25. Network Software Tools and Commands Flashcards

1
Q
  1. Which TCP/IP utility is most often used to test whether an IP host is up and functional?
    a. ftp
    b. telnet
    c. ping
    d. netstat
A

c. The program Packet Internet Groper (ping) is used to find out if a host has the IP stack initialised.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
  1. Which TCP/IP utility will produce the following result?:
    ? (192.168.2.1) at 38:94:ed:6a:b9:a9 on en0 ifscope [ethernet]
    ? (192.168.2.4) at b8:27:eb:cc:62:29 on en0 ifscope [ethernet]
    ? (192.168.2.5) at 9c:3e:53:2d:21:d2 on en0 ifscope [ethernet]
    ? (192.168.2.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
    a. arp
    b. netstat
    c. tracert
    d. nbstat
A

a. The ARP utility is used to display the contents of the ARP cache, which tracks the resolution of IP addresses to physical (MAC) addresses and will produce the displayed output.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
  1. Which Windows utility can you use to connect to a machine 50 miles away to troubleshoot?
    a. Remote Desktop
    b. netstat
    c. arp
    d. Wireshark
A

a. Microsoft has made what it call Remote Desktop software available for free with Windows products since Windows NT. When this software is installed (installed by default in later versions) on both source and destination computer, a remote desktop connection can be made.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which TCP/IP utility might produce the following output?
64 bytes from 192.168.2.10: icmp_seq=0 ttl=64 time=2.397 ms
64 bytes from 192.168.2.10: icmp_seq=1 ttl=64 time=0.885 ms
64 bytes from 192.168.2.10: icmp_seq=2 ttl=64 time=0.900 ms
a. tracert
b. ping
c. WINS
d. ipconfig

A

b. The purpose of the ping utility is to test the communications channel between two IP hosts as well as how long it takes the packets to get from one host to another.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  1. Which utility can you use to find the MAC and TCP/IP address of your Windows workstation?
    a. ping
    b. ipconfig
    c. ipconfig /all
    d. tracert
    e. telnet
A

c. The ipconfig /all utility will display the current configuration of TCP/IP on a given workstation - including the current IP address, DNS configurations, WINS configuration, and default gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  1. Which ping commands will verify that your local TCP/IP interface is working? (Choose all that apply)
    a. ping 204.1153.163.2
    b. ping 127.0.0.1
    c. ping localif
    d. ping localhost
    e. ping iphost
A

b, d. The address 127.0.0.1 is the special IP address designated for the local TCP/IP interface. The hostname localhost is the hostname given to the local interface. Therefore, pinging either the IP address or the hostname for the local interface will tell you whether the local interface is working.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  1. Which new Linux command was added recently to configure IP and interface parameters?
    a. nbstat
    b. ipconfig
    c. ip
    d. ifconfig
A

c. The command ip was added to most Linux distributions an is replacing the deprecated ifconfig command.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  1. You need to find a NIC’s specific MAC address and IP address. Which command-line tool can you use to find this information without physically going to the computer?
A

c. The arp utility will show you the resolved MAC to IP address of all hosts on your network segment. Remember, this will work for only local hosts, not remote hosts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  1. Which netstat utility switch displays all connections and listening ports?
    a. -a
    b. -f
    c. -p
    d. -t
A

a. The netstat -a command will display all connections and listening ports on the host computer. Remember that the -a must be lowercase and that it will not work correctly without the hyphen before it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  1. Wireshark is an example of a ______.
    a. Throughput tester
    b. Protocol analyser
    c. Remote connection tool
    d. IDS
A

