1.Easy
What does a VPN mainly provide?
- AA free public IP address for every device
- BA faster physical connection to the internet through a dedicated line
- CAutomatic backup of files to a server
- DAn encrypted tunnel across an untrusted network such as the internet
2.Easy
In a peer-to-peer network:
- ADevices cannot communicate directly
- BEach node can act as both a client and a server
- COnly routers may share files
- DOne central server handles every request
3.Easy
What is the main job of a firewall?
- ATo speed up downloads by caching files
- BTo convert domain names into addresses
- CTo allow or block traffic according to security rules
- DTo assign IP addresses to hosts
4.Medium
Which host is in the same /16 subnet as 10.1.2.3?
- A10.0.2.3
- B11.1.2.3
- C10.1.200.5
- D10.2.2.3
5.Medium
TLS provides which security properties for HTTPS?
- AAnonymity of the user
- BProtection against all malware and phishing on the visited site
- CConfidentiality, integrity and server authentication
- DOnly faster loading
6.Medium
What does an MX record in DNS specify?
- AAn alias name for another host
- BThe IPv4 address of a web server
- CThe name servers for a zone
- DThe mail servers that accept email for a domain
7.Hard
The count-to-infinity problem occurs in which kind of routing protocol, and what helps against it?
- ALink-state; flooding link updates
- BStatic routing; adding default routes
- CPath-vector; longer AS paths
- DDistance-vector; split horizon and poison reverse
8.Hard
Why does the side that closes a TCP connection first stay in the TIME_WAIT state for twice the maximum segment lifetime?
- ATo wait for the DNS cache to expire
- BSo delayed segments die out and the final ACK can be resent if it was lost
- CTo let the routers along the path update their routing tables for the next connection
- DTo keep the encryption keys for later reuse
Answer key
- 1. D · An encrypted tunnel across an untrusted network such as the internet
- 2. B · Each node can act as both a client and a server
- 3. C · To allow or block traffic according to security rules
- 4. C · 10.1.200.5
- 5. C · Confidentiality, integrity and server authentication
- 6. D · The mail servers that accept email for a domain
- 7. D · Distance-vector; split horizon and poison reverse
- 8. B · So delayed segments die out and the final ACK can be resent if it was lost
Full step-by-step solutions: practise this topic on examproblems.com.