Software Tool Types Flashcards

1
Q

traceroute uses what two things to determine the path to a remote device?

A

TTL and ICMP error messages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what utility can help you determine if a WAN link is down or a web server isn’t responding?

A

Traceroute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What two reasons can asterisks imply when running traceroute?

A

1) response from the router took more than the default time-out value
2) the admin has disabled ICMP on the router that the packet is trying to hop through

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the command to trace IPv6 packets? List for Windows, MAC/Linux, and Cisco

A

1) tracert -6 - Win
2) traceroute6 - MAC/Lnx
3) traceroute -6 - Cisco

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What 3 extra key pieces of info does ipconfig /all (as opposed to just ipconfig) tell you?

A

MAC address
DHCP lease times
DNS addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe the differences between ipconfig and ifconfig

A

ipconfig is mainly used to view the TCP/IP config

if config does same but can be used to configure a protocol or network interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

the linux iptables utilities uses what 3 types of ‘chains’ to to allow or disallow traffic?

A

1) Input (controls for incoming connections)
2) Forward (for incoming non-local connections like a router would receive)
3) Output (controls outgoing connections)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what iptables command would block a connection from 192.168.10.1?

A

iptables -A INPUT -s 192.168.10.1 -j DROP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is the default ping time-out?

A

1 second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

The ‘-a’ switch in the ping utility does what?

A

name resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is the ‘-6’ switch used for in ping utility? What is it for MAC?

A

pinging IPv6 address.

Ping6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is the continuous ping option?

A

-t

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what is checked to determine the IP address before a packet is sent to a host?

A

the ARP cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

IPv6 doesn’t need ARP. TRUE or FALSE?

A

TRUE (it uses the ND protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what ARP command switch displays the whole ARP table?

A

-a (or -g)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How long do static entries last in the ARP table?

A

until the machine is rebooted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

how do you delete dynamic and static ARP table entries?

A

for dynamic entries wait for the entries to time out. For static, use the “arp -d” switch with the entry you want to delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

nslookup allows you to do what?

A

query a name server and find out what name resolved to which IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

the primary job of the xxxx utility is to tell you the different features of a domain name, the names of the servers that serve it and how they’re configured

A

nslookup (‘dig’ for unix)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the non-authoritative answer mean in an nslookup response?

A

the server that returned the the information is not responsible for the zone information of the domain you requested

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Where is the hosts table stored in windows?

A

c:windows\system32\drivers\etc

22
Q

which Unix utility combines the functions of traceroute and ping and also adds round-trip time and packet loss?

A

Mtr/My traceroute

23
Q

What is Microsoft’s version of the linux mrt?

A

pathping

24
Q

performing scans with certain flags set using nmap allows you to determine what 2 things?

A

1) if a port is open on a device

2) if the port is blocked by a firewall before it gets to the device

25
Q

On a Unix box, how could you create a logical map of the network and determine the live hosts on a network?

A

use nmap command

26
Q

What route command switch used with the add, change or delete will clear the routing table of entries that aren’t host routes, loopback or multicast routes?

A

-f

27
Q

what route switch, if used with the add option, will add the route to the Registry (and thus still be there after a reboot)

A

-p (for persistent)

28
Q

List 5 other options to use with the route command?

A

1) destination
2) gateway
3) metric
4) netmask / mask
5) if /interface

29
Q

Deploying the nbtstat utility acheives what 3 things?

A

1) track NetBIOS over TCP/IP statistics
2) Shows incoming and outgoing NetBIOS over TCP/IP connections
3) Resolve NetBIOS names

30
Q

which nbtstat command will get you the remote machine’s NetBIOS name table which will show all the NetBIOS names that machine knows of?

A

-a [remote machine name]

31
Q

-A nbtstat differs from -a how?

A

instead of using -A with a NetBIOS name you enter the IP address

32
Q

What command switch displays the NetBIOS name cache?

A

nbtstat -c

33
Q

If you get the error “no names in cache” when using nbtstat, what has happened?

A

all entries in cache have expired because the NetBIOS services haven’t been accessed regularly enough

34
Q

what nbtstat command gives you the local NetBIOS name table?

A

-n

35
Q

what nbtstat command tells you how many NetBIOS names have been resolved to TCP/IP addresses?

A

-r

36
Q

which nbtstat command can help you determine if the WINS server is configured correctly?

A

-r

37
Q

Which nbtstat command purges the name table cache and allows you to reload the LMHOSTS file into memory?

A

-R

38
Q

which nbtstat command lists the session to and from the host you run the command on?

A

-S

39
Q

which command enables you to check the inbound and outbound TCP/IP connections and see packet statistics?

A

netstat

40
Q

when using netstat, if the address of the destination computer can be found in the HOSTS file, what will display in the Foreign Address column?

A

The destination computer’s name

41
Q

which most commonly used netstat switch shows all tcp/ip and udp connections and is used to check the status of a connection that appears to be hung?

A

-a

42
Q

which netstat switch displays a summary of all the packets sent over the NIC as of that instant and which includes errors?

A

-e

43
Q

which two netstat switch allow you to look at protocol statistics for just a specific protocol?

A
  • s (displays all protocols)

- p [protocol name]

44
Q

If in doubt, what file type should you set ftp to download files as?

A

Binary files

45
Q

if the get command gets one file in ftp, how do you get multiple files?

A

use mget command

46
Q

which utility is good for testing TCP connectivity?

A

Telnet

47
Q

Which two commands will show you the routing table?

A

netstat -r and route print

48
Q

If you wanted netstat to return IP addresses for Foreign Addresses instead of names, which switch would you use?

A

-n

49
Q

What Unix command would you use to filter tcp traffic from host 192.168.1.1

A

tcpdump host 192.168.1.1

50
Q

what does the unix command “tcpdump -i any” do?

A

captures tcp traffic on all interfaces