Sign Up Sign Up


Have an account? Sign In Now

Sign In Sign In


Forgot Password?

Don't have account, Sign Up Here

Forgot Password Forgot Password

Lost your password? Please enter your email address. You will receive a link and will create a new password via email.


Have an account? Sign In Now

You must login to ask a question.


Forgot Password?

Need An Account, Sign Up Here

You must login to add post.


Forgot Password?

Need An Account, Sign Up Here

Please briefly explain why you feel this question should be reported.

Please briefly explain why you feel this answer should be reported.

Please briefly explain why you feel this user should be reported.

RTSALL Logo RTSALL Logo
Sign InSign Up

RTSALL

RTSALL Navigation

  • Home
  • Tutorials
    • All Subjects & Branches (90+)
    • C Programming MCQs
    • Python Programming MCQs
    • Data Structures MCQs
    • DBMS & SQL MCQs
    • Computer Networks MCQs
    • Operating Systems MCQs
    • Quantitative Aptitude MCQs
  • Interview
    • Interview Preparation Portal
    • Web API & REST API
    • SQL Server
    • System Design
    • C# (.NET 8/9)
    • ASP.NET MVC & Core
    • DSA (Data Structures)
    • Cyber Security
    • Burp Suite (AppSec)
  • Tools
    • Run Code
    • JSON Beautifier
    • Regex Tester
    • Diff Checker
    • JWT Decoder
    • UUID Generator
    • .htaccess Generator
    • YAML/JSON Converter
    • SQL Formatter
    • Cron Generator
    • JSON to CSV/Excel
    • System Design Estimator
    • Chmod Calculator
    • Duplicate Line Remover
  • DSA
    • All DSA Problems
    • Online C++ Runner
    • Arrays, Strings & Cache
    • Two Pointers & Sliding Window
    • Linked Lists & Custom Allocators
    • Stacks, Queues & Ring Buffers
    • Trees, BSTs & Indexes
    • Tries & Prefix Search
    • Heaps & Priority Schedulers
    • Hashing & Collision Resolution
    • Graphs & Network Topologies
    • Dynamic Programming
    • Advanced Bitmask & Tree DP
    • Greedy & Resource Allocation
    • Binary Search & State Spaces
    • Bit Manipulation & Low-Level
    • System-Scale & Probabilistic
  • AI Utilities
    • Token Counter
    • JSON Schema Compiler
    • Fine-Tuning JSONL Converter
    • Vector RAG Playground
    • Prompt Optimizer & Architect
    • LLM GPU VRAM Calculator
    • .NET AI Roadmap
  • Finance Tools
    • Compound Interest Calculator
    • SIP Calculator
    • Simple Interest Calculator
    • EMI Calculator
    • Present Value (PV) Calculator
    • Compound Interest Calculator
    • Future Value (FV) Calculator
    • NPV Calculator
    • IRR Calculator
    • CAGR Calculator
    • Dividend Income Calculator
    • Yield on Cost Calculator
    • Dividend Payout Ratio
    • WACC Calculator
    • CAPM & Cost of Equity
    • Cost of Debt Calculator
    • DCF Valuation Calculator
    • Enterprise Value Calculator
  • About Us
  • Blog
  • Contact Us
Search
Ask A Question

