Networking Concepts

538 soru

Soru 501Soru

A network administrator is designing a WAN architecture to connect 12 remote branch offices directly back to a central headquarters location. The business requirements mandate centralized security inspection at headquarters, minimal WAN link provisioning costs, and simple routing administration. Direct inter-branch communication is not required. Which topology best satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Hub-and-spoke topology

Cevap

Hub-and-spoke topology is the optimal topology because it connects each remote site back to a central site, minimizing line costs and centralizing policy control.
The hub-and-spoke topology connects every remote site directly to a central hub (headquarters). Because branch offices only need to communicate with headquarters and not directly with each other, this minimizes WAN link costs (requiring only one link per site) and centralizes administration and security inspection.

Adım Adım Çözüm

1
Analyze requirement 1: Centralized traffic control and routing at headquarters.
Requires a centralized point through which all branch traffic flows.
Security monitoring and inspection policies must be enforced at a single hub.
2
Analyze requirement 2: Minimal connection costs without direct inter-branch traffic needs.
Eliminates the need for n(n1)/2n(n-1)/2 full mesh or partial mesh links between branch offices.
Only nn point-to-point links (where nn is the number of branch offices) are needed to connect each branch to the central hub.
3
Match topology characteristics to requirements.
Hub-and-spoke provides centralized routing with minimum required WAN connections.
It fulfills all scenario constraints (cost, central management, scale) efficiently.

Anahtar Kavram

Hub-and-Spoke WAN Topology
Soru 502Soru

An enterprise organization is deploying a dedicated, high-speed network infrastructure designed specifically to interconnect database servers with high-capacity block-level storage arrays using Fibre Channel protocols. This infrastructure operates independently from the corporate user network to guarantee minimal latency and prevent bandwidth saturation from daily workstation operations. Which network classification specifically describes this dedicated block-level storage architecture?

Cevabı ve açıklamayı göster

Cevap: Storage Area Network (SAN)

Cevap

Storage Area Network (SAN)
The correct option is Storage Area Network (SAN) because it defines a dedicated, highly specialized network architecture engineered to provide servers with direct, block-level access to consolidated storage arrays separate from primary user traffic.

Adım Adım Çözüm

1
Analyze the scenario requirements
Identified key requirements: dedicated high-speed network, block-level storage access, Fibre Channel protocol, isolated from standard LAN client traffic.
Understanding the functional requirements isolates storage-specific network topologies from general-purpose network types.
2
Evaluate network type definitions against requirements
A Storage Area Network (SAN) is tailored specifically for block-level storage data transfer over dedicated protocols like Fibre Channel or iSCSI, satisfying all scenario criteria.
SAN architectures separate storage traffic from user network traffic to ensure predictable latency and maximum throughput.

Anahtar Kavram

Storage Area Network (SAN) Scope and Functionality
Tahmini Süre:1m 0s
Soru 503Soru

An administrator observes network traffic arriving at an enterprise server hosting a web application. Which TWO of the following statements accurately describe the actions performed during the de-encapsulation process as the incoming frame moves up the destination host's protocol stack?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Network Interface Card (NIC) verifies data integrity using the Frame Check Sequence (FCS) and strips the Layer 2 header and trailer.; The Transport layer reads the destination port number in the TCP header to route the payload to the correct application socket.

Cevap

The Network Interface Card verifies data integrity using the Frame Check Sequence (FCS) and strips the Layer 2 header and trailer, and the Transport layer reads the destination port number in the TCP header to route the payload to the correct application socket.
During de-encapsulation on a destination host, processing proceeds bottom-up through the OSI model. At Layer 2 (Data Link), the hardware interface validates the frame using the Frame Check Sequence (FCS) in the trailer and removes the Ethernet header and trailer. At Layer 4 (Transport), the protocol stack parses the destination port in the TCP header to deliver the reassembled payload to the correct application process.

