Networking Concepts

538 soru

Soru 221Soru

A host system prepares to send data over a network connection using the standard OSI protocol stack. Place the following processing steps in the correct order, starting from higher-layer data preparation down to physical transmission over the wire.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct encapsulation order flows top-down: Presentation Layer formatting/encryption, Transport Layer port segmenting, Network Layer IP packet routing, Data Link Layer MAC/FCS framing, and Physical Layer bit transmission.
During outbound transmission, data undergoes top-down encapsulation through the OSI reference model: Layer 6 (Presentation) formats and encrypts data, Layer 4 (Transport) appends port headers, Layer 3 (Network) appends IP headers, Layer 2 (Data Link) appends MAC headers and FCS trailers, and Layer 1 (Physical) converts bits into signals on the physical wire.

Adım Adım Çözüm

1
Identify higher-layer data processing (Layer 6)
Formatting, encoding, and encryption occur at the Presentation Layer first.
Data must be properly formatted before transport sessions and encapsulation begin.
2
Identify transport segment processing (Layer 4)
Port numbers are attached to create segments.
Transport Layer handles end-to-end communication pathways and service port identification.
3
Identify logical addressing encapsulation (Layer 3)
Logical IP headers are attached to form packets.
Network Layer adds IP routing information for cross-network path selection.
4
Identify local framing and error detection (Layer 2)
MAC addresses and FCS trailers are added to create frames.
Data Link Layer formats data for transmission across the physical local link.
5
Identify physical signal conversion (Layer 1)
Binary bits are converted to physical signals.
Physical Layer handles the actual hardware signal transmission.

Anahtar Kavram

OSI Model Encapsulation Sequence
Soru 222Soru

A network technician is configuring dynamic network services for a newly created VLAN across a corporate router. The network services server resides on a different physical subnet. Which TWO configurations or parameters are required on the local router interface to ensure client computers on the new VLAN can successfully obtain IP addresses dynamically? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An IP helper / DHCP relay address pointing to the remote DHCP server's IP address; A active DHCP scope matching the new subnet configured on the central DHCP server

Cevap

The two required elements are configuring an IP helper/DHCP relay address on the local router interface pointing to the remote server, and ensuring a valid DHCP scope matching the new subnet exists on the central server.
DHCP client discovery relies on broadcast packets which do not pass through routers. Configuring an IP helper/relay on the router forwards these requests as unicast traffic to the server. Furthermore, the server requires a configured scope for the client's subnet to hand out valid IP addresses.

Adım Adım Çözüm

1
Identify the barrier for DHCP traffic across subnets
DHCP Discover packets are broadcast (255.255.255.255) and dropped by default at Layer 3 interfaces.
Routers block broadcast frames from traversing subnets.
2
Determine the necessary router relay mechanism
Configuring an IP helper/relay agent transforms broadcast requests into unicast packets directed to the DHCP server.
This allows remote clients to communicate with a centralized DHCP server.
3
Determine the necessary server-side configuration
The server must possess an active IP scope corresponding to the client subnet.
Without a matching scope, the DHCP server cannot allocate an appropriate IP address for that network segment.

Anahtar Kavram

DHCP Relay and Scope Configuration
Tahmini Süre:1m 0s
Soru 223Soru

Match each enterprise network deployment scenario to its corresponding network classification or topology architecture.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Connecting multiple geographically dispersed regional data centers across different metropolitan areas using software-defined overlay tunnels over public Internet transport.
Interconnecting high-speed storage arrays and server clusters within a localized facility using Fiber Channel over Ethernet (FCoE) for block-level storage access.
Linking multiple corporate buildings owned by a single organization across a 5-mile contiguous corporate park over dedicated private fiber links.
Structuring a two-tier data center network fabric where every access/leaf switch connects directly to every aggregation/spine switch to ensure deterministic low latency for east-west traffic.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct matches pair multi-region software-defined connectivity with SD-WAN, block-level storage consolidation with SAN, contiguous multi-building enterprise fiber links with CAN, and two-tier leaf-to-spine interconnects with Spine-and-Leaf topology.
Each scenario maps precisely to its classification: SD-WAN handles geographically separated sites over public internet overlays; SAN provides dedicated block-level storage transport; CAN links contiguous enterprise buildings on private land; and Spine-and-Leaf provides uniform latency across datacenter switches.

