quiz ch4.docx
Document Details
Uploaded by HonorablePathos
Tags
Full Transcript
Quiz 1 ====== - **Question 1** -- -- -- -- - **Question 2** -- -- -- -- - **Question 3** -- -- -- -- -- -- - **Question 4** --...
Quiz 1 ====== - **Question 1** -- -- -- -- - **Question 2** -- -- -- -- - **Question 3** -- -- -- -- -- -- - **Question 4** -- -- -- -- - **Question 5** -- -- -- -- - **Question 6** - **Question 7** -- -- -- -- - **Question 8** +-----------------------------------+-----------------------------------+ | | What is the cost of updating the | | | attack signature database and | | | product's maintenance? | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | What is the cost of updating the | | | attack signature database and | | | product's maintenance? | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ - **Question 9** -- -- -- -- -- -- -- -- -- -- Quiz 2 ====== - **Question 1** -- -- -- -- - **Question 2** -- -- -- -- - **Question 3** - **Question 4** - **Question 5** -- -- -- -- - **Question 6** -- -- -- -- - **Question 7** -- -- -- -- - **Question 8** -- -- -- -- - **Question 9** -- -- -- -- Quiz 3 ====== - **Question 1** 1 out of 1 points ARP operation 1 ---------------------- ---------------- Source IP E Source MAC H Destination IP Any Destination MAC 0 Destination MAC Broadcast Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 2** -- -- -- -- ARP operation 1 ---------------------- ----------- Source IP F Source MAC Fake Mac Destination IP Destination MAC Fake Mac Destination MAC Broadcast Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 3** ARP operation 1 ---------------------- ---------------- Source IP E Source MAC Fake MAC Destination IP Destination MAC 0 Destination MAC A Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 4** ARP operation 1 ---------------------- ---------------- Source IP E Source MAC D Destination IP Any Destination MAC 0 Destination MAC Broadcast Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 5** ARP operation 1 ---------------------- ----- Source IP F Source MAC D Destination IP Destination MAC 0 Destination MAC E Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 6** ARP operation 1 ---------------------- ---------------- Source IP E Source MAC A Destination IP Any Destination MAC 0 Destination MAC C Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 7** ARP operation 1 ---------------------- ---------------- Source IP E Source MAC B Destination IP Destination MAC 0 Destination MAC C Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ - **Question 8** 1 out of 1 points ARP operation 1 ---------------------- ---------------- Source IP A Source MAC D Destination IP H Destination MAC 0 Destination MAC B Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 9** ARP operation 1 ---------------------- ----------- Source IP E Source MAC Fake Mac Destination IP Destination MAC Fake Mac Destination MAC Broadcast Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 10** ARP operation 1 ----------------- ---------- Source IP A Source MAC D Destination IP Destination MAC Fake Mac Destination MAC E Source MAC E ---------------------- ----- MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 11** ARP operation ---------------------- -- -- Source IP Source MAC Destination IP Destination MAC Destination MAC Source MAC MAC type (IP or ARP) - **Question 12** ARP operation 1 ---------------------- ---------- Source IP E Source MAC Fake Mac Destination IP Destination MAC Fake Mac Destination MAC E Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 13** -- -- -- -- ARP operation 1 ---------------------- ---------------- Source IP A Source MAC D Destination IP Destination MAC 0 Destination MAC D Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 14** ARP operation 1 ---------------------- ---------- Source IP E Source MAC Fake Mac Destination IP Destination MAC Fake Mac Destination MAC C Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 15** ARP operation 1 ---------------------- ---------------- Source IP D Source MAC E Destination IP Destination MAC 0 Destination MAC E Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 16** ARP operation 1 ---------------------- ---------------- Source IP C Source MAC D Destination IP Any Destination MAC 0 Destination MAC E Source MAC Fake Broadcast MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 17** ARP operation 1 ---------------------- ---------- Source IP E Source MAC F Destination IP Destination MAC Fake Mac Destination MAC B Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 18** ARP operation 1 ---------------------- ----------- Source IP E Source MAC F Destination IP Destination MAC Fake Mac Destination MAC Broadcast Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 19** ARP operation 1 ---------------------- ---------- Source IP E Source MAC B Destination IP Destination MAC Fake Mac Destination MAC C Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ ARP operation 