Networking Concepts

538 questions

Question 421Question

A network administrator is configuring network firewall policies and establishing service baselines. Match each protocol on the left with its default port number, transport layer protocol, and primary operational function on the right.

Click a left item, then click its matching right item

Items

RADIUS
POP3S
TFTP
SMB

Matches

Show answer & explanation

Answer

RADIUS matches Centralized network access authentication and authorization over UDP port 1812; POP3S matches Encrypted retrieval of stored user email messages from a mail server over TCP port 995; TFTP matches Unauthenticated, connectionless transfer of device configuration files over UDP port 69; SMB matches Direct network file sharing and printer access without NetBIOS over TCP port 445.
Each protocol is accurately matched with its standard port number, transport layer, and operational function: RADIUS uses UDP 1812 for authentication, POP3S uses TCP 995 for encrypted email retrieval, TFTP uses UDP 69 for simple file transfers, and SMB uses TCP 445 for direct network file sharing.

Step-by-Step Solution

1
Identify the protocol characteristics of RADIUS.
RADIUS functions as an AAA server protocol operating on UDP port 1812 for authentication/authorization.
Centralized authentication for network logins uses UDP 1812.
2
Identify the protocol characteristics of POP3S.
POP3S is the secured SSL/TLS version of POP3, which communicates over TCP port 995.
Encrypted email download protocol uses TCP 995.
3
Identify the protocol characteristics of TFTP.
TFTP provides low-overhead file delivery over UDP port 69 without requiring user authentication.
Firmware and configuration backups use connectionless UDP 69.
4
Identify the protocol characteristics of SMB.
SMB operates over TCP port 445 for direct local network file and print sharing.
Modern Windows file sharing communicates directly via TCP 445.

Key Concept

Standard Network Protocols, Default Port Numbers, and Transport Layer Services
Question 422Question

A network engineer is configuring an interface on a core router with the IP address 10.88.140.165/2610.88.140.165/26. What is the broadcast address for this IPv4 subnet?

Show answer & explanation

Answer: 10.88.140.191

Answer

The broadcast address for the IPv4 subnet is 10.88.140.191.
With a /26 prefix length (subnet mask 255.255.255.192), subnets increment in blocks of 64 addresses. The IP 10.88.140.165 resides within the network range 10.88.140.128 through 10.88.140.191. The last address in this range, 10.88.140.191, is the broadcast address.

Step-by-Step Solution

1
Determine the subnet block size from the CIDR prefix.
A /26 mask equals 255.255.255.192. Subtracting 192 from 256 gives a block size of 64 IP addresses per subnet.
Calculating block size establishes the increment step between subnets.
2
Locate the network ID for IP address 10.88.140.165.
Subnet boundaries in the 4th octet increase by multiples of 64: 0, 64, 128, 192. The address .165 falls into the 10.88.140.128 subnet.
The network ID identifies the beginning of the subnet block.
3
Calculate the broadcast address.
The broadcast address is one less than the next network boundary: 128 + 64 - 1 = 191, yielding 10.88.140.191.
The broadcast address is always the final IP address in a subnet block.

Key Concept

IPv4 Subnet Boundaries and Broadcast Address Calculation
Estimated Time:1m 0s
Question 423Question

During a security audit, a network analyst identifies unencrypted directory query traffic originating from an internal application server to a domain controller over TCP port 389. To secure these identity lookup requests with TLS encryption, which protocol and default port combination must be permitted through the internal firewall?

Show answer & explanation

Answer: TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)

Answer

TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)
Lightweight Directory Access Protocol over SSL/TLS (LDAPS) operates over TCP port 636 to provide encrypted communication for directory lookups and authentication services, replacing the unencrypted LDAP service on TCP port 389.

Step-by-Step Solution

1
Identify the unencrypted service and port referenced in the scenario
TCP port 389 corresponds to unencrypted Lightweight Directory Access Protocol (LDAP).
Recognizing standard service port baselines is necessary to determine the appropriate secure alternative.
2
Determine the secure encrypted equivalent for directory service communication
LDAP over SSL/TLS (LDAPS) encrypts directory queries using TCP port 636.
LDAPS secures authentication and directory traffic using transport layer encryption.
3
Select the correct firewall rule permission entry
Permit TCP port 636 to allow secure LDAPS traffic.
Firewall ACLs must explicitly allow TCP 636 for encrypted LDAP communications to function.

