7. Network Layer (2) Flashcards
(28 cards)
What protocol is used to map IP addresses to MAC addresses in a local network?
Address Resolution Protocol (ARP)
What type of message does ARP send to find the MAC address of a host?
ARP sends a broadcast query message asking “Who is the owner of this IP?”
True or False: ARP replies are broadcast messages sent to all hosts in the network.
False
How does an ARP reply message differ from an ARP request?
An ARP reply is a unicast message directly sent to the requester with the MAC address
What is stored in an ARP Cache?
Recent mappings of IP addresses to MAC addresses
What is a Gratuitous ARP?
An ARP reply sent without a preceding request
Give two use cases for Gratuitous ARP.
Updating ARP mappings after a MAC address change and announcing a host’s presence when it joins a network.
What happens when an ARP request is made for a non-existing host?
Several ARP requests are sent with increasing intervals; if no reply is received
What is Proxy ARP?
When a node replies to an ARP request on behalf of another node
True or False: The destination MAC address in an ARP query frame is the broadcast address FF:FF:FF:FF:FF:FF.
True
Why is ARP vulnerable to attacks such as ARP poisoning?
Because ARP does not authenticate requests or replies and updates the ARP cache immediately upon receiving packets
What is the primary function of the Internet Control Message Protocol (ICMP)?
To send error messages and operational information about network problems back to the sender.
Which ICMP message type is used to check if a host is reachable (ping)?
Type 8 — Echo request
What does an ICMP Destination Unreachable message indicate?
That the destination host or network cannot be reached
How is trace route functionality implemented using ICMP?
By sending packets with increasing TTL values; routers send back ICMP Time Exceeded messages when TTL reaches zero
True or False: ICMP messages are encapsulated inside TCP segments.
False
How are ICMP messages encapsulated?
Inside IP packets
What are some common security issues related to ICMP?
ICMP can be exploited for denial-of-service attacks by sending spoofed echo requests or destination unreachable messages.
What is the main motivation for introducing IPv6?
To address the scarcity of IPv4 addresses
How long is an IPv6 address
and how is it represented?
What abbreviation rules apply to IPv6 addresses?
Leading zeros in each block can be omitted; consecutive blocks of zeros can be replaced by “::” but only once per address.
Name the three types of IPv6 addresses.
Unicast
Does IPv6 support broadcasting?
No
What is the prefix for global unicast IPv6 addresses?
2000::/3