Mobile menu

Close
Ask a Question
  • Home
  • Tutorials
    • All Subjects & Branches (90+)
    • C Programming MCQs
    • Python Programming MCQs
    • Data Structures MCQs
    • DBMS & SQL MCQs
    • Computer Networks MCQs
    • Operating Systems MCQs
    • Quantitative Aptitude MCQs
  • Interview
    • Interview Preparation Portal
    • Web API & REST API
    • SQL Server
    • System Design
    • C# (.NET 8/9)
    • ASP.NET MVC & Core
    • DSA (Data Structures)
    • Cyber Security
    • Burp Suite (AppSec)
  • Tools
    • Run Code
    • JSON Beautifier
    • Regex Tester
    • Diff Checker
    • JWT Decoder
    • UUID Generator
    • .htaccess Generator
    • YAML/JSON Converter
    • SQL Formatter
    • Cron Generator
    • JSON to CSV/Excel
    • System Design Estimator
    • Chmod Calculator
    • Duplicate Line Remover
  • DSA
    • All DSA Problems
    • Online C++ Runner
    • Arrays, Strings & Cache
    • Two Pointers & Sliding Window
    • Linked Lists & Custom Allocators
    • Stacks, Queues & Ring Buffers
    • Trees, BSTs & Indexes
    • Tries & Prefix Search
    • Heaps & Priority Schedulers
    • Hashing & Collision Resolution
    • Graphs & Network Topologies
    • Dynamic Programming
    • Advanced Bitmask & Tree DP
    • Greedy & Resource Allocation
    • Binary Search & State Spaces
    • Bit Manipulation & Low-Level
    • System-Scale & Probabilistic
  • AI Utilities
    • Token Counter
    • JSON Schema Compiler
    • Fine-Tuning JSONL Converter
    • Vector RAG Playground
    • Prompt Optimizer & Architect
    • LLM GPU VRAM Calculator
    • .NET AI Roadmap
  • Finance Tools
    • Compound Interest Calculator
    • SIP Calculator
    • Simple Interest Calculator
    • EMI Calculator
    • Present Value (PV) Calculator
    • Compound Interest Calculator
    • Future Value (FV) Calculator
    • NPV Calculator
    • IRR Calculator
    • CAGR Calculator
    • Dividend Income Calculator
    • Yield on Cost Calculator
    • Dividend Payout Ratio
    • WACC Calculator
    • CAPM & Cost of Equity
    • Cost of Debt Calculator
    • DCF Valuation Calculator
    • Enterprise Value Calculator
  • About Us
  • Blog
  • Contact Us
Home/RTSALL Educational Academy: Subject MCQs, Practice Tests & Detailed Explanations/Computer Networks: 5-Chapter Comprehensive Practice & 75 Verified MCQs

Computer Networks: 5-Chapter Comprehensive Practice & 75 Verified MCQs

Home / Learning Platform / Computer Science & IT / Computer Networks & Protocols MCQs
Computer Science & IT 🟢 75 Verified MCQs • 5 Complete Chapters Active ⭐ Interview & Exam Grade

Computer Networks: 5-Chapter Comprehensive Practice & 75 Verified MCQs

Master Computer Networks & Protocols with our complete 5-chapter question bank. Each verified MCQ provides four distinct options, verified solution keys, step-by-step technical rationale, and high-yield conceptual rules.

