F5-101 - Application Delivery Fundamentals

Question 1

Explain the purpose of a switch’s forwarding database

Question 2

Explain the purpose and functionality of ARP

Question 3

Explain the purpose and functionality of MAC addresses

Question 4

Explain the purpose and functionality of a broadcast domain

Question 5

Explain the purpose and functionality of VLANs

Question 6

Explain the purpose and functionality of link aggregation

Question 7

Explain the purpose and functionality of IP addressing and subnetting

Question 8

Given an IP address and net mask, determine the network IP and the broadcast IP

Question 9

Given a routing table and a destination IP address, identify which routing table entry the destination IP address will match

Question 10

Explain the purpose and functionality of Routing protocols

Question 11

Explain the purpose of fragmentation

Question 12

Given a fragment, identify what information is needed for reassembly

Question 13

Explain the purpose of TTL functionality

Question 14

Given a packet traversing a topology, document the source/destination IP address/MAC address changes at each hop

Question 15

Describe the function of each OSI layer

Question 16

Differentiate between the OSI layers

Question 17

Describe the purpose of the various address types at different OSI layers

Question 18

Compare/Contrast purpose and functionality of MTU and MSS

Question 19

Explain the purpose and functionality of TCP

Question 20

Explain the purpose and functionality of UDP

Question 21

Explain the purpose and functionality of ports in general

Question 22

Explain how retransmissions occur

Question 23

Explain the purpose and process of a reset

Question 24

Describe various TCP options

Question 25

Describe a TCP checksum error

Question 26

Describe how TCP addresses error correction

Question 27

Describe how the flow control process occurs

Question 28

Explain the purpose and functionality of HTTP

Question 29

Differentiate between HTTP versions

Question 30

Interpret HTTP status codes

Question 31

Determine an HTTP request method for a given use case

Question 32

Explain the purpose and functionality of HTTP keepalives, HTTP headers, DNS, SIP, FTP

Question 33

Differentiate between passive and active FTP

Question 34

Explain the purpose and functionality of SMTP

Question 35

Explain the purpose and functionality of a cookie

Question 36

Given a situation in which a client connects to a remote host, explain how the name resolution process occurs

Question 37

Explain the purpose and functionality of a URL

Question 38

AJAX

Answer 38

Asynchronous JavaScript and XML is a group of interrelated Web development techniques used on the client-side to create asynchronous Web applications

Question 39

JSON

Answer 39

JavaScript Object Notation is syntax for storing and exchanging text information. Much like XML. JSON is smaller than XML, faster and easier to parse.

Question 40

SOAP

Answer 40

SOAP, originally defined as Simple Object Access Protocol, is a protocol specification for exchanging structured information in the implementation of Web Services in computer networks. It relies on XML Information Set for its message format, and usually relies on other Application Layer protocols, most notablyHypertext Transfer Protocol (HTTP) or Simple Mail Transfer Protocol (SMTP), for message negotiation and transmission.

Question 41

XSS

Answer 41

• Cross-site scripting attacks are a special case of code injection
• can lead to an attacker gaining the ability to do anything a victim can do through their browser
• two gereral types: reflected, stored
• mitigate with validation and escaping on the server-side

^{<a><span>[</span>source<span>]</span></a> <a><span>[</span>source<span>]</span></a>}

Question 42

Positive security model

Answer 42

A “positive” security model or “whitelist” is one that defines what is allowed, and rejects everything else.

Question 43

non-persistent or reflected XSS

Answer 43

XSS attack typically delivered via email or a neutral web site. an innocent-looking URL, pointing to a trusted site contains the XSS vector. If the site is vulnerable to the vector, clicking the link can cause the victim’s browser to execute the injected script.

Question 44

persistent or stored XSS

Answer 44

persistent or stored XSS vulnerability is a variant of a cross-site scripting flaw which occurs when the data provided by the attacker is saved by the server, and then permanently displayed on “normal” pages returned to other users

Question 45

HTTP/2

Answer 45

new iteration of the HTTP protocol

Question 46

Heartbleed

Answer 46

a buffer over-read bug which affects the open-source cryptography library OpenSSL versions 1.0.1- 1.0.1f, 1.0.2-beta

Question 47

TCP flags

Nobody can eat, until a poor router says finished.

Answer 47

NS - Nonce Sum
CWR - Congestion Window Reduced
ECE - Explicit Congestion Notification Echo
Urg
Ack
Psh
Rst
Syn
Fin