network revision

Networks Fundamentals Exam Intake (46) - Predicted & Explained

1. The process of a web server adding a TCP header to the contents of a web page,
followed by adding an IP header and then adding a data-link header and trailer, is an
example of what?

(A) Same-layer interaction

(B) Data encapsulation
(C) OSI model
(D) All of these answers are correct

Professor's Explanation: You are wrapping data in layers (like an envelope inside a
box), which is the definition of encapsulation.

2. What information is added during encapsulation at OSI layer 4?

(A) Source and destination MAC address

(B) Source and destination IP address
(C) Source and destination port
(D) Source and destination application protocol

Professor's Explanation: Layer 4 (Transport) handles distinguishing applications using

Port numbers (e.g., 80 vs 25).

3. Availability is considered one of the security goals and it means ensuring that
illegitimate users are not denied access to information and resources.

(A) True
(B) False

Professor's Explanation: We want to deny illegitimate users. Availability is for

legitimate users.

4. Which of the following terms is NOT a valid term for the names of the seven OSI
layers?

(A) Application
(B) Data link
(C) Internet
(D) Presentation
 Professor's Explanation: "Internet" is a layer in the TCP/IP model. The OSI equivalent
is "Network".

5. The ISO/OSI model is a ___ model for internetworking.

(A) Expensive
(B) Conceptual
(C) Real
(D) Cheap

Professor's Explanation: It is a theoretical reference model, not the actual protocol we

use today (which is TCP/IP).

6. Which of the following layers must be adapted to the transmission media type?

(A) Physical Layer

(B) Network Layer
(C) Transport Layer
(D) Data-Link Layer

Professor's Explanation: This layer deals with the hardware: copper cables, fiber, or
wireless waves.

7. In the OSI model, which of the following layers provides error-free delivery of data?

(A) Data link

(B) Session
(C) Transport
(D) Network

Professor's Explanation: The Transport layer (specifically TCP) resends lost packets to
ensure the data is error-free.

8. The unit of communication at the physical layer is ___ and in the data link layer is
___.

(A) Bits, Frames

(B) Frames, Bits
(C) Segment, Frames
(D) Bits, Packets

Professor's Explanation: Layer 1 = Bits. Layer 2 = Frames. Layer 3 = Packets.

9. Host A receives a frame and discards it after determining that it is corrupt. At which
OSI layer are frames checked for errors?
 (A) Physical Layer
(B) Network Layer
(C) Data Link Layer
(D) Session Layer

Professor's Explanation: Layer 2 uses the FCS trailer to check if the Frame is corrupt.

10. You want to implement a mechanism that automates the IP configuration. Which
protocol will you use to accomplish this?

(A) DNS
(B) SMTP
(C) DHCP
(D) ARP

Professor's Explanation: DHCP (Dynamic Host Configuration Protocol) assigns IPs

automatically.

11. What actions does the host do when the DHCP server is down?

(A) It will have the same IP

(B) It will not have any IP
(C) It will use APIPA range (169.254.x.x)
(D) It will show an error

Professor's Explanation: Without a DHCP server, the PC assigns itself a Link-Local

(APIPA) address.

12. In which class does the IP address [Link] exist?

(A) Class A
(B) Class B
(C) Class C
(D) Class D

Professor's Explanation: Class A is 1–126. Since 92 is in that range, it's Class A.

13. The default mask for Class B network is:

(A) [Link]
(B) [Link]
(C) [Link]
(D) [Link]

Professor's Explanation: Class B uses /16 mask, which is [Link].

14. You are an administrator and responsible for a publicly accessible web server on
the internet. Can you assign the IP address [Link] to the server?

(A) True
(B) False

Professor's Explanation: 10.x.x.x is a Private IP range. It does not work on the public
internet.

15. The length of the IPv4 address is ___ bits.

(A) 8
(B) 4
(C) 32
(D) 64

Professor's Explanation: IPv4 uses 32 bits (4 bytes).

16. To test the IP stack on your local host, which IP address would you ping?

(A) [Link]
(B) [Link]
(C) [Link]
(D) [Link]

Professor's Explanation: This is the Loopback address.

17. The protocol used to send emails from host to mail server is:

(A) SMTP
(B) POP3
(C) IMAP
(D) Outlook

Professor's Explanation: SMTP Sends. POP3/IMAP Receive.

18. In case you have little inbox storage, which of the following protocols can be used
in e-mail service to keep your storage on the mail server always available?

(A) IMAP4
(B) POP3
(C) SMTP
(D) Outlook

Professor's Explanation: POP3 moves mail to your PC and deletes it from the server,
freeing up space.
19. When using POP3 protocol, an internet connection is needed all the time.

(A) True
(B) False

Professor's Explanation: Once downloaded, you can read POP3 mail offline.

20. Identify which of the services below use both TCP and UDP ports.

(A) FTP
(B) Telnet
(C) SSH
(D) DNS

Professor's Explanation: DNS uses UDP for speed and TCP for reliability (zone
transfers).

21. What Port Does Telnet Use?

(A) 22
(B) 80
(C) 23
(D) 110

Professor's Explanation: Telnet is port 23. (SSH is 22).

