Rabu, 27 Oktober 2010

CCNA Discovery 1 Module 9 Exam Answers Version 4.0

1. What should a network administrator do first after receiving a call from a user who cannot access the company web server?
• Ask the user what URL has been typed and what error message displays.

2. A customer called the cable company to report that the Internet connection is unstable. After trying several configuration changes, the technician decided to send the customer a new cable modem to try. What troubleshooting technique does this represent?
• substitution

3. Only one workstation on a particular network cannot reach the Internet. What is the first troubleshooting step if the divide-and-conquer method is being used?
• Check the workstation TCP/IP configuration.

4. Which two troubleshooting techniques are suitable for both home networks and large corporate networks? (Choose two.)
• documenting the troubleshooting process
• keeping a record of system upgrades and software versions

5. Identify two physical-layer network problems. (Choose two.)
• hardware failure
• loose cable connections

6. Which ipconfig command requests IP configuration from a DHCP server?
• ipconfig /renew

7. What command is used to determine the location of delay for a packet traversing the Internet?
• tracert

8. What command is used to determine if a DNS server is providing name resolution?
• nslookup

9. Which troubleshooting method begins by examining cable connections and wiring issues?
• bottom-up

10. A technician suspects that a Linksys integrated router is the source of a network problem. While troubleshooting, the technician notices a blinking green activity LED on some of the ports. What does this indicate?
• The ports are operational and are receiving traffic.

11. A PC is plugged into a switch and is unable to connect to the network. The UTP cable is suspected. What could be the problem?
• A crossover cable is being used.

12. Refer to the graphic. What configuration is incorrect in the network shown?
• The wired connection is the wrong type of cable.

13. Which three settings must match on the client and access point for a wireless connection to occur? (Choose three.)
• SSID
• authentication
• encryption key

14. A technician is troubleshooting a security breach on a new wireless access point. Which three configuration settings make it easy for hackers to gain access? (Choose three.)
• configuring NAT
• broadcasting the SSID
• using open authentication
• using the default internal IP address

15. Refer to the graphic. The wireless host cannot access the Internet, but the wired host can. What is the problem?
• The host WEP key is incorrect.

16. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.

17. When acting as a DHCP server, what three types of information can an ISR provide to a client? (Choose three.)
• default gateway
• dynamic IP address
• DNS server address

18. What two items could be checked to verify connectivity between the router and the ISP? (Choose two.)
• router status page
• connectivity status as indicated by LEDs

19. A technician is unsuccessful in establishing a console session between a PC and a Linksys integrated router. Both devices have power, and a cable is connected between them. Which two troubleshooting steps could help to diagnose this problem? (Choose two.)
• Ensure the correct cable is used.
• Ensure the link status LED on the integrated router is lit.

20. Network baselines should be performed in which two situations? (Choose two.)
• after the network is installed and running optimally
• after major changes are implemented on the network

21. Typically, help desk personnel assist end users in which two tasks? (Choose two.)
• identifying when the problem occurred
• implementing the solution to the problem

22. How does remote-access software help in the troubleshooting process?
• Diagnostics can be run without a technician being present at the site.

23. Which two items should be added to the documentation following a troubleshooting event? (Choose two.)
• final resolution
• results of successful and unsuccessful troubleshooting steps

1CCNA Discovery 1 Module 8 Exam Answers Version 4.0

1. Identify three techniques used in social engineering. (Choose three.)
• vishing
• phishing
• pretexting

2. During a pretexting event, how is a target typically contacted?
• by phone

3. While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?
• Trojan horse

4. What is a major characteristic of a Worm?
• exploits vulnerabilities with the intent of propagating itself across a network

5. A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?
• SYN flooding

6. What type of advertising is typically annoying and associated with a specific website that is being visited?
• popups

7. What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?
• spam

8. What part of the security policy states what applications and usages are permitted or denied?
• acceptable use

9. Which statement is true regarding anti-virus software?
• Only after a virus is known can an anti-virus update be created for it.

10. Which two statements are true concerning anti-spam software? (Choose two.)
• When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
• Even with anti-spam software installed, users should be careful when opening e-mail attachments.

11. What term is used to describe a dedicated hardware device that provides firewall services?
• appliance-based

12. Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?
• DMZ

13. Which statement is true about port forwarding within a Linksys integrated router?
• Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.

14. To which part of the network does the wireless access point part of a Linksys integrated router connect?
• internal

15. Refer to the graphic. What is the purpose of the Internet Filter option of Filter IDENT (Port 113. on the Linksys integrated router?
• to prevent outside intruders from attacking the router through the Internet

16. What statement is true about security configuration on a Linksys integrated router?
• Internet access can be denied for specific days and times.