1 ---------------------- ----- Source IP E Source MAC D Destination IP Destination MAC 0 Destination MAC D Source MAC E MAC type (IP or ARP) ARP +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ Quiz 4 ====== - **Question 1** 1 out of 1 points -- -- -- -- - **Question 2** ARP operation ----------------- -- Source IP Source MAC Destination IP Destination MAC Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 3** -- -- -- -- - **Question 4** Selected Answer: ![Correct](media/image2.png) 1 ------------------ -------------------------------- Correct 1 0 (1 - 1 ) - **Question 5** -- -- -- -- -- -- -- -- - **Question 6** ARP operation ----------------- -- Source IP Source MAC Destination IP Destination MAC Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 7** -- -- -- -- Selected Answer: ![Correct](media/image2.png) 5 ------------------ -------------------------------- Correct 5 0 (5 - 5 ) - **Question 8** -- -- -- -- - **Question 9** +-----------------------------------+-----------------------------------+ | | Host A | +===================================+===================================+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | Host E | +-----------------------------------+-----------------------------------+ | | Host A | +-----------------------------------+-----------------------------------+ | | Host B | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ -------- Host F -------- - **Question 10** Selected Answer: ![Correct](media/image2.png) 5 ------------------ -------------------------------- Correct 5 0 (5 - 5 ) - **Question 11** ARP operation ----------------- -- Source IP Source MAC Destination IP Destination MAC Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 12** -- -- -- -- - **Question 13** -- -- -- -- - **Question 14** -- -- -- -- Selected Answer: ![Correct](media/image2.png) 5 ------------------ -------------------------------- Correct 5 0 (5 - 5 ) - **Question 15** ARP operation ----------------- -- Source IP Source MAC Destination IP Destination MAC Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 16** +-----------------------------------+-----------------------------------+ | | **Text 1::**We assume that a LAN | | | network includes **8 hosts** | | | (**A, B, C, D, E, F, G and H**) | | | which are connected by a switch. | | | The contents of the switch's CAM | | | table is as follows: (Port 1, | | | Host A) - (Port 2, Host B) - | | | (Port 3, Host C) - (Port 4, Host | | | D) | | | | | | \- (Port 5, Host E) - (Port 6, | | | Host F) - (Port 7, Host G) - | | | (Port 8, Host H). | | | | | | Also, we assume that there is/are | | | **one or many** host(s) that | | | has/have sent fake packets to | | | corrupt the switch's CAM table. | | | After this attack, the content of | | | the CAM table became corrupted, | | | as follow: | | | | | | (Port 1, Host A) - (Port 4, Host | | | B) - (Port 3, Host C) - (Port 4, | | | Host D) - (Port 5, Host E) - | | | (Port 3, Host F) - (Port 5, Host | | | G) - (Port 1, Host H). | | | | | | I**ndicate if the following | | | packet can be used to perform the | | | above attack on the switch's CAM | | | table:** | +-----------------------------------+-----------------------------------+ Source IP ----------------- -- Source MAC Destination IP Destination MAC Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 17** Selected Answer: ![Correct](media/image2.png) 4 ------------------ -------------------------------- Correct 4 0 (4 - 4 ) - **Question 18** ARP operation ---------------- -- Source IP Source MAC Destination IP Destination MAC ----------------- -- Destination MAC Source MAC +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 19** Selected Answer: ![Correct](media/image2.png) 4 ------------------ -------------------------------- Correct 4 0 (4 - 4 ) +-----------------------------------+-----------------------------------+ | | Host F | +-----------------------------------+-----------------------------------+ | | Host G | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ +-----------------------------------------------------------------------+ | Host F | +=======================================================================+ | | +-----------------------------------------------------------------------+ | | +-----------------------------------------------------------------------+ Quiz 5 ====== - **Question 1** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 1 ---------------------- ------------------- Source IP B Source MAC B Destination IP 20.40.50.60 Destination MAC C Destination MAC FF:FF:FF:FF:FF:00 Source MAC B MAC type (IP or ARP) ARP - **Question 2** -- -- -- -- 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 1 ---------------------- ------------- Source IP 90.100.90.2 Source MAC C Destination IP B Destination MAC A Destination MAC C Source MAC A MAC type (IP or ARP) ARP - **Question 3** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 1 ---------------------- ------------------- Source