ADVNET-DayBefore Flashcards
(75 cards)
Does SLAAC provide a permanent address
No IPv6 SLAAC addresses can change and may use randomised values for privacy
What is stateless DHCPv6 used for
To provide extra config like DNS and NTP alongside SLAAC without assigning addresses
What does DORA stand for in DHCP
Discover Offer Request Acknowledge
What does DAD stand for in IPv6
Duplicate Address Detection
How many usable IPs in a /24 subnet
254 usable IPs
What does the /27 prefix mean
27 bits are network bits leaving 5 for hosts which gives 30 usable addresses
Why is the first IP in a subnet reserved
It represents the network address not assigned to any device
What is the broadcast address used for
To send a message to all devices in a subnet
What does PMTUD stand for
Path MTU Discovery
Do IPv6 routers fragment packets
No fragmentation is handled by the sender using Path MTU Discovery
How does IPv6 detect duplicate addresses
Using DAD Duplicate Address Detection
What is the difference between PMTUD and longest prefix match
PMTUD finds smallest packet size longest prefix match is used in routing
What is a recursive DNS query
A full query done by a client to a resolver expecting a complete answer
What is an iterative DNS query
A partial query where the resolver asks each server step by step
What does DNS TTL control
How long a DNS record is cached before rechecking
What is a glue record in DNS
An IP address given with a nameserver to prevent circular lookups
What is the Kaminsky attack
DNS cache poisoning using guessed 16-bit QIDs
How does DNS amplification work
Small queries generate big responses sent to a spoofed victim IP
What does DNSSEC protect against
Spoofing and cache poisoning by authenticating DNS records
What do DoH and DoT protect against
Eavesdropping and tampering by encrypting DNS traffic
Does TCP provide encryption
No encryption is added by TLS above TCP
Is HTTP stateless
Yes each request is independent unless session data is manually handled
Why is active FTP bad for NAT
Because the server opens a new connection back to the client which NAT often blocks
Why is passive FTP better for NAT
Because the client opens both control and data connections