17. What environment would be best suited for a two-firewall network design?
• a large corporate environment

18. What is one function that is provided by a vulnerability analysis tool?
• It identifies missing security updates on a computer.

19. Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.
• Disable the wireless network when a vulnerability analysis is being performed.

20. What best practice relates to wireless access point security?
• a change of the default IP address

21. Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?
• It requires that packets coming into the router be responses to internal host requests.

CCNA Discovery 1 Module 7 Exam Answers Version 4.0

1. Why is IEEE 802.11 wireless technology able to transmit further distances than Bluetooth technology?
• has higher power output

2. What are three advantages of wireless over wired technology? (Choose three.)
• anytime, anywhere connectivity
• easy and inexpensive to install
• ease of adding additional devices

3. What are two benefits of wireless networking over wired networking? (Choose two.)
• mobility
• reduced installation time

4. A technician has been asked to provide wireless connectivity to the wired Ethernet network of a building. Which three factors affect the number of access points needed? (Choose three.)
• the size of the building
• the number of solid interior walls in the building
• the presence of microwave ovens in several offices

5. Why is security so important in wireless networks?
• Wireless networks broadcast data over a medium that allows easy access.

6. What does the Wi-Fi logo indicate about a wireless device?
• The device is interoperable with other devices of the same standard that also display the Wi-Fi logo.

7. Which statement is true concerning wireless bridges?
• connects two networks with a wireless link

8. Which WLAN component is commonly referred to as an STA?
• wireless client

9. Which statement is true concerning an ad-hoc wireless network?
• created by connecting wireless clients in a peer-to-peer network

10. Refer to the graphic. In the Wireless menu option of a Linksys integrated router, what does the Network Mode option Mixed mean?
• The router supports 802.11b, 802.11g, and 802.11n devices.

11. Refer to the graphic. In the Wireless menu of a Linksys integrated router, what configuration option allows the presence of the access point to be known to nearby clients?
• SSID Broadcast

12. Which two statements about a service set identifier (SSID) are true? (Choose two.)
• tells a wireless device to which WLAN it belongs
• all wireless devices on the same WLAN must have the same SSID

13. Which two statements characterize wireless network security? (Choose two.)
• With SSID broadcast disabled, an attacker must know the SSID to connect.
• Using the default IP address on an access point makes hacking easier.

14. What type of authentication does an access point use by default?
• Open

15. Which statement is true about open authentication when it is enabled on an access point?
• requires no authentication

16. What are two authentication methods that an access point could use? (Choose two.)
• EAP
• pre-shared keys

17. What is the difference between using open authentication and pre-shared keys?
• Pre-shared keys require an encrypted secret word. Open authentication does not require a secret word.

18. What term describes the encoding of wireless data to prevent intercepted data from being read by a hacker?
• encryption

19. What access-point feature allows a network administrator to define what type of data can enter the wireless network?
• traffic filtering


20. What are the two WEP key lengths? (Choose two.)
• 64 bit
• 128 bit

21. Complete the following sentence: WEP is used to ______ , and EAP is used to _____ wireless networks.
• encrypt; authenticate users on

Kamis, 21 Oktober 2010

Lab 7.3.5 Configuring Wireless Security

Lab 7.3.5 Configuring Wireless Security
Objectives
• Create a security plan for a home network.
• Configure the wireless access point (AP) portion of a multi-function device using security best practices.

Background / Preparation
A well-planned security implementation is critical to the safety of a wireless network. This lab goes over the steps that must be taken to ensure the safety of the network using the following scenario. You have just purchased a Linksys WRT300N wireless router, and you want to set up a small network in your home. You selected this router because the IEEE 802.11n specification claims that it has 12 times the speed of an 802.11g and 4 times the range. Because the 802.11n uses 2.4 GHz, it is backward compatible with both the 802.11b and 802.11g and uses MIMO (multiple-in, multiple-out) technology.
You should enable security mechanisms before connecting your multi-function device to the Internet or any wired network. You should also change the default values provided, because they are well-known values that are easily obtainable on the Internet.