Curriculum Roadmap & Chapters Covered (All Live & Unlocked):
✓ Chapter 1: OSI Reference Model, Layer Protocols & Physical Mediums (Q1 – Q15)
✓ Chapter 2: Data Link Layer, Framing, CSMA/CD, Switches & VLANs (Q16 – Q30)
✓ Chapter 3: Network Layer, IPv4/IPv6 Addressing, Subnetting & Routing (OSPF, BGP) (Q31 – Q45)
✓ Chapter 4: Transport Layer, TCP 3-Way Handshake, Congestion Control & UDP (Q46 – Q60)
✓ Chapter 5: Application Layer (DNS, HTTP/2/3), TLS/SSL & Network Security (Q61 – Q75)
📝 Total Questions: 75 Verified MCQs
📚 Modules: 5 Complete Chapters
⏱️ Est. Practice Time: ~90 minutes
🎯 Target Benchmark: 80% (60/75 Correct)
Select Chapter to Practice:
Interactive Practice Dashboard
Answered: 0 / 75 Correct: 0 Accuracy: 0% Streak: 🔥 0
Currently Displaying: All 75 Questions across Chapters 1 to 5. Click any option for instant evaluation and in-depth explanations.
Curriculum Track • Module 1 of 5
Chapter 1: OSI Reference Model, Layer Protocols & Physical Mediums (Q1 – Q15)
Question 1 of 75 Chapter 1
At which layer of the OSI 7-Layer Reference Model do routing algorithms (such as OSPF and BGP) and logical IP addressing operate?
A. Data Link Layer (Layer 2)
B. Network Layer (Layer 3)
C. Transport Layer (Layer 4)
D. Session Layer (Layer 5)
✔ Correct Answer: Option B
Detailed Explanation: The Network Layer (Layer 3) is responsible for packet forwarding, logical addressing (IPv4, IPv6), and path determination across heterogeneous networks using routing protocols like OSPF, BGP, and RIP.
🎯 Key Learning Point: Layer 2 deals with physical MAC addresses and frames; Layer 3 deals with logical IP addresses and packets; Layer 4 deals with ports and segments.
Question 2 of 75 Chapter 1
What packets are exchanged during a standard TCP Three-Way Handshake to establish a reliable connection between a client and server?
A. SYN -> SYN-ACK -> ACK
B. SYN -> ACK -> DATA
C. FIN -> ACK -> FIN-ACK
D. PING -> PONG -> ACK
✔ Correct Answer: Option A
Detailed Explanation: 1) The client sends a SYN packet with an Initial Sequence Number (ISN). 2) The server responds with SYN-ACK, acknowledging the client’s ISN and supplying its own ISN. 3) The client sends an ACK packet acknowledging the server’s ISN, transitioning the socket into the ESTABLISHED state.
🎯 Key Learning Point: The 3-way handshake synchronizes sequence numbers in both directions, establishing full-duplex communication.
Question 3 of 75 Chapter 1
Why does a TCP connection enter the 'TIME_WAIT' state on the endpoint that initiates the active close (typically lasting 2MSL)?
A. To allow the operating system to defragment the network card buffer.
B. To ensure the final ACK is received by the remote peer and to allow lingering duplicate packets from the connection to dissipate from the network.
C. To prevent the server from restarting.
D. To negotiate a new encryption key for the next session.
✔ Correct Answer: Option B
Detailed Explanation: TIME_WAIT lasts 2 * Maximum Segment Lifetime (2MSL, typically 1–2 minutes). It ensures that if the final ACK is lost, the closing peer can re-transmit it when the remote peer re-sends its FIN. It also prevents delayed packets from the old connection being misdelivered to a newly opened connection reusing the same 4-tuple (source IP, source port, dest IP, dest port).
🎯 Key Learning Point: High connection turnover can lead to TIME_WAIT socket exhaustion, solved by connection pooling or SO_REUSEADDR.
Question 4 of 75 Chapter 1
What is the difference between TCP Flow Control and TCP Congestion Control?
A. Flow control protects the receiving host from being overwhelmed; Congestion control protects the intermediate network routers and bandwidth.
B. Flow control is handled by DNS; Congestion control is handled by ARP.
C. Flow control is used only in UDP; Congestion control is used only in TCP.
D. There is no difference; they are synonymous terms.
✔ Correct Answer: Option A
Detailed Explanation: Flow Control is an end-to-end mechanism where the receiver advertises its available buffer space (Receive Window ‘rwnd’) so the sender does not overflow the receiver’s memory. Congestion Control manages the sender’s rate based on network capacity (Congestion Window ‘cwnd’) to prevent packet drops at intermediate bottleneck routers.
🎯 Key Learning Point: The sender’s effective transmission rate is bounded by min(rwnd, cwnd).
Question 5 of 75 Chapter 1
Which protocol is responsible for resolving a known logical IPv4 address into a physical hardware MAC address on a local area network?
A. DNS (Domain Name System)
B. ARP (Address Resolution Protocol)
C. DHCP (Dynamic Host Configuration Protocol)
D. ICMP (Internet Control Message Protocol)
✔ Correct Answer: Option B
