CISCO Cyberops Security Fundamentals Section 01: TCP/IP Protocol Suite (Q 51-60)
Questions and Answers
- 1.
Which one of the following options must a host on an Ethernet network know about a destination in order to send an Ethernet frame to that destination?
- A.
Receiving port number
- B.
IP address
- C.
MAC address
- D.
Window size
Correct Answer
C. MAC addressExplanation
In order to send an Ethernet frame to a destination on an Ethernet network, a host must know the MAC address of that destination. The MAC address is a unique identifier assigned to each network interface card (NIC) on the network. It is used to identify the specific device to which the frame needs to be sent. The receiving port number, IP address, and window size are not relevant to sending an Ethernet frame on an Ethernet network.Rate this question:
-
- 2.
On which OSI layer or layers does ARP operate?
- A.
Between Layer 2 and Layer 3
- B.
At Layer 2
- C.
At Layer 3
- D.
Between Layer 1 and Layer 2
Correct Answer
A. Between Layer 2 and Layer 3Explanation
ARP (Address Resolution Protocol) operates between Layer 2 and Layer 3 of the OSI model. This protocol is responsible for mapping an IP address to a physical (MAC) address on a local network. It is used to resolve IP addresses to MAC addresses in order to facilitate communication between devices on the same network. ARP operates at Layer 2 to obtain the MAC address of a device in the same network, and at Layer 3 to determine the IP address of the destination device.Rate this question:
-
- 3.
ARP messages are sent using which Ethertype designation in the frame header?
- A.
0x2100
- B.
0x0800
- C.
0x8100
- D.
0x0806
Correct Answer
D. 0x0806Explanation
ARP messages are sent using the Ethertype designation 0x0806 in the frame header. Ethertype is a field in the Ethernet frame header that identifies the protocol encapsulated within the frame. In this case, 0x0806 indicates that the frame contains an Address Resolution Protocol (ARP) message. ARP is used to map an IP address to a MAC address on a local network.Rate this question:
-
- 4.
Which one of the following options is the type of request that is sent by a host to discover the MAC address belonging to an IP address?
- A.
Ping request
- B.
ARP request
- C.
RARP request
- D.
DCHP request
- E.
BOOTP request
Correct Answer
B. ARP requestExplanation
An ARP (Address Resolution Protocol) request is sent by a host to discover the MAC address belonging to an IP address. ARP is used to map an IP address to a corresponding MAC address on a local network. When a host wants to communicate with another host, it needs to know the MAC address of the destination host. So, it sends an ARP request to the network asking for the MAC address associated with the given IP address.Rate this question:
-
- 5.
Which one of the following options is the MAC address that a host would use to send broadcast messages if its own MAC address is 0800:0222:2222?
- A.
0000:0000:0000
- B.
0800:0222:FFFF
- C.
0800:FFFF:FFFF
- D.
FFFF:FFFF:FFFF
Correct Answer
D. FFFF:FFFF:FFFFExplanation
The MAC address FFFF:FFFF:FFFF is the correct answer because it represents the broadcast address. In Ethernet, the MAC address FFFF:FFFF:FFFF is used to send a frame to all devices on the network. When a host wants to send a broadcast message, it sets the destination MAC address to FFFF:FFFF:FFFF so that it is received by all devices on the network.Rate this question:
-
- 6.
Which two of the following options are common DHCP attacks? (Choose two.)
- A.
DHCP starvation
- B.
DHCP tunneling
- C.
Rogue DHCP server
- D.
DHCP amplification
Correct Answer(s)
A. DHCP starvation
C. Rogue DHCP serverExplanation
DHCP starvation is a common DHCP attack where an attacker exhausts all available IP addresses in a DHCP server's address pool, preventing legitimate devices from obtaining an IP address. Rogue DHCP server is another common attack where an attacker sets up a fake DHCP server on a network, tricking devices into connecting to it and providing sensitive information. Both of these attacks exploit vulnerabilities in the DHCP protocol to disrupt network connectivity and potentially gain unauthorized access to network resources.Rate this question:
-
- 7.
How many messages are exchanged in a DHCP transaction?
- A.
One
- B.
Two
- C.
Three
- D.
Four
Correct Answer
D. FourExplanation
In a DHCP transaction, four messages are exchanged. The first message is the DHCPDISCOVER, which is sent by the client to discover available DHCP servers. The second message is the DHCPOFFER, which is sent by the server in response to the DHCPDISCOVER, offering the client an IP address. The third message is the DHCPREQUEST, which is sent by the client to request the offered IP address from a specific server. Finally, the fourth message is the DHCPACK, which is sent by the server to acknowledge the client's request and provide the client with the offered IP address.Rate this question:
-
- 8.
What is the destination port defined in the DHCP Discover message?
- A.
66 UDP
- B.
66 TCP
- C.
67 TCP
- D.
67 UDP
Correct Answer
D. 67 UDPExplanation
The destination port defined in the DHCP Discover message is 67 UDP. This is because DHCP (Dynamic Host Configuration Protocol) uses UDP (User Datagram Protocol) as the transport protocol. The destination port 67 is used by the DHCP server to receive and process the DHCP Discover messages sent by the client.Rate this question:
-
- 9.
What is the destination port defined in the DHCP Offer message?
- A.
69 UDP
- B.
69 TCP
- C.
68 UDP
- D.
68 TCP
Correct Answer
C. 68 UDPExplanation
The destination port defined in the DHCP Offer message is 68 UDP. DHCP (Dynamic Host Configuration Protocol) uses UDP (User Datagram Protocol) as the transport protocol. Port 68 is the well-known port number assigned to DHCP client/server communication. The DHCP Offer message is sent by the DHCP server to offer configuration parameters (IP address, subnet mask, gateway, etc.) to a DHCP client. Therefore, the correct answer is 68 UDP.Rate this question:
-
Quiz Review Timeline +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 19, 2023Quiz Edited by
ProProfs Editorial Team -
Jan 26, 2017Quiz Created by
Paranormalrob
Cisco CyberOps Security Fundamentals Section 02: Network Infrastructure (Q 1-10)
Cisco CyberOps Security Fundamentals Section 02: Network Infrastructure (Q 1-10)
Cisco CyberOps Security Fundamentals Section 01: TCP/IP Protocol Suite (Q 41-50)
Cisco CyberOps Security Fundamentals Section 01: TCP/IP Protocol Suite (Q 41-50)
Back to top