Key Concept

Secure Directory Services Port Mapping (LDAP vs LDAPS)
Estimated Time:1m 0s
Question 424Question

A network administrator is provisioning network core services across multiple VLANs in a enterprise campus network. Centralized infrastructure services, including DHCP and DNS, reside on VLAN 10 (10.10.10.0/2410.10.10.0/24), whereas user client workstations reside on VLAN 20 (10.10.20.0/2410.10.20.0/24) and VLAN 30 (10.10.30.0/2410.10.30.0/24). Which TWO of the following configuration steps must be implemented to ensure client hosts on remote VLANs can automatically acquire network configuration settings and properly resolve internal hostnames to dual-stack IPv6 resources? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Configure an IP helper address on the router interfaces serving VLAN 20 and VLAN 30 pointing to the IP address of the central DHCP server; Create AAAA records on the internal DNS server mapping fully qualified domain names to their assigned 128-bit IPv6 addresses

Answer

The correct configurations are to set up an IP helper address on the router interfaces serving the client VLANs (VLAN 20 and VLAN 30) pointing to the central DHCP server IP address, and to create AAAA records on the DNS server for IPv6 hostname resolution.
Configuring an IP helper address on client-facing gateway router interfaces enables DHCP relay functionality, allowing broadcast DHCP discovery requests from client VLANs to be forwarded as unicast packets to the central DHCP server. Furthermore, DNS resolution of domain names to IPv6 addresses requires AAAA records.

Step-by-Step Solution

1
Analyze client DHCP dynamic addressing across Layer 3 boundaries
Identify that client DHCP Discover messages are Layer 2 broadcasts that do not cross router interfaces without a relay mechanism
Configuring an IP helper address on the router interfaces for VLAN 20 and VLAN 30 allows the router to encapsulate broadcast DHCP messages into unicast UDP packets forwarded to the central DHCP server on VLAN 10.
2
Determine appropriate DNS record types for dual-stack IPv6 hostname resolution
Identify AAAA records as the standard DNS record for mapping hostnames to 128-bit IPv6 addresses
AAAA records handle IPv6 name-to-address resolution, whereas A records handle IPv4, and CNAME records map aliases to canonical domain names.

Key Concept

IP Addressing Services (DHCP Relay Agent and DNS Record Types)
Estimated Time:2m 0s
Question 425Question

A network engineer is provisioning subnets from the assigned address block 172.28.64.0/21172.28.64.0/21 using Variable Length Subnet Masking (VLSM). The subnets must be allocated sequentially starting from the lowest available IP address in the block to satisfy the following departmental requirements in descending order of size:

- Development: 480480 usable host IP addresses
- Sales: 120120 usable host IP addresses
- Support: 6060 usable host IP addresses
- Management: 1414 usable host IP addresses

After provisioning these four subnets with the smallest valid prefix length for each requirement, what is the decimal value of the fourth octet of the last usable host IP address in the Management department's subnet?

Show answer & explanation

Answer: 206

Answer

The fourth octet of the last usable host IP address in the Management subnet is 206.
Sequentially allocating VLSM blocks from 172.28.64.0/21 yields: Development (172.28.64.0/23), Sales (172.28.66.0/25), Support (172.28.66.128/26), and Management (172.28.66.192/28). The broadcast address for Management is 172.28.66.207, making the last usable host IP address 172.28.66.206, which has a fourth octet of 206.

Step-by-Step Solution

1
Determine prefix length and address range for Development department (480 usable hosts)
Requires a /23 block (512 total IPs, 510 usable hosts). Range: 172.28.64.0/23 (172.28.64.0 to 172.28.65.255).
2^8 - 2 = 254 (insufficient), 2^9 - 2 = 510 (sufficient). 32 - 9 = /23 prefix length.
2
Determine prefix length and address range for Sales department (120 usable hosts)
Requires a /25 block (128 total IPs, 126 usable hosts). Starts at 172.28.66.0/25. Range: 172.28.66.0 to 172.28.66.127.
2^7 - 2 = 126 (sufficient for 120 hosts). 32 - 7 = /25 prefix length.
3
Determine prefix length and address range for Support department (60 usable hosts)
Requires a /26 block (64 total IPs, 62 usable hosts). Starts at 172.28.66.128/26. Range: 172.28.66.128 to 172.28.66.191.
2^6 - 2 = 62 (sufficient for 60 hosts). 32 - 6 = /26 prefix length.
4
Determine prefix length and address range for Management department (14 usable hosts)
Requires a /28 block (16 total IPs, 14 usable hosts). Starts at 172.28.66.192/28. Range: 172.28.66.192 to 172.28.66.207.
2^4 - 2 = 14 (exact requirement). 32 - 4 = /28 prefix length.
5
Extract the fourth octet of the last usable host address in Management's subnet
Broadcast address is 172.28.66.207, so the last usable host IP address is 172.28.66.206. Fourth octet is 206.
The last usable IP address in a subnet is always the broadcast address minus 1.