Detailed Explanation: Address Resolution Protocol (ARP) broadcasts an ARP request packet (‘Who has IP x.x.x.x? Tell MAC y:y:y:y’) on the local Layer 2 broadcast domain (FF:FF:FF:FF:FF:FF). The target host replies with its physical MAC address, which is cached in the sender’s ARP table.
🎯 Key Learning Point: In IPv6, ARP is replaced by the Neighbor Discovery Protocol (NDP) operating over ICMPv6.
Question 6 of 75 Chapter 1
Given the IPv4 address 192.168.10.50/27, what is the subnet mask and the maximum number of usable host addresses on this subnet?
A. Subnet Mask: 255.255.255.0; 254 hosts
B. Subnet Mask: 255.255.255.224; 30 usable hosts
C. Subnet Mask: 255.255.255.240; 14 usable hosts
D. Subnet Mask: 255.255.255.192; 62 usable hosts
✔ Correct Answer: Option B
Detailed Explanation: A /27 prefix has 27 network bits and 5 host bits (32 – 27 = 5). 27 bits = 255.255.255.224 (128 + 64 + 32 = 224). The total number of addresses is 2^5 = 32. Subtracting 2 (network address and broadcast address) leaves exactly 30 usable host IP addresses.
🎯 Key Learning Point: Formula for usable hosts on an IPv4 subnet of prefix length /P: 2^(32 – P) – 2.
Question 7 of 75 Chapter 1
Which transport layer protocol header is smaller, connectionless, and lacks native packet retransmission or sequencing mechanisms?
A. TCP (Transmission Control Protocol)
B. UDP (User Datagram Protocol)
C. SCTP (Stream Control Transmission Protocol)
D. BGP (Border Gateway Protocol)
✔ Correct Answer: Option B
Detailed Explanation: UDP has a compact 8-byte header (Source Port, Destination Port, Length, Checksum) and provides connectionless, best-effort datagram delivery with zero handshake latency, making it ideal for real-time audio/video streaming, DNS queries, and gaming.
🎯 Key Learning Point: TCP header is minimum 20 bytes with reliability; UDP header is fixed at 8 bytes with minimal latency.
Question 8 of 75 Chapter 1
What is the primary difference between an iterative DNS query and a recursive DNS query?
A. Recursive queries operate over UDP; iterative queries operate over TCP.
B. In a recursive query, the contacted server assumes responsibility to return the final answer; in an iterative query, the contacted server returns the best referral address it knows.
C. Iterative queries encrypt the payload; recursive queries do not.
D. Recursive queries are used only for IPv6 addresses.
✔ Correct Answer: Option B
Detailed Explanation: In a recursive query, the DNS client asks a resolver (e.g. ISP or 8.8.8.8) to perform all the lookups on its behalf until finding the answer. In an iterative query, the DNS server responds with a referral to the next authoritative server (e.g., Root -> TLD -> Authoritative) without resolving the full chain itself.
🎯 Key Learning Point: Stub resolvers (PCs) typically perform recursive queries to their local resolver; local resolvers perform iterative queries across the root and TLD hierarchy.
Question 9 of 75 Chapter 1
What major optimization was introduced in HTTP/2 compared to HTTP/1.1 to eliminate head-of-line blocking at the application layer?
A. Switching transport from TCP to UDP.
B. Binary framing and true multiplexing of multiple independent request/response streams over a single TCP connection.
C. Removing all request headers.
D. Requiring manual compression by the client.
✔ Correct Answer: Option B
Detailed Explanation: HTTP/1.1 suffered from application-level head-of-line blocking because requests over a single TCP connection had to be answered in strict sequential order. HTTP/2 splits messages into binary frames tagged with stream IDs, allowing interleaved, concurrent requests and responses over a single shared connection.
🎯 Key Learning Point: HTTP/2 solved application-layer head-of-line blocking, but TCP-level packet loss can still stall all streams—a limitation solved by HTTP/3 over QUIC.
Question 10 of 75 Chapter 1
What is the maximum transmission unit (MTU) size of standard Ethernet frames at the Data Link layer?
A. 576 bytes
B. 1,500 bytes
C. 9,000 bytes
D. 65,535 bytes
✔ Correct Answer: Option B
Detailed Explanation: Standard Ethernet specifies an MTU of 1,500 bytes (the maximum size of the IP packet payload that can be encapsulated inside an Ethernet frame without fragmentation). Frames larger than 1,500 bytes are known as Jumbo Frames (typically 9,000 bytes) used in data centers.
🎯 Key Learning Point: If an IP packet exceeds the path MTU and the ‘Don’t Fragment’ (DF) flag is set, routers drop the packet and return an ICMP ‘Fragmentation Needed’ message (Path MTU Discovery).
Question 11 of 75 Chapter 1
What is the function of the Time-to-Live (TTL) field in an IPv4 header (or Hop Limit in IPv6)?
A. It records the wall-clock timestamp when the packet was created.
B. It prevents infinite routing loops by decrementing by 1 at every router hop; when TTL reaches 0, the packet is discarded and an ICMP Time Exceeded message is returned.