Adım Adım Çözüm

1
Analyze the geographical boundary and transport ownership of each scenario.
Identify multi-metropolitan public transport connection as SD-WAN and contiguous private multi-building property as CAN.
Geographic extent and circuit ownership differentiate wide area overlay technologies from campus networks.
2
Evaluate data transport requirements and specialized protocol usage.
Classify localized block-level storage traffic utilizing FCoE as a Storage Area Network (SAN).
SANs isolate high-throughput storage traffic from standard local area network user data.
3
Examine non-blocking internal switch fabric interconnect structures.
Classify the two-tier architecture linking all leaf switches to all spine switches as Spine-and-Leaf topology.
Spine-and-Leaf replaces traditional hierarchical trees to optimize east-west datacenter throughput.

Anahtar Kavram

Categorizing network types by geographic scope, storage separation, and logical datacenter topology patterns.
Soru 224Soru

A network engineer is establishing stateful firewall rules to support specific secure enterprise applications and communication services. Match each network service requirement on the left with its corresponding default port number and transport protocol on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Direct network file sharing without NetBIOS transport encapsulation
Encrypted Active Directory directory service queries over SSL/TLS
Centralized AAA authentication and authorization traffic for network access
Unencrypted VoIP call initiation and session control signaling

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Direct file sharing without NetBIOS matches TCP port 445; Encrypted directory service queries over SSL/TLS matches TCP port 636; Centralized AAA authentication and authorization traffic matches UDP port 1812; Unencrypted VoIP session control matches UDP port 5060.
Direct SMB hosting runs on TCP port 445. Secure directory access (LDAPS) uses TCP port 636. Centralized RADIUS authentication operates on UDP port 1812. Cleartext SIP VoIP call setup uses UDP port 5060.

Adım Adım Çözüm

1
Analyze the file sharing requirement.
Direct SMB over TCP/IP corresponds to TCP port 445.
Modern Server Message Block (SMB) communicates natively over TCP port 445, bypassing NetBIOS session service (TCP port 139).
2
Analyze the directory service security requirement.
LDAPS requires TCP port 636.
Standard unencrypted LDAP operates on TCP port 389, while SSL/TLS wrapper protection (LDAPS) assigns TCP port 636.
3
Analyze the network authentication protocol requirement.
RADIUS authentication and authorization matches UDP port 1812.
RADIUS separates authentication/authorization (UDP port 1812) from accounting services (UDP port 1813).
4
Analyze the VoIP signaling protocol requirement.
Unencrypted SIP signaling corresponds to UDP port 5060.
Session Initiation Protocol (SIP) default cleartext signaling runs on UDP/TCP port 5060, whereas secure TLS-encrypted SIP uses TCP port 5061.

Anahtar Kavram

Common Enterprise Network Ports and Transport Layer Protocols
Soru 225Soru

A network security administrator is performing an audit of packet captures and perimeter firewall rules for an enterprise management enclave. Security policy dictates that all interactive remote command-line administration and directory service queries must use encrypted communications. The traffic inspection reveals two active services operating over default transport ports that transmit authentication credentials in cleartext. Which TWO of the following port and transport protocol combinations represent the unencrypted services that violate this security policy? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: TCP port 23, used for legacy Telnet terminal sessions; TCP port 389, used for standard Lightweight Directory Access Protocol (LDAP) queries

Cevap

TCP port 23 (Telnet) and TCP port 389 (LDAP) represent the unencrypted legacy services that transmit data in plain text.
Telnet operates on TCP port 23 and standard LDAP operates on TCP port 389 by default. Both transmit authentication headers and payload data in unencrypted cleartext across the network, failing the encryption policy requirement. Secure implementations require substituting Telnet with SSH (TCP port 22) and unencrypted LDAP with LDAPS (TCP port 636) or LDAP with StartTLS.

Adım Adım Çözüm

1
Analyze the security policy requirements
Identify that services used for remote administration and directory services must be encrypted across the network.
Cleartext transmission of administrative sessions or directory lookups exposes credentials to packet sniffing.
2
Evaluate remote command-line administration protocols and default ports
Telnet runs on TCP port 23 and is unencrypted. SSH runs on TCP port 22 and is encrypted.
Telnet must be identified as a policy violation.
3
Evaluate directory service protocols, transport types, and default ports
Standard LDAP runs on TCP port 389 in unencrypted text. LDAPS runs on TCP port 636 over connection-oriented TCP, not UDP.
Standard LDAP on TCP port 389 must be identified as an unencrypted policy violation.

