Chapter 5 Troubleshooting Flashcards
What is Netflow?
A packet analyzer can be used to measure network traffic statistics but trying to record each frame imposes a heavy processing overhead on the network tap or mirror port. Collecting just the packet metadata, rather than the whole packet
payload, reduces the bandwidth required by the sniffer. Technologies such as Cisco’s NetFlow (cisco.com/c/en/us/products/ios-nx-os-software/ios-netflow/index.html) gather traffic metadata only and report it to a structured database.
NetFlow involves deploying three types of components:
- A NetFlow exporter is configured on network appliances (switches, routers, and firewalls)
- A NetFlow collector aggregates flows from multiple exporters.
- A NetFlow analyzer reports and interprets information by querying the collector and can be configured to generate alerts and notifications.
What advantage does collecting only packet metadata offer?
a) It reduces the risk of data loss
b) It increases network security
c) It reduces the processing overhead on the network tap
d) It decreases the likelihood of network congestion
c) It reduces the processing overhead on the network tap
Collecting just the packet metadata, rather than the whole packet
payload, reduces the bandwidth required by the sniffer. Technologies such as** Cisco’s NetFlow** gather traffic metadata only and report it to a structured database.
What remote management service is associated with TCP port 23?
Telnet is both a protocol and a terminal emulation software tool.
In order to support Telnet access, the remote computer must run a service known as the Telnet
Daemon. The Telnet Daemon listens on TCP port 23 by default.
is Putty a terminal emulator?
Yes
What is the purpose of software utilities like iperf3, Ttcp, and bwping in networking?
a) To encrypt network traffic
b) To measure network throughput
c) To block unauthorized access
d) To optimize network latency
b) To measure network throughput
ping can be used to perform a basic
connectivity test
if ping is not reach a remote device, it might mean that a ROUTER of FIREWALL blocks it for security purposes. So do not assume that a device is down, it might just be a router or firewall that is blocking your ping request.
ping: 5 steps to ping
- loopback address
- Local IP
- Another Node
- default gateway
- ping a remote node
ipconfig without any switches will display the:
- IP address
- subnet mask, and
- default gateway (router) for all network interfaces to which TCP/IP is bound.
ipconfig /all displays complete TCP/IP configuration parameters for each interface, including:
- whether the Dynamic Host Configuration Protocol (DHCP) is enabled
- DHCP server IP
- hardware (MAC) address.
- Lease Obtian
- Lease Expire
What does ipconfig /release interface do?
releases the IP address obtained from a DHCP Server so that the interface(s) will no longer have an IP address.
DNS Troubleshooting
What is the purpose of name resolution troubleshooting in networking?
a) To encrypt network traffic
b) To optimize network latency
c) To measure network throughput
d) To resolve issues related to domain name resolution
d) To resolve issues related to domain name resolution
DNS Troubleshooting
Why might configuration errors occur in name resolution troubleshooting?
a) Due to encryption of network traffic
b) Due to optimization of network latency
c) Due to caching and the distributed nature of the system
d) Due to measuring network throughput
c) Due to caching and the distributed nature of the system
DNS Troubleshooting
What is one way to verify the name configured on a host in Windows?
a) Using the command ipconfig /all
b) Using the command hostname –fqdn
c) Using the command nslookup
d) Using the command ifconfig
a) Using the command ipconfig /all
DNS Troubleshooting
What command can be used in Linux to display the fully qualified domain name (FQDN) of the local host?
a) ipconfig /all
b) hostname –fqdn
c) nslookup
d) ifconfig
b) hostname –fqdn
nslookup
Host can be either a:
a) Host ID, subnet mask, and gateway
b) IP address, subnet mask, and MAC address
c) Host name, domain name, FQDN, or IP address
d) DNS server, DHCP server, and gateway
c) Host name, domain name, FQDN, or IP address
In a Windows environment, which command can be used to troubleshoot DNS name resolution?
a) ping
b) tracert
c) nslookup
d) ipconfig
c) nslookup
What is the purpose of the ipconfig /displaydns command in Windows?
a) To troubleshoot network connectivity issues
b) To display the DNS configuration of the local host
c) To measure network latency
d) To display the contents of the DNS resolver cache
d) To display the contents of the DNS resolver cache
What type of information does the ipconfig /displaydns command provide?
a) Network throughput statistics
b) Fully Qualified Domain Names (FQDNs)
c) IP addresses of DNS servers
d) Cached DNS records
d) Cached DNS records
What are the two modes of operation for the nslookup command?
a) Query and Configuration
b) Diagnostic and Interactive
c) Recursive and Iterative
d) Quick and Advanced
b) Diagnostic and Interactive
What is the primary purpose of the traceroute tool in networking?
a) To measure network latency
b) To encrypt network traffic
c) To test the entire path between two nodes
d) To configure network adapters
c) To test the entire path between two nodes