CH8

Question 1

What are the purposes of network segmentation?

Answer 1

• Problems are easier to locate and solve
• Routers can more easily manage IP address spaces that don’t overlap
• Routing is more efficient on larger networks
• Enhance security
• Improve performance
• Simplify troubleshooting

Question 2

What two parts is an IPv4 address divided into?

Answer 2

Network ID and Host ID

Question 3

What is a subnet mask used for?

Answer 3

To determine which part of an IP address is the network ID and which part is the host ID.

Question 4

What is classless addressing also called?

Answer 4

Subnetting

Question 5

What does VLSM stand for, and what does it do?

Answer 5

Variable Length Subnet Mask, is allows subnets to be further subdivided into smaller groupings.

Question 6

How is IPv6 subnetting simpler than IPv4 subnetting?

Answer 6

• IPv6 addressing uses no classes
• IPv6 does not use subnet masks
• A single IPv6 subnet can supply a massive amount of addresses

Question 7

What is a VLAN?

Answer 7

A virtual local area network that groups ports on a switch.

Question 8

What are some reasons for using VLANS?

Answer 8

• Identify groups of devices for priority handling
• Isolate connections with heavy traffic
• Isolate groups using legacy protocols
• Separate groups needing special security
• Configure temporary networks
• Reduce the cost of networking equipment

Question 9

What is a trunk port?

Answer 9

A port that connects a switch to another networking device and manages traffic from multiple VLANs.

Question 10

What is an SVI?

Answer 10

Switch Virtual Interface, a virtual interface on a Layer 3 switch that can handle inter-VLAN routing.

Question 11

Name common VLAN types

Answer 11

• Default VLAN
• Native VLAN
• Data VLAN
• Management VLAN
• Voice VLAN

Question 12

What is VLAN hopping?

Answer 12

When an attacker generates transmissions that appear to belong to a protected VLAN to access sensitive data or inject harmful software.

Question 13

What is a VPC?

Answer 13

Virtual Private Cloud, a customer-managed, software-defined portion of a larger, cloud-based network.

Question 14

What are two types of subnets an AWS VPC can contain?

Answer 14

Private subnet and public subnet.

Question 15

What is a SAN?

Answer 15

Storage Area Network, an isolated network segment dedicated to data storage.

Question 16

What happens when a network is segmented into multiple smaller networks?

Answer 16

Traffic on one network is separated from another network’s traffic and each network is its own broadcast domain.

Question 17

What are the goals of network segmentation?

Answer 17

• Enhance security
• Improve performance
• Simplify troubleshooting

Question 18

According to what groupings are networks commonly segmented?

Answer 18

• Geographic locations
• Departmental boundaries
• Device types

Question 19

What does OT stand for in networking?

Answer 19

Operational Technology

Question 20

What are the three general types of zones in OT systems?

Answer 20

• Untrusted zone
• Trusted zone
• Screened subnet

Question 21

What is micro-segmentation?

Answer 21

Requires granular zoning and applies object-level security to individual resources.

Question 22

What is a SAN?

Answer 22

An isolated network segment dedicated to data storage.

Question 23

What does a SAN abstract?

Answer 23

Storage services from compute services.

Question 24

What are the networking technologies that a SAN relies on?

Answer 24

• FC (Fibre Channel)
• FCoE (Fibre Channel over Ethernet)
• iSCSI (Internet SCSI)
• IB (InfiniBand)

Question 25

What is the purpose of subnetting?

Answer 25

To divide a pool of IP addresses into smaller groups or subnets.

Question 26

What does an IPv4 address consist of?

Answer 26

A network ID and a host ID.

Question 27

What determines the number of bits in the IP address that belong to the network ID?

Answer 27

The number of 1s in the subnet mask bits.

Question 28

What is classful addressing?

Answer 28

Uses whole octets for the network ID.

Question 29

What is VLSM?

Answer 29

Variable Length Subnet Mask allows subnets to be further subdivided into smaller groupings.

Question 30

What is the first step to subnet a network?

Answer 30

Borrow from host bits.

Question 31

What is a VLAN?

Answer 31

A virtual local area network that groups ports on a switch.

Question 32

What are some reasons for using VLANs?

Answer 32

* Identify groups of devices whose data should be prioritized * Isolate connections with heavy traffic * Separate groups needing special security

Question 33

What is the difference between an access port and a trunk port?

Answer 33

* Access port – connects the switch to a host * Trunk port – connects the switch to a networking device and manages traffic from multiple VLANs

Question 34

What common VLAN type is typically preconfigured on a switch?

Answer 34

Default VLAN

Question 35

What is VLAN hopping?

Answer 35

Occurs when an attacker generates transmissions that appear to belong to a protected VLAN.

Question 36

What is VXLAN?

Answer 36

Virtual Extensible Local Area Network that creates a layer 2 network overlaying a layer 3 network.

Question 37

What is a VPC?

Answer 37

Virtual private cloud, a customer-managed, software-defined portion of a larger cloud-based network.

Question 38

Fill in the blank: A subnet mask is used so devices can determine which part of an IP address is the _______ and which part is the host ID.

Answer 38

network ID

Question 39

True or False: Subnetting in IPv6 is more complex than in IPv4.

Answer 39

False

Question 40

What does VXLAN stand for?

Answer 40

Virtual Extensible Local Area Network ## Footnote VXLAN is a network virtualization technology that allows for the creation of a layer 2 network over a layer 3 infrastructure.

Question 41

What is a VPC?

Answer 41

Virtual Private Cloud ## Footnote A VPC is a customer-managed, software-defined part of a larger cloud-based network.

Question 42

What are the two types of subnets in an AWS VPC?

Answer 42

* Private subnet * Public subnet ## Footnote A private subnet hosts resources not accessible from the Internet, while a public subnet hosts resources that should be directly accessible from the Internet.

Question 43

What does a NAT gateway do?

Answer 43

Allows communication from a private subnet to the Internet indirectly ## Footnote The NAT gateway is located in the public subnet and facilitates secure internet connectivity for resources in the private subnet.

Question 44

What is the recommended MTU size for networks supporting VXLANs?

Answer 44

1,600 bytes ## Footnote A larger MTU is needed to accommodate the VXLAN overhead.

Question 45

What is the role of a CDN?

Answer 45

Delivers data closer to users using globally distributed infrastructure ## Footnote A Content Delivery Network (CDN) enhances performance by reducing latency through geographical distribution.

Question 46

What is edge computing?

Answer 46

Running compute resources closer to users on edge devices ## Footnote Edge computing complements cloud services by processing data nearer to the source of data generation.

Question 47

At what OSI layer do VLANs function?

Answer 47

Data link layer ## Footnote VLANs operate at Layer 2 and create multiple broadcast domains from a single broadcast domain.

Question 48

Name the benefits of segmenting a network.

Answer 48

* Improved security * Enhanced performance * Better traffic management * Reduced collision domains ## Footnote Network segmentation helps in isolating network traffic, improving security and efficiency.

Question 49

Fill in the blank: A _______ is associated with a logical entity called an Internet Gateway.

Answer 49

public subnet ## Footnote The public subnet is designed to host resources that need direct internet access.

Question 50

What should you be able to do after completing the lesson?

Answer 50

* Explain the purposes of network segmentation * Apply subnetting to network devices * Configure VLANs * Describe networking and segmentation options in the cloud ## Footnote These objectives ensure a comprehensive understanding of network management in cloud environments.