| Let's test your knowledge of important topics such | | | | CCNP Certification / BSCI Exam: |
| as SYN attacks and VLANs for your Cisco CCNA, | | | | If an IPv6 address begins with "FF", what type of |
| CCNP, and CCENT exams, as well as the CompTIA | | | | address is it? |
| Security+ and Network+ certification exams! | | | | A. broadcast |
| CCNA / CCENT / CompTIA Network+ Certification: | | | | B. unicast |
| Host A and Host B are in the same VLAN. Host C | | | | C. multicast |
| and Host D are in a different VLAN. Host A sends a | | | | D. MACcast |
| broadcast. How many other hosts will receive it? | | | | Answer: C. That's a multicast. There's no such thing |
| A. Zero | | | | as a MACcast. But there should be. ;) |
| B. One | | | | CCNP Certification / BCMSN Exam: |
| C. Two | | | | Short answer: What interface-level command takes a |
| D. Three | | | | port operating at L3 and places it into L2 operating |
| Answer: B. The other host in the same VLAN, Host | | | | mode? |
| B, will receive it. Broadcasts are not forwarded to | | | | Answer: switchport. To change the port back to a |
| other VLANs. | | | | routed port, use no switchport. |
| Security+ Certification: | | | | CCNP Certification / ISCW Exam: |
| Briefly describe a "SYN attack". | | | | Short answer: You're going to write a policy map that |
| Answer: The intruder will generate a series of SYN | | | | will be applied to a Serial interface running at T1 |
| requests, and the soon-to-be-victimized network | | | | speed. By default, how much bandwidth can you |
| device sends a SYN-ACK in response. The device | | | | assign in that policy? |
| then waits for an ACK, but that never comes. These | | | | Answer: The speed of a T1 line is 1544 kbps, but by |
| unfinished connections result in the network device | | | | default only 75% of that bandwidth can be |
| not being able to accept SYN request from legitimate | | | | distributed in a policy map - that's 1158 kbps (1544 * |
| network hosts, since its buffers will be overwhelmed | | | | .75). |
| with the false (and unfinished) requests. | | | | |