Key Concept

Variable Length Subnet Masking (VLSM) allocation and host calculation
Question 426Question

A network technician needs to document an interface IPv6 address using standard shorthand syntax. Which of the following is the correct representation of the address 2001:0db8:0000:0000:0000:0000:0000:0001 after applying leading zero suppression and zero compression rules?

Show answer & explanation

Answer: 2001:db8::1

Answer

The correctly compressed IPv6 address is 2001:db8::1.
The address 2001:db8::1 correctly follows both IPv6 address abbreviation rules: removing leading zeros from the second hextet ('0db8' -> 'db8') and compressing the five consecutive all-zero hextets into a single '::'.

Step-by-Step Solution

1
Omit leading zeros in each 16-bit hextet.
The second hextet '0db8' becomes 'db8', and '0000' hextets become '0'.
Leading zeros within any 4-digit hexadecimal group can be dropped.
2
Identify the contiguous sequence of all-zero hextets.
There are 5 consecutive '0000' hextets between '0db8' and '0001'.
Contiguous blocks of zeros can be compressed to shorten the address.
3
Replace the contiguous block of zero hextets with a single double colon (::).
The address compresses to 2001:db8::1.
The double colon (::) represents a contiguous string of zero hextets and can only be used once per address to maintain uncompressed length integrity.

Key Concept

IPv6 Address Representation and Zero Compression Rules
Question 427Question

A network administrator is deploying a high-frequency sensor telemetry service that transmits small status updates every 10 milliseconds. The system prioritizes minimal transmission overhead and low latency over guaranteed packet delivery, as occasional lost datagrams do not impact real-time monitoring. Which transport layer protocol best aligns with these application requirements?

Show answer & explanation

Answer: User Datagram Protocol (UDP), because its lightweight 8-byte header minimizes overhead and it operates without connection setup or retransmission delays.

Answer

User Datagram Protocol (UDP), because its lightweight 8-byte header minimizes overhead and it operates without connection setup or retransmission delays.
The User Datagram Protocol (UDP) operates as a connectionless transport layer protocol. It does not establish a formal session via handshakes, nor does it guarantee delivery or retransmit lost packets. Its small 8-byte header drastically reduces overhead compared to TCP's 20-byte minimum header, making UDP the ideal choice for low-latency, real-time telemetry where transmission speed is critical and minor packet loss is acceptable.

Step-by-Step Solution

1
Analyze application performance requirements.
The application requires minimal latency, low header overhead, high transmission frequency (10 ms), and can tolerate packet loss without requiring retransmissions.
Identifying these key constraints dictates whether connection-oriented (TCP) or connectionless (UDP) transport is appropriate.
2
Compare transport layer protocol characteristics.
TCP is connection-oriented, requiring a three-way handshake and offering reliable delivery via acknowledgments and retransmissions at the cost of higher latency and a 20-byte minimum header. UDP is connectionless, offers no delivery guarantees or handshake overhead, and has an 8-byte header.
Evaluating protocol overhead and session establishment mechanisms determines overall suitability.
3
Select the optimal protocol.
UDP is the ideal choice for real-time, loss-tolerant telemetry traffic.
UDP avoids connection setup delays and retransmission latency while maintaining minimal header overhead.

Key Concept

Connection-Oriented (TCP) vs Connectionless (UDP) Transport Protocols
Estimated Time:1m 30s
Question 428Question

A network technician is monitoring traffic on a local network segment and observes data organized into frames containing physical MAC addresses for node-to-node delivery. At which layer of the OSI model does this hardware addressing and framing occur?

Show answer & explanation

Answer: Data Link layer

Answer

Data Link layer
The Data Link layer (Layer 2) is specifically responsible for node-to-node transfer on the same local network segment. It packages network layer data into frames and uses hardware (MAC) addresses to direct traffic between physical network interfaces.