Anahtar Kavram

Identifying unencrypted network protocols and their standard TCP/UDP port assignments versus secure encrypted alternatives.
Soru 226Soru

A client computer on a local network prepares to transmit a web request to a remote server. Arrange the Protocol Data Units (PDUs) and data forms in the correct order as they are created during the outbound encapsulation process, from the top of the OSI model down to physical transmission.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of encapsulation from top to bottom is: Data, Segment, Packet, Frame, and Bits.
Outbound network transmission follows a strict top-down encapsulation sequence through the OSI layers: Application Data is encapsulated into a Transport Layer Segment, which is encapsulated into a Network Layer Packet, then into a Data Link Layer Frame, and finally converted into Physical Layer Bits for transmission.

Adım Adım Çözüm

1
Identify the top layer where data originates.
Data is created at the Application layer (Layer 7).
Encapsulation always begins with the application payload at the upper layers.
2
Process data at Layer 4 (Transport layer).
Data becomes a Segment with port information attached.
The transport layer manages port-based process-to-process communication.
3
Process data at Layer 3 (Network layer).
Segment becomes a Packet with IP addressing attached.
The network layer provides logical routing across IP networks.
4
Process data at Layer 2 (Data Link layer).
Packet becomes a Frame with MAC addressing and a trailer attached.
The data link layer prepares the data for transmission on the local network segment.
5
Process data at Layer 1 (Physical layer).
Frame is converted into Bits for media transmission.
The physical layer transmits raw signals over cable, fiber, or wireless media.

Anahtar Kavram

Top-Down Encapsulation Sequence and Protocol Data Units (PDUs)
Soru 227Soru

A network engineer is configuring an automated log collection system to aggregate audit logs from perimeter firewalls across a WAN link. Due to strict regulatory compliance, the network requires guaranteed delivery and ordered reception of all log events, accepting additional transmission overhead to prevent any missing records. Which protocol and operational characteristic should be selected for this transport requirement?

Cevabı ve açıklamayı göster

Cevap: TCP, because it establishes a connection-oriented session using sequence numbers and acknowledgments to guarantee ordered delivery.

Cevap

TCP should be selected because it is a connection-oriented protocol that uses a three-way handshake, sequence numbers, and acknowledgments to ensure reliable and ordered delivery of log messages.
TCP (Transmission Control Protocol) is a connection-oriented protocol operating at Layer 4 of the OSI model. It establishes a session using a three-way handshake (SYN, SYN-ACK, ACK) and guarantees reliable, ordered packet delivery through sequence numbers and acknowledgment packets, satisfying the requirement for zero log data loss.

Adım Adım Çözüm

1
Analyze the application requirements for log aggregation.
Identified that the application requires strict delivery guarantees, ordered sequence of events, and error checking.
Regulatory compliance mandates zero data loss for security audit trail reporting.
2
Compare transport protocol characteristics.
TCP provides connection-oriented reliability with handshakes and acknowledgments, whereas UDP provides low-overhead, best-effort connectionless delivery.
Matching application requirements against transport protocol features determines protocol choice.
3
Select the appropriate transport layer protocol.
Selected TCP due to its sequence numbering, sliding window flow control, and acknowledgment mechanisms.
TCP guarantees that all log entries arrive intact and in proper sequential order.

Anahtar Kavram

Connection-Oriented vs Connectionless Transport Protocols
Tahmini Süre:1m 0s
Soru 228Soru

A network engineer is inspecting Layer 2 traffic behavior across two directly connected switches, Switch-A and Switch-B, linked via an 802.1Q trunk interface. Switch-A is configured with native VLAN 10 on its trunk port, while Switch-B is configured with native VLAN 20 on its corresponding trunk port. Allowed VLANs on both trunk ports include VLANs 10, 20, and 30. A host connected to an access port assigned to VLAN 10 on Switch-A generates an ARP broadcast request. Which TWO of the following statements accurately describe how the switches process, tag, and forward this frame across the trunk link?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Switch-A transmits the ARP broadcast frame out of its trunk port without an 802.1Q VLAN header.; Switch-B assigns the incoming untagged ARP broadcast frame to VLAN 20 and floods it out all active access ports in VLAN 20.

Cevap

The correct statements are that Switch-A transmits the ARP broadcast frame out of its trunk port without an 802.1Q VLAN header, and Switch-B receives the untagged frame and assigns it to VLAN 20, flooding it out all active access ports in VLAN 20.
Under IEEE 802.1Q specifications, a switch transmitting traffic belonging to its configured native VLAN over a trunk interface strips the 4-byte 802.1Q VLAN header, sending standard untagged Ethernet frames. On the receiving side, Switch-B associates any incoming untagged frame with its own configured native VLAN (VLAN 20). Consequently, the broadcast frame generated in VLAN 10 on Switch-A leaks directly into VLAN 20 on Switch-B and is flooded to all VLAN 20 access ports.