Adım Adım Çözüm

1
Analyze Layer 2 processing at the receiving Network Interface Card (NIC).
The NIC receives the raw bits, checks the FCS in the trailer for errors, and upon verification, strips the Ethernet header and trailer to expose the IP packet.
De-encapsulation moves bottom-up; Layer 2 checks integrity and strips frame control fields before passing payload to Layer 3.
2
Analyze Layer 3 processing at the Network layer.
The IP header is inspected to verify destination IP address and Protocol field value, revealing TCP.
Layer 3 removes the IP header and passes the remaining segment to the Transport layer indicated by the Protocol field.
3
Analyze Layer 4 processing at the Transport layer.
The Transport layer inspects the TCP destination port to map data to the listening service.
Port numbers at Layer 4 identify specific software applications or sockets awaiting incoming data.

Anahtar Kavram

Host De-encapsulation Stack Traversal
Tahmini Süre:1m 30s
Soru 504Soru

A network architect is updating documentation for various enterprise network deployment models and topologies. Match each network type or physical topology on the left with its corresponding operational description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Personal Area Network (PAN)
Point-to-Multipoint (P2MP)
Campus Area Network (CAN)
Bus Topology

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Personal Area Network (PAN) matches with short-range peripheral device communication around an individual; Point-to-Multipoint (P2MP) matches with a central base station communicating with multiple fixed client locations; Campus Area Network (CAN) matches with interconnecting LANs across adjacent buildings in a single property; Bus Topology matches with a single shared cable backbone using end terminators.
Each classification aligns directly with standard networking models: PAN serves personal short-range devices; P2MP distributes wireless traffic from one central antenna to multiple clients; CAN connects multiple LANs across adjacent buildings on a shared campus; and Bus topology uses a single trunk cable terminated at both ends.

Adım Adım Çözüm

1
Analyze geographic scope and network classification definitions.
PAN represents personal short-range connections (e.g., Bluetooth), while CAN represents multi-building connections within a single contiguous campus area.
Geographic network classifications are determined by physical boundaries, device proximity, and administrative domain.
2
Analyze physical and logical topology operational characteristics.
P2MP uses a central transmitter serving multiple remote endpoints, and Bus topology relies on a linear central cable terminating at both ends.
Physical topologies dictate how nodes and cabling are laid out and how signal propagation is handled.
3
Map each item on the left to its matching operational description on the right.
Matching pairings established accurately.
Verifies key architectural boundaries and cable/wireless transmission models.

Anahtar Kavram

Network Topologies and Geographic Classifications
Tahmini Süre:1m 30s
Soru 505Soru

A network administrator is troubleshooting a zone transfer failure between an internal primary DNS server and a newly deployed secondary DNS server across a subnet boundary controlled by an Access Control List (ACL). Standard DNS resolution queries from client workstations to the primary server are functioning normally, but automated zone sync operations consistently fail. Which ACL modification should the administrator make to allow zone transfers while maintaining standard name resolution?

Cevabı ve açıklamayı göster

Cevap: Permit traffic on TCP port 53 between the DNS servers.

Cevap

Permit traffic on TCP port 53 between the DNS servers.
The correct option correctly identifies TCP port 53 as the protocol required for DNS zone transfers. Standard name resolution uses UDP port 53 because individual requests and responses are small. However, zone transfers replicate entire domain databases between primary and secondary servers, requiring the guaranteed delivery, connection management, and larger packet handling of TCP.

Adım Adım Çözüm

1
Identify the service and traffic behavior described in the scenario.
The scenario involves DNS services functioning for standard queries (UDP 53) but failing for database synchronization/zone transfers between servers.
DNS relies on different transport protocols depending on the operation size and reliability requirements.
2
Analyze transport layer requirements for DNS zone transfers.
Zone transfers (AXFR/IXFR) transmit complete resource record databases which exceed the standard 512-byte UDP payload limit and require stateful, reliable transmission provided by TCP.
TCP port 53 ensures packet sequencing, error detection, and acknowledgement during multi-packet database replication.
3
Select the option that allows the appropriate transport protocol and port combination.
Allowing TCP port 53 explicitly addresses the missing transport rule required for server-to-server replication.
Standard client queries already work over UDP 53, confirming that UDP 53 is open while TCP 53 was blocked.

Anahtar Kavram

DNS Transport Layer Dual Behavior (UDP vs TCP Port 53)
Soru 506Soru

A network administrator is analyzing traffic flow across a Layer 3 router connecting two separate physical IP subnets. As an IP packet travels from Host A on Subnet 1 through the router to Host B on Subnet 2, which of the following best describes how PDU encapsulation headers are processed and modified by the router?