22. SSH protocol uses port 21.

(A) True
(B) False

Professor's Explanation: SSH uses port 22. FTP uses port 21.

23. Which range of port numbers identifies all well-known applications?

(A) 0 to 255
(B) 0 to 1023
(C) 1024 to 2047
(D) 256 to 1022

Professor's Explanation: These are the System ports reserved for core services.

24. UDP is characterized to be a ___ protocol.

(A) Reliable
(B) Best-effort delivery
(C) Connection-oriented
 (D) The most commonly used over Internet

Professor's Explanation: UDP sends without checking if it arrives. It makes its "best
effort."

25. TCP is used for situations where some data loss is acceptable, like live
video/audio, or where speed is a critical factor like online gaming.

(A) True
(B) False

Professor's Explanation: That description fits UDP. TCP is too slow for live gaming
because of error correction.

26. A ___ is a device that forwards packets between networks by processing the
routing information included in the packet.

(A) Firewall
(B) Bridge
(C) Router
(D) Hub

Professor's Explanation: Routers connect networks (Layer 3).

27. Layer 2 Switches depend on MAC address to transfer messages.

(A) True
(B) False

Professor's Explanation: Switches make decisions based on physical (MAC)

addresses.

28. ___ is used to map IP address into MAC address.

(A) ARP
(B) RARP
(C) IGMP
(D) ICMP

Professor's Explanation: Address Resolution Protocol resolves IP to MAC.

29. NETSTAT command can be used to:

(A) Test the network connectivity between machines

(B) Display the machine connections in IP/port
(C) Correct the packet errors in header and data
(D) Delete the default addresses of packets
 Professor's Explanation: It shows you who your computer is talking to.

30. What is the command used to view the ARP cache on my PC?

(A) arp -a
(B) arp -c
(C) arp -s
(D) arp -print

Professor's Explanation: arp -a lists the known MAC addresses.

31. Which of the following is a weakness in an information system that an attacker

might leverage to gain unauthorized access?

(A) Vulnerability
(B) Mitigation
(C) Exploit
(D) Risk

Professor's Explanation: Vulnerability = Weakness. Exploit = The attack itself.

32. Which of the following usually observe each activity of the victim, gather all
information in the background, and send it to someone else?

(A) Spyware
(B) Malware
(C) Adware
(D) None

Professor's Explanation: Spyware spies and reports back.

33. An intrusion detection system (IDS) is primarily designed to perform what

function?

(A) Test a system for vulnerabilities

(B) Detect abnormal activity
(C) Rate system performance
(D) Detect system failures

Professor's Explanation: IDS detects and alerts.

34. Which phase of hacking performs actual attack on a network or system?

(A) Reconnaissance
(B) Maintaining Access
(C) Scanning
 (D) Gaining Access

Professor's Explanation: Scanning is just looking. Gaining access is the actual break-
in.

35. What is the name of the attack method that can be used to crack passwords?

(A) DOS attack

(B) Brute force attack
(C) Smurf attack
(D) Spam

Professor's Explanation: Brute force tries every key until the door opens.

36. Which command is used to view the hardware (MAC) address of your Ethernet
card?

(A) ip addr
(B) ifconfig
(C) ping
(D) netstat

Professor's Note: In Linux, ifconfig (Interface Configuration) displays IP and MAC

addresses.

37. Which file is used to configure DNS server addresses (nameservers) in Linux?

(A) /etc/hosts
(B) /etc/network
(C) /etc/[Link]
(D) /etc/[Link]

Professor's Note: "resolv" stands for Resolver. You add nameserver [Link] here.

38. What is a "Socket" defined as?

(A) A hardware port

(B) An endpoint for communication (IP Address + Port Number)
(C) A session layer protocol
(D) A cable connector

Professor's Note: Remember: Socket = IP + Port.

39. Which Cloud Computing model provides virtualized computing resources (like
VMs and Storage) over the internet?

(A) SaaS (Software as a Service)

 (B) PaaS (Platform as a Service)
(C) IaaS (Infrastructure as a Service)
(D) DaaS (Database as a Service)

Professor's Note: IaaS gives you the "Infrastructure" (the raw hardware/VM). SaaS
gives you the final software (like Gmail).

40. What is the IP address [Link] known as?

(A) Broadcast Address

(B) Public Address
(C) Localhost (Loopback) Address
(D) Gateway Address

Professor's Note: This connects to yourself.

41. Which command lists all listening ports and the processes using them?

(A) netstat
(B) ipconfig
(C) ping
(D) nslookup

Professor's Note: netstat (Network Statistics) is your best friend for finding "intruders"
or open ports.

42. Which file in Red Hat Linux contains global network settings (like Hostname and
Gateway)?

(A) /etc/hostname
(B) /etc/sysconfig/network
(C) /etc/conf/net
(D) /etc/[Link]

Professor's Note: Specific to Red Hat/CentOS systems.