Adım Adım Çözüm

1
Determine frame ingress and tagging logic at Switch-A
Host frame enters Switch-A on access VLAN 10. Switch-A prepares to forward the broadcast frame out trunk port Gi0/1. Because native VLAN on Switch-A's trunk is configured as VLAN 10, the 802.1Q tag is omitted (sent untagged).
IEEE 802.1Q standard requires frames belonging to the configured native VLAN of a trunk interface to be transmitted without a 4-byte 802.1Q tag.
2
Determine frame reception and classification logic at Switch-B
Switch-B receives an untagged Ethernet frame on its trunk interface Gi0/1. Switch-B evaluates its local trunk configuration, where native VLAN is set to 20. Switch-B implicitly assigns the untagged frame to VLAN 20.
A switch receiving untagged traffic on an 802.1Q trunk port automatically maps that traffic to its own locally configured native VLAN ID.
3
Analyze Layer 2 broadcast forwarding behavior
Once classified into VLAN 20 on Switch-B, the broadcast frame is flooded to all interfaces belonging to VLAN 20's broadcast domain.
Switches flood broadcast frames to all operational ports within the destination frame's assigned VLAN broadcast domain.

Anahtar Kavram

802.1Q Native VLAN Tagging Mechanics and Mismatch Traffic Leakage
Soru 229Soru

An network engineer is deploying an enterprise application that requires client workstations to discover both the hostname and the specific port number of server instances providing an internal service on the network. Which DNS resource record type should be configured on the authoritative DNS server to supply this host and port location information?

Cevabı ve açıklamayı göster

Cevap: SRV record

Cevap

The SRV (Service Location) record is the required DNS resource record type to define both hostnames and port numbers for network services.
The SRV (Service Location) record allows DNS clients to locate servers providing specific services (such as SIP or Kerberos) by specifying the service name, protocol, priority, weight, port number, and target hostname in the record payload.

Adım Adım Çözüm

1
Analyze the application requirements
The application requires clients to resolve both the target server hostname and the exact port number for a network service.
Standard host records (like A or AAAA) only map names to IP addresses, not port numbers.
2
Evaluate DNS record capabilities
The SRV record structure includes fields for Service, Protocol, Name, TTL, Class, Priority, Weight, Port, and Target hostname.
SRV is the only standard DNS record designed specifically to publish service location and port metadata.

Anahtar Kavram

DNS Service Location (SRV) Records
Tahmini Süre:1m 0s
Soru 230Soru

A network engineer is configuring core IP addressing services for an enterprise network. A new web-based portal service needs to be mapped to an existing server's canonical hostname, `host01.corp.internal`, which already resolves to an IPv4 address. Simultaneously, newly deployed IP telephony endpoints require a DNS mechanism to dynamically locate the hostname and port number of their primary Session Initiation Protocol (SIP) server. Which combination of DNS record types should the engineer configure to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: A CNAME record for the web portal alias and an SRV record for the SIP server location

Cevap

The configuration requires a CNAME record for the web portal alias and an SRV record for SIP server discovery.
The combination of a CNAME record and an SRV record satisfies both functional requirements. The CNAME record aliases the new portal service name to the host's primary canonical domain name, while the SRV record defines the server hostname, priority, weight, and port number for SIP telephony discovery.

Adım Adım Çözüm

1
Identify the DNS requirement for domain name aliasing.
Mapping `portal.corp.internal` to an existing canonical hostname `host01.corp.internal` requires a Canonical Name (CNAME) record.
CNAME records allow an administrator to map multiple service names to a single canonical host name without duplicating underlying IP address records.
2
Identify the DNS requirement for dynamic service discovery including port specifications.
Locating a specific protocol service (SIP) and its active transport port requires a Service Location (SRV) record.
SRV records follow the format `_service._proto.name TTL class SRV priority weight port target`, enabling VoIP endpoints to discover both host location and port numbers dynamically.

Anahtar Kavram

DNS Record Selection and Service Location (SRV vs CNAME)
Tahmini Süre:2m 0s
Soru 231Soru

A secure web server receiving an HTTPS request on TCP port 443 processes the inbound network signal from its network interface card up to the web application process. As de-encapsulation occurs, which sequence correctly identifies the order of Protocol Data Units (PDUs) processed and the corresponding headers or trailers removed at each layer of the protocol stack?

