows the IP header
- CAn embedded protocol of UDP follows the IP header
- DAn embedded protocol of TCP precedes the IP header
12Some of the fields in an IPv4 packet that are used by the receiver to reassemble associated fragments are:
- AThe IP identification field to identify all associated fragments, the more Fragment bit to indicate whether or not fragments following the current one, and the fragment offset to indicate where a particular fragment falls in relation to other fragments
- BThe IP identification field to identify all associated fragments, the more fragment bit to indicate whether or not more fragments follows the current one, and the time to live to expire missing fragments
- CThe IP identification field to identify all associated fragments, the more fragment bit to indicate whether or not more fragments follow the current one, and the TCP checksum to discard corrupted fragments
- DThe IP identification field to identify all associated fragments, the more fragment bit to indicate whether or not more fragments follow the current one, the IP options to route all fragments through the same intermediate routers
13The Time to Live (TTL) field/ value found in the IP header are used to
- AExpire IP packets in transit when the TTL value becomes 0
- BMake sure all associated fragments arrive with a given window of time
- CExpire TCP segments in transit when TTL value becomes 0
- DFlush DNS records from cache when the TTL value is exceeded
14What is the purpose of the IP checksum?
- ATo make sure that data in the IP header is not corrupted in transit
- BTo make sure that data in the entire packet is not corrupted in transit
- CTo make sure that data in the Ethernet frame is not corrupted in transit
- DTo make sure that data in the embedded protocol is not corrupted in transit
15What is a common use of DNS?
- AResolution of a host name to an IP address
- BResolution of a MAC address to an IP address
- CResolution of an IP address to a MAC address
- DResolution of a port number to a port service
16What _________ is a typical response from a host that receives a UDP packet on a non listening port?
- AAn ICMP port unreachable message to the sender
- BA UDP reset flag set to the sender
- CA UDP FIN flag set to the sender
- DA UDP port unreachable message to the sender
17Suppose a SYN packet is spoofed using a real IP address and then sent to a server that responds with a SYN/ ACK to the actual IP address.
- AWith a reset since it did not send the SYN
- BWith an acknowledgement since it did not send the SYN
- CWith a duplicate SYN since it did not send the SYN
- DWith a TTL of 0 since it did not send the SYN
18What are some differences between IPv4 and IPv6?
- AThe IPv6 addresses are 4 times larger and some of the fields/ functionality previously in the IPv4 header are now in IPv6 extension headers
- BThe are the same except the IP version number in the IP header is different
- CIPv6 allows more than 255 embedded protocols
- DIPv6 packets are automatically encrypted while IPv4 are not
19Suppose you had a tool that allowed you to craft an ICMP echo request over Ethernet, but you needed to tell the tool how to compose the request layer by layer in the proper order. How would you order the different layers?
- AEthernet header, followed by IP header, followed by ICMP header, followed by optional ICMP data
- BIP header, followed by Ethernet header, followed by ICMP header, followed by optional ICMP data
- CThe order is unimportant - Craft them in any order and the TCP/ IP stack will properly assemble them before sending
- DThe Ethernet header must be first, and the order of the IP header, ICMP header, and data is unimportant since the TCP/ IP stack will properly order assemble them before sending
20What is the function of a router?
- AIt determines the entire route for an IP packet from source to destination host
- BIt uses ARP to route the packet to the next hop
- CIt uses DNS to route the packet to the next hop
- DIt attempts to move the IP packet one hop closer to the destination
21The IP protocol field identifies:
- AThe destination port of the packet
- BThe source port of the packet
- CThe embedded service port of the packet
- DThe embedded protocol of the packet
22A function of the TCP sequence number is:
- ATo associate a chronological number with each TCP segment, allowing the receiver to properly reorder the individual segments of data
- BTo inform the sender of the next expected chronological sequence number of the TCP segment
- CTo reassemble IP fragments
- DTo increment the hop count on all TCP segments
23Suppose you want to ping a new known IPv4 address on your network. What must happen first?
- AThe IP address must be resolved to a host name using DNS
- BAn ICMP request must be sent to the router to locate the IP address
- CAn ARP request must be issued by your host to discover the MAC address associated with the IP address
- DNothing needs to occur; the host talk over IP simply using IP addresses
24When an IPv4 packet traverses a router what are some of the tasks the router must perform?
- ADecrement the time to live value by 1 and recompute the IP checksum
- BDecrement the time to live value by 1 and recompute the IP and embedded protocol checksums
- CDecrement the time to live value by 1 without changing any checksum
- DDecrement the time to live value by 1 and recompute the embedded protocol checksums
25How do routers handle packets that are too large to pass through because of frame size limitation?
- ARouters drop packets that are too large
- BRouter bounce packets back to the sender to be resized
- CRouters adjust their MTUs to accommodate the oversized packet
- DRouters break packets into smaller pieces called fragements
26An ICMPv6 header is indicated by a Next Header value of
- A60
- B54
- C58
- D22
27Compressing the IPv6 address 1080:0:0:0:8:880:200C:417A results in which of the following?
- A1080::8:8:::2::C:417A
- B1080::8:800:200C:417A
- C1080::8:8::::20:C:417A
- D:1080::8:800:200C:417A
28An IP address combined with a TCP/ IP port number is called which of the following?
- Anetwork address
- Bsocket
- Cscript
- Dport ID
29Which of the following malware is designed to replicate itself?
- Aworm
- Bvirus
- CTrojan horse
- DSYN food
30The DHCP renewal process uses four types of DHCP packets in the following order:
- ARequest, Acknowledgement, Discover, Offer
- BRequest, Offer, Discover, Acknowledgement
- CDiscover, Request, Offer, Acknowledgement
- DDiscover, Offer, Request, Acknowledgement
Information
- Description
- Quiz on Network Intrusion Mock, created by X- RayS on 15/12/2014.
- Author
- X- RayS
- Language
- English
- Views
- 7
- Rating
- No ratings yet Rate this quiz