4_1_1 Section 4 – Operations and Incident Response - 4.1 – Security Tools - Reconnaissance Tools

What is the main purpose of the traceroute command?

To map the entire path between two devices

Which command is used in Windows to achieve the same functionality as the traceroute command?

tracert

What type of error messages are used by the traceroute command to build the route?

ICMP Time to Live Exceeded

What is the purpose of the TTL parameter in IP packets?

To prevent loops on the network Signup and view all the answers

Why may there be gaps in the output of the traceroute command?

Due to firewalls or routers filtering out ICMP messages Signup and view all the answers

What is the mechanism by which packets are sent out to the network using the traceroute command?

IP packets with incremental TTL Signup and view all the answers

What protocol does Windows use for the traceroute command?

ICMP Signup and view all the answers

What type of messages are sent back to the original station when the Time To Live is exceeded?

ICMP Time Exceeded Signup and view all the answers

What is the main reason why the traceroute command may not work as well in Windows as in Linux or Mac OS?

ICMP is blocked by firewalls Signup and view all the answers

What is the purpose of the Time To Live (TTL) in a traceroute command?

To prevent packets from circulating indefinitely Signup and view all the answers

What is the default protocol used for the traceroute command in iOS?

UDP Signup and view all the answers

What happens when a packet's TTL reaches 0?

It is dropped by the router Signup and view all the answers

What is the purpose of the traceroute command?

To determine the route to the destination Signup and view all the answers

What is the difference between the ICMP Echo Request and ICMP Echo Reply?

ICMP Echo Request is sent to the destination, while ICMP Echo Reply is sent back Signup and view all the answers

What is the advantage of using different protocols for the traceroute command?

It allows for more flexibility in network diagnostics Signup and view all the answers

What is the outcome when the TTL is finally exceeded at the destination IP address?

An ICMP Echo Reply is sent back Signup and view all the answers

What is the purpose of running a traceroute?

To identify the hop where a network problem is occurring Signup and view all the answers

What does an exclamation mark 'Z' indicate in a traceroute result?

Connection to the IP address is administratively prohibited Signup and view all the answers

What is the purpose of the nslookup command?

To query a DNS server for information about a domain Signup and view all the answers

What is the dig command used for?

To query a DNS server for information about a domain Signup and view all the answers

What is the difference between the nslookup and dig commands?

Nslookup provides less information than dig Signup and view all the answers

What is the purpose of the ipconfig command in Windows?

To determine the IP address of a device Signup and view all the answers

What is the equivalent command to ipconfig in Linux and Mac OS?

ifconfig Signup and view all the answers

Why would you run a traceroute with multiple hops?

To identify the path data takes to reach a destination Signup and view all the answers

What is the purpose of the -n option when using the netstat command?

To display only IP addresses and not resolve names Signup and view all the answers

What is the purpose of running a DNS query using nslookup or dig?

To gather information about a domain Signup and view all the answers

What is the purpose of the ping command?

To check if a device is communicating on the network Signup and view all the answers

Why would you use the /all option with the ipconfig command?

To get more detailed information about the IP configuration Signup and view all the answers

What is the name of the command that combines the functionality of ping and traceroute in Windows?

Pathping Signup and view all the answers

What is the command used to view the ARP cache in Windows?

arp -a Signup and view all the answers

What is the purpose of the netstat command?

To show network statistics and active connections Signup and view all the answers

What is the purpose of the netstat command with the -a option?

To display all active connections and the programs they are associated with Signup and view all the answers

What is the purpose of the route command in Windows?

To view the routing table Signup and view all the answers

What is the IP address of the Google DNS server mentioned in the text?

8.8.8.8 Signup and view all the answers

What is the default route designated by?

0.0.0.0 with a netmask of 0.0.0.0 Signup and view all the answers

What is the name of the creator of the ping command?

Mike Muuss Signup and view all the answers

What does the ping command do when you run it?

Checks if a device is communicating on the network Signup and view all the answers

What is the command used to view the routing table in Linux and Mac OS?

netstat -r Signup and view all the answers

What does the pathping command do?

Runs a traceroute to a destination IP address and measures the round-trip time Signup and view all the answers

What is the purpose of using the netstat command with the -b option?

To associate the Windows binary with the IP address conversation Signup and view all the answers

What is the purpose of the netstat-b command in Windows?

To show all active connections on the device Signup and view all the answers

What is displayed when using the netstat command with the -a and -b options?

All active connections and the programs they are associated with Signup and view all the answers

What is the purpose of using the ARP command with the -a option?

To view the ARP cache Signup and view all the answers

What is the result of the pathping command to the IP address 8.8.8.8?

100% packet loss on a particular hop Signup and view all the answers

What is the purpose of the IPv6 address?

To provide a unique identifier for a device on the network Signup and view all the answers

What is the metric value of the default route in the given example?

25 Signup and view all the answers

4_1_1 Section 4 – Operations and Incident Response - 4.1 – Security Tools - Reconnaissance Tools – Part 1

Questions and Answers