1) What is the purpose of the routing process?

Answer: to select the paths that are used to direct traffic to

destination networks
2) The exhibit shows a network topology. PC1 and PC2 are connected to the
Fa0/1 and Fa0/2 ports of the SW1 switch, respectively. SW1 is connected
through its Fa0/3 port to the Fa0/0 interface of the RT1 router. RT1 is
connected through its Fa0/1 to the Fa0/2 port of SW2 switch. SW2 is
connected through its Fa0/1 port to the PC3. Refer to the exhibit. PC1 issues
an ARP request because it needs to send a packet to PC2. In this scenario,
what will happen next?

Answer: PC2 will send an ARP reply with its MAC address

3) What is the prefix length notation for the subnet mask 255.255.255.224?

Answer: /27

4) What happens if part of an FTP message is not delivered to the destination?

Answer: The part of the FTP message that was lost is re-sent

5) Which TCP mechanism is used to identify missing segments?

Answer: sequence numbers

6) Which application layer protocol uses message types such as GET, PUT,
and POST?

Answer: HTTP

7) Which two characteristics are associated with UDP sessions? (Choose two.)

Answer:

 Destination devices receive traffic with minimal delay

 Received data is unacknowledged

8) What is a socket?

Answer: the combination of a source IP address and point number or

a destination IP address and point number
9) Match the compressed IPv6 address representation with the full IPv6
address. (Not all options are used.)

Answer:

 2001:0DB8:0010:0000:0000:0000:0011:0101
(2001:DB8:10::11:101)
 2001:0DB8:0000:0000:0010:0000:0011:0101
(2001:DB8::10:0:11:101)
 2001:0DB8:0010:0011:0000:0000:0000:0010
(2001:DB8:10:11::10)
 2001:0DB8:0000:0000:0000:0010:0011:0101
(2001:DB8::10:11:101)

10) What is the purpose of ICMP messages?

Answers: to provide feedback of IP packet transmissions

11) Which transport layer feature is used to guarantee session

establishment?

Answer: TCP 3-way handshake

12) Which term is used to describe the process of placing one message
format inside another message format?

Answer: encapsulation

13) How is a DHCPDISCOVER transmitted on a network to reach a

DHCP server?

Answer: A DHCPDISCOVER message is sent with the broadcast IP

address as the destination address

14) Refer to exhibit. A cybersecurity analyst is viewing captured ICMP

echo request packets sent from host A to host B on switch S2. What is the
source MAC address of Ethernet frames carrying the ICMP echo request
packets?

Answer: 00-60-0F-B1-D1-11

15) Refer to exhibit. What is the global IPv6 address of the host in
uncompressed format?

Answer: 2001:0DB8:0000:0000:0BAF:0000:3F57:FE94
16) What part of the URL, http://www.cisco.com/index.html, represents
the top-level DNS domain?

Answer: .com

17) Which three IP addresses are private? (Choose three.)

Answer:

 192.168.5.5
 172.16.4.4
 10.1.1.1

18) Refer to the exhibit. A cybersecurity analyst is viewing captured

packets forwarded on switch S1. Which device has the MAC address
50:6a:03:96:71:22?

Answer: router DG

19) Why does a Layer 3 device perform the ANDing process on a

destination IP address and mask?

Answer: to identify the network address of the destination network

20) Refer to the exhibit. Using the network in the exhibit, what would be
the default gateway address for host A in the 192.133.219.0 network?

Answer: 192.133.219.1

21) Refer to the exhibit. Consider a datagram that originates on the PC

and that is destined for the web server. Match the IP address and port
numbers that are in that datagram to the description. (Not all options are
used.)

Answer:

 192.168.1.2 (source IP address)

 192.168.2.2 (destination IP address)
 2578 (source port number)
 80 (destination port number)
22) In NAT translation for internal hosts, what address would be used by
external users to reach internal hosts?

Answer: inside global

23) What are two features of ARP? (Choose two.)

 Answer:

 If a host is ready to send a packet to a local destination device and

it has the IP address but not the MAC address of the destination,
it generates an ARP broadcast

 If a device receiving an ARP request has the destination IPv4

address, it responds with an ARP reply

24) Which PDU format is used when bits are received from the network
medium by the NIC of a host?

Answer: frame

25) A high school in New York (school A) is using videoconferencing

technology to establish student interactions with another high school (school
B) in Russia. The videoconferencing is conducted between two end devices
through the Internet. The network administrator of school A configures the
end device with the IP address 209.165.201.10. The administrator sends a
request for the IP address for the end device in school B and the response is
192.168.25.10. Neither school is using a VPN. The administrator knows
immediately that this IP will not work. Why?

Answer: This is a private IP address

26) Match the TCP / IP model layer with the function.

Answer:

 supports communication between applications (transport)

 represents data to her user (application)
 controls the media (network access)
 determines best path (internet)

27) What are two potential network problems that can result from ARP
operation? (Choose two.)

Answer:

 Network attackers could manipulate MAC address and IP

address mappings in ARP messages with the internet of
intercepting network traffic
  On large networks with low bandwidth, multiple ARP broadcasts
could cause data communication delays

28) What is the primary purpose of NAT?

Answer: conserve IPv4 addresses

What is a socket?