Cevabı ve açıklamayı göster

Cevap: The router strips the incoming Layer 2 Ethernet header and trailer, decrements the TTL in the Layer 3 IP header, and encapsulates the packet into a new Layer 2 frame with updated MAC addresses for the destination subnet.

Cevap

The router strips the incoming Layer 2 Ethernet header and trailer, decrements the TTL in the Layer 3 IP header, and encapsulates the packet into a new Layer 2 frame with updated MAC addresses for the destination subnet.
When a packet traverses a Layer 3 router, the router de-encapsulates the incoming Layer 2 frame to inspect the Layer 3 destination IP address. The router updates the IP header TTL field, determines the next hop via its routing table, and encapsulates the unmodified IP packet inside a new Layer 2 Ethernet frame formatted with source and destination MAC addresses specific to the egress link.

Adım Adım Çözüm

1
Analyze incoming frame processing at the router ingress interface
The router receives the Ethernet frame, verifies the Frame Check Sequence (FCS), and de-encapsulates the Layer 2 header and trailer.
Layer 2 headers are valid only for a single network hop/segment and must be stripped to access the Layer 3 packet.
2
Inspect Layer 3 IP header and execute routing decision
The router reads the destination IP address, decrements the Time to Live (TTL) count by 1, and recalculates the IP header checksum.
The IP header remains intact to maintain end-to-end logical addressing across the path, except for hop-limiting fields.
3
Re-encapsulate the packet for the egress network segment
The IP packet is encapsulated into a new Layer 2 frame formatted for the destination link, using the router egress interface MAC as source and the next hop/host MAC as destination.
Encapsulation creates a valid data link layer frame for delivery across the next physical or logical link.

Anahtar Kavram

Hop-by-hop Layer 2 de-encapsulation and re-encapsulation by Layer 3 routing devices
Soru 507Soru

A host workstation generates a DNS query to resolve a hostname prior to establishing a connection. In what chronological sequence does the workstation's protocol stack perform outbound encapsulation on this data, from initial generation to physical media transmission?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with application payload formatting, followed by UDP transport header encapsulation (datagram creation), then IP network header encapsulation (packet creation), and concludes with Ethernet data link framing (frame creation).
Outbound encapsulation follows a strict top-down traversal of the OSI model stack. Data originates at the Application Layer where the raw DNS payload is created. It is passed to the Transport Layer (UDP), which appends port numbers to form a datagram. Next, the Network Layer (IP) adds IP addresses to form a packet. Finally, the Data Link Layer (Ethernet) adds MAC addresses and an FCS trailer to form a frame ready for physical bit transmission.

Adım Adım Çözüm

1
Identify top-down encapsulation order through OSI protocol layers.
Encapsulation moves from Layer 7 (Application) down to Layer 2 (Data Link).
Outbound data must be progressively wrapped in lower-layer headers as it moves down the network stack.
2
Map PDU creation at each layer.
Data → Datagram (UDP) → Packet (IP) → Frame (Ethernet).
Each protocol layer adds its specific control information to the payload passed down from the layer above.

Anahtar Kavram

Outbound OSI Encapsulation Flow
Tahmini Süre:1m 0s
Soru 508Soru

A storage administrator is deploying a network-attached storage array to host shared folders for Windows workstations on a isolated VLAN. To meet security standards, network traffic must avoid legacy NetBIOS encapsulation and operate strictly via direct file sharing over TCP/IP. Which port must be opened on the internal firewall to permit direct Server Message Block (SMB) communications?

Cevabı ve açıklamayı göster

Cevap: TCP port 445

Cevap

TCP port 445 is the standard port for direct Server Message Block (SMB) file sharing over TCP/IP without NetBIOS.
Direct Server Message Block (SMB) file sharing operates natively over TCP/IP using TCP port 445. Opening TCP port 445 allows hosts to share files and printers directly across IP subnets without relying on legacy NetBIOS session layer protocol wrappers.