b. Commercial sniffers like Wireshark and Omnipeek can capture any packets because they set the NIC to operate in promiscuous mode, which means the NIC processes all packets that it sees.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  1. Which utility produces output similar to the following?
    1 192.168.2.1 (192.168.2.1) 8.495 ms 5.703 ms 3.135 ms
    2 * * *
    3 * * *
    4 122.56.119.216 (122.56.119.216) 39.152 ms 8.769 ms 9.166 ms
    5 ae10-10.tkbr12.global-gateway.net.nz (202.50.232.29) 22.594 ms 8.837 ms 10.954 ms
    6 et5-1-5.sebr3.global-gateway.net.nz (202.50.232.250) 34.081 ms
    et3-0-0.sebr3.global-gateway.net.nz (122.56.127.50) 42.001 ms
    et9-0-0.sebr3.global-gateway.net.nz (202.50.232.182) 33.693 ms
    7 xe0-1-0-10.hmbr1.global-gateway.net.nz (210.55.202.114) 153.122 ms 148.794 ms
    202.50.232.25 (202.50.232.25) 168.621 ms
    8 ae0-10.hmbr2.global-gateway.net.nz (210.55.202.90) 152.846 ms 163.938 ms 149.104 ms
    9 10310.hkg.equinix.com (36.255.56.64) 184.850 ms 168.130 ms 178.626 ms
    10 ae11.pat1.sgx.yahoo.com (202.160.176.42) 267.755 ms 305.864 ms 306.989 ms
    11 ae-4.msr1.sg3.yahoo.com (203.84.209.75) 195.547 ms 190.525 ms 192.574 ms
    12 ae-2.clr2-a-gdc.sg3.yahoo.com (106.10.128.5) 202.156 ms
    ae-2.clr1-a-gdc.sg3.yahoo.com (106.10.128.3) 189.832 ms
    ae-2.clr2-a-gdc.sg3.yahoo.com (106.10.128.5) 278.659 ms
    13 lo0.fab3-3-gdc.sg3.yahoo.com (106.10.131.215) 307.809 ms
    lo0.fab4-3-gdc.sg3.yahoo.com (106.10.131.214) 187.962 ms
    lo0.fab2-3-gdc.sg3.yahoo.com (106.10.131.216) 203.482 ms
    14 lo0.usw1-1-lbd.sg3.yahoo.com (106.10.128.246) 188.605 ms
    lo0.usw2-1-lbd.sg3.yahoo.com (106.10.128.247) 412.878 ms
    lo0.usw1-1-lbd.sg3.yahoo.com (106.10.128.246) 200.782 ms
    15 media-router-fp74.prod.media.vip.sg3.yahoo.com (202.165.107.50) 187.384 ms 199.310 ms 20

a. arp
b. tracert
c. nbtstat
d. netstat

A

b. The tracert utility will give you that output. The tracert command (or trace for short) traces the route from the source IP host to the destination host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  1. You are the network administrator. A user calls you complaining that the performance of the intranet web server is sluggish. When you try to ping the server, it takes several seconds for the server to respond. You suspect that the problem is related to a router that is seriously overloaded. Which workstation utility could you use to find out which router is causing this problem?
    a. netstat
    b. nbtstat
    c. tracert
    d. ping
    e. arp
A

c The tracert utility will tell you which router is having the performance problem and how long it takes to move between each host. Tracert can be used to locate problem areas in a network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  1. Which ipconfig switch will display the most complete listing of IP configuration information for a station?
    a. /all
    b. /renew
    c. /release
    d. /?
A

a. the ipconfig /all switch will display the most complete listing of TCP/IP configuration information, also displaying the MAC address, DHCP lease times, and the DNS addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q
  1. Which utility will display a list of all the routers that a packet passes through on the way to an IP destination?
    a. netstat
    b. nbtstat
    c. tracert
    d. ping
    e. arp
A

c. The tracert utility returns the names and addresses of all routers through which a packet passes on its way to a destination host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. Which Windows TCP/IP utility could you use to find out whether a server is responding on TCP port 21?
    a. tcp
    b. port
    c. ping
    d. netstat
    e. telnet
A

e. The telnet utility can be used to test if a particular IP host is responding on a particular TCP port by running the telnet command and specifying the port number.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
  1. Which arp command can you use to display the currently cached ARP entries?
    a. arp
    b. arp -all
    c. arp -a
    d. ipconfig -arp
    e. arp -ipconfig
A

c. The arp -a command will display the current contents of the arp cache on the local workstation.

16
Q
  1. Which command-line tool would best be used to verify DNS functionality in Linux?
    a. netstat
    b. nbtstat
    c. dig
    e. icmp
    f. arp
A

c. dig is an old Unix command that will show you DNS server information.

17
Q
  1. Which of the following arp utility switches perform the same function?(choose all that apply)
    a. -g
    b. -A
    c. -d
    d. -a
A

a, d. The arp utility’s -a and -g switches perform the same function. They both show the current ARP cache.

18
Q
  1. Which of the following is not a chain type used by iptables?
    a. Forward
    b. Backward
    c. Input
    d. Output
A

b. There are three different chain types:
Input: Controls behaviour for incoming connections
Forward: Used for incoming connections that aren’t being delivered locally (like a router would receive)
Output: used for outgoing connections

19
Q
  1. Which command captures traffic on all interfaces?
    a. tcpdump -i any
    b. tcpdump -i eth0
    c. tcpdump host 192.168.5.5
    d. tcpdump host all
A

a. To capture traffic on all interfaces, use the keyword -i (interface) switch