Tools of the Trade Quiz

Question 1

Which of the following items are used to resolve the MAC address to an IP Address?

A) ping
B) netstat
C) tracert
D) arp

Answer 1

D) arp

arp is used for MAC to IP address resolution. ping is used to test connectivity or trip time of a message sent. netstat shows TCP/UDP port connections. tracert collects the information of the trip, outputs it to a remote system, and displays the various router addresses.

Question 2

Which of the following utilities will open a port and put in listening mode?

A) ping
B) netcat
C) dig
D) ipconfig

Answer 2

B) netcat

netcat is a utility to read and write to a network connection using TCP or UDP. It will open a port to listening mode. ping is used to test connectivity or trip time of a message sent. ipconfig is used to show current TCP/IP network configuration values. dig is a DNS utility.

Question 3

When scanning a network, which of the following is a consideration?

A) Network scans should only be run at a set time and schedule
B) Network scans can’t detect what protocols are running
C) When doing a network scan, the web server needs to be shut off
D) Network scans can be resource intensive

Answer 3

D) Network scans can be resource intensive

Network scans can be extremely resource intensive. Scan may be run on any schedule or time, but when considering what is being scanned and the breadth of the scan, a network analyst might choose to set them up after work hours. There is never a need to disable server applications or turn off equipment unless that is part of the scan check. All network scanning tools can detect running protocols (on specific open ports).

Question 4

When a NIC in the network continuously transmits large quantities of arbitrary garbage and communication this is called:

A) RFI interruption
B) Broadcast storm
C) Wireshark
D) Loopback

Answer 4

B) Broadcast storm

A broadcast storm is when a NIC (or a port on a switch) sends out large amounts of broadcast traffic, thereby crippling network resources. RFI interruption refers to radio frequency interference: when an external radio source affects an electronic circuit. Wireshark is a network protocol analyzer. Loopback is the routing of signals back to the source to test transmission and transportation infrastructure.

Question 5

What do you call a device (such as a printer) that is set up to run on an SNMP network?

A) Master
B) Client
C) Network management station
D) Managed device

Answer 5

D) Managed device

Managed device is correct.

Question 6

True or false: Activity on the Web server is a network event.

A) True
B) False

Answer 6

A) True

True. The activity goes across the network.