IP C Source MAC C Destination IP 9.70.90.200 Destination MAC 00:00:00:00:00:00 Destination MAC 01:b3:45:a2:b1:c3 Source MAC B MAC type (IP or ARP) ARP -- -- - **Question 4** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 2 ---------------------- ------------- Source IP C Source MAC C Destination IP 30.40.50.99 Destination MAC C Destination MAC C Source MAC C MAC type (IP or ARP) ARP - **Question 5** -- -- -- -- 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 1 ---------------------- -------------- Source IP C Source MAC C Destination IP 90.70.90.250 Destination MAC B Destination MAC Broadcast Source MAC C MAC type (IP or ARP) ARP - **Question 6** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 1 ---------------------- ------------------- Source IP C Source MAC C Destination IP 90.70.90.200 Destination MAC 00:00:00:00:00:00 Destination MAC Broadcast Source MAC C MAC type (IP or ARP) ARP -- -- - **Question 7** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 2 ---------------------- --------------- Source IP A Source MAC A Destination IP 100.70.90.250 Destination MAC B Destination MAC C Source MAC A MAC type (IP or ARP) ARP - **Question 8** +-----------------------------------+-----------------------------------+ | | No | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 9** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 1 ---------------------- ----- Source IP B Source MAC A Destination IP X Destination MAC 0 Destination MAC C Source MAC A MAC type (IP or ARP) ARP - **Question 10** ![](media/image2.png) 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 1 ---------------- ------------- Source IP A Source MAC A Destination IP 30.40.30.40 -- -- -- -- -- -- - **Question 11** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 2 ---------------------- ------------------- Source IP C Source MAC C Destination IP 9.70.90.200 Destination MAC 00:00:00:00:00:00 Destination MAC D Source MAC C MAC type (IP or ARP) ARP - **Question 12** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 1 ---------------------- ------------------- Source IP B Source MAC B Destination IP 30.40.50.60 Destination MAC C Destination MAC FF:FF:FF:FF:FF:FF Source MAC B MAC type (IP or ARP) ARP - **Question 13** +-----------------------------------+-----------------------------------+ | | Yes | +===================================+===================================+ | | Yes | +-----------------------------------+-----------------------------------+ | | No | +-----------------------------------+-----------------------------------+ - **Question 14** 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 4. Invalid IP addresses. 5. Unicast ARP request detection 6. Broadcast ARP response detection 7. Broadcast ARP response 8. Unicast ARP request 9. Invalid IP/MAC pairs in the switch\'s ARP ACL 10. Invalid cross layer MAC source inspection 11. Invalid cross layer MAC destination inspection 12. Invalid IP addresses ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP B Destination MAC A Destination MAC ff:ff:ff:ff:ff:ff Source MAC A MAC type (IP or ARP) ARP 1. Dynamic ARP inspection (DAI) security feature has been enabled on the switch. 2. An ARP access list has been manually created, including the IP and MAC addresses of the three hosts (A, B, and C). 3. Unicast ARP request detection has been enabled on the switch. 4. Broadcast ARP response detection has been enabled on the switch. 5. The security feature "***MAC source and destination addresses checking across Ethernet and ARP layers***" has been enabled on the switch. 6. Invalid IP addresses: **An invalid IP address is an address that cannot be assigned to a host in the network 30.40.50.0/24.** 7. **Invalid IP/MAC pairs in the switch\'s ARP ACL** 8. **Invalid Unicast ARP request** 9. **Invalid Broadcast ARP response** 10. **Invalid cross layer MAC source inspection** 11. **Invalid cross layer MAC destination inspection** 12. **Invalid IP addresses** ARP operation 2 ---------------------- ------------------- Source IP A Source MAC A Destination IP 30.40.30.40 Destination MAC C Destination MAC FF:FF:FF:FF:FF:FF Source MAC A MAC type (IP or ARP) ARP -- -- Quiz 6 ====== - **Question 1** 1 out of 1 points ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP FAKE IP (X) Destination MAC 0 Destination MAC FF:00:00:00:00:00 Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 2** ARP operation 1 ---------------------- ------------------- Source IP C Source MAC C Destination IP B Destination MAC 0 Destination MAC FF:FF:FF:00:00:00 Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 3** +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | FF:01:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ +-----------------------------------+-----------------------------------+ | | FF:FF:BB:00:00:00 | +===================================+===================================+ | | FF:FF:FF:00:B2:EE | +-----------------------------------+-----------------------------------+ | | FB:FF:FF:FE:FF:FF | +-----------------------------------+-----------------------------------+ | | FF:FE:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | EE:FF:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | FF:FF:FF:00:FF:FE | +-----------------------------------+-----------------------------------+ | | FF:01:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | FF:FF:BB:00:00:00 | +-----------------------------------+-----------------------------------+ | | FF:FF:FF:00:B2:EE | +-----------------------------------+-----------------------------------+ - **Question 4** ARP operation 1 ---------------------- ----------- Source IP A Source MAC A Destination IP D Destination MAC 0 Destination MAC Broadcast Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Incorrect](media/image4.png) 1 ------------------ ---------------------------------- Correct 2 0 (2 - 2 ) - **Question 5** -- -- -- -- - **Question 6** +-----------------------------------+-----------------------------------+ | | 1. 2. 3. | +-----------------------------------+-----------------------------------+ Selected Answer: ![Correct](media/image2.png) 1 ------------------ -------------------------------- Correct 1 0 (1 - 1 ) - **Question 7** ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP A Destination MAC 0 Destination MAC FF:FF:FF:00:00:00 Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 8** +-----------------------------------+-----------------------------------+ | | FF:FF:FF:FF:FF:FE | +-----------------------------------+-----------------------------------+ | | FF:FF:00:00:00:00 | +-----------------------------------+-----------------------------------+ | | FF:FF:00:00:B2:A1 | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | 01:FF:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | 00:FF:FF:FF:FF:FF | +-----------------------------------+-----------------------------------+ | | FF:FF:FF:FF:FF:FE | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | FF:FF:00:00:00:00 | +-----------------------------------+-----------------------------------+ | | FF:FF:00:00:B2:A1 | +-----------------------------------+-----------------------------------+ - **Question 9** +-----------------------------------+-----------------------------------+ | | True | +===================================+===================================+ | | True | +-----------------------------------+-----------------------------------+ | | False | +-----------------------------------+-----------------------------------+ - **Question 10** 0. out of 1 points 1. out of 1 points - **Question 11** 1. Software filter will reject the packet 2. ARP protocol will not answer the packet 3. Hardware filter will reject the packet 4. None of them Selected Answer: ![Incorrect](media/image4.png) 4 ------------------ ---------------------------------- Correct 2 0 (2 - 2 ) - **Question 12** 1. ARP protocol will generate an ARP response packet 2. ARP protocol will drop the ARP packet 3. Software filter will reject the packet 4. None of them Selected Answer: ![Incorrect](media/image4.png) 2 ------------------ ---------------------------------- Correct 4 0 (4 - 4 ) - **Question 13** ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP FAKE IP (X) Destination MAC 0 Destination MAC FF:00:00:00:00:00 Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 14** ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP B Destination MAC 0 Destination MAC FF:FF:00:00:00:00 Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 1 ------------------ -------------------------------- Correct 1 0 (1 - 1 ) - **Question 15** +-----------------------------------+-----------------------------------+ | | True | +===================================+===================================+ | | True | +-----------------------------------+-----------------------------------+ | | False | +-----------------------------------+-----------------------------------+ - **Question 16** ARP operation 1 ---------------------- ----- Source IP A Source MAC A Destination IP D Destination MAC 0 Destination MAC E Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 17** 1. Firewall 2. Hardware filter 3. Software filter Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 18** - A host's NIC is set to the **promiscuous mode**, - The host received an **ARP request** packet with the destination IP address set to the IP address of the host, - The received ARP request packet has a destination MAC address that does not correspond to the MAC address of any LAN's host and is not a FAKE broadcast. 