Cevabı ve açıklamayı göster

Cevap: Frame (Ethernet header and trailer removed) \rightarrow Packet (IP header removed) \rightarrow Segment (TCP header removed) \rightarrow Data payload delivered to the application

Cevap

The correct sequence processes the Frame (removing Ethernet header/trailer), then the Packet (removing IP header), followed by the Segment (removing TCP header), and finally delivers the raw Data payload to the application.
During de-encapsulation on a receiving host, processing proceeds bottom-up through the protocol stack. The Network Interface Card first processes the Layer 2 Frame by removing the Ethernet header and FCS trailer. The network stack then processes the Layer 3 IP Packet by stripping the IP header. Next, the transport layer parses the Layer 4 TCP Segment, strips the TCP header based on port 443 identification, and delivers the remaining application Data payload to the listening web service.

Adım Adım Çözüm

1
Analyze Layer 2 de-encapsulation at the Physical/Data Link interface
The NIC receives physical signals, frames them, verifies the Frame Check Sequence (FCS) trailer, strips the Ethernet header and trailer, and yields a Layer 3 PDU (Packet).
Layer 2 headers must be processed first to confirm local hardware delivery and frame integrity.
2
Analyze Layer 3 de-encapsulation within the OS kernel network stack
The IP protocol module examines the Layer 3 header, validates the destination IP address, strips the IP header, and identifies the upper-layer protocol (TCP).
Layer 3 processing routes the packet to the local host and uncovers the enclosed Layer 4 segment.
3
Analyze Layer 4 de-encapsulation for port matching
The TCP module parses the Layer 4 segment header, reassembles sequence numbers, identifies destination port 443, strips the TCP header, and passes the remaining payload up to the application.
Layer 4 headers contain port numbers needed to direct traffic to the correct application process.

Anahtar Kavram

De-encapsulation sequence from Layer 2 to Layer 7 (Frame -> Packet -> Segment -> Data)
Tahmini Süre:1m 30s
Soru 232Soru

A financial firm operates four distinct branch offices located across a single city. To connect the offices, the firm leases dedicated dark fiber circuits that physically link the edge routers at each site in a redundant closed loop. However, to meet strict auditing standards, all inter-subnet traffic between branches is required to pass through a centralized security gateway at the headquarters office for Layer 3 policy enforcement before being forwarded to its destination. Which of the following best classifies the geographic scope of this inter-branch network and describes its logical traffic topology?

Cevabı ve açıklamayı göster

Cevap: Metropolitan Area Network (MAN) with a logical star topology

Cevap

Metropolitan Area Network (MAN) with a logical star topology
The network spans across a single city, which fits the standard definition of a Metropolitan Area Network (MAN). While the physical dark fiber cabling forms a closed loop between edge routers (physical ring topology), all inter-subnet data flows are constrained to pass through a single central security gateway at headquarters before reaching their final destination. This centralized data path forms a hub-and-spoke pattern, which defines a logical star topology.

Adım Adım Çözüm

1
Determine the geographic classification of the network
The network connects multiple distinct sites within the bounds of a single city, which defines a Metropolitan Area Network (MAN).
Geographic scope definitions classify single-building networks as LANs, contiguous multi-building sites as CANs, city-wide networks as MANs, and regional/global networks as WANs.
2
Differentiate between physical layout and logical traffic flow
The physical layout is a ring (closed loop of dark fiber), but the logical flow is a star (hub-and-spoke).
Physical topology describes how cables and devices are physically interconnected. Logical topology describes how data actually flows through the network. Because all traffic must traverse the central gateway at headquarters before reaching its destination, data flows in a hub-and-spoke pattern regardless of the physical fiber paths.

Anahtar Kavram

Physical vs. Logical Topologies and Geographic Network Classifications
Soru 233Soru

A network engineer is auditing Layer 2 switch operations to ensure proper frame encapsulation, VLAN trunking, CAM table management, and port access controls across campus switches. Match each switching concept on the left with its corresponding operational behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

IEEE 802.1Q Tagging
Native VLAN Processing
MAC Address Table Aging
Sticky Port Security

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

IEEE 802.1Q Tagging matches insertion of a 4-byte header containing a TPID and VLAN ID; Native VLAN Processing matches assigning untagged trunk frames to a default internal broadcast domain without adding tags; MAC Address Table Aging matches clearing dynamic CAM entries following inactivity; Sticky Port Security matches converting dynamically learned MAC addresses into running configuration entries.
Each concept correctly maps to its foundational Layer 2 operational role: IEEE 802.1Q handles 4-byte header insertion, Native VLAN handles untagged trunk traffic mapping, MAC table aging handles CAM cache flushing upon inactivity, and sticky port security writes dynamic MAC addresses to the running configuration.