Step-by-Step Solution

1
Identify the Protocol Data Unit (PDU) and addressing type described in the scenario.
The scenario mentions data organized into 'frames' using physical 'MAC addresses'.
Different OSI layers use specific PDUs and address types.
2
Map frames and MAC addresses to the corresponding OSI layer.
Frames and MAC (Media Access Control) addressing operate specifically at Layer 2.
Layer 2 (Data Link layer) encapsulates network layer packets into frames for transmission across a local physical segment using MAC addresses.

Key Concept

OSI Data Link Layer Functions and PDUs
Estimated Time:45s
Question 429Question

A network engineer is auditing IPv6 static route configurations on a core dual-stack router. During the review, the engineer identifies several shorthand IPv6 address representations. Which of the following IPv6 address representations is syntactically invalid?

Show answer & explanation

Answer: 2001:db8::ac10::1

Answer

The address '2001:db8::ac10::1' is syntactically invalid because it applies the double-colon (::) shortcut twice in a single address.
The IPv6 address '2001:db8::ac10::1' violates IPv6 syntax rules because the double colon (::) is present twice. Because '::' represents an indeterminate sequence of contiguous zero blocks needed to complete an 8-block (128-bit) structure, using it twice introduces structural ambiguity.

Step-by-Step Solution

1
Analyze the rules for IPv6 shorthand zero-compression.
IPv6 addresses consist of eight 16-bit hexadecimal blocks. Contiguous blocks of zeros can be omitted and replaced with a double colon (::).
Shorthand syntax reduces long IPv6 strings for human readability.
2
Evaluate the usage restriction of the double colon (::).
The double colon (::) shortcut may be used only ONCE within a single IPv6 address.
If used multiple times, it creates ambiguity regarding how many zero blocks belong to each double colon.
3
Examine each candidate address for syntax compliance.
'2001:db8::ac10::1' contains two instances of '::', making it impossible to determine whether it expands to 2001:0db8:0000:0000:ac10:0000:0000:0001 or 2001:0db8:0000:ac10:0000:0000:0000:0001.
Multiple double-colon references violate RFC 4291 IPv6 addressing architecture standard.

Key Concept

IPv6 Zero Compression Syntax Rules
Estimated Time:1m 30s
Question 430Question

A network technician is configuring a local web server to host internal documentation. The application requires guaranteed delivery of data, sequence tracking, and acknowledgement of received packets. Which Transport layer protocol provides this connection-oriented service?

Show answer & explanation

Answer: Transmission Control Protocol (TCP)

Answer

Transmission Control Protocol (TCP) is the correct Transport layer protocol because it provides connection-oriented communication with guaranteed delivery, sequencing, and packet acknowledgements.
Transmission Control Protocol (TCP) is designed specifically for connection-oriented operations requiring high reliability. It uses a three-way handshake to establish connections and employs acknowledgements, sequence numbers, and retransmissions to ensure complete, ordered data delivery.

Step-by-Step Solution

1
Identify the key application requirements from the scenario.
The requirements are guaranteed delivery, sequence tracking, and acknowledgement of received packets at the Transport layer.
These specific features define connection-oriented transport mechanisms.
2
Compare Transport layer protocols against the required features.
TCP establishes a session (three-way handshake) and uses acknowledgements and sequence numbers to ensure reliable, connection-oriented data transfer. UDP does not provide these features.
Matching requirement specifications to standard protocol definitions identifies the correct Transport layer choice.

Key Concept

Connection-Oriented vs Connectionless Transport Protocols
Question 431Question

Match each OSI model layer to its primary network responsibility.

Click a left item, then click its matching right item

Items

Physical Layer (Layer 1)
Data Link Layer (Layer 2)
Network Layer (Layer 3)
Transport Layer (Layer 4)

Matches

Show answer & explanation

Answer

Physical Layer matches raw bit stream transmission; Data Link Layer matches node-to-node framing and MAC addressing; Network Layer matches logical IP addressing and packet routing; Transport Layer matches end-to-end communication management and flow control.
Each layer of the OSI model performs a distinct set of tasks: Physical Layer transfers raw electrical/optical bits; Data Link Layer organizes bits into frames and uses physical MAC addresses; Network Layer handles logical IP addressing and inter-network routing; Transport Layer governs end-to-end transport, port allocation, and flow control.