Adım Adım Çözüm

1
Identify the target service protocol and requirement
The requirement specifies direct Server Message Block (SMB) traffic over TCP/IP without legacy NetBIOS transport.
Legacy SMB relied on NetBIOS framing over ports 137-139, whereas modern SMB runs directly over IP networks on a single dedicated port.
2
Map the direct SMB service to its standard transport port
Direct SMB over TCP/IP utilizes TCP port 445.
Starting with Windows 2000, Microsoft implemented SMB directly on top of the TCP transport layer via port 445.

Anahtar Kavram

Common Network Ports - Server Message Block (SMB)
Tahmini Süre:1m 0s
Soru 509Soru

A university IT department is installing a high-speed fiber-optic backbone to interconnect networking hardware across eight distinct academic buildings situated on a single, contiguous 200-acre property owned by the institution. All cabling and networking hardware are privately owned, operated, and maintained by the university without using public utility lines or third-party service provider leased circuits. Which network classification best describes this geographic deployment?

Cevabı ve açıklamayı göster

Cevap: Campus Area Network (CAN)

Cevap

Campus Area Network (CAN)
The deployment covers multiple interlinked buildings across a single contiguous 200-acre property using self-owned fiber-optic infrastructure. This precisely defines a Campus Area Network (CAN), which bridges the gap between individual LANs and broader metropolitan/wide area networks without relying on third-party telecommunication providers.

Adım Adım Çözüm

1
Analyze the geographic scope and ownership model described in the scenario.
The infrastructure spans multiple buildings within a single contiguous 200-acre property and relies strictly on self-owned cabling rather than telecommunication service provider leased lines.
Geographic footprint and media ownership are the primary criteria for categorizing network types.
2
Evaluate the defined network types against these properties.
A network encompassing multiple adjacent LANs within a single contiguous property owned by one organization is defined as a Campus Area Network (CAN).
MAN and WAN involve broader geographic spans with service provider media, while SAN is dedicated to storage arrays.

Anahtar Kavram

Geographic classifications of networks (LAN, CAN, MAN, WAN, SAN)
Soru 510Soru

A network systems engineer is documenting security perimeter rules and directory services infrastructure. Match each network service on the left with its corresponding default transport layer port and operational profile on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Kerberos Authentication Service
Internet Message Access Protocol Secure (IMAPS)
Internet Key Exchange (IKE)
Lightweight Directory Access Protocol (LDAP)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Kerberos Authentication Service matches TCP/UDP port 88; IMAPS matches TCP port 993; Internet Key Exchange (IKE) matches UDP port 500; Lightweight Directory Access Protocol (LDAP) matches TCP port 389.
Each service is accurately mapped to its standardized port assignment: Kerberos to TCP/UDP port 88 for authentication tokens, IMAPS to TCP port 993 for encrypted mail access, IKE to UDP port 500 for IPsec setup, and LDAP to TCP port 389 for plain text directory lookups.

Adım Adım Çözüm

1
Identify the authentication protocol operating port for domain ticketing.
Kerberos uses port 88 (TCP/UDP) for key distribution center (KDC) authentication.
Domain controllers respond to ticket granting requests on port 88.
2
Distinguish between secure mail retrieval ports and legacy unencrypted variants.
IMAPS requires TCP port 993 for implicit SSL/TLS encapsulation, whereas standard IMAP uses TCP port 143.
Secure email retrieval protocols mandate dedicated encrypted listening ports.
3
Determine the negotiation protocol for establishing IPsec tunnels.
IKE negotiates SA parameters over UDP port 500.
Phase 1 and Phase 2 ISAKMP/IKE negotiations run over UDP port 500 (or UDP 4500 when NAT-Traversal is engaged).
4
Identify the unencrypted directory access port.
LDAP runs unencrypted over TCP port 389, distinct from LDAPS which uses TCP port 636.
Standard directory access baseline services default to port 389.

Anahtar Kavram

Standard default port numbers and transport layer encapsulation for administrative, email, VPN, and directory protocols.
Soru 511Soru

A network administrator is evaluating routing paths on a branch router. The router receives two updates via Routing Information Protocol (RIPv2) for destination network 192.168.50.0/24192.168.50.0/24. Path 1 traverses four intermediate routers across a high-speed 10 Gbps10\text{ Gbps} optical link. Path 2 traverses two intermediate routers across a legacy 1.544 Mbps1.544\text{ Mbps} T1 connection. Which path will the router select for insertion into its Routing Information Base (RIB), and why?

