Domain 2.3 Flashcards

1
Q

What are the first two fields of an Ethernet Frame, and what is their purpose

A
  1. Preamble: 7 bytes:
    56 alternating 1’s & 0’s used for synchronization, and singaling that a frame is coming.
  2. SFD (Start Frame Delimiter) 1 byte
    Used to signal the end of the Preamble.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the ladder three fields of an ethernet frame

A

Ethertype 2 bytes:
Used to describe the data contained in the payload.

Payload 46-1500 Bytes:
Layer 3 and higher data being transmitted.

FCS (Frame Check Sequence) 4 Bytes
CRC checksum of the frame.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Describe what a MAC address is

A

MAC Addresses are hexadecimal physical addresses of a NIC.

They are 48bits long or 6 Bytes

They are separated into two parts:

The OUI (organizationally unique ID)
&
Network interface Controller Specific serial number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Describe half duplex

A

A half duplex device cannot send and receive simultaneously.

  • All LAN hubs are half-duplex

-Switch intfteraces can be set to as 1/2 duplex, but usually only when the device connected to the switch interface is also half/duplex

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Describe full duplex

A

Data can be sent and received at the same time.
- A properly configured switch will be set to full duplex.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

True or False, CSMA/CD is in widespread use today

A

False

CSMA is only half duplex ethernet, and is no longer in use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Explain how CSMA/CD works

A
  1. Listen for an opening on the line
    -If someone is transmitting, set a timer and wait
  2. Send a frame of data when possible.
    -No prioritization.
  3. If a collision occurs
    - Send a jam signal to notify other TX’ers that a collision occured.
  4. Everyone sets a random timer, waits, and then starts back at step 1.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the primary functions of a switch

A

To forward or drop frames.

Gather a constantly updating list of MAC addresses.
- Built using the Src MAC of incoming frames.

Maintain a loop-free environment using STP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does a switch learn MAC addresses, and what does it do when it cannot find a MAC.

A

The switch will take note of the src address of the frame and the interface that the frame came in on.

If the Switch does not know the interface that the dest MAC is on, it will flood the frame to everyone. Devices ignore the frame if it is not addressed to them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is NDP and how do routers discover one another using it?

A

Network discovery protocol.

Routers that are brought online will perform a Router Solicitation (RS) and the other routers that have a multicast address configured will respond with a RA (router adverstimsent)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Why was NDP created

A

It is used with IPv6 to replace ARP. Instead of using broadcasts, which don’t exist in IPv6, NDP makes use of multicast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is SLAAC?

A

Stateless Address Auto-configuration:

  • Devices automatically create themselves an IP address without a DHCP server.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is DAD

A

Duplicate Address Detection -

Protocol that will detect duplicate IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do endpoints find one another using NDP?

A

Endpoints send NS (Neighbor Solicitations) to a multicast address.

Other Endpoints will respond using a NA (Neighbor Advertisement) with their MAC Address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the two forms of PoE

A

EndSpans - Devices with built in power

MidSpans - Devices that are in-line power injectors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the two power modes for PoE

A

Mode A: Power over data pairs - used
Cat5 and newer

Mode B: Power on the spare pairs
Only used with Cat5 and older 10/100 Mbit/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is IEEE 802.af

A

The original PoE standard

15.4 watts DC power

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is IEEE 802.at

A

PoE+

25.5 watts DC power

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a LAN consisted of

A

A group of devices in the same broadcast domain

20
Q

What can VLAN be described as

A

A group of devices in the same broadcast domain separated logically instead of physically.

21
Q

What is added to Ethernet Frames to denote which VLAN the Frame belongs to?

A

VLAN ID - 12 bits long allowing up to 4094 possible VLANs

22
Q

What is the “Default VLAN” value, and the default range?

A

Default VLAN = 1
Default Range = 1 - 1005

23
Q

What is the Extended Range of VLAN IDs

A

1006-4094

24
Q

What is the IEEE 802.1Q standard

A

This is the standard for VLAN trunking

25
Q

How does data travel between switches when there are multiple VLANs crossing the same path.