Step-by-Step Solution

1
Identify the function of Layer 1.
The Physical Layer deals directly with bit transmission across cables or signals.
Hardware standards and physical media operate at Layer 1.
2
Identify the function of Layer 2.
The Data Link Layer packages data into frames and uses physical hardware addresses (MAC).
Switches and network interface cards operate at Layer 2 for local segment communications.
3
Identify the function of Layer 3.
The Network Layer uses IP addressing to route data packets across network boundaries.
Routers operate at Layer 3 to perform inter-network routing.
4
Identify the function of Layer 4.
The Transport Layer manages end-to-end data transfer, segmentation, and connection reliability.
TCP and UDP operate at Layer 4 to manage session data delivery.

Key Concept

OSI Model Layers and Functions
Estimated Time:1m 0s
Question 432Question

A network administrator is configuring a real-time voice streaming service for an office network. The application requires minimal protocol overhead and low latency, and it can tolerate minor packet loss without requiring retransmissions. Which transport layer protocol is best suited for this application?

Show answer & explanation

Answer: User Datagram Protocol (UDP)

Answer

User Datagram Protocol (UDP) is the correct choice because it is a connectionless transport layer protocol optimized for speed and low latency.
User Datagram Protocol (UDP) is a connectionless Layer 4 protocol. It operates without establishing a session, tracking sequence numbers, or retransmitting missing packets, providing the lightweight, low-latency delivery required for real-time voice traffic.

Step-by-Step Solution

1
Analyze the application requirements described in the scenario.
The application prioritizes minimal latency and low header overhead over guaranteed delivery, accepting occasional dropped packets.
Real-time communication traffic such as Voice over IP (VoIP) degrades if delayed by packet retransmissions.
2
Select the protocol operating at the transport layer that meets these criteria.
User Datagram Protocol (UDP) provides connectionless, unacknowledged delivery without session establishment overhead.
Connectionless protocols eliminate handshaking delays and retransmission buffers, ensuring fast transmission.

Key Concept

Connectionless vs Connection-Oriented Transport Protocols
Question 433Question

Match each transport protocol mechanism on the left with its corresponding connection-oriented or connectionless operational characteristic on the right.

Click a left item, then click its matching right item

Items

Three-way handshake establishment
Best-effort delivery without acknowledgements
Sliding window flow control
Fixed 8-byte header overhead

Matches

Show answer & explanation

Answer

Three-way handshake establishment pairs with initializing session state and sequence numbers before transfer. Best-effort delivery without acknowledgements pairs with transmitting datagrams independently without verifying reception. Sliding window flow control pairs with dynamically adjusting transmission volume based on receiver buffer capacity. Fixed 8-byte header overhead pairs with minimizing processing latency by omitting connection tracking and ordering fields.
Connection-oriented protocols (TCP) establish session state, manage flow control via sliding windows, and use sequence numbers to guarantee delivery. Connectionless protocols (UDP) avoid session management, rely on lightweight headers, and send unacknowledged datagrams to minimize latency.

Step-by-Step Solution

1
Analyze connection setup requirements.
Handshaking explicitly creates state between endpoints, defining connection-oriented operation.
Connection-oriented protocols require mutual agreement and parameter synchronization prior to data transport.
2
Evaluate delivery assurance mechanisms.
Unacknowledged delivery aligns with connectionless protocols.
Connectionless protocols drop recovery mechanisms to reduce latency and processing overhead.
3
Identify traffic management features.
Sliding windows are used for TCP flow control.
Receiver buffer feedback allows connection-oriented systems to prevent congestion at the target endpoint.
4
Examine protocol header structures.
An 8-byte header structure corresponds to UDP datagrams.
Omitting sequence numbers, window sizing, and flag fields reduces UDP header overhead significantly.

Key Concept

Connection-Oriented vs Connectionless Protocols
Question 434Question

Match each network operation scenario to the specific OSI model layer responsible for performing that function.

Click a left item, then click its matching right item

Items

Negotiating segment flow control, TCP windowing, and port multiplexing
Managing RPC dialogue control structures and session checkpoint synchronization
Formatting character encoding translation, data compression, and TLS payload encryption
Determining optimal path selection across remote networks and handling packet fragmentation

Matches

Show answer & explanation

Answer

Segment flow control and port multiplexing match Layer 4 (Transport Layer). RPC dialogue and checkpoint synchronization match Layer 5 (Session Layer). Character encoding and payload encryption match Layer 6 (Presentation Layer). Path selection and packet fragmentation match Layer 3 (Network Layer).
Each operation correctly maps to its distinct OSI layer: Layer 4 provides transport functions like TCP flow control and port multiplexing; Layer 5 maintains session dialogues and RPC checkpoints; Layer 6 formats data syntax, compression, and payload encryption; Layer 3 handles logical path determination and packet fragmentation across subnets.