Adım Adım Çözüm

1
Analyze frame encapsulation mechanisms for VLAN trunking.
Identify IEEE 802.1Q tagging as the process of inserting a 4-byte tag field into the Ethernet frame structure between the Source MAC address and the EtherType field.
This allows trunk links to multiplex traffic from multiple VLANs over a single physical connection.
2
Evaluate trunk handling of untagged traffic.
Identify Native VLAN processing as the mechanism that routes untagged frames received on an 802.1Q trunk into the configured native VLAN without adding explicit 802.1Q tags.
Backward compatibility and control traffic (such as CDP or STP) rely on untagged transmission across trunks.
3
Determine Layer 2 switch CAM table maintenance procedures.
Associate MAC Address Table Aging with the automatic removal of idle dynamic MAC entries from the CAM table after the aging timer expires.
This ensures the switch adapts dynamically when network hosts disconnect or move to different switch ports.
4
Examine port security persistence features.
Connect Sticky Port Security to the automatic conversion of dynamically learned source MAC addresses into running configuration statements.
Sticky learning avoids manual static MAC configuration while preserving host port restrictions across interface reboots.

Anahtar Kavram

Layer 2 Switching Mechanisms and VLAN Trunking Operations
Soru 234Soru

A network administrator is manually configuring a static IPv6 default route on a router and needs to enter the compressed representation of the full 128-bit address 2001:0db8:0000:0000:0000:0ab0:0000:0012. Which of the following is the correct shorthand representation following standard RFC 5952 IPv6 address compression rules?

Cevabı ve açıklamayı göster

Cevap: 2001:db8::ab0:0:12

Cevap

2001:db8::ab0:0:12
The format 2001:db8::ab0:0:12 complies with standard RFC 5952 IPv6 compression rules by stripping leading zeros from each field (0db8 to db8, 0ab0 to ab0, 0012 to 12) and compressing the longest contiguous sequence of 16-bit zero fields (three blocks) using a single double colon (::).

Adım Adım Çözüm

1
Suppress leading zeros in each 16-bit hexadecimal field.
2001:0db8 becomes 2001:db8, 0ab0 becomes ab0, 0000 becomes 0, and 0012 becomes 12.
RFC 5952 requires leading zeros within a 16-bit field to be omitted.
2
Locate contiguous runs of zero fields and identify the longest run.
The three contiguous zero fields (0000:0000:0000) between 0db8 and 0ab0 form the longest run.
The double colon (::) must be used to replace the longest run of consecutive 16-bit zero fields.
3
Replace the longest run of zero fields with a single double colon (::).
2001:db8::ab0:0:12
The double colon can only be used once per IPv6 address to prevent parsing ambiguity.

Anahtar Kavram

IPv6 Address Compression Rules (RFC 5952)
Soru 235Soru

A network security administrator is configuring stateful firewall rules to integrate a newly deployed Security Information and Event Management (SIEM) appliance within an enterprise network. Per company compliance requirements, all remote system logging sent from internal infrastructure switches to the SIEM must be encrypted over the wire using Transport Layer Security (TLS) to guarantee confidentiality and data integrity. Which protocol and transport layer port combination must the administrator permit on the firewall to allow this secure log transmission?

Cevabı ve açıklamayı göster

Cevap: TCP port 6514

Cevap

TCP port 6514
The standard port designated by IANA for secure, TLS-encrypted Syslog traffic (as defined in RFC 5425) is TCP port 6514. TLS requires TCP to handle session negotiation, cryptographic certificates, and reliable packet delivery.

Adım Adım Çözüm

1
Identify the base service and security requirements specified in the scenario
The requirement calls for remote system logging (Syslog) secured with Transport Layer Security (TLS) encryption.
Standard Syslog operates unencrypted, but enterprise compliance mandates TLS encapsulation.
2
Determine the transport protocol required for TLS operation
TLS requires TCP due to its connection-oriented nature and reliable stream handling during key exchange.
UDP is connectionless and cannot host standard TLS sessions without specialized protocols like DTLS.
3
Select the standard well-known/registered port number assigned for Syslog over TLS
IANA specifies TCP port 65146514 for Syslog over TLS (RFC 5425), whereas unencrypted Syslog defaults to UDP port 514514.
Matching the correct port and protocol ensures compliance and proper firewall rule baseline.

