Chapter 17 - Troubleshooting Tools Flashcards

1
Q

What command can you type from a command prompt to see the hops a packet takes to get to a destination host?

A

traceroute or tracert

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What tool would you use to verify a complaint about a slow network?

A

Throughput tester

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You need your IP address, subnet mask, default gateway, and DNS information. What command will you type from a Windows command prompt?

A

ipconfig /all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You need to log in as a dumb terminal to a server or Unix host and run programs. What application will you use?

A

Telnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You need to add a route to your Windows server’s routing table. What command will you use?

A

route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You want to log in to a server and transfer files. What application will you use?

A

FTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You need to check your name-resolution information on your host. What command will you type from the command prompt?

A

nslookup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You want to use netstat , but you want to see only the IP address, not the names of the hosts. Which modifier will you use?

A

netstat-n

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You want the IP configuration on a Unix host. What command will you type at the command prompt?

A

ifconfig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which Windows command will show you the routing table of your host or server?

A

route print

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which TCP/IP utility is most often used to test whether an IP host is up and functional?

A. ftp
B. telnet
C. ping
D. netstat

A

C. The program Packet Internet Groper ( ping ) is used to find out if a host has the IP stack initialized.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which TCP/IP utility will produce the following result? Interface: 199.102.30.152 Internet Address Physical Address Type 199.102.30.152 A0–ee–00–5b–0e–ac dynamic

A. arp
B. netstat
C. tracert
D. nbtstat

A

A. The arp utility is used to display the contents of the ARP cache, which tracks the resolution of IP addresses to physical (MAC) addresses and will produce the displayed output.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which Windows utility can you use to connect to a machine 50 miles away to troubleshoot?

A. Remote Desktop
B. netstat
C. arp
D. Wireshark

A

A. Microsoft has made what it calls Remote Desktop software available for free with Windows products since Windows NT. When this software is installed (installed by default in later versions) on both source and destination computers, a remote desktop connection can be made.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which TCP/IP utility might produce the following output?

Reply from 204.153.163.2: bytes=32 time=1ms TTL=128 Reply from 204.153.163.2: bytes=32 time=1ms TTL=128

Reply from 204.153.163.2: bytes=32 time=1ms TTL=128 Reply from 204.153.163.2: bytes=32 time<10ms TTL=128

A. tracert
B. ping
C. WINS
D. ipconfig

A

B. The purpose of the ping utility is to test the communications channel between two IP hosts as well as how long it takes the packets to get from one host to another.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which utility can you use to find the MAC and TCP/IP addresses of your Windows workstation?

A. ping
B. ipconfig 
C. ipconfig /all 
D. tracert 
E. telnet
A

C. The ipconfig /all utility will display the current configuration of TCP/IP on a given workstation—including the current IP address, DNS configuration, WINS configuration, and default gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which ping commands will verify that your local TCP/IP interface is working? (Choose all that apply.)

A. ping 204.153.163.2 
B. ping 127.0.0.1 
C. ping localif 
D. ping localhost
E. ping iphost
A

B, D. The address 127.0.0.1 is the special IP address designated for the local TCP/IP interface. The hostname localhost is the hostname given to the local interface. Therefore, pinging either the IP address or the hostname for the local interface will tell you whether the local interface is working.

17
Q

Which command-line tool can you use to find this information without physically going to the computer?

A. ping 
B. nbtstat 
C. arp 
D. netstat 
E. ftp
A

A. The command nbtstat–r displays all the name resolutions performed by the local client as well as their associated IP addresses. The–R switch will reload the cache.

18
Q

Which nbtstat utility switch will purge and reload the remote NetBIOS name table cache?

A. -r
B. -R
C. /r
D. /R

A
  1. B. To purge and reload the remote NetBIOS name cache, you must use nbtstat –R. Remember that the R must be uppercase and that it will not work correctly without the hyphen before it.
19
Q

Wireshark is an example of a ?

A. Throughput tester
B. Protocol analyzer
C. Remote connection tool
D. IDS

A
  1. B. Commercial sniffers like Wireshark and Omnipeek can capture any packets because they set the NIC to operate in promiscuous mode, which means the NIC processes all packets that it sees.
20
Q

Which utility produces output similar to the following?

1 110 ms 96 ms 107 ms fgo1.corpcomm.net [209.74.93.10]

2 96 ms 126 ms 95 ms someone.corpcomm.net [209.74.93.1]

10 209 ms 202 ms 195 ms pos3–1–155M.br4.SJC.globalcenter.net [206.132.150.98]

A. arp
B. tracert
C. nbtstat
D. netstat

A
  1. B. The tracert utility will give you that output. The tracert command (or trace for short) traces the route from the source IP host to the destination host.
21
Q

You are the network administrator. A user calls you, complaining that the performance of the intranet web server is sluggish. When you try to ping the server, it takes several seconds for the server to respond. You suspect that the problem is related to a router that is seriously overloaded. Which workstation utility could you use to find out which router is causing this problem?

A. netstat 
B. nbtstat 
C. tracert
D. ping 
E. arp
A
  1. C. The tracert utility will tell you which router is having the performance problem and how long it takes to move between each host. Tracert can be used to locate problem areas in a network.
22
Q

Which ipconfig switch will display the most complete listing of IP configuration information for a station?

A. /all
B. /renew
C. /release
D. /?

A

A. The ipconfig /all switch will display the most complete listing of TCP/IP configuration information, also displaying the MAC address, DHCP lease times, and the DNS addresses.

23
Q

Which Windows TCP/IP utility could you use to find out whether a server is responding on TCP port 21?

A. tcp 
B. port
C. ping 
D. nbtstat 
E. telnet
A
  1. E. The telnet utility can be used to test if a particular IP host is responding on a particular TCP port.
24
Q

Which utility will display a list of all the routers that a packet passes through on the way to an IP destination?

A. netstat 
B. nbtstat 
C. tracert 
D. ping 
E. arp
A

13.

25
Q

Which arp command can you use to display the currently cached ARP entries?

A. arp 
B. arp–all 
C. arp a 
D. ipconfig arp 
E. arp ipconfig
A

C. The arp a command will display the current contents of the ARP cache on the local workstation.

26
Q

Which command-line tool would best be used to verify DNS functionality?

A. netstat 
B. nbtstat 
C. dig 
D. icmp 
E. arp
A

C. dig is an old UNIX command that will show you DNS server information.

27
Q

Which of the following arp utility switches perform the same function? (Choose all that apply.)

A. -g
B. -A
C. -d
D. -a

A

A, D. The arp utility’s–a and–g switches perform the same function. They both show the current ARP cache.

28
Q

Which of the following is NOT a chain type used by iptables ?

A. Forward
B. Backward
C. Input
D. Output

A

B. There are three different chain types: Input: Controls behavior for incoming connections. Forward: Used for incoming connections that aren’t being delivered locally (like a router would receive) Output: Used for outgoing connections

29
Q

Which command captures traffic on all interfaces?

A. tcpdump i any
B. tcpdump i eth0
C. tcpdump host 192.168.5.5
D. tcpdump host all

A

A. To capture traffic on all interfaces, use the any keyword with the i (interface) switch.