A

802.1Q or trunk links allow for the sharing of a physical link between networking device where VLAN traffic can cross.

26
Q

How can the performance concerns between hosting Voice and data over the same line be addressed?

A

Put Voice and data on separate VLANs. This provides separation so that data congestion does not add delay and latency to voice. Each port on the switch can be set up as a 802.1q trunk

27
Q

What is STP and what feature deficiency exists at layer 2 that justifies it

A

There is no TTL for layer 2 frames. If a loop were to occur, frames will exist and be amplified forever.

STP provides loop protection used when connecting two or more switches together.

28
Q

What is 802.1D

A

Older version of STP that was designed to provide loop protection on bridged (switched) networks

29
Q

What is 802.1w

A

RSTP - updated STP

-Faster convergence following network changes.

  • Backwards compatible with 802.1d
  • Mostly an update to STP, not a complete overhaul
30
Q

What are the four STP port states?

A

Blocking - Interface is not forwarding traffic in order to prevent loop.

Listening - Not forwarding and cleaning the MAC Table.

Learning - Not forwarding and adding to the MAC table

Forwarding - Data passes through and is fully operational

Disabled - The admin turned the interface off.

31
Q

What are the basic interface items that need to be configured for a switch interface?

A

The config on the switch interface must match the device that is connected on the other side. The interface can be set to automatic and will match the device connected, or manual, with which these settings are needed:

Speed:
Duplex:

32
Q

What are common layer 3 interface settings

A

Routing interfaces-

-Management Interfaces

-IP Addresses, Subnet Mask, Default Gateway, and DN

33
Q

True or False: Each device port on a switch should be assigned a VLAN

A

True. it is a best practice to have each port be configured.

34
Q

What is the point of trunking and what is its IEEE #

A

802.1Q

Trunking is used to connect switches together, and allows for multiple VLANs to traverse a single link

35
Q

What are the two types of vlan frames & explain them

A

Tagged and Untagged

-Non-tagged frames are on the default VLAN, which is also considered the native LAN.

-Tagged frames have a VLAN ID in the frame.

36
Q

How are tags on Ethernet frames managed

A

Trunk ports add VLAN tags to outgoing frames.

Trunk ports remove VLAN tags on incoming frames.

37
Q

What is LAG?

A

Link Aggregation Control Protocol (LACP)

-Allows multiple switch interfaces to act as a single interface.

  • Adds additional automation and management.
38
Q

What is port mirroring, why is it useful, and how can it be implemented?

A

-Allows traffic to be copied from one interface to another

  • Can be used for PCAP for IDS or other systems

Typically implemented using a Network Tap or Span port on the switch itself.

39
Q

What is a Jumbo frame

A

A frame that has a payload size greater than 1500 bytes

Up to 9,216 bytes (9000 is typically accepted)

40
Q

What is the benefit or purpose of jumbo frames.

A

-They increase transfer efficiency

This results in fewer packers to switch/route

41
Q

True or False: All devices are configured with Jumbo Frames by default

A

False:

Not all devices support jumbo frames, and Jumbo frames

42
Q

What is 802.3x and why is it needed?

A

Ethernet networks do not have flow control. As a result, the network flow can be too fast for the buffers on some networking devices such as switches, which will cause dropped packets.

802.3X is the “pause” frame

43
Q

What are some ways to increase port level security

A

Configure a Max # of SRC MAC addresses on a single port.

The switch will then keep a list of MAC Addresses, once the maximum has been exceeded, the port will be disabled

44
Q

What is MDI and MDI-X

A

MDI is the MEdia Dependant Interface, This would be the cabling that is included on the NIC of an endpoint device

MDI-X is the standard for Switch and router interfaces

45
Q

What is a straight through cable using the MDI matrix

A

MDI - MDIX

46
Q

What is a cross over cable using MDI Matrix

A

MDI - MDI
or
MDI-X - MDI-X