What is the purpose of the routing process?

to select the paths that are used to direct traffic to destination networks

to convert a URL name into an IP address

to forward traffic on the basis of MAC addresses

to provide secure Internet file transfer

to encapsulate data that is used to communicate across a network

The exhibit shows a network topology. PC1 and PC2 are connected to the
Fa0/1 and Fa0/2 ports of the SW1 switch, respectively. SW1 is connected
through its Fa0/3 port to the Fa0/0 interface of the RT1 router. RT1 is
connected through its Fa0/1 to the Fa0/2 port of SW2 switch. SW2 is
connected through its Fa0/1 port to the PC3.
Refer to the exhibit. PC1 issues an ARP request because it needs to send a
packet to PC2. In this scenario, what will happen next?

PC2 will send an ARP reply with its MAC address.

SW1 will send an ARP reply with its Fa0/1 MAC address.

RT1 will send an ARP reply with its Fa0/0 MAC address.

RT1 will send an ARP reply with the PC2 MAC address.

SW1 will send an ARP reply with the PC2 MAC address.

What is the prefix length notation for the subnet mask 255.255.255.224?

/28

/26

/27

/25
4

What happens if part of an FTP message is not delivered to the destination?

The entire FTP message is re-sent.

The message is lost because FTP does not use a reliable delivery method.

The part of the FTP message that was lost is re-sent.

The FTP source host sends a query to the destination host.

Which TCP mechanism is used to identify missing segments?

sequence numbers

window size

acknowledgments

FCS

Which application layer protocol uses message types such as GET, PUT, and
POST?

HTTP

DNS

DHCP
SMTP

POP3

Which two characteristics are associated with UDP sessions? (Choose two.)

Transmitted data segments are tracked.

Destination devices receive traffic with minimal delay.

Unacknowledged data packets are retransmitted.

Received data is unacknowledged.

Destination devices reassemble messages and pass them to an application.

What is a socket?

the combination of the source and destination sequence numbers and port numbers

the combination of the source and destination IP address and source and destination Ethernet address

the combination of a source IP address and port number or a destination IP address and port number

the combination of the source and destination sequence and acknowledgment numbers

14
The graphic shows a network diagram as follows:
PC A connects to switch S1, which connects to the G0/0 interface of router
R1. PC B connects to switch S2, which connects to the G0/1 interface of
router R1. A network analyst is connected to switch S2. The address of each
device is as follows:
PC A: 192.168.1.212 and FE80::1243:FEFE:8A43:2122 and 01-90-C0-E4-55-
BB
PC B: 192.168.2.101 and FE80::FBB2:E77A:D143 and 08-CB-8A-5C-D5-8A
R1 G0/0:192.168.1.1 and FE80::1 and 00-D0-D3-BE-79-26
R1 G0/1: 192.168.2.1 and FE80::1 and 00-60-0F-B1-D1-11

Refer to the exhibit. A cybersecurity analyst is viewing captured ICMP echo

request packets sent from host A to host B on switch S2. What is the source
MAC address of Ethernet frames carrying the ICMP echo request packets?

08-CB-8A-5C-D5-BA

00-60-0F-B1-D1-11

00-D0-D3-BE-79-26

01-90-C0-E4-55-BB

15
Refer to the exhibit. What is the global IPv6 address of the host in
uncompressed format?

2001:DB80:0000:0000:BAF0:0000:3F57:FE94

2001:0DB8:0000:0000:0000:0BAF:3F57:FE94

2001:0DB8:0000:0000:0BAF:0000:3F57:FE94

2001:0DB8:0000:0BAF:0000:0000:3F57:FE94

18

The graphic shows a DNS server and web server connected to an ISP router
on interfaces G0/1 and G0/0. The ISP router connects via interface S0/0/0 to
router DG interface S0/0/1. Router DG has a LAN which connects to switch
S1, PC-A, and a security analyst workstation. The security analyst is viewing
the output of a Wireshark capture.
The Wireshark output is as follows:
Frame 17: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on
interface 0
Ethernet II, Src: Micro-St_5c:d5:8a (d8:cb:8a:5c:d5:8a), Dst:
Netgear_96:71:22 (50:6a:03:96:71:22)
Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.18.47.62
User Datagram Protocol, Src Port: 61526, Dst Port: 53
Domain Name System (query)

Refer to the exhibit. A cybersecurity analyst is viewing captured packets

forwarded on switch S1. Which device has the MAC address
50:6a:03:96:71:22?

web server

router DG

router ISP

PC-A

DSN server
20

Refer to the exhibit. Using the network in the exhibit, what would be the default gatewa
for host A in the 192.133.219.0 network?

192.133.219.0
192.31.7.1

192.135.250.1

192.133.219.1

Option 4: source port number, is matched with description 5: 2578. Press spacebar to enter matching mode.
Option 1: application, is matched with description 2: represents data to the user. Press spacebar to enter matching
mode.

20

21

The exhibit shows a network topology with a PC, a web server, 2 layer 2
switches, and 2 routes. The PC (IP address 192.168.1.2) is connected to the
1st switch. The 1st switch is connected to the Fa0/0 of R1 (IP address
192.168.1.1). The S0/0/0 of R1 (IP address 192.168.0.1) is connected to the
S0/0/0 of R2 (IP address 192.168.0.2). The Fa0/0 of R2 (IP address
192.168.2.1) is connected to the 2nd switch. The 2nd switch is connected to
the web server (IP address 192.168.2.2).

Option 4: source port number, is matched with description 5: 2578. Press spacebar to enter matching mode.
Refer to the exhibit. Consider a datagram that originates on the PC and that is destined for the web
server. Match the IP addresses and port numbers that are in that datagram to the description. (Not all
options are used.)

destination IP address
destination port number
source IP address
source port number
192.168.1.1
192.168.1.2
source IP address
192.168.2.2
destination IP address
25
2578
source port number
80
destination port number