Deck 10: Internetworking 2

Question 1

In NAT,the ________ creates new external source IP addresses and port numbers.

A)router
B)firewall
C)source host
D)destination host

Answer 1

B

Question 2

Which of the following is a private IP address range?

A)10.x.x.x
B)128.171.x.x
C)Both A and B
D)Neither A nor B

Answer 2

A

Question 3

________ is a benefit provided by NAT.

A)Transparency
B)Security
C)Both A and B
D)Neither A nor B

Answer 3

C

Question 4

Which of the following can be used within a firm?

A)Private IP addresses.
B)Public IP addresses.
C)Both A and B
D)Neither A nor B

Question 5

In IP subnet planning,having a large subnet part allows more hosts per subnet.

Question 6

NAT provides security.

Question 7

The domain name system ________.

A)is a way to find a host's IP addresses if your computer only knows the host's host name
B)is a general naming system for the Internet
C)Both A and B
D)Neither A nor B

Question 8

NAT works automatically with all protocols.

Question 9

When the subnet part is made larger,the host part must be smaller.

Question 10

NAT can multiply the number of IP addresses available to the firm by over a thousand.

Question 11

________ is the processing of presenting external IP addresses that are different from internal IP addresses used within the firm.

A)DNS
B)NAT
C)DHCP
D)None of the above.

Question 12

You have a 20-bit network part and a 4-bit subnet part.How many hosts can you have per subnet?

A)14.
B)16.
C)254.
D)256.
E)None of the above.

Question 13

NAT enhances security by ________.

A)preventing sniffers from learning internal IP addresses
B)providing message integrity
C)Both A and B
D)Neither A nor B

Question 14

In DNS,a group of resources under the control of an organization is called a ________.

A)network
B)subnet
C)scope
D)domain

Question 15

Which of the following is true about NAT?

A)It can enhance security.
B)It presents problems for some protocols.
C)Both A and B
D)Neither A nor B

Question 16

Your firm has an 8-bit network part and an 8-bit subnet part.How many hosts can you have?

A)8.
B)16.
C)254.
D)65,534.

Question 17

If your subnet part is 8 bits long,you can have ________ subnets.

A)8
B)64
C)128
D)256
E)None of the above.

Question 18

________ is a general naming system for the Internet.

A)NAT
B)DNS
C)Both A and B
D)Neither A nor B

Question 19

In IP subnet planning,you need to have at least 130 subnets.How large should your subnet part be?

A)6.
B)8.
C)14.
D)16.
E)None of the above.

Question 20

Private IP address ranges are only used within a firm.

Question 21

Servers have static IP addresses so that clients can find them easily.

Question 22

The MIB is a(n)________.

A)schema
B)actual database
C)Both A and B
D)Neither A nor B

Question 23

________ servers provide ________ IP addresses to clients.

A)DNS,static
B)DNS,dynamic
C)DHCP,static
D)DHCP,dynamic

Question 24

In SNMP,the time-to-live value for a router interface is the value for an object.

Question 25

Clients can send a DHCP request message to multiple DHCP servers.

Question 26

The highest-level DNS servers are called ________.

A)root servers
B)first-level or top-level servers
C)Both A and B
D)Neither A nor B

Question 27

Corporations most wish to have ________ domain names.

A)first-level
B)second-level
C)third-level
D)None of the above.

Question 28

Which of the following is NOT an element in a network management system?

A)The manager.
B)The agent.
C)The object.
D)All of the above ARE elements in network management systems.

Question 29

Which of the following is usually given dynamic IP addresses?

A)Clients.
B)Servers.
C)Both A and B
D)Neither A nor B

Question 30

Servers are normally given ________ IP addresses.

A)well-known
B)static
C)dynamic
D)None of the above.

Question 31

Clients normally get their IP addresses from ________.

A)DNS servers
B)DHCP servers
C)directory servers
D)identity servers

Question 32

In SNMP,the manager communicates directly with a(n)________.

A)managed device
B)agent
C)Both A and B
D)Neither A nor B

Question 33

DHCP ________ are configurable parameters that determine which subnets the DHCP server will serve.

A)ranges
B)scopes
C)spans

Question 34

In the Domain Name System,there is a single root server.

Question 35

DHCP servers update the configuration information they store automatically.

Question 36

In SNMP,"object" is another name for "managed device."

Question 37

How many DNS root servers are there?

A)1.
B)2.
C)10.
D)13.
E)DNS does not use root servers.

Question 38

In SNMP,the manager communicates directly with the managed device.

Question 39

Most firms have both a primary and secondary DNS server.

Question 40

Servers are normally given dynamic IP addresses.

Question 41

IPsec operates at the data link layer.