Step-by-Step Solution

1
Analyze the operational scope of TCP windowing and port multiplexing.
Identify that end-to-end transport control and port addressing belong to Layer 4 (Transport Layer).
Layer 4 manages host-to-host communication integrity and service multiplexing.
2
Analyze dialogue management and checkpointing operations.
Identify that managing active application sessions and Remote Procedure Call (RPC) states belongs to Layer 5 (Session Layer).
Layer 5 controls session establishment, maintenance, and communication dialogue tracking.
3
Analyze data translation, compression, and encryption processes.
Identify that data syntax formatting and cryptographic presentation functions belong to Layer 6 (Presentation Layer).
Layer 6 ensures data sent from the application layer of one system can be interpreted by the application layer of another.
4
Analyze inter-network path selection and packet fragmentation.
Identify that logical IP routing and MTU-based packet fragmentation belong to Layer 3 (Network Layer).
Layer 3 routes packets across interconnected network boundaries.

Key Concept

OSI Model functional boundary separation between network routing (Layer 3), transport integrity (Layer 4), session state control (Layer 5), and data syntax presentation (Layer 6).
Estimated Time:1m 30s
Question 435Question

A senior network engineer is analyzing edge-case operational characteristics of transport-layer protocols during abnormal network state events. Match each connection-oriented or connectionless protocol scenario on the left with its corresponding transport-layer mechanism or operational consequence on the right.

Click a left item, then click its matching right item

Items

TCP sequence number space wrap-around on a high-throughput 10 Gbps link
UDP socket buffer saturation during an unthrottled traffic burst
TCP selective acknowledgment (SACK) operation during isolated segment loss
UDP session availability monitoring across an idle, stateful firewall

Matches

Show answer & explanation

Answer

TCP sequence number wrap-around matches PAWS timestamp validation; UDP socket saturation matches silent datagram discarding without flow control; TCP SACK operation matches retransmitting only missing gaps while buffering out-of-order segments; UDP session monitoring matches reliance on application-layer heartbeats.
TCP maintains explicit connection state, sequence numbers, and dynamic windowing. Under high data rates, sequence numbers wrap around, requiring PAWS (TCP Timestamps) for validation. TCP SACK optimizes recovery by specifying exact missing byte ranges. Conversely, UDP is stateless: socket overflow results in silent drops without transport-layer backpressure, and maintaining active firewall translation rules requires application-level heartbeats.

Step-by-Step Solution

1
Analyze TCP high-throughput sequence space constraints
Identified that sequence number wrap-around at 10 Gbps requires PAWS (Protection Against Wrapped Sequence Numbers) timestamp extensions.
Standard 32-bit TCP sequence numbers repeat quickly at high speeds, necessitating PAWS to prevent data corruption from stale segments.
2
Evaluate UDP buffer saturation behavior
Determined that UDP lacks flow control mechanisms like sliding windows.
Without transport-level backpressure signals, saturated UDP buffers must silently discard extra incoming datagrams.
3
Evaluate TCP selective retransmission mechanisms
Matched TCP SACK to selective gap retransmission.
SACK enables fine-grained retransmissions of missing gaps while storing out-of-order blocks that arrived intact.
4
Evaluate connectionless state maintenance requirements
Matched UDP firewall tracking to application-layer heartbeat generation.
Since UDP creates no connection establishment or maintenance packets at Layer 4, applications must implement keepalives to prevent stateful NAT/firewall session timeouts.

Key Concept

Connection-Oriented (TCP) state, sequencing, and windowing management versus Connectionless (UDP) stateless datagram processing
Estimated Time:3m 0s
Question 436Question

A network administrator is documenting IPv6 address assignments across corporate router interfaces. Which of the following IPv6 addresses represents an INVALID shorthand notation because it violates IPv6 address compression rules?

Show answer & explanation

Answer: 2001:db8::100:1::5

Answer

The address '2001:db8::100:1::5' is invalid because it contains two instances of the double colon (::).
The notation '2001:db8::100:1::5' is invalid because standard IPv6 compression rules prohibit using the double colon (::) more than once within a single address. Using it twice makes it mathematically impossible to determine how many zero fields belong to each double colon when expanding the address back to its full 128-bit form.