Cevabı ve açıklamayı göster

Cevap: Path 2, because RIP uses hop count as its sole metric and selects the path with fewer router hops regardless of link bandwidth.

Cevap

Path 2 will be selected because RIP uses hop count as its metric, prioritizing the path with 2 hops over the path with 4 hops regardless of underlying interface bandwidth.
Routing Information Protocol (RIP) is a distance-vector protocol that measures route desirability solely by hop count (up to a maximum of 15 hops). Even though Path 1 offers significantly higher bandwidth, RIP cannot evaluate link speed and will choose Path 2 due to its lower hop count of 2 versus 4.

Adım Adım Çözüm

1
Identify the routing protocol and its metric type
The scenario specifies RIPv2, which is a distance-vector routing protocol that uses hop count as its single routing metric.
Different dynamic routing protocols evaluate path desirability using distinct metric criteria (e.g., hop count for RIP, bandwidth/cost for OSPF).
2
Compare the metric values for both candidate paths
Path 1 has a metric of 4 hops, while Path 2 has a metric of 2 hops.
Lower metric values indicate a more desirable route within the same routing protocol.
3
Determine RIB selection based on routing logic
The router selects Path 2 with a hop metric of 2, ignoring the interface bandwidth differences (10 Gbps10\text{ Gbps} vs 1.544 Mbps1.544\text{ Mbps}).
RIP does not evaluate link speed or latency when making path selection decisions.

Anahtar Kavram

Distance-vector routing protocols like RIP base path selection strictly on hop count, ignoring interface bandwidth or speed.
Soru 512Soru

An enterprise router operating OSPF receives a Link-State Update (LSU) containing a revised Link-State Advertisement (LSA). Place the operational steps the router performs to process this update and adjust its routing table into the correct chronological order.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with receiving the LSU packet, verifying the LSA sequence number, updating the LSDB while flooding the LSA, running the Dijkstra SPF algorithm, and installing the recalculated best routes into the RIB.
When an OSPF router receives an LSU, it must first inspect the LSA for validity and compare its sequence number against the existing database. Once validated, the router updates its LSDB and immediately floods the LSA out other active OSPF interfaces. After database synchronization, the router runs the Dijkstra SPF algorithm on the revised topology map and installs the recalculated shortest paths into the RIB.

Adım Adım Çözüm

1
Identify initial packet reception
The router receives the LSU packet on an interface.
Control plane processing is initiated by receiving the link-state update.
2
Perform LSA validation and age check
The router checks the LSA checksum and sequence number against current database records.
Invalid or older duplicate LSAs must be identified and discarded before modifying local topology data.
3
Synchronize database and flood update
The router updates its LSDB and forwards the LSA out all other OSPF interfaces.
Immediate flooding ensures fast convergence across the entire OSPF area.
4
Recalculate topology using SPF
The router executes the Dijkstra SPF algorithm.
The SPF algorithm processes the updated LSDB map to determine shortest paths from the router's perspective.
5
Update active routing table
Optimal routes are committed to the RIB.
Routes derived from the SPF tree replace outdated entries in the active routing table.

Anahtar Kavram

OSPF Link-State Processing and Convergence Sequence
Tahmini Süre:1m 30s
Soru 513Soru

A network administrator is updating perimeter firewall Access Control Lists (ACLs) to support secure, encrypted remote administration and file management across enterprise servers, replacing legacy unencrypted management traffic. Which of the following port and transport protocol combinations must be permitted through the firewall to support these secure services? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: TCP port 22; TCP port 443

Cevap

TCP port 22 and TCP port 443 should be permitted on the firewall.
TCP port 22 (SSH/SFTP) and TCP port 443 (HTTPS) provide encrypted session channels for secure remote administration and file transfer capabilities required by modern security standards.

Adım Adım Çözüm

1
Identify the functional requirement
The firewall rules must permit secure, encrypted management and file transfer protocols while excluding unencrypted legacy alternatives.
Enterprise security baseline policies mandate transport-layer or session-layer encryption for administrative access.
2
Evaluate remote administration and secure file transfer options
SSH and SFTP utilize TCP port 22 to provide secure interactive shell access and encrypted file transfer. HTTPS uses TCP port 443 for secure web browser management.
Port 22 (SSH/SFTP) and Port 443 (HTTPS) provide cryptographic confidentiality and integrity.
3
Eliminate unencrypted protocol distractors
Telnet (TCP port 23) and TFTP (UDP port 69) transmit data without encryption.
Telnet sends credentials in plaintext and TFTP provides no authentication or encryption over UDP.