Anahtar Kavram

Syslog over TLS (TCP Port 6514) vs Standard Syslog (UDP Port 514)
Soru 236Soru

A network engineer is analyzing protocol analyzer traces and configuration files during an IPv6 deployment. The engineer needs to verify the operational mechanics of the IPv6 base header and validate IPv6 address formatting rules. Which of the following statements correctly describe the characteristics of the IPv6 base header or valid IPv6 address compression mechanics? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Next Header field specifies the protocol type of the encapsulated payload or identifies an incoming extension header, serving a function equivalent to the IPv4 Protocol field.; The Hop Limit field is an 8-bit field decremented by each router that forwards the packet, replacing the IPv4 Time to Live (TTL) field to prevent routing loops.

Cevap

The correct statements are that the Next Header field specifies the protocol type of the encapsulated payload or extension header (equivalent to the IPv4 Protocol field) and the Hop Limit field is decremented at each router hop to replace the IPv4 Time to Live (TTL) field.
The statements describing Next Header as the equivalent of IPv4 Protocol and Hop Limit as the 8-bit replacement for IPv4 TTL are technically correct. Next Header defines the encapsulated layer 4 payload or extension header, while Hop Limit is decremented by 1 at each router to stop loop propagation.

Adım Adım Çözüm

1
Evaluate the statement regarding the Next Header field function.
Identified that Next Header points directly to the next protocol (e.g., TCP value 6, UDP value 17) or an extension header, matching IPv4 Protocol field functionality.
IPv6 simplified the header structure by replacing variable IPv4 options with chained extension headers referenced by the Next Header field.
2
Evaluate IPv6 address compression rules for zero suppression.
Recognized that using double-colons twice in one address renders the expanded length ambiguous.
RFC 4291 and RFC 5952 mandate that the double-colon notation (::) can appear only once in an IPv6 address string.
3
Evaluate the role and field size of Hop Limit.
Confirmed Hop Limit is an 8-bit field replacing TTL for loop control.
Routers discard packets when Hop Limit reaches zero, preventing infinite loop transmission.
4
Evaluate the IPv6 base header length specification.
Confirmed the IPv6 base header size is strictly fixed at 40 bytes.
Unlike IPv4 headers which range from 20 to 60 bytes due to inline options, IPv6 keeps a fixed 40-byte base header for fast hardware processing.

Anahtar Kavram

IPv6 Header Fields and Compression Syntax Rules
Tahmini Süre:1m 30s
Soru 237Soru

An enterprise network engineering team is designing a highly resilient architecture to connect 6 core regional data centers while also deploying a dedicated block-level storage network for database clustering. The design must maximize fault tolerance across the core sites while maintaining strict isolation for storage traffic. Which of the following technical requirements and design characteristics accurately apply to this network topology and network type deployment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Interconnecting all 6 core data centers in a physical full-mesh topology requires exactly 15 dedicated point-to-point WAN links.; A Storage Area Network (SAN) provides block-level storage consolidation over a dedicated high-speed infrastructure isolated from local area network (LAN) client traffic.

Cevap

The correct answers are the statement calculating 15 dedicated links for a 6-node full-mesh topology and the statement defining a Storage Area Network (SAN) as a dedicated block-level storage infrastructure.
The full-mesh link equation N(N1)2\frac{N(N-1)}{2} yields 6×52=15\frac{6 \times 5}{2} = 15 physical links for 6 sites, ensuring complete point-to-point path redundancy. Additionally, a SAN specifically delivers block-level storage traffic across a specialized high-speed network isolated from client LAN traffic.

Adım Adım Çözüm

1
Calculate the physical link requirements for a full-mesh topology connecting 6 sites.
Using the full-mesh link formula L=N(N1)2L = \frac{N(N-1)}{2} where N=6N = 6, we calculate L=6×52=15L = \frac{6 \times 5}{2} = 15 links. This provides maximum redundancy and eliminates single points of failure.
Full-mesh physical topologies require direct links between every pair of nodes.
2
Identify the classification and architectural purpose of a Storage Area Network (SAN).
A SAN is a high-speed network type specifically designed for block-level storage transfer using protocols like Fibre Channel or iSCSI, separate from general LAN traffic.
Distinguishing network types (LAN, WAN, SAN, CAN, MAN) by performance profile and storage access protocols is essential for enterprise design.
3
Evaluate distractor options regarding VLAN isolation and default gateway subnets.
VLANs mandate Layer 3 routing for inter-VLAN communication. Default gateways must be on the same subnet as the host interface to be reachable.
Logical topology and broadcast domain rules enforce strict Layer 2 and Layer 3 boundaries.