Step-by-Step Solution

1
Examine the rules for IPv6 shorthand address compression according to standard networking specifications (RFC 5952).
Identify that leading zeroes in any 16-bit block can be omitted, and contiguous blocks of all zeroes can be replaced by a double colon (::).
Understanding IPv6 syntax rules is essential for identifying valid and invalid representations.
2
Evaluate the restriction on using the double colon (::) operator.
Confirm that a double colon (::) can only appear ONCE in any single IPv6 address.
If used multiple times, routers and software cannot determine how many 16-bit zero blocks each double colon represents, making the address ambiguous.
3
Analyze each given option against the single double-colon rule.
The string '2001:db8::100:1::5' contains two double colons, rendering it syntactically invalid.
Multiple double colons prevent reliable expansion to the full 128-bit IPv6 address.

Key Concept

IPv6 Address Compression Syntax Rules
Question 437Question

A network security analyst is reviewing a packet capture from a custom enterprise application. The analyst notes that during initial connection setup, the client and server negotiate cryptographic cipher suites, compress data payloads to optimize bandwidth, and convert binary structures into standard ASCII syntax before passing the payload down the protocol stack. Which layer of the OSI reference model is directly responsible for executing these data translation, formatting, and encryption functions?

Show answer & explanation

Answer: Presentation Layer (Layer 6)

Answer

Presentation Layer (Layer 6)
The Presentation Layer (Layer 6) is specifically designed to handle data representation, syntax translation (such as ASCII/EBCDIC conversion), data compression, and cryptographic encryption/decryption before passing data down to lower OSI layers.

Step-by-Step Solution

1
Analyze the functional responsibilities described in the scenario.
Identified functions: cryptographic cipher negotiation (encryption/decryption), payload data compression, and binary-to-ASCII syntax translation.
Determining the primary function helps pinpoint the specific OSI model layer responsible.
2
Map identified functions to OSI model layers.
Data syntax translation, data compression, and payload encryption are core duties of Layer 6 (Presentation Layer).
Layer 6 acts as a data translator for the application network stack, ensuring data sent from the application layer of one system can be read by the application layer of another.
3
Differentiate Layer 6 from adjacent layers (Layer 5, Layer 4, and Layer 7).
Layer 5 manages session dialogues, Layer 4 handles segmentation/flow control, and Layer 7 interfaces directly with end-user application software.
Eliminating adjacent layers ensures accurate layer boundary identification under exam scenario conditions.

Key Concept

OSI Model Layer 6 (Presentation Layer) Functions: Encryption, Compression, and Syntax Translation
Estimated Time:1m 30s
Question 438Question

An organization deploys thousands of remote edge devices that transmit brief, 64-byte heartbeat status updates every second across a high-latency, limited-bandwidth satellite network. The network administrator observes that stateful firewall session tables at the central hub are constantly saturating due to session tracking overhead, while high link latency causes excessive control packet accumulation. To resolve these operational constraints without upgrading hardware, the administrator plans to adjust the application transport layer architecture. Which of the following transport protocol selections and technical justifications best resolves both issues?

Show answer & explanation

Answer: Implement a connectionless protocol (UDP), because it eliminates stateful session maintenance on firewalls while reducing per-packet overhead by omitting sequence numbers, flow control, and acknowledgment header fields.

Answer

Implement a connectionless protocol (UDP), because it eliminates stateful session maintenance on firewalls while reducing per-packet overhead by omitting sequence numbers, flow control, and acknowledgment header fields.
The option advocating for a connectionless protocol (UDP) is correct because UDP operates without connection state establishment (no SYN/ACK handshake or connection state tables), preventing firewall table exhaustion. Furthermore, UDP's minimal 8-byte header overhead compared to TCP's 20-byte base header maximizes payload efficiency for small 64-byte heartbeats across bandwidth-constrained links.