Anahtar Kavram

Common Secure Ports and Protocols for Remote Management
Soru 514Soru

A workstation user initiates a connection to a remote network resource. As the outgoing data travels down the local OSI stack, it transitions from the Application layer to the Transport layer (Layer 4). Which Protocol Data Unit (PDU) is constructed at Layer 4, and what primary header information is appended during this encapsulation step?

Cevabı ve açıklamayı göster

Cevap: A Segment (or Datagram), with source and destination port numbers added to the header.

Cevap

At the Transport layer (Layer 4), data is encapsulated into a Segment (or Datagram) by appending a header containing source and destination port numbers.
During outbound encapsulation, when data moves down to the Transport layer (Layer 4), the operating system protocol stack wraps the payload into a Segment (when using TCP) or a Datagram (when using UDP). This process attaches a Layer 4 header containing source and destination port numbers to direct traffic to the correct application process on the receiving endpoint.

Adım Adım Çözüm

1
Identify the OSI layer referenced in the scenario.
The scenario specifies data passing into Layer 4 (Transport layer).
Encapsulation naming conventions and header contents depend on the active layer.
2
Determine the PDU name used at Layer 4.
Layer 4 constructs Segments (TCP) or Datagrams (UDP).
Data units at upper layers are termed Application Data, while Layer 3 uses Packets and Layer 2 uses Frames.
3
Determine the specific addressing header added at Layer 4.
Transport layer headers encapsulate data with source and destination port numbers.
Port numbers enable process-to-process communication and multiplexing across network connections.

Anahtar Kavram

OSI Layer 4 Transport Encapsulation and PDU Identification
Soru 515Soru

A network administrator is documenting core dynamic routing protocol classifications for an enterprise network audit. Match each dynamic routing protocol on the left with its corresponding path-selection algorithm and primary operational attribute on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

OSPF
BGP
EIGRP
RIPv2

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

OSPF matches with the link-state protocol using Dijkstra's algorithm; BGP matches with the path-vector exterior gateway protocol using AS path attributes; EIGRP matches with the protocol utilizing the DUAL algorithm and composite bandwidth/delay metrics; RIPv2 matches with the distance-vector protocol using hop count capped at 15.
Each routing protocol matches its exact architectural behavior: OSPF is a link-state protocol using Dijkstra's SPF algorithm; BGP is an exterior path-vector protocol using AS-Path attributes; EIGRP is an advanced distance-vector protocol using DUAL and bandwidth/delay metrics; RIPv2 is a distance-vector protocol capped at a 15-hop limit.

Adım Adım Çözüm

1
Identify the protocol classification and underlying algorithm for OSPF.
OSPF is a link-state interior routing protocol that relies on the Shortest Path First (SPF) Dijkstra algorithm.
Link-state updates allow OSPF routers to construct a complete map of network link states across an autonomous area.
2
Identify the scope and path-selection attribute system for BGP.
BGP is a path-vector exterior gateway protocol governed by Autonomous System hops and administrative policies.
BGP is specifically designed for inter-domain routing between autonomous systems on global networks.
3
Distinguish between EIGRP and RIPv2 distance-vector implementations.
EIGRP uses DUAL with composite metrics (bandwidth/delay), whereas RIPv2 uses hop count up to a maximum limit of 15.
EIGRP achieves fast loop-free convergence via DUAL feasible successors, while RIPv2 is constrained by classic distance-vector metric limitations.

Anahtar Kavram

Classification, algorithmic behavior, and path determination metrics of dynamic routing protocols.
Tahmini Süre:1m 30s
Soru 516Soru

A security operations engineer is setting up a centralized SIEM server to aggregate system logs and security events from enterprise core switches. To ensure standard unencrypted syslog traffic successfully reaches the collector, which port and transport protocol combination must be permitted on the network firewalls?