Ultimate Networks Cheat Sheet - Intake 46

1. Crucial Numbers (Ports & Addresses)
FTP: Ports 20 & 21 (File Transfer).
SSH: Port 22 (Secure Shell).
Note: If the exam asks "SSH uses Port 21", the answer is False.
Telnet: Port 23 (Unsecure).
 DNS: Port 53 (Uses BOTH TCP and UDP).
Well-Known Ports: Range 0 to 1023.
Loopback Address: [Link] (Used to test local IP stack/ping yourself).
APIPA: 169.254.x.x (Assigned when DHCP is down).
Private IP: 10.x.x.x (Cannot be assigned to a public web server).
Class A Range: 1 – 126 (e.g., IP [Link] is Class A).
Class B Mask: [Link].
IPv4 Length: 32 Bits.

2. OSI & TCP/IP Models

Encapsulation: The process of adding headers (TCP -> IP -> Data Link).
Layer 4 (Transport): Adds Source & Destination Port numbers.
Provides Error-Free delivery (TCP).
Layer 2 (Data Link):
Unit of communication is Frames.
Responsible for checking errors (corrupt frames).
Layer 1 (Physical):
Unit of communication is Bits.
Must be adapted to the Transmission Media type.
"Internet" Layer: This is a TCP/IP term, NOT a valid OSI layer.
OSI Model: It is a Conceptual model.

3. Protocols & Commands

DHCP: Protocol used to Automate IP configuration.
SMTP: Protocol used to SEND emails.
POP3: Protocol used to RECEIVE emails (keeps server storage available).
Note: POP3 does not need an internet connection all the time.
ARP: Maps IP Address → MAC Address.
UDP: Best-Effort delivery (Unreliable, no ACK).
TCP: Reliable delivery; NOT used for live video/gaming where speed is critical.
Router: Device that forwards packets between networks using routing info.
Switch: Layer 2 device that depends on MAC addresses.
arp -a: Command to view the ARP cache on a PC.
NETSTAT: Command to display machine connections (IP/Port).

4. Security
Vulnerability: A weakness in the system.
Exploit: The tool or code used to take advantage of a weakness.
Spyware: Malware that observes victim activity and sends info to someone else.
 IDS (Intrusion Detection System): Designed to Detect abnormal activity.
Availability: Ensuring Legitimate users are NOT denied access (False if it says
"illegitimate").
Gaining Access: The phase of hacking where the actual attack occurs.
Brute Force: Attack method used to crack passwords.

5. Linux & Advanced Network Concepts

ifconfig : Command to see MAC address and IP configuration.
/etc/[Link] : The file where DNS servers are configured.
/etc/sysconfig/network : File for global settings like Gateway and Hostname.
Socket: Defined as IP Address + Port Number.
IaaS: Infrastructure as a Service (VMs, Storage).
SaaS: Software as a Service (e.g., Google Docs, Email).
[Link]: Localhost (Loopback) address.
RPC: Remote Procedure Call (allows a program to execute code on a remote server).

To help you memorize faster, I’ve stripped away all the sentences. Here is a "Rapid Fire
Association" list.

Cover the right side with your hand and test yourself.

1. The "Keyword" Match (Memorize These Pairs)

If you see this Keyword... The Answer is...

Adding Headers (TCP/IP/Data-Link) Data Encapsulation
Layer 4 Adds... Ports (Source & Dest)
Physical Layer Unit Bits
Data Link Layer Unit Frames
Error Free Delivery Layer Transport
Corrupt Frame Check Layer Data Link
Transmission Media Layer Physical
OSI Model is... Conceptual
NOT an OSI Layer Internet
Automate IP Config DHCP
DHCP Down? APIPA (or 169.254.x.x)
Map IP -> MAC ARP
View ARP Cache arp -a
 If you see this Keyword... The Answer is...
Display Connections (IP/Port) NETSTAT
Ping Loopback (Test Stack) [Link]
Send Email SMTP
Receive Email (Save Storage) POP3
Both TCP & UDP DNS
Telnet Port 23
UDP Characteristic Best-Effort
Switch (Layer 2) uses... MAC Address
Router uses... Routing Information (IP)
Weakness Vulnerability
Observe & Send Info Spyware
IDS Function Detect abnormal activity
Actual Attack Phase Gaining Access
Crack Passwords Brute Force
[Link] Class A
Class B Mask [Link]
IPv4 Length 32 Bits

2. The "True or False" Cheat Code

Availability ensures illegitimate users are NOT denied? → FALSE (Mnemonic:
Illegitimate = Bad guys. We WANT to deny them.)
SSH uses Port 21? → FALSE (Mnemonic: SSH is 22. FTP is 21.)
10.x.x.x for Public Server? → FALSE (Mnemonic: 10 is Private.)
POP3 needs Internet All the Time? → FALSE (Mnemonic: You download it, then you can
go offline.)
TCP is for Live Gaming/Video? → FALSE (Mnemonic: TCP is too slow/safe. Gaming
needs UDP speed.)
DNS is needed to connect (if you have the IP)? → FALSE (Mnemonic: You can type the
IP directly.)
Layer 2 Switches depend on MAC? → TRUE

Go get some sleep, trust your memory, and you will do great! <3