eJPT Network Protocols and Traffic Analysis 1 — Questions and Answers
Question 1: Which protocol operates at Layer 3 of the OSI model and is responsible for logical addressing and routing?
- TCP
- IP (Correct answer)
- ARP
- HTTP
Correct answer: IP
IP (Internet Protocol) operates at Layer 3 and handles logical addressing and packet routing between networks.
Question 2: What does ARP stand for in networking?
- Address Resolution Protocol (Correct answer)
- Advanced Routing Protocol
- Automatic Request Protocol
- Application Response Protocol
Correct answer: Address Resolution Protocol
ARP stands for Address Resolution Protocol and maps IP addresses to MAC addresses on a local network.
Question 3: Which Wireshark display filter shows only HTTP traffic?
- tcp.port == 80
- http (Correct answer)
- ip.proto == 6
- tcp.flags.syn == 1
Correct answer: http
The display filter 'http' in Wireshark isolates HTTP protocol packets for analysis.
Question 4: In a TCP three-way handshake, what is the correct sequence of flags?
- SYN, ACK, FIN
- SYN, SYN-ACK, ACK (Correct answer)
- ACK, SYN, RST
- FIN, ACK, SYN
Correct answer: SYN, SYN-ACK, ACK
The TCP three-way handshake uses SYN from client, SYN-ACK from server, and ACK from client to establish a connection.
Question 5: Which protocol is used to automatically assign IP addresses to hosts on a network?
- DNS
- SMTP
- DHCP (Correct answer)
- SNMP
Correct answer: DHCP
DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, and gateway info to network hosts.
Question 6: What is the primary purpose of analyzing ICMP traffic during a penetration test?
- Encrypting communications
- Host discovery and network mapping (Correct answer)
- Transferring files between hosts
- Authenticating users
Correct answer: Host discovery and network mapping
ICMP traffic analysis, particularly ping sweeps, is used to discover live hosts and map network topology.
eJPT Network Protocols and Traffic Analysis 1
Which protocol operates at Layer 3 of the OSI model and is responsible for logical addressing and routing?