C. It specifies the session expiration time for cookies.
D. It measures the download bandwidth of the link.
✔ Correct Answer: Option B
Detailed Explanation: The TTL field is an 8-bit counter decremented by each router that processes the packet. If routing misconfigurations cause a packet to loop, TTL eventually decrements to 0, whereupon the router discards the packet and sends an ICMP Type 11 (Time Exceeded) message to the source, preventing network saturation.
🎯 Key Learning Point: The ‘traceroute’ / ‘tracert’ diagnostic utility works by sequentially sending packets with increasing TTL values (TTL=1, 2, 3…) to discover each hop along the path.
Question 12 of 75 Chapter 1
How does Network Address Translation (NAT) / Port Address Translation (PAT) allow hundreds of internal private LAN devices to access the public Internet simultaneously?
A. It assigns every computer a temporary public IPv4 address from a global pool.
B. It maps multiple private IP addresses and ephemeral source ports to a single public IP address using unique translated Layer 4 port numbers.
C. It converts IPv4 packets into satellite radio signals.
D. It replaces TCP headers with DNS records.
✔ Correct Answer: Option B
Detailed Explanation: Port Address Translation (PAT / NAT Overload) maintains a translation state table. When an internal host (e.g. 192.168.1.10:54321) initiates an outbound connection, the NAT router rewrites the source IP to its public WAN IP and assigns a unique external port (e.g. 203.0.113.1:61000), routing inbound replies back to the correct internal client.
🎯 Key Learning Point: PAT was the primary technology that prolonged the lifespan of IPv4 amidst global address exhaustion.
Question 13 of 75 Chapter 1
What cryptographic protocol operates at Layer 3 (Network Layer) to provide end-to-end data authentication, integrity, and encryption for VPN tunnels?
A. TLS / SSL
B. IPsec (Internet Protocol Security)
C. SSH (Secure Shell)
D. WPA3
✔ Correct Answer: Option B
Detailed Explanation: IPsec functions at the Network Layer (Layer 3) using protocols like Authentication Header (AH) and Encapsulating Security Payload (ESP) to secure all IP traffic transparently to upper-layer applications, making it standard for site-to-site VPNs.
🎯 Key Learning Point: TLS operates at Layer 4/7 (securing individual application connections like HTTPS), whereas IPsec secures all network layer communications.
Question 14 of 75 Chapter 1
Which diagnostic utility uses ICMP Echo Request and Echo Reply messages to verify network layer reachability and calculate round-trip time (RTT)?
A. netstat
B. ping
C. nslookup
D. arp -a
✔ Correct Answer: Option B
Detailed Explanation: The ‘ping’ utility transmits ICMP Type 8 (Echo Request) packets to a target IP address and listens for ICMP Type 0 (Echo Reply) packets, reporting packet loss percentage and round-trip latency in milliseconds.
🎯 Key Learning Point: Firewalls frequently block ICMP Type 8 to prevent automated IP address scanning and reconnaissance.
Question 15 of 75 Chapter 1
What is the primary role of the Border Gateway Protocol (BGP) on the global Internet?
A. Resolving human-readable hostnames to IP addresses.
B. Distributing routing reachability information between distinct Autonomous Systems (AS) across the global Internet backbone.
C. Encrypting email communication across corporate firewalls.
D. Dynamic assignment of IP addresses to home Wi-Fi routers.
✔ Correct Answer: Option B
Detailed Explanation: BGP is the exterior gateway routing protocol (Path-Vector protocol) that binds the Internet together. It exchanges network prefix reachability between independently administered Autonomous Systems (ISPs, large tech enterprises, telecoms) using policy-based routing metrics.
🎯 Key Learning Point: BGP runs over reliable TCP port 179 and maintains routing tables containing over 900,000 global Internet prefix routes.
Curriculum Track • Module 2 of 5
Chapter 2: Data Link Layer, Framing, CSMA/CD, Switches & VLANs (Q16 – Q30)
Question 16 of 75 Chapter 2
What is the primary role of the Data Link Layer (Layer 2) in the OSI Model?
A. End-to-end process-to-process communication across multiple routers
B. Node-to-node (hop-to-hop) frame transmission, physical MAC addressing, error detection, and link flow control
C. Data compression and encryption
D. Domain name resolution
✔ Correct Answer: Option B
Detailed Explanation: The Data Link layer takes network layer datagrams, encapsulates them into frames, and manages error-free hop-to-hop delivery across a single physical link using hardware MAC addresses.
🎯 Key Learning Point: Data Link is subdivided by IEEE 802 into LLC (Logical Link Control) and MAC (Media Access Control).
