Name:
Class:
Date:
Page 1
1. No matter what medium connects computers on network-copper wires, fiber-optic cables, or a wireless setup;
the same protocol must be running on all computers if communication is going to function correctly.
a.
True
b.
False
ANSWER:
True
2. In the TCP/IP stack, the Transport layer includes network services and client software.
a.
True
b.
False
ANSWER:
False
3. To retrieve e-mail from a mail server, you most likely access port 119.
a.
True
b.
False
ANSWER:
False
4. An octal digit can be represented with only three bits because the largest digit in octal is seven.
a.
True
b.
False
ANSWER:
True
5. A hex number is written with two characters, each representing a byte.
a.
True
b.
False
ANSWER:
False
6. What protocol is the most widely used and allows all computers on a network to communicate and function
correctly?
a.
IPX/SPX
b.
ATM
c.
TCP/IP
d.
NetBIOS
ANSWER:
c
7. What does the acronym TCP represent?
a.
Transfer Control Protocol
b.
Transmission Control Protocol
c.
Transfer Congestion Protocol
d.
The Control Protocol
ANSWER:
b
8. In the TCP/IP stack, what layer is concerned with physically moving bits across the network’s medium?
Name:
Class:
Date:
Page 2
a.
Internet
b.
Network
c.
Transport
d.
Application
ANSWER:
b
9. In the TCP/IP stack, what layer is concerned with controlling the flow of data, sequencing packets for
reassembly, and encapsulating the segment with a TCP or UDP header?
a.
Internet
b.
Network
c.
Transport
d.
Application
ANSWER:
c
10. What layer, in the TCP/IP stack, do applications and protocols, such as HTTP and Telnet, operate?
a.
Internet
b.
Network
c.
Transport
d.
Application
ANSWER:
d
11. What layer, in the TCP/IP stack, is responsible for routing a packet to a destination address?
a.
Internet
b.
Network
c.
Transport
d.
Application
ANSWER:
a
12. What layer protocols operate as the front end to the lower-layer protocols in the TCP/IP stack?
a.
Internet
b.
Network
c.
Transport
d.
Application
ANSWER:
d
13. What type of network attack relies on guessing a TCP header’s initial sequence number, or ISN?
a.
ARP spoofing
b.
Session hijacking
c.
DoS
d.
Man-in-the-middle
ANSWER:
b
Name:
Class:
Date:
Page 3
14. What is the logical component of a TCP connection that can be assigned to a process that requires network
connectivity?
a.
ISN
b.
IP
c.
port
d.
SYN
ANSWER:
c
15. What port does the Hypertext Transfer Protocol, or HTTP service use?
a.
25
b.
53
c.
69
d.
80
ANSWER:
d
16. What port does the Simple Mail Transfer Protocol, or SMTP service use?
a.
25
b.
53
c.
69
d.
80
ANSWER:
a
17. What port does the Trivial File Transfer Protocol, or TFTP service use?
a.
25
b.
53
c.
69
d.
80
ANSWER:
c
18. What port does the Domain Name System, or DNS service use?
a.
25
b.
53
c.
69
d.
80
ANSWER:
b
19. What port is typically reserved and utilized by the Secure Hypertext Transfer Protocol to create a secure
connection to a Web server?
a.
443
b.
80
c.
434
Name:
Class:
Date:
Page 4
d.
408
ANSWER:
a
20. What layer, in the TCP/IP protocol stack, is responsible for encapsulating data into segments?
a.
Transport layer
b.
Internet layer
c.
Application layer
d.
Network layer
ANSWER:
a
21. What connection-oriented protocol is utilized by the Transport layer?
a.
HTTPS
b.
UDP
c.
TCP
d.
SSL
ANSWER:
c
22. What TCP flag is responsible for synchronizing the beginning of a session?
a.
URG flag
b.
ACK flag
c.
PSH flag
d.
SYN flag
ANSWER:
d
23. What TCP flag is responsible for delivering data directly and immediately to an application?
a.
ACK flag
b.
PSH flag
c.
RST flag
d.
SYN flag
ANSWER:
b
24. What 32-bit number tracks packets received by a node and allows the reassembling of large packets that
have been broken up into smaller packets?
a.
IP
b.
TCP
c.
UDP
d.
ISN
ANSWER:
d
25. What TCP/IP protocol is fast, unreliable, and operates at the Transport layer?
a.
TCP
b.
UDP
Name:
Class:
Date:
Page 5
c.
FTP
d.
POP3
ANSWER:
b
26. What TCP/IP protocol is used to send messages related to network operations and can be used to
troubleshoot network connectivity?
a.
ICMP
b.
UDP
c.
TCP
d.
ARP
ANSWER:
a
27. What IP address is used as a loopback address and is not a valid IP address that can be assigned to a
network?
a.
128 address
b.
127 address
c.
224 address
d.
255 address
ANSWER:
b
28. What IPv4 address class has the IP address 221.1.2.3?
a.
Class A
b.
Class B
c.
Class C
d.
Class D
ANSWER:
c
29. How many host computers can be assigned a valid IPv4 address when using a CIDR /24 prefix?
a.
254
b.
512
c.
65,000
d.
16 million
ANSWER:
a
30. What is the decimal equivalent of the binary number 11000001?
a.
128
b.
164
c.
193
d.