Question 42

IPsec is a(n)________ layer standard.

A)physical
B)data link
C)internet
D)All of the above.

Question 43

Which of the following would be an SNMP object?

A)A router.
B)A default time to live value.
C)Both A and B
D)Neither A nor B

Question 44

In SNMP,Set commands tell the agent to change a parameter on the managed device.

Question 45

In SNMP,companies are often reluctant to use ________ commands because of security dangers.

A)Get
B)Set
C)Neither A nor B

Question 46

In SNMP,the ________ creates responses.

A)manager
B)agent
C)Both A and B
D)Neither A nor B

Question 47

In SNMP,the agent can create commands.

Question 48

Human interface functionality is defined by the SNMP standard.

Question 49

In SNMP,the manager creates both commands and responses.

Question 50

IPsec protects ________ layer messages.

A)data link
B)application
C)Both A and B
D)Neither A nor B

Question 51

Which of the following has good authentication?

A)SNMPv1.
B)SNMPv2.
C)SNMPv3.
D)SNMPv4.
E)All of the above.

Question 52

In SNMP,the ________ creates commands.

A)manager
B)agent
C)Both A and B
D)Neither A nor B

Question 53

A(n)________ is a message sent by an agent to let the manager know about a condition the agent has detected.Select the name used in the SNMP standard.

A)command
B)trap
C)alarm
D)notice
E)All of the above.

Question 54

SNMPv3 uses ________ for authentication.

A)community names
B)digital certificates and digital signatures
C)a different password for each manager-agent pair
D)All of the above.

Question 55

IPsec protects all layers above the internet layer.

Question 56

SNMPv1 uses ________ for authentication.

A)community names
B)digital certificates and digital signatures
C)a different password for each manager-agent pair
D)All of the above.

Question 57

In SNMP,the ________ creates traps.

A)manager
B)agent
C)Both A and B
D)Neither A nor B

Question 58

To be protected by IPsec,applications must be IPsec-aware.

Question 59

Which of the following would be an SNMP object?

A)Number of rows in routing table.
B)System uptime (since last reboot).
C)Both A and B
D)Neither A nor B

Question 60

In SNMP,the manager can create ________.

A)traps
B)GET commands
C)Both A and B
D)Neither A nor B

Question 61

Which of the following can be centrally managed?

A)SSL/TLS.
B)IPsec.
C)Both A and B
D)Neither A nor B

Question 62

Which of the following can protect all applications?

A)IPsec.
B)SSL/TLS.
C)Both A and B
D)Neither A nor B

Question 63

In tunnel mode,IPsec provides protection all the way between the two hosts.

Question 64

IPsec offers transparent protection.

Question 65

In tunnel mode,IPsec provides protection ________.

A)all the way between the two hosts
B)only between the IPsec servers
C)Both A and B
D)Neither A nor B

Question 66

Client PCs must have digital certificates in ________.

A)transport mode
B)tunnel mode
C)Both A and B
D)Neither A nor B

Question 67

The main disadvantage of transport mode protection compared to tunnel mode protection in IP is ________.

A)that it provides protection over only part of the route
B)higher cost
C)Both A and B
D)Neither A nor B

Question 68

SSL-TLS provides central policy management.

Question 69

When an SSL-TLS gateway is used,the client will have only a single SSL-TLS connection.

Question 70

The main limit of tunnel mode protection compared to transport mode protection in IPsec is ________.

A)protection over only part of the route
B)higher cost
C)Both A and B
D)Neither A nor B

Question 71

In transport mode,IPsec provides security over the internal networks.

Question 72

In SSL-TLS gateways,which of the following requires webification?

A)HTTP.
B)Database.
C)Both A and B
D)Neither A nor B

Question 73

In tunnel mode,IPsec provides protection ________.

A)all the way between the two hosts
B)only between the IPsec servers
C)Both A and B
D)Neither A nor B

Question 74

Which mode of IPsec is more expensive?

A)Transport mode.
B)Tunnel mode.
C)Both A and B are equally expensive.

Question 75

IPsec is used for site-to-site VPNs.

Question 76

IPsec is used for ________ VPNs.

A)remote-access
B)site-to-site
C)Both A and B
D)Neither A nor B

Question 77

A client connects to an SSL-TLS gateway to use three internal site webservers simultaneously.How many SSL-TLS connections must the browser manage?

A)2.
B)3.
C)4.
D)None of the above.

Question 78

SSL-TLS is very expensive to implement because special configuration must be done on the client PC.

Question 79

Client PCs need additional software to use basic SSL-TLS functions.

Question 80

SSL-TLS only provides protection to SSL-TLS-aware applications.