Question 17 of 75 Chapter 2
What framing technique uses a dedicated flag byte (such as 01111110 in HDLC) and inserts a '0' bit after five consecutive '1' bits in the payload?
A. Byte stuffing (Character stuffing)
B. Bit stuffing
C. Hamming encoding
D. Manchester encoding
✔ Correct Answer: Option B
Detailed Explanation: Bit stuffing prevents user data containing 01111110 from being misinterpreted as the end-of-frame flag. The sender inserts a ‘0’ whenever five consecutive ‘1’s appear; receiver automatically strips the stuffed ‘0’.
🎯 Key Learning Point: Bit stuffing guarantees transparency regardless of payload bit patterns.
Question 18 of 75 Chapter 2
In Ethernet CSMA/CD (Carrier Sense Multiple Access with Collision Detection), what does a station do when a collision is detected during transmission?
A. Continues transmitting the entire frame
B. Aborts transmission immediately, transmits a 32-to-48 bit jam signal, and enters Binary Exponential Backoff
C. Halts the network permanently
D. Changes its physical MAC address
✔ Correct Answer: Option B
Detailed Explanation: Upon detecting collision, the transceiver immediately aborts frame transmission and emits a jam signal to ensure all network nodes detect the collision. It then waits a randomized backoff interval: K * slot_time.
🎯 Key Learning Point: Truncated binary exponential backoff chooses K randomly from [0, 2^i – 1] where i is collision count (capped at 10).
Question 19 of 75 Chapter 2
What is the minimum frame size in standard 10 Mbps Ethernet (802.3), and what determines this physical limit?
A. 1500 bytes, determined by RAM buffer sizes
B. 64 bytes (512 bits), determined by the round-trip propagation delay across the maximum network diameter (slot time)
C. 32 bytes, determined by MAC address length
D. 128 bytes, determined by CRC polynomial
✔ Correct Answer: Option B
Detailed Explanation: To guarantee that a sender detects a collision before it finishes transmitting the frame, the transmission time must be >= round-trip propagation time (2 * Tprop). At 10 Mbps over 2.5 km with repeaters, this requires at least 64 bytes.
🎯 Key Learning Point: Frames smaller than 64 bytes are classified as ‘runt frames’ and dropped as collision fragments.
Question 20 of 75 Chapter 2
How does a Layer 2 Ethernet Switch forward frames when receiving a frame with an unknown destination MAC address?
A. Drops the frame immediately
B. Floods (broadcasts) the frame out of all ports except the port on which it was received
C. Sends it only to port 1
D. Queues it until the address is manually entered
✔ Correct Answer: Option B
Detailed Explanation: If the destination MAC is not found in the Switch Forwarding Database (CAM table), the switch broadcasts (floods) the frame out of all active ports on that VLAN except the ingress port.
🎯 Key Learning Point: Switches dynamically learn source MAC addresses from incoming frame headers to populate their MAC table.
Question 21 of 75 Chapter 2
What protocol prevents Layer 2 switching loops and broadcast radiation storms in redundant bridged networks?
A. Border Gateway Protocol (BGP)
B. Spanning Tree Protocol (STP / IEEE 802.1D)
C. Address Resolution Protocol (ARP)
D. Dynamic Host Configuration Protocol (DHCP)
✔ Correct Answer: Option B
Detailed Explanation: STP elects a Root Bridge and disables redundant physical switch ports (putting them into blocking state) to create a loop-free logical tree topology. If an active link fails, blocked ports are unblocked.
🎯 Key Learning Point: Rapid Spanning Tree Protocol (RSTP / IEEE 802.1w) reduces convergence time from 30-50 seconds to sub-second.
Question 22 of 75 Chapter 2
What IEEE 802.1Q tag header field is used by network switches to identify Virtual LAN (VLAN) membership on trunk links?
A. 12-bit VLAN ID (VID) allowing up to 4094 distinct VLANs
B. 32-bit IPv4 address
C. 48-bit MAC address
D. 16-bit TCP port
✔ Correct Answer: Option A
Detailed Explanation: The 802.1Q header inserts a 4-byte tag into the Ethernet frame containing a 12-bit VLAN Identifier (VID), providing 4,096 theoretical VLANs (0 and 4095 are reserved, allowing 1–4094).
🎯 Key Learning Point: Trunk ports transmit 802.1Q tagged frames across switches; Access ports carry untagged frames to end devices.
Question 23 of 75 Chapter 2
How does the Address Resolution Protocol (ARP) map a known IPv4 address to a physical MAC address on a local subnet?
A. Sends a unicast query to the default gateway
B. Broadcasts an ARP Request frame (dest MAC FF:FF:FF:FF:FF:FF); the host owning the requested IP replies with a unicast ARP Reply containing its MAC address
C. Queries the global DNS root servers
D. Hashes the IP using MD5
✔ Correct Answer: Option B