201
ANSWER:
c
31. What is the binary numbering system and why was it chosen by computer engineers to be used in
Name:
Class:
Date:
computers?
ANSWER:
The binary system uses the number two as its base. Each binary digit, or bit, is represented by a one or zero.
Bits are usually grouped by eight because a byte contains eight bits. Computer engineers chose this numbering
system because logic chips make binary decisions based on true or false, on or off, and so forth. With eight
bits, a computer programmer can represent 256 different colors for a video card, for example. (Two to the
power of eight, or 28, equals 256.) Therefore, black can be represented by 00000000, white by 11111111, and
so on.
32. Why should a security professional fully understand the TCP header components?
ANSWER:
As a security professional, you should know the critical components of a TCP header; hackers leverage
knowledge of these TCP header components. You need to understand these components before learning how
they can be abused. Then, and only then, can you check whether your network has vulnerabilities in these
areas. Remember, to protect a network, you need to know the basic methods of hacking into networks.
33. What steps are involved in TCP’s “three-way handshake”?
ANSWER:
1. Host A sends a TCP packet with the SYN flag set (that is, a SYN packet) to Host B.
2. After receiving the packet, Host B sends Host A its own SYN packet with an ACK flag (a SYN-ACK
packet) set.
3. In response to the SYN-ACK packet from Host B, Host A sends Host B a TCP packet with the ACK flag
set (an ACK packet).
34. What are the critical components of a TCP header?
ANSWER:
The critical components of a TCP header are TCP flags, the initial sequence number (ISN), and source and
destination port numbers. Hackers abuse many of these TCP header components; for example, when port
scanning,many hackers use the method of sending a packet with a SYN-ACK flag set even though a SYN
packet was not sent first.
35. What is the Domain Name System (DNS) used for?
ANSWER:
Most networks require a DNS server so that users can connect to Web sites with URLs instead of IP addresses.
When a user enters a URL, such as www.yahoo.com, the DNS server resolves the name to an IP address. The
DNS server might be internal to the company, or each computer might be configured to point to the IP address
of a DNS server that’s serviced by the company’s ISP.
36. Often technical personnel who are not familiar with security techniques think that restricting access to ports
on a router or firewall can protect a network from attack. Why is this solution ?
ANSWER:
When a firewall prevents any traffic from entering or exiting a network on any well-known port, such as port
80, you have indeed closed a vulnerable port to access from hackers. However, you have also closed the door
to Internet access for your users, which probably isn’t acceptable to your company. The tricky (and almost
impossible) part for security personnel is attempting to keep out the bad guys while allowing the good guys to
work and use the Internet.
37. UDP is an unreliable data delivery protocol. Why is UDP widely used on the Internet?
ANSWER:
UDP is a widely used protocol on the Internet because of its speed. UDP doesn’t need to verify whether the
receiver is listening or ready to accept the packets. The sender doesn’t care-it just sends, even if the receiver
isn’t ready to accept the packet.
38. What is ICMP used for?
ANSWER:
Internet Control Message Protocol (ICMP) is used to send messages that relate to network operations. For
Name:
Class:
Date:
45. Fast but unreliable delivery protocol that operates at the Transport layer
example, if a packet cannot reach its destination, you might see the “Destination Unreachable” error. ICMP
makes it possible for network professionals to troubleshoot network connectivity problems using the Ping
command and to track the route a packet traverses from a source IP address to a destination IP address with
the Traceroute command.
39. What is a Class B IP address?
ANSWER:
These address are evenly divided between a two-octet network and a two-octet host address, allowing more
than 65,000 host computers per Class B network address. Large organizations and Internet service providers
are often assigned Class B Internet addresses. Class B addresses have the format
“network.network.node.node”.
40. How many host addresses can be assigned with a subnet mask of 255.255.255.0? Explain how you
calculated the result.
ANSWER:
With a default subnet mask of 255.255.255.0, 254 host addresses can be assigned to each segment. You use
the formula 2x – 2 for this calculation. For this example, x equals 8 because there are eight bits in the fourth
octet:
28 – 2 = 254
You must subtract two in the formula because the network portion and host portion of an IP address can’t
contain all ones or all zeros.
Match each item with a statement below.
a.
ICMP
b.
network session hijacking
c.
TCP flag
d.
port
e.
UDP
f.
connection-oriented protocol
g.
ISN
h.
connectionless protocol
i.
protocol
j.
three-way handshake
41. Protocol used to send messages related to network operations
ANSWER:
a
42. Attack that relies on guessing the ISNs of TCP packets
ANSWER:
b
43. Occupies one bit of the TCP segment and can be set to 0 (off) or 1 (on)
ANSWER:
c
44. A logical component of a TCP connection that can be assigned to a process that requires network
connectivity
ANSWER:
d
Name:
Class:
Date:
Page 8
ANSWER:
e
46. A protocol where the sender doesn’t send any data to the destination node until the destination node
acknowledges that it’s listening to the sender
ANSWER:
f
47. A 32-bit number that tracks packets received by a node and allows reassembling large packets that have
been broken up into smaller packets
ANSWER:
g
48. A protocol that does not need to verify whether the receiver is listening or ready to accept the packets
ANSWER:
h
49. A common language used so computers can communicate with one another
ANSWER:
i
50. A TCP/IP process that is used to establish a connection before data is sent
ANSWER:
j