Cevabı ve açıklamayı göster

Cevap: UDP port 514

Cevap

Standard Syslog messages require UDP port 514 to be allowed through network firewalls.
Standard Syslog utilizes User Datagram Protocol (UDP) on port 514 to transmit event notification messages to a central log server without session establishment overhead.

Adım Adım Çözüm

1
Identify the protocol required for system logging
The scenario describes gathering system logs and security events via standard syslog messages.
Syslog is the standard protocol for message logging across network devices.
2
Determine the default port number and transport layer protocol for standard Syslog
Standard Syslog defaults to UDP port 514.
UDP 514 allows low-overhead, connectionless transmission of log data to the collector.

Anahtar Kavram

Syslog Protocol and Port Number
Tahmini Süre:1m 0s
Soru 517Soru

A network technician is verifying the IP configuration of a database server assigned the IP address 172.28.137.95/21172.28.137.95/21. Which of the following represents the broadcast address for the subnet to which this server belongs?

Cevabı ve açıklamayı göster

Cevap: 172.28.143.255172.28.143.255

Cevap

The broadcast address for the subnet is 172.28.143.255172.28.143.255.
For a /21/21 network prefix, the subnet mask is 255.255.248.0255.255.248.0. The block size in the third octet is 256248=8256 - 248 = 8. Multiples of 8 in the third octet include 136 and 144, placing IP address 172.28.137.95172.28.137.95 within the 172.28.136.0/21172.28.136.0/21 subnet. The broadcast address is one address prior to the start of the next subnet (172.28.144.0172.28.144.0), which is 172.28.143.255172.28.143.255.

Adım Adım Çözüm

1
Determine the subnet mask and block size for a /21/21 prefix.
A /21/21 CIDR prefix corresponds to subnet mask 255.255.248.0255.255.248.0. The third octet block size is 256248=8256 - 248 = 8.
The prefix length determines how bits are split between network and host portions.
2
Calculate the network ID for IP address 172.28.137.95172.28.137.95.
The third octet value 137137 divided by 88 gives 17.12517.125. Multiplying 17×8=13617 \times 8 = 136. The network ID is 172.28.136.0/21172.28.136.0/21.
Network boundaries occur at multiples of the block size (0,8,16,,136,1440, 8, 16, \dots, 136, 144).
3
Calculate the broadcast address of the network segment.
The next subnet begins at 172.28.144.0172.28.144.0. Subtracting 1 IP yields the broadcast address 172.28.143.255172.28.143.255.
The broadcast address is the highest IP address in the subnet range.

Anahtar Kavram

IPv4 CIDR Subnetting and Broadcast Address Calculation
Tahmini Süre:1m 30s
Soru 518Soru

An enterprise web server receives an incoming HTTP request over a wired Ethernet network. Place the de-encapsulation steps performed by the receiving host's network stack in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for de-encapsulation is: 1) NIC converts signals to raw Ethernet frame bits, 2) Data Link layer verifies FCS and strips MAC headers/trailers, 3) Network layer verifies destination IP and removes IP header, 4) Transport layer checks TCP headers and delivers payload to the application.
De-encapsulation processes inbound network traffic from the bottom of the OSI model to the top. The physical NIC first receives raw signals and converts them to bits. Next, the Data Link layer verifies frame integrity via FCS and removes Layer 2 MAC headers. Then, the Network layer inspects destination IP addresses and strips Layer 3 headers. Finally, the Transport layer processes TCP ports/checksums and hands off the bare application payload to the upper-layer web process.

Adım Adım Çözüm

1
Identify physical bit reception at Layer 1
The physical NIC processes physical signals into a raw frame.
De-encapsulation always starts at the lowest layer (Physical/Layer 1) upon arrival.
2
Process Data Link (Layer 2) header and trailer
The MAC header and FCS trailer are validated and stripped, exposing the IP packet.
Layer 2 headers must be processed and removed before lower-level network protocol headers can be read.
3
Process Network (Layer 3) header
The destination IP address is checked, the IP header is stripped, and the Protocol field indicates TCP.
Layer 3 processing routes the packet to the local host and identifies the appropriate Layer 4 protocol.
4
Process Transport (Layer 4) header and deliver to Application (Layer 7)
The TCP header is checked and removed, delivering raw HTTP payload data to port 80/443.
Transport headers manage port multiplexing and payload handoff to the application layer process.