Detailed Explanation: ARP Request is broadcast to all hosts on the Layer 2 broadcast domain asking ‘Who has IP X? Tell Y’. Only the device holding IP X replies via unicast frame containing its hardware MAC.
🎯 Key Learning Point: Hosts maintain an ARP Cache table to avoid re-broadcasting for every outgoing packet.
Question 24 of 75 Chapter 2
What is the maximum throughput efficiency of the Pure ALOHA random access protocol?
A. 100%
B. 1 / (2e) ≈ 18.4%
C. 1 / e ≈ 36.8%
D. 50%
✔ Correct Answer: Option B
Detailed Explanation: In Pure ALOHA, frames can be sent anytime. Vulnerable period is 2 * Tframe. Maximum throughput S = G * e^(-2G) occurs at offered load G = 0.5, yielding S = 1/(2e) ≈ 18.4%.
🎯 Key Learning Point: Slotted ALOHA synchronizes transmissions into discrete time slots, doubling maximum throughput to 1/e ≈ 36.8%.
Question 25 of 75 Chapter 2
In Sliding Window Flow Control, what is the maximum sender window size for Go-Back-N with N-bit sequence numbers?
A. 2^n
B. 2^n – 1
C. 2^(n – 1)
D. n^2
✔ Correct Answer: Option B
Detailed Explanation: In Go-Back-N, the sender window size cannot exceed 2^n – 1. If window size were 2^n, the receiver would be unable to distinguish whether an ACK represents a new frame or a duplicate retransmission.
🎯 Key Learning Point: In Selective Repeat, window size cannot exceed 2^(n – 1) for both sender and receiver.
Question 26 of 75 Chapter 2
What is the purpose of the 32-bit Cyclic Redundancy Check (CRC-32) field in the Ethernet frame trailer?
A. Encrypt payload data against eavesdropping
B. Detect bit errors introduced during transmission over the physical channel via polynomial division
C. Route the packet through intermediate routers
D. Compress ASCII characters
✔ Correct Answer: Option B
Detailed Explanation: CRC is an error-detecting code based on cyclic polynomials. The sender calculates CRC remainder and appends it to frame. Receiver recalculates; if remainder != 0, the frame is corrupted and discarded.
🎯 Key Learning Point: CRC detects all single-bit, double-bit, and odd numbers of errors, and burst errors up to generator polynomial degree.
Question 27 of 75 Chapter 2
How does CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) in Wi-Fi (IEEE 802.11) differ from Ethernet's CSMA/CD?
A. Wi-Fi devices cannot detect collisions while transmitting because their own signal drowns out incoming signals; therefore, they avoid collisions using DIFS intervals, random backoff, and optional RTS/CTS handshakes
B. Wi-Fi does not use carrier sensing
C. Wi-Fi has zero collisions
D. Wi-Fi transmits at light speed
✔ Correct Answer: Option A
Detailed Explanation: Wireless radios cannot receive while transmitting on the same frequency (half-duplex RF dynamic range issue). Thus, 802.11 avoids collisions proactively using DIFS, exponential backoff, and RTS/CTS (Request to Send / Clear to Send).
🎯 Key Learning Point: RTS/CTS solves the ‘Hidden Terminal Problem’ in wireless local area networks.
Question 28 of 75 Chapter 2
What is the difference between a Collision Domain and a Broadcast Domain?
A. Hubs separate broadcast domains; switches separate collision domains
B. Each port on a Switch is an isolated Collision Domain; an entire Switch (or VLAN) is a single Broadcast Domain, whereas Routers break up Broadcast Domains
C. Routers cannot break broadcast domains
D. They are identical concepts
✔ Correct Answer: Option B
Detailed Explanation: Switches eliminate collisions by providing dedicated bandwidth per port (each switch port is its own collision domain). However, broadcast frames (FF:FF:FF:FF:FF:FF) reach all switch ports. Routers block broadcasts, isolating broadcast domains.
🎯 Key Learning Point: Hub = 1 Collision Domain, 1 Broadcast Domain; Switch = N Collision Domains, 1 Broadcast Domain; Router = N Collision Domains, N Broadcast Domains.
Question 29 of 75 Chapter 2
What is Point-to-Point Protocol over Ethernet (PPPoE) primarily used for?
A. Local printer sharing
B. Encapsulating PPP frames within Ethernet frames to enable user authentication, encryption, and billing across DSL and broadband ISP connections
C. Compressing video streams
D. Assigning static IP addresses to cloud servers
✔ Correct Answer: Option B
Detailed Explanation: PPPoE combines Ethernet’s multi-host capability with PPP’s point-to-point authentication (PAP/CHAP) and accounting features, widely used by residential broadband and fiber providers.
🎯 Key Learning Point: PPPoE adds an 8-byte encapsulation header, reducing the standard Ethernet MTU from 1500 to 1492 bytes.
Question 30 of 75 Chapter 2
What is ARP Spoofing (ARP Poisoning)?
A. Turning off the network switch
B. An attack where an attacker sends falsified gratuitous ARP messages over a LAN to associate the attacker's MAC address with the IP of the default gateway, intercepting network traffic (Man-in-the-Middle)