Step-by-Step Solution

1
Analyze the operational constraints presented in the scenario.
Identified two primary issues: firewall session table exhaustion due to state tracking of thousands of devices, and bandwidth/latency inefficiency caused by transport control overhead.
The transport protocol choice must address both session state overhead and header size constraints.
2
Evaluate the architectural characteristics of connection-oriented vs. connectionless protocols.
Connection-oriented protocols (TCP) require state tracking (SYN/ACK handshakes, sequence numbers, session cleanup), maintaining open states on stateful firewalls and using a minimum 20-byte header. Connectionless protocols (UDP) are stateless and use a lightweight 8-byte header without handshake or teardown overhead.
Stateless transmission prevents firewall session table saturation and conserves satellite bandwidth on frequent 64-byte heartbeat transmissions.
3
Match the requirement with the correct transport choice and technical justification.
UDP satisfies all requirements by being connectionless and lightweight.
UDP avoids session maintenance and reduces header overhead from 20+ bytes to 8 bytes.

Key Concept

Connection-Oriented vs Connectionless Transport Protocols
Question 439Question

A network technician is reviewing transport layer protocols to determine their functional differences. Which of the following characteristics are specific to connection-oriented protocols such as TCP, rather than connectionless protocols such as UDP? (SELECT TWO)

Select all that apply

Show answer & explanation

Answer: Guaranteed data delivery through acknowledgments and sequence tracking; Connection establishment via a formal three-way handshake prior to data transmission

Answer

The correct characteristics of connection-oriented protocols are guaranteed data delivery through acknowledgments and sequence tracking, as well as connection establishment via a formal three-way handshake prior to data transmission.
Connection-oriented protocols like TCP guarantee data delivery by acknowledging received segments and retransmitting lost packets. Furthermore, they establish an explicit logical connection before transmitting payload data using a three-way handshake (SYN, SYN-ACK, ACK).

Step-by-Step Solution

1
Identify the protocol operational model
Connection-oriented protocols establish a dedicated session state and verify receipt of data.
Understanding the fundamental goal of TCP versus UDP identifies key feature differences.
2
Evaluate protocol mechanisms
TCP uses a SYN, SYN-ACK, ACK three-way handshake to initiate sessions and relies on sequence numbers/acknowledgments for guaranteed delivery.
These mechanisms explicitly define connection-oriented operations.

Key Concept

Connection-Oriented vs Connectionless Transport Protocols
Question 440Question

A network administrator is conducting a packet capture analysis to troubleshoot performance variations between a legacy database synchronization utility and a newly deployed real-time voice conferencing application. The analysis reveals distinct transport-layer operational characteristics between the two streams. Which of the following statements accurately contrast connection-oriented and connectionless transport-layer protocols in this environment? (SELECT TWO)

Select all that apply

Show answer & explanation

Answer: TCP relies on a three-way handshake (SYN, SYN-ACK, ACK) to establish session state and synchronize sequence numbers before payload transmission begins, whereas UDP transmits datagrams immediately without prior connection negotiation.; TCP uses dynamic sliding window mechanisms to perform flow control and manage sender transmission rates based on receiver buffer availability, while UDP provides no native flow control mechanisms.

Answer

The statement regarding TCP utilizing a three-way handshake prior to payload transfer while UDP transmits immediately without setup, and the statement regarding TCP providing dynamic flow control via sliding windows while UDP provides no native flow control, are both correct.
Connection-oriented protocols like TCP establish an explicit state between endpoints via a three-way handshake prior to data exchange and use dynamic sliding windowing for flow control. Connectionless protocols like UDP send datagrams immediately without establishing state or offering native flow control.

Step-by-Step Solution

1
Evaluate session establishment mechanisms for TCP and UDP.
TCP requires a three-way handshake (SYN, SYN-ACK, ACK) to synchronize sequence numbers and establish state before data transfer. UDP transmits datagrams immediately without negotiation.
Connection-oriented protocols build endpoint state prior to data exchange, while connectionless protocols do not.
2
Evaluate reliability and header structure mechanisms.
TCP headers include 32-bit sequence numbers and acknowledgment numbers to reorder segments and request retransmissions. UDP headers lack sequence/ACK fields.
Connectionless protocols prioritize low overhead over guaranteed delivery.
3
Evaluate flow control and traffic management mechanisms.
TCP implements sliding window flow control to adjust transmission rates according to receiver capacity. UDP has no built-in flow control.
TCP maintains receiver feedback loops to manage throughput and prevent buffer exhaustion.

Key Concept

Connection-Oriented vs Connectionless Transport Protocols (TCP vs UDP)
Estimated Time:2m 0s
PreviousPage 22 / 27Next
Networking Concepts Practice Questions — CompTIA Network+ — Page 22 | Examkin