CS206 Network Design and Analysis

CS206 Network Design and Analysis

Quiz 1

Q1. Which file will be opened in first step to find the top talkers in Wire Shark?

1. tr-general.pcapng
2. tr-smbjoindomain.pcapng
3. tr-winsize.pcapng

Q2. Which file will be opened to build a basic IO graph in Wire Shark?

1. tr-general.pcapng
2. tr-smbjoindomain.pcapng
3. tr-winsize.pcapng

Q3. Which file will be opened to identify name Resolution Problems in Wire Shark?

1. tr-winsize.pcapng
2. tr-nameresolution.pcapng
3. tr-general.pcapng

Q4. ___________ file is used to obtain the round-trip time (RTT) using Display Filter in Wire Shark.

1. tr-cnn.pcapng
2. tr-winsize.pcapng
3. tr-chappellu.pcapng
4. None of the given

Q5. Which one is first step to change the Dissector Behavior in Wire Shark?

1. Open tr-smbjoindomain.pcapng
2. Open tr-general.pcapng
3. Open tr-winsize.pcapng

Q6. Which file will be used to detect delays in UDP Conversations in Wire Shark?

1. tr-general.pcapng
2. tr-voip-extensions.pcapng
3. tr-winsize.pcapng
4. None of given

Q7. DNS (domain name system) is a request/response protocol which employs _______?

1. UDP
2. SMTP
3. FTP
4. TCP

Q8. To apply a MAC address filter in Wire Shark we will enter ________ .

1. Host ether xx xx xx xx xx xx
2. xx xx xx xx xx xx Host ether
3. ether host xx xx xx xx xx xx
4. xx xx xx xx xx xx ether host

Q9. If IPv4 __________ validation is disabled, there are no Expert Infos Errors in this trace file.

1. CRC
2. Checksum
3. Parity bit
4. None of given

Q10. Which one is the first step to Create Filter Expression Buttons in Wire Shark?

1. Open tr-general.pcapng
2. Open tr-winsize.pcapng
3. Open tr-twohosts.pcapng
4. Open tr-smbjoindomain.pcapng

Ethernet: Disable Validate the Ethernet checksum if possible

IPv4: Disable Validate the IPv4 checksum if possible

UDP: Disable Validate the UDP checksum if possible

TCP: Disable Validate the TCP checksum if possible

TCP: Disable Allow subdissector to reassemble TCP streams

TCP: Enable Calculate conversation timestamps

Quiz 2

Q1. Wire Shark allows a user to define up to _______ differently colored.

1. 5
2. 4
3. 3
4. 7

Q2. Microsoft mainly employs a file sharing protocol called __________ on its Windows-based networks.

1. File Transfer Protocol
2. Network File Service (NFS)
3. Server Message Block (SMB)
4. Apple File Protocol (AFP)

Q3. How Wireshark’s detect a Packet loss _______?

1. TCP delay count process
2. TCP sequencing process
3. TCP re-transmission process
4. TCP recovery process

Q4. To hide any column from view using wireshark we do _________ click on column.

1. Single
2. Double
3. Right
4. Left

Q5. Packet Loss Recovery Method maintains _______ for recovery of lost packet.

1. Sequence number Not Confirm
2. Timer
3. Acknowledgements
4. Window size

Q6. ________ are a sign that packet loss has occurred.

1. Fast re-transmissions
2. Acknowledgements
3. Delays
4. Congestions

Q7. Which of the following Internet based application(s) can tolerate data loss?

1. File transfer
2. Live audio calling
3. Stored video streaming
4. Instant messaging

i. ii. b, c and e iii. a, d and e iv. c, d and e

Q8. Which of the following Internet based application(s) cannot tolerate data loss?

1. Email
2. Real time audio streaming
3. Interactive gaming
4. Web documents

e) Instant messaging i. ii. a, c and d iii. a, d and e iv.

Q9. Wire Shark creates a value called nextseq, which is determined by ___________

1. The Sequence Number field value of each packet
2. The number of data bytes in the packet
3. Adding the Sequence Number field value of each packet to the number of data bytes in it
4. Adding the Sequence Number field value of previous packet to the number of data bytes

Q10. The SMB Header section contains smb.time field which exits _____________

1. Only in SMB Request packets
2. Only in SMB Response packets
3. In both SMB Request/Response packets
4. Neither in SMB Request/Response packets