Troubleshooting Tools Flashcards

1
Q

Which TCP/IP utility is most often used to test whether an IP host is up and functional?

ftp

telnet

ping

A

ping

The program Packet Internet Groper (ping) is used to find out if a host has the IP stack initialized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which TCP/IP utility will produce the following result?

Interface: 199.102.30.152
Internet Address Physical Address Type
199.102.30.152 A0-ee-00-5b-0e-ac dynamic

arp

netstat

tracert

A

arp

The arp utility is used to display the contents of the ARP cache, which tracks the resolution of IP addresses to physical (MAC) addresses and will produce the displayed output

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which Windows utility can you use to connect to a machine 50 miles away to troubleshoot?

Remote Desktop

netstat

arp

A

Remote Desktop

Microsoft has made what it calls Remote Desktop software available for free with Windows products since Windows NT. When this software is installed (installed by default in later versions) on both source and destination computers, a remote desktop connection can be made

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which TCP/IP utility might produce the following output?

Reply from 204.153.163.2: bytes=32 time=1ms TTL=128
Reply from 204.153.163.2: bytes=32 time=1ms TTL=128
Reply from 204.153.163.2: bytes=32 time=1ms TTL=128
Reply from 204.153.163.2: bytes=32 time<10ms TTL=128

tracert

ping

WINS

A

ping

The purpose of the ping utility is to test the communications channel between two IP hosts as well as how long it takes the packets to get from one host to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which utility can you use to find the MAC and TCP/IP addresses of your Windows workstation?

ping

ipconfig

ipconfig /all

A

ipconfig /all

The ipconfig /all utility will display the current configuration of TCP/IP on a given workstation—including the current IP address, DNS configuration, WINS configuration, and default gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which ping commands will verify that your local TCP/IP interface is working? (Choose all that apply.)

ping 204.153.163.2

ping 127.0.0.1

ping localif

ping localhost

A

ping 127.0.0.1

ping localhost

The address 127.0.0.1 is the special IP address designated for the local TCP/IP interface. The hostname localhost is the hostname given to the local interface. Therefore, pinging either the IP address or the hostname for the local interface will tell you whether the local interface is working

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which switch for the Windows nbtstat utility will display all NetBIOS name-resolution statistics?

–r

/r

–R

A

–r

The command nbtstat –r displays all the name resolutions performed by the local client as well as their associated IP addresses. The –R switch will reload the cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You need to find a NIC’s specific MAC address and IP address. Which command-line tool can you use to find this information without physically going to the computer?

ping

nbtstat

arp

A

arp

The arp utility will show you the resolved MAC to IP address of all hosts on your network segment. Remember, this will work for only local hosts, not remote hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which nbtstat utility switch will purge and reload the remote NetBIOS name table cache?

–r

–R

/r

A

–R

To purge and reload the remote NetBIOS name cache, you must use nbtstat –R. Remember that the R must be uppercase and that it will not work correctly without the hyphen before it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Wireshark is an example of a __________?

Throughput tester

Protocol analyzer

Remote connection tool

A

Protocol analyzer

Commercial sniffers like Wireshark and Omnipeek can capture any packets because they set the NIC to operate in promiscuous mode, which means the NIC processes all packets that it sees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which utility produces output similar to the following?

1 110 ms 96 ms 107 ms fgo1.corpcomm.net [209.74.93.10]
2 96 ms 126 ms 95 ms someone.corpcomm.net [209.74.93.1]
3 113 ms 119 ms 112 ms Serial5-1-1.GW2.MSP1.alter.net [157.130.100.185]
4 133 ms 123 ms 126 ms 152.ATM3-0.XR2.CHI6.ALTER.NET [146.188.209.126]
5 176 ms 133 ms 129 ms 290.ATM2-0.TR2.CHI4.ALTER.NET [146.188.209.10]
6 196 ms 184 ms 218 ms 106.ATM7-0.TR2.SCL1.ALTER.NET [146.188.136.162]
7 182 ms 187 ms 187 ms 298.ATM7-0.XR2.SJC1.ALTER.NET [146.188.146.61]
8 204 ms 176 ms 186 ms 192.ATM3-0-0.SAN-JOSE9- GW.ALTER.NET [146.188.144.133]
9 202 ms 198 ms 212 ms atm3-0-622M.cr1.sjc.globalcenter.net [206.57.16.17]
10 209 ms 202 ms 195 ms pos3-1-155M.br4.SJC.globalcenter.net [206.132.150.98]
11 190 ms * 191 ms pos0-0-0-155M.hr3.SNV.globalcenter.net [206.251.5.93]
12 195 ms 188 ms 188 ms pos4-1-0- 155M.hr2.SNV.globalcenter.net [206.132.150.206]
13 198 ms 202 ms 197 ms www10.yahoo.com [204.71.200.75]

arp

tracert

nbtstat

A

tracert

The tracert utility will give you that output. The tracert command (or trace for short) traces the route from the source IP host to the destination host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You are the network administrator. A user calls you, complaining that the performance of the intranet web server is sluggish. When you try to ping the server, it takes several seconds for the server to respond. You suspect that the problem is related to a router that is seriously overloaded. Which workstation utility could you use to find out which router is causing this problem?

netstat

nbtstat

tracert

A

tracert

The tracert utility will tell you which router is having the performance problem and how long it takes to move between each host. Tracert can be used to locate problem areas in a network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which ipconfig switch will display the most complete listing of IP configuration information for a station?

/all

/renew

/release

A

/all

The ipconfig /all switch will display the most complete listing of TCP/IP configuration information, also displaying the MAC address, DHCP lease times, and the DNS addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which utility will display a list of all the routers that a packet passes through on the way to an IP destination?

netstat

nbtstat

tracert

A

tracert

The tracert utility returns the names and addresses of all routers through which a packet passes on its way to a destination host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which Windows TCP/IP utility could you use to find out whether a server is responding on TCP port 21?

ping

nbtstat

telnet

A

telnet

The telnet utility can be used to test if a particular IP host is responding on a particular TCP port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which arp command can you use to display the currently cached ARP entries?

arp

arp –all

arp -a

A

arp -a

The arp -a command will display the current contents of the ARP cache on the local workstation

17
Q

Which command-line tool would best be used to verify DNS functionality?

netstat

nbtstat

dig

A

dig

dig is an old UNIX command that will show you DNS server information

18
Q

Which of the following arp utility switches perform the same function? (Choose all that apply.)

–g

–A

–d

–a

A

–g

–a

The arp utility’s –a and –g switches perform the same function. They both show the current ARP cache

19
Q

Which of the following is NOT a chain type used by iptables?

Forward

Backward

Input

A

Backward

There are three different chain types:

Input: Controls behavior for incoming connections.

Forward: Used for incoming connections that aren’t being delivered locally (like a router would receive)

Output: Used for outgoing connections

20
Q

Which command captures traffic on all interfaces?

Which command captures traffic on all interfaces?

tcpdump -i any

tcpdump -i eth0

tcpdump host 192.168.5.5

A

tcpdump -i any

To capture traffic on all interfaces, use the any keyword with the -i (interface) switch