C. Overloading DNS servers with bogus queries
D. Changing Wi-Fi passwords
✔ Correct Answer: Option B
Detailed Explanation: Because ARP is stateless and unauthenticated, devices accept unsolicited ARP responses. An attacker poisons target ARP caches, causing all traffic destined for the gateway to be routed through the attacker.
🎯 Key Learning Point: Dynamic ARP Inspection (DAI) on managed switches prevents ARP spoofing by validating ARP packets against DHCP snooping binding tables.
Curriculum Track • Module 3 of 5
Chapter 3: Network Layer, IPv4/IPv6 Addressing, Subnetting & Routing (OSPF, BGP) (Q31 – Q45)
Question 31 of 75 Chapter 3
What is the total number of usable host addresses available in a /26 IPv4 subnet?
A. 64
B. 62 (2^(32 – 26) – 2 = 64 – 2)
C. 30
D. 126
✔ Correct Answer: Option B
Detailed Explanation: A /26 mask leaves 32 – 26 = 6 host bits. Total addresses = 2^6 = 64. Subtracting 2 (all-0s network address and all-1s broadcast address) leaves 62 assignable host addresses.
🎯 Key Learning Point: Formula for usable IPv4 hosts in a /N subnet: 2^(32 – N) – 2.
Question 32 of 75 Chapter 3
What is the purpose of the Time-to-Live (TTL) field in an IPv4 header?
A. Measures the bandwidth consumed by the packet
B. Prevents packets from circulating endlessly in routing loops; each router decrements TTL by 1 and drops the packet with an ICMP Time Exceeded message when TTL hits 0
C. Synchronizes wall-clock timestamps between end hosts
D. Tracks how long data stays in RAM
✔ Correct Answer: Option B
Detailed Explanation: TTL (Hop Limit in IPv6) guarantees that packets caught in routing loops are terminated. When TTL reaches 0, the router discards the packet and sends an ICMP Type 11 (Time Exceeded) message to the sender.
🎯 Key Learning Point: The ‘traceroute’ utility uses incremental TTL values (1, 2, 3…) to discover intermediate router hops.
Question 33 of 75 Chapter 3
What are the three RFC 1918 Private IPv4 Address ranges reserved for internal networks?
A. 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16
B. 127.0.0.0/8, 169.254.0.0/16, and 224.0.0.0/4
C. 8.8.8.0/24, 1.1.1.0/24, and 4.4.4.0/24
D. 192.0.2.0/24, 198.51.100.0/24, and 203.0.113.0/24
✔ Correct Answer: Option A
Detailed Explanation: RFC 1918 defines private non-routable IP blocks: Class A: 10.0.0.0 – 10.255.255.255 (/8); Class B: 172.16.0.0 – 172.31.255.255 (/12); Class C: 192.168.0.0 – 192.168.255.255 (/16).
🎯 Key Learning Point: Internet core routers drop packets with RFC 1918 destination addresses; NAT translates private IPs to public routable IPs.
Question 34 of 75 Chapter 3
How does Network Address Port Translation (NAPT / PAT) allow thousands of private hosts to share a single public IP address?
A. By assigning each host a distinct MAC address
B. By translating private IP + source port combinations into a single public IP with unique dynamically mapped source ports
C. By compressing IP packets into single bits
D. By dividing the IP address into fractional decimals
✔ Correct Answer: Option B
Detailed Explanation: NAPT (NAT Overload) tracks concurrent connections using 16-bit TCP/UDP port numbers. Up to ~65,000 simultaneous connections can theoretically be multiplexed over a single external public IP address.
🎯 Key Learning Point: NAPT maintains a translation state table: (Private IP, Private Port) <-> (Public IP, Mapped Port).
Question 35 of 75 Chapter 3
What fundamental routing algorithm is used by RIP (Routing Information Protocol)?
A. Link-State (Dijkstra's Shortest Path First)
B. Distance-Vector (Bellman-Ford Algorithm) using hop count as metric (max 15 hops)
C. Path-Vector Algorithm
D. Round Robin scheduling
✔ Correct Answer: Option B
Detailed Explanation: RIP is a Distance-Vector protocol based on Bellman-Ford. Routers broadcast entire routing tables every 30 seconds. A hop count of 16 is treated as infinity (unreachable), preventing infinite loops.
🎯 Key Learning Point: RIP suffers from the ‘Count-to-Infinity’ problem, mitigated by Split Horizon and Poison Reverse.
Question 36 of 75 Chapter 3
Why does Open Shortest Path First (OSPF) converge significantly faster than Distance-Vector protocols like RIP?
A. OSPF routers broadcast routing tables every second
B. OSPF is a Link-State protocol where routers flood Link-State Advertisements (LSAs), build an identical topological graph of the network, and run Dijkstra's algorithm locally
C. OSPF runs directly over HTTP
D. OSPF uses hop count
✔ Correct Answer: Option B
Detailed Explanation: In OSPF, every router has a complete map of the network topology stored in its Link-State Database (LSDB). When a link status changes, only localized LSAs are flooded, and routers recalculate paths instantaneously via Dijkstra.
🎯 Key Learning Point