If you are looking for some pop quiz, check out the quiz and come back and look at my learning notes from the quiz.

  • TCP/IP Layer “4” 
    • Question 1 – What L4 protocol does DHCP User
      • UDP – Correct – The client does not have an IP address so it has to rely on UDP, it uses DHCP to obtain an IP address.
      • Unicast – Incorrect – DHCP relies on a send and response, Unicast is a transmission from source to destination.
      • TCP – Incorrect – The client does not have an IP address.
      • Broadcast – Incorrect – While the client does broadcast to find the DHCP server the communication is directly between client and server.
    • Question 2 – What are used in a TCP 3-way Handshake? (Choose 2)
      • 2 Acknowledgements – Correct
      • 1 Acknowledgement
      • 2 Synchronization Requests – Correct
      • 1 Synchronization Requests
        • ANSWER: The 3-way handshake is base on the requesting client sending SYN packet (1st Sync request) telling the server how fast the client can communicate. The server/receiving device responds with an SYN/ACK packet (2nd Sync request/1st Acknowledgement).  This acknowledges that the server received the Sync requested but also how fast the communications will occur. Finally, the client sends an ACK packet acknowledging receipt of the SYN/ACK and the speed of communication.
        • Chris GreerHow TCP Works – The Handshake
    • Question 3 – Who’s L4 protocol is being used in this packet?
       

      • UDP – Incorrect – Protocol Number 17 – User Datagram Protocol – 
      • IPsec – CORRECT – protocol Number 50 – Encapsulating Security Payload.
        • IPsec is the only one that uses encapsulation.
      • TCP – Incorrect – Protocol Number 6 – Transmission Control Protocol
      • RDP – Incorrect – protocol Number 27 – Reliable Data Protocol
    • Question 4 – Which of the following are true regarding L4? (Choose 2)
      • OSPF uses TCP – Incorrect – Open Shortest Path First uses its own protocol (Protocol number 89)
      • BGP Uses TCP – CORRECT
      • RIP uses UDP – CORRECT
      • EIGRP UDP – – Incorrect – Enhanced Interior Gateway Routing Protocol uses its own protocol (Protocol number 88)
    • Question 5 – What L4 protocol is primarily used by IPv6 NDP (neighbor discovery protocol)?
      • SLAAC – Incorrect – Stateless address autoconfiguration – Hosts configure themselves automatically.
      • UDP – Incorrect – IPv6 avoids broadcasts and uses multi-cast instead
      • ICMP – CORRECT – NDP is a node discovery protocol in IPv6 which replaces and enhances functions of ARP.
      • TCP – Incorrect – Not used.
    • Question 6 – Which of the following are true regarding Telnet and SSH @ L4?
      • Telnet users TCP:23 – Connection is not stateless so it requires TCP
      • Telnet uses UDP:23 – Connection is not stateless so it requires TCP
      • SSH uses UDP:22 – Connection is not stateless so it requires TCP
      • SSH uses TCP:22 – Connection is not stateless so it requires TCP
    • Question 7 – NTP traffic is going over an EtherChannel L2 Trunk. What is true?
      • L4 protocol is TCP – Incorrect – While it can be used on different protocols the default protocol is UDP.
      • L4 protocol is UDP – CORRECT – While it can be used on different protocols the default protocol is UDP.
      • L4 protocol is PAgP – Incorrect – Port Aggregation Protocol is used to automate local aggregation of Ethernet switch ports and does not change how NTP communicates.
      • L4 protocol LACP – Incorrect – Link aggregation Control Protocol is for using multiple interfaces as one and does not affect NTP
    • Question 8 – From this request, what would the server response include?
       

      • Source port TCP 34622 – This is the port that the client requested traffic on.  The client is waiting for a response to this port.
      • Destination port TCP 80 – This is the port the client sent the traffic on and is would not be able to receive traffic on this port
      • Source port TCP 80 – CORRECT – The server reverses the port and sends the response traffic to the port that it received it from.
      • Destination port TCP 34622 – CORRECT – The server reverses the ports and sends out response traffic on the port it received the request on. The client has an established session on this port, waiting for the server to respond on this port
        • Answer: 
    • Question 9 – Who’s L4 protocol is being used in this packet?

      • OSPF – CORRECT – OSPF uses protocol 89 and Multi-cast
      • BGP – Incorrect – Uses TCP and does not use Multi-cast
      • EIGRP – Incorrect – Uses protocol 88 and does not use Multi-cast
      • RIP – Incorrect – Uses UDP and does not use Multi-cast
        • Answer:
    • Question 10 – Which of the following are true regarding FTP/TFTP @ L4? (Multiple Select)
      • FTP uses UDP – Incorrect – File Transfer Protocol is a stateful connection
      • TFTP uses UDP – CORRECT – Trivial File Transfer Protocol is a stateless connection
      • TFTP uses TCP – Incorrect – Trivial File Transfer Protocol is a stateless connection
      • FTP uses TCP – CORRECT – File Transfer Protocol is a stateful connection
    • Question 11 – Comparing TCP to UDP, which is true?
      • TCP has more overhead – CORRECT – Transmission Control Protocol has a handshake and error checking which creates more overhead than UDP that does not have either.
      • UDP is not reliable – CORRECT – With no error checking or handshake, UDP is considered not reliable.
      • TCP has less overhead – Incorrect – Transmission Control Protocol has a handshake and error checking which creates more overhead than UDP that does not have either.
      • UDP is reliable – Incorrect – – With no error checking or handshake, UDP is considered not reliable.
    • Question 12 – what is true regarding RADIUS vs TACACAS+? (Mulitple Select)
      • TACACS+ uses TCP – CORRECT – Uses Transmission Control Protocol to communicate with the Auth Server
      • TACACS+ uses UDP – Incorrect – Uses Transmission Control Protocol to communicate with the Auth Server
      • RADIUS uses UDP – CORRECT – Uses User Data Protocol to communicate with the Auth Server
      • RADIUS uses TCP – Incorrect – Uses User Data Protocol to communicate with the Auth Server