Anahtar Kavram

Physical Mesh Link Calculations and SAN Architecture
Soru 238Soru

During the outbound encapsulation process on a host system, application data is passed down the protocol stack. At the Transport layer (Layer 4), a TCP header containing source and destination port numbers is attached to the data payload. Which Protocol Data Unit (PDU) is generated at this specific layer?

Cevabı ve açıklamayı göster

Cevap: Segment

Cevap

Segment
The correct answer is Segment. When data moves down to Layer 4 (Transport layer) during encapsulation, a header containing control information—such as TCP source/destination port numbers and sequence numbers—is added to the data payload, forming a Segment.

Adım Adım Çözüm

1
Identify the OSI layer referenced in the scenario.
The scenario explicitly describes adding Transport layer headers (Layer 4) such as port numbers.
Different protocol layers produce specific Protocol Data Units (PDUs) during data encapsulation.
2
Map Layer 4 to its corresponding Protocol Data Unit term.
Layer 4 produces Segments (for TCP) or Datagrams (for UDP).
Encapsulation naming conventions designate Data at Layers 5-7, Segment at Layer 4, Packet at Layer 3, Frame at Layer 2, and Bits at Layer 1.

Anahtar Kavram

OSI Protocol Data Unit (PDU) Encapsulation Terminology
Tahmini Süre:45s
Soru 239Soru

When a router receives a packet and evaluates multiple potential routes to a destination network, it uses specific criteria in a strict sequence to determine the best path. Order the following route selection criteria from FIRST (highest priority) to LAST (lowest priority).

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order from first to last criteria evaluated is: Longest Prefix Match, followed by Lowest Administrative Distance, and finally Lowest Metric.
Routing engines follow a strict tie-breaking sequence: Longest Prefix Match is evaluated first to find the most specific network destination. If routes have equal prefix lengths, Administrative Distance is checked next to pick the most reliable routing source. If routes stem from the same protocol with equal AD, the lowest Metric value determines the final path.

Adım Adım Çözüm

1
Evaluate subnet specificity across all available routes.
The route with the longest prefix match (e.g., /26 over /24) is selected first.
Longest prefix match always takes precedence in IP routing decisions.
2
Compare Administrative Distance if prefix lengths are equal.
The route from the protocol with the lower AD value (e.g., OSPF at 110 over RIP at 120) is chosen.
Administrative distance measures the trustworthiness of the route source.
3
Compare path metrics if routes originate from the same protocol.
The route with the lowest metric/cost (e.g., hop count or bandwidth-based cost) is preferred.
Metric acts as a tie-breaker among routes from the same routing protocol.

Anahtar Kavram

IP Routing Table Path Selection Hierarchy
Soru 240Soru

A network administrator is analyzing transport layer requirements for two network services: an interactive database management session and a local network host discovery service. When evaluating the connectionless transport protocol (UDP) used by the discovery service compared to the connection-oriented transport protocol (TCP) used by the database session, which of the following operational traits specifically characterize the connectionless protocol? (SELECT TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Payload delivery begins immediately without performing a preliminary three-way handshake to establish session state.; The protocol header maintains a minimalist 8-byte header structure that lacks sequence numbers and acknowledgment fields.

Cevap

The correct options state that payload delivery begins immediately without a preliminary three-way handshake and that the protocol header maintains a minimalist 8-byte header structure lacking sequence and acknowledgment fields.
Connectionless transport protocols like UDP do not establish a formal session prior to data transmission, eliminating the latency of a three-way handshake. Additionally, UDP overhead is minimized by using a fixed 8-byte header that omits sequence numbering, acknowledgment tracking, and window size fields required by connection-oriented protocols like TCP.

Adım Adım Çözüm

1
Identify the protocol model operating in a connectionless environment.
UDP (User Datagram Protocol) is identified as the connectionless transport protocol.
Connectionless protocols send data statelessly without session establishment or guaranteed delivery mechanics.
2
Differentiate session initiation mechanisms between connectionless and connection-oriented protocols.
Connectionless transmission sends datagrams without requiring a TCP three-way handshake (SYN, SYN-ACK, ACK).
Eliminating handshake overhead reduces latency for stateless communications like service discovery.
3
Examine transport header structures.
UDP uses a compact 8-byte header comprising Source Port, Destination Port, Length, and Checksum.
Fields related to sequence numbers, acknowledgment numbers, and window size are absent because UDP does not track segment order or congestion states.

Anahtar Kavram

Connection-Oriented (TCP) vs. Connectionless (UDP) Protocol Characteristics
ÖncekiSayfa 12 / 27Sonraki
Networking Concepts Alıştırma Soruları — CompTIA Network+ — Sayfa 12 | Examkin