Anahtar Kavram

De-encapsulation sequence across OSI stack (Bottom-Up: Physical → Data Link → Network → Transport → Application)
Tahmini Süre:1m 30s
Soru 519Soru

A network engineer is configuring perimeter firewall security rules and monitoring agents across an enterprise environment. Match each protocol on the left with its default port number and operational description on the right. Which pairs correctly associate each protocol with its respective port and function?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

TACACS+
SIP
BGP
SNMP Trap

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

TACACS+ corresponds to TCP Port 49 for AAA services; SIP corresponds to UDP Port 5060 for VoIP session control; BGP corresponds to TCP Port 179 for inter-domain routing peer sessions; SNMP Trap corresponds to UDP Port 162 for receiving unsolicited agent notifications.
Each protocol is accurately matched to its default port and transport mechanism: TACACS+ (TCP 49), SIP (UDP 5060), BGP (TCP 179), and SNMP Trap (UDP 162).

Adım Adım Çözüm

1
Identify the primary function and transport requirement for administrative AAA services using TACACS+.
TACACS+ uses TCP port 49 to securely communicate full-payload encrypted access requests.
Centralized AAA protocols require reliable transport over TCP port 49.
2
Identify the signaling protocol used for VoIP session management.
SIP uses port 5060 (typically over UDP for low latency) to set up and tear down multimedia calls.
Voice and video signaling standards use port 5060.
3
Determine the transport mechanism for inter-autonomous system routing updates via BGP.
BGP establishes connection-oriented TCP peering sessions on port 179.
Routing protocol data exchange between BGP peers requires reliable delivery over TCP port 179.
4
Distinguish between standard SNMP queries and SNMP Trap notifications.
While SNMP queries originate from the manager on UDP port 161, unsolicited SNMP Traps are sent by managed devices to the NMS listener on UDP port 162.
Trap notifications specifically target port 162 on the management server.

Anahtar Kavram

Port mapping and transport protocol selection for core network administration, routing, VoIP signaling, and event monitoring.
Soru 520Soru

A network administrator is assigning static IP addresses to newly deployed hypervisor hosts within the assigned IPv4 subnet block 172.16.48.0/22172.16.48.0/22. Which of the following IPv4 addresses represent valid, assignable host addresses on this network? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 172.16.48.1172.16.48.1; 172.16.51.200172.16.51.200

Cevap

The addresses 172.16.48.1 and 172.16.51.200 are valid, usable host IPv4 addresses on the 172.16.48.0/22 subnet.
The CIDR block 172.16.48.0/22 provides a usable host range of 172.16.48.1 through 172.16.51.254. The addresses 172.16.48.1 and 172.16.51.200 both fall within this valid range and can be assigned to host interfaces.

Adım Adım Çözüm

1
Determine the subnet mask and block size for a CIDR prefix of /22.
A /22 prefix corresponds to a subnet mask of 255.255.252.0. The third octet block size is 256 - 252 = 4.
Calculating the block size in the third octet establishes the boundary increments for subnet networks.
2
Calculate the network address and broadcast address boundaries for the subnet.
The network address is 172.16.48.0. The next subnet boundary begins at 172.16.52.0, making the broadcast address 172.16.51.255.
Network boundaries define the first address (network ID) and last address (broadcast ID) of the subnet block.
3
Identify the range of usable host IP addresses.
The range of usable host addresses spans from 172.16.48.1 (first usable) to 172.16.51.254 (last usable).
Usable host addresses exclude the network ID and broadcast ID.
4
Evaluate each candidate address against the usable host range.
172.16.48.1 and 172.16.51.200 fall strictly within the usable range (172.16.48.1 to 172.16.51.254), while 172.16.48.0 (network ID) and 172.16.51.255 (broadcast ID) are reserved and invalid for host assignment.
Host assignment requires selecting IP addresses strictly inside the usable range.

Anahtar Kavram

Determining Usable Host Ranges in IPv4 Subnetting
ÖncekiSayfa 26 / 27Sonraki
Networking Concepts Alıştırma Soruları — CompTIA Network+ — Sayfa 26 | Examkin