4. Firewall 5. Hardware filter 6. Software filter 7. None of them Selected Answer: ![Correct](media/image2.png) 3 ------------------ -------------------------------- Correct 3 0 (3 - 3 ) - **Question 19** +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | | | +-----------------------------------+-----------------------------------+ | - | 1 out of 1 points | +-----------------------------------+-----------------------------------+ ARP operation 1 ---------------------- ------------------- Source IP A Source MAC A Destination IP B Destination MAC 0 Destination MAC FF:FF:FF:FF:FF:FE Source MAC A MAC type (IP or ARP) ARP 1. **Yes** 2. **NO** 3. **I can\'t decide** Selected Answer: ![Correct](media/image2.png) 1 ------------------ -------------------------------- Correct 1 0 (1 - 1 ) Quiz 7 ====== - **Question 1** Destination port 9000 -------------------- --------- Source port 59 SYN bit 1 ACK bit 1 FIN bit 0 Destination IP 8.8.8.8 Source IP 9.9.9.9 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- - **Question 2** Type 8 -------------------- ----------- Code 0 Destination IP 1.1.1.255 Source IP 2.2.2.255 Protocol ICMP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- - **Question 3** - **Question 4** -- -- -- -- - **Question 5** 0. out of 1 points 1. out of 1 points Destination port \[70-8000\] -------------------- ------------- Source port 6000 SYN bit 1 Destination IP 9.9.9.9 Source IP 8.8.8.8 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- - **Question 6** -- -- -- -- - **Question 7** -- -- -- -- - **Question 8** Destination port 300 -------------------- --------- Source port 7000 SYN bit 1 ACK bit 0 FIN bit 1 Destination IP 7.7.7.7 Source IP 8.8.8.8 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- - **Question 9** Selected Answer: ![Correct](media/image2.png) 2 ------------------ -------------------------------- Correct 2 0 (2 - 2 ) - **Question 10** Type 8 -------------------- --------- Code 0 Destination IP 1.1.1.2 Source IP 2.2.2.8 Protocol ICMP ID X MF (More Fragment) 1 Offset 0 -- -- -- -- - **Question 11** Type 0 -------------------- ------------- Code 0 Destination IP 70.70.70.40 Source IP 70.70.70.45 Protocol ICMP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- - **Question 12** Selected Answer: ![Incorrect](media/image4.png) 13 ------------------ ----------------------------------- Correct 4 0 (4 - 4 ) - **Question 13** Type 8 -------------------- -------------- Code 0 Destination IP 25.25.25.255 Source IP 2.255.255.25 Protocol ICMP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- - **Question 14** Selected Answer: ![Correct](media/image2.png) 13 ------------------ --------------------------------- Correct 13 0 (13 - 13 ) - **Question 15** -- -- -- -- - **Question 16** -- -- -- -- -- -- - **Question 17** -- -- -- -- - **Question 18** Destination port 80 -------------------- --------- Source port Random SYN bit 1 Destination IP 9.9.9.9 Source IP Random Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- - **Question 19** Destination port 25 -------------------- --------- Source port 5500 TCP flags bits 0 Checksum X HLEN 5 Destination IP 2.2.2.2 Source IP 4.4.4.4 Protocol TCP ID Y MF (More Fragment) 0 Offset 0 -- -- -- -- - **Question 20** Destination port 90 -------------------- --------- Source port 7000 SYN bit 1 Destination IP 3.3.3.3 Source IP 4.4.4.4 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- - **Question 21** Selected Answer: ![Correct](media/image2.png) 12 ------------------ --------------------------------- Correct 12 0 (12 - 12 ) - **Question 22** Selected Answer: ![Correct](media/image2.png) 6 ------------------ -------------------------------- Correct 6 0 (6 - 6 ) - **Question 23** Selected Answer: ![Correct](media/image2.png) 5 ------------------ -------------------------------- Correct 5 0 (5 - 5 ) - **Question 24** -- -- -- -- - **Question 25** Destination port 80 -------------------- --------- Source port 4321 SYN & ACK bits 1 Destination IP 1.1.1.1 Source IP 2.2.2.2 Protocol TCP ID X MF (More Fragment) 1 Offset 100 -- -- -- -- -- -- -- -- - **Question 26** -- -- -- -- - **Question 27** Destination port 69 -------------------- --------- Source port 5000 SYN bit 1 Destination IP 2.2.2.2 Source IP 3.3.3.3 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- -- -- - **Question 28** Selected Answer: ![Correct](media/image2.png) 3 ------------------ -------------------------------- Correct 3 0 (3 - 3 ) - **Question 29** Selected Answer: ![Correct](media/image2.png) 7 ------------------ -------------------------------- Correct 7 0 (7 - 7 ) - **Question 30** -- -- -- -- - **Question 31** Destination port 90 -------------------- --------- Source port 90 SYN bit 1 Destination IP 9.9.9.9 Source IP 9.9.9.9 Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- - **Question 32** Source port 2900 ------------------ ------ Destination port 53 -------------------- -------------- Destination IP 200.70.70.40 Source IP 100.70.70.45 Protocol UDP ID X MF (More Fragment) 0 Offset 0 -------------------- -------------- -- -- -- -- - **Question 33** -- -- -- -- - **Question 34** Destination port 90 -------------------- --------- Source port Random SYN bit 1 Destination IP 3.3.3.3 Source IP Random Protocol TCP ID X MF (More Fragment) 0 Offset 0 -- -- -- -- -- -- -- --