The following resources are required:
• Windows-based computer
• Linksys WRT300N
• Straight-through Ethernet cable

Step 1: Plan the security for your home network
a. List at least six security best practices that you should implement to secure your multi-function device and wireless network.
Jawaban
1) Tambahkan password untuk akses wireless dan gunakan password WPA2 Encryption.
2) Jangan gunakan nama SSID dengan nama anda.
3) Aktifkan alamat MAC spoofing untuk mengatasi alamat MAC yang salah dari router anda.
4) Aktifkan Allow MAC Address only untuk memastikan bahwa hanya mesin yang MAC alamat yang ditentukan dapat terhubung ke wireless.
5) Sebaiknya gunakan LAN jika kita melakukan proses download misalnya pada malam hari dan matikan wireless.
6) Aktifkan firewall router jarngan wireless Anda.

b. Describe what the security risk is for each item.
1) Akan terjadi kemungkinan pengaksesan jaringan oleh pihak yang tidak berhak


Step 2: Connect a computer to the multi-function device and log in to the web-based utility

a. Connect your computer (Ethernet NIC) to the multi-function device (port 1 on the Linksys WRT300N) by using a straight-through cable.
b. The default IP address of the Linksys WRT300N is 192.168.1.1, and the default subnet mask is 255.255.255.0. The computer and Linksys device must be on the same network to communicate with each other. Change the IP address of the computer to 192.168.1.2, and verify that the subnet mask is 255.255.255.0. Enter the internal address of the Linksys device (192.168.1.1) as the default gateway.
Do this by clicking, Start > Control Panel > Network Connections. Right click on the wireless connection and choose Properties. Select the Internet Protocol (TCP/IP) and enter the addresses as shown below.

c. Open a web browser, such as Internet Explorer, Netscape, or Firefox and enter the default IP address of the Linksys device (192.168.1.1) into the address field and press Enter.

d. A screen appears, requesting your user name and password.
b. Leave the User name field blank and enter admin for the password. It is the default password on the Linksys device. Click OK. Remember that passwords are case-sensitive.
c. As you make the necessary changes on the Linksys device, click Save Settings on each screen to save the changes or click Cancel Changes to keep the default settings.

Rabu, 20 Oktober 2010

Lab 7.2.5 Configuring a Wireless Access Point

Lab 7.2.5 Configuring a Wireless Access Point

Objective

•Configure the wireless access point (AP) portion of a multi-function device to allow access to a
wireless client.
Background / Preparation
The Linksys WRT300N includes an integrated 4-port switch, a router and a wireless Access Point (AP). In this
lab, you will configure the AP component of the multi-function device to allow access for wireless clients. The basic wireless capabilities of the multi-function device will be configured but this will not be a secure wireless network. Setting up a secure wireless network will be covered in a later lab.The following resources are required: • Windows XP based computer that is cabled to the multi-function device
• Linksys WRT300N

Step 1: Verify connectivity between the computer and the multi-function device

a. The computer used to configure the AP should be attached to one of the multi-function device’s switch ports.
b. On the computer, click the Start button and select Run. Type cmd and click OK or press Enter.
c. At the command prompt, ping the multi-function device using the default IP address 192.168.1.1 or the IP that has been configured on the multi-function device’s port. Do not proceed until the ping succeeds.
d. Write down the command used to ping the multi-function device.
The answer : ping 192.168.1.1 -t
NOTE: If the ping is not successful, try these troubleshooting steps:
• Check to make sure the IP address of the computer is on the 192.168.1.0 network. The computer must be on the same network as the multi-function device to be able to ping it. The DHCP service ofthe multi-function device is enabled by default. If the computer is configured as a DHCP client itshould have a valid IP address and subnet mask. If the computer has a static IP address, it must be in on the 192.168.1.0 network and the subnet mask must be 255.255.255.0.
• Make sure the cable is a known-good straight-through cable. Test to verify.
• Verify that the link light for the port where the computer is attached is lit.
• Check whether the multi-function device has power.
If none of these steps correct the problem, check with your instructor.

Step 2: Log in to the multi-function device and configure the wireless network
a. Open a web browser. In the address line, type http://ip_address, where ip_address is the IP address
of the wireless router (default is 192.168.1.1). At the prompt, leave the user name textbox empty, but
type the password assigned to the router. The default password is admin. Click OK.
b. In the main menu, click on the Wireless option.

c. In the Basic Wireless Settings window, the Network Mode shows mixed by default, because the AP supports 802.11b, g, and n wireless devices. You can use any of these standards to connect to the AP. If the wireless portion of the multi-function device is NOT being used, the network mode would be set to Disabled. Leave the default of Mixed selected.
d. Delete the default SSID (linksys) in the Network Name (SSID) textbox. Enter a new SSID using your last name or name chosen by your instructor. SSIDs are case-sensitive.
e. Write down the exact SSID name that you are using. __________________________________
____________________________________________________________________________
f. Click on the Radio Band drop-down menu and write down the two options.
____________________________________________________________________________
g. For a wireless network that can use 802.11b, g, or n client devices, the default is Auto. Auto allows
the Wide Channel option to be chosen and gives the best performance. The Standard Channel
option is used if the wireless client devices are 802.11b or g, or both b and g. The Wide Channel
option is used if only 802.11n client devices are being used. Leave the default of Auto selected.
h. SSID Broadcast is set to enabled by default, which enables the AP to periodically send out the SSID
using the wireless antenna. Any wireless devices in the area can detect this broadcast. This is how
clients detect nearby wireless networks.
i. Click on the Save Settings button. When the settings have been successfully saved, click on
Continue.
j. The AP is now configured for a wireless network with the name (SSID) that you gave it. It is important
to write down this information before starting the next lab or attaching any wireless NICs to the
wireless network.

Rabu, 13 Oktober 2010

Latihan modul 1-6

1. A user types www.cisco.com into a web browser address textbox. What does www.cisco.com represent?
the IP address of a web server
• a physical network address
• the closest router interface to the source
• the source IP address in the data transmission

2. What type of server would use IMAP?
• DNS
• DHCP
e-mail
• FTP
• Telnet
• web

3. Which type of server would most likely be used first by a network client in a corporate environment?
• DNS
DHCP
• e-mail
• FTP
• Telnet
• web

4. Which protocol is used by FTP to transfer files over the Internet?
TCP
• SMTP
• UDP
• SNMP

5. Which protocols are TCP/IP application layer protocols? (Choose two.)
• UDP
FTP
• IP
• SMTP
• TCP

6. Which of the following are layers of the TCP/IP model? (Choose three.)
Application
• Physical
Internet
• Network Access
• Presentation

7. You are creating a network-based video game. What influences your decision about which transport protocol to use for the application?
UDP will not disrupt the game to retransmit dropped packets.
• TCP provides extra acknowledgements that will ensure smooth video delivery.
• Both TCP and UDP can be used simultaneously to ensure speed and guaranteed delivery.
• Both TCP and UDP may slow transmission and disrupt game operation, so no transport protocol should be used.

8. Whenever e-mail clients send letters, what device is used to translate the domain names into their associated IP addresses?
• Uniform Resource Locator
• Network redirector server
• SNMP server
DNS server

9. Which application is most likely used to translate www.cisco.com to 198.133.219.25?
• DHCP
DNS
• FTP
• HTTP
• POP
• SMTP

10. Refer to the graphic. Which protocol is used to access this website?
• IM
• FTP
• HTTP
• SNMP
• VoIP

11. Which port number is used by SMTP?
• 20
• 21
25
• 26
• 110

12. Which protocol is used by e-mail servers to communicate with each other?
• FTP
• HTTP
• TFTP
SMTP
• POP
• SNMP

13. What client software enables logged in users to communicate with other logged in users in real time?
• blog
• e-mail
• web mail
instant messaging

14. An Internet server is running both FTP and HTTP services. How does the server know which of these applications should handle an incoming segment?
• The packet header identifies it as an HTTP or FTP packet.
• The data in the segment is specially formatted for either HTTP or FTP.
The segment destination port number identifies the application that should handle it.
• The source port number is associated with one of these well known server applications.

15. What term is used to describe how TCP/IP protocols are layered and interact to format, address, and transmit information across a network?
• protocol hierarchy
• protocol modeling
protocol stack
• protocol layering

16. What three items are contained in an Ethernet frame? (Choose three.)
• source IP address
source MAC address
• destination IP address
destination MAC address
error-checking information

17. What information is contained in an IP header?
• source and destination IP addresses
source and destination MAC addresses
• only destination IP and MAC addresses
• both source and destination IP and MAC addresses

18. Cabling issues are associated with which OSI layer?
• 4
• 2
1
• 3

19. A device receives an Ethernet frame and recognizes the MAC address as its own. What does the device do to the message to get to the encapsulated data?
removes the IP header
• removes the TCP header
• passes data to the application layer
• removes the Ethernet header and trailer

20. A client has decoded a frame and started the de-encapsulation process. In which order does the de-encapsulation process occur?
• 1) remove IP header
2) remove Ethernet header and trailer
3) remove TCP header
4) pass data to the application 


• 1) add TCP header to data
2) add an IP header
3) add frame header and trailer
4) encode the frame into bits 


1) remove Ethernet header and trailer
2) remove IP header
3) remove TCP header
4) pass data to the application 


• 1) add TCP header to data
2) add Ethernet header and trailer
3) add an IP header
4) encode the frame into bits

21. What is an advantage of the use of layers in the OSI reference model?
It breaks network communications into larger parts.
• It increases complexity.
• It prevents changes in one layer from affecting other layers.
• It requires the use of single-vendor equipment for hardware and software communications.

22. What is the correct order of the layers of the OSI reference model, starting at the lowest layer and working up the model?
• data link, physical, transport, network, presentation, session, application
• physical, data link, network, session, transport, presentation, application
physical, data link, network, transport, presentation, session, application
• physical, data link, network, transport, session, presentation, application
• application, session, presentation, transport, data link, network,
physical