Midterm exam Flashcards

1
Q

Typically, a network service is a running daemon (e.g., a thread/process). Such a daemon listens for network traffic on a particular _______, which is associated with the service.

A

Port number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The TCP/IP address of 127.0.0.1 is commonly referred to as the __________.

A

loopback address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which of the following devices forwards data (IP) packets from an internal subnet to an external router?

A

Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which of the following commands can be used to modify the route table on a Linux computer?

A

IP
route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

The line that configures the hostname for a Fedora Linux machine at boot time can be found in which of the following files?

A

/etc/hostname

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of the following can be used to resolve a hostname to the IP address? (Choose all that apply.)

A

DNS service
/etc/hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which file holds the methods to be used and the order in which they will be applied for host name resolution?

A

/etc/nsswitch.conf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following commands can be used to send data to a specific port on a server from a client.

A

netcat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following utilities can be used to download data/file from a web link?

A

wget
curl

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following directories stores the connection profiles for NetworkManager?

A

/etc/NetworkManager/system-connections/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which of the following can be used to change the hostname of a linux server

A

nmcli
hostnamectl

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of the following can be used to store the DNS server’s IP address?

A

/etc/resolv.conf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Assume that each lab has 31 hosts. If each lab needs to have its own subnet, what is the minimum number of bits required for the subnet mask?

A

26

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Suppose you have 360 hosts and want to have no more than 60 hosts per subnet. How many class C addresses would you need? How many subnets would you have left over from your allocation?

A

2,2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following can be a function of the DHCP service?

A

Provide the DNS server address to a DHCP client

Provide the gateway address to a DHCP client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which of the following are optional in the DHCP lease process?

A

DHCPDISCOVER
DHCPOFFER

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

DHCP stands for Dynamic host configuration protocol as a result it only assigns dynamic IP address to clients but not static IP addresses

A

false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

A DHCP starvation attack is type of attack where a malicious client exhausts the IP addresses in the DHCP scope preventing legitimate clients from obtaining an ip address, how can it be prevented.

A

I can be prevented by using MAC address filtering

19
Q

Which of the following is the type of resource record that represents a DNS server

A

ns

20
Q

It is required to have a reverse DNS zone for a forward DNS zone because forward resolving record needs a match reverse resolving record for security purposes

A

false

21
Q

Which port number is used by DNS servers to listen for request?

A

53

22
Q

Which of the following is the type of resource record for mail exchange server?

A

MX

23
Q

Which of the following marks the authoritative nature of a DNS server?

A

SOA

24
Q

Which of the following LInux commands can be used to find the IP address of a domain name such as example.com

A

nslookup
hostname

25
Q

An authoritative DNS server should not perform iterative query because it may incur too much traffic.

A

False

26
Q

All DNS records end with the period character(.) which represents _____

A

the root of the DNS hierarchy

27
Q

Assume that TCU’s authoritative DNS server is ns01.tcu.edu. The CS department of TCU is allowed to manage its DNS sub-domain (cs.tcu.edu) with its name sever as ns101.cs.tcu.edu. The CS name server’s zone files do contain SOA records. Thus, ns101.cs.tcu.edu is an authoritative DNS server for cs.tcu.edu even if it is local to the CS department.

A

True

28
Q

How does a secondary DNS server get zone records from the primary DNS server?

A

A zone transfer

29
Q

You have added new resource records to a zone file and restarted the name service on a primary DNS server. However, the secondary DNS server did not sync its zone file after the refresh time. What may have happened( assuming that the network communications is fine between the two servers)

A

You did not increase the serial number

30
Q

The default port for the SSH service is

A

22

31
Q

In SSH, which of the following authentication methods are accepted?

A

Public Key
Password

32
Q

Which of the following is the configuration file for SSH server on a Linux Machine

A

/etc/ssh/sshd_config

33
Q

Where is a user’s SSH private key file located on Fedora by default

A

$HOME/.ssh

34
Q

Which of the following commands can generate a key pair for SSH user/client

A

ssh-keygen

35
Q

Where is a Linux host’s SSH private key file located on Fedora by default?

A

/etc/ssh/

36
Q

Which of the following options specifies the private key file that will be used by a client to log onto a SSH server?

A

-i

37
Q

Assume you want to connect to linkedin.com however, you cannot connect to linkedin directly from your current computer. Assume that you have access to a SSH server whose DNS name is cite.aws.com which has no restrictions on accessing linkedin which of the following command would you issue from your current computer?

A

ssh -L 8443:www.linkedin.com:443 username@cite.aws.com

38
Q

Given the following ssh command:
ssh -L 8043:www.facebook.com:443 john@10.10.10.10

Assume you want to connect to facebook.com using nc command from the computer that issued the above ssh command. How would you issue the nc command utilizing the established SSH tunnel?

A

nc localhost 8043

39
Q

Below is a ssh command on a computer named A:

ssh –R 8181:google.com:443 admin@student.aws.com

What users (not on computer A) need to enter in the address bar of a browser to use the tunnel to visit Google?

A

student.aws.com:8181

40
Q

scp is a program for copying files between computers. It uses the SSH protocol. In scp, which character represents the remote side (i.e., the SSH server side).

A

:

41
Q

To setup host based authentication, one of the host keys of the SSH server needs to be copied to the clients and placed in the right folder

A

False

42
Q

What flag do you add to see the actions SSH takes

A

-v

43
Q

Once an SSH key pair has been created, which command can be used to install it as an authorized key on the SSH server

A

ssh-copy-id

44
Q

Which file contains host keys of SSH servers accessed by a user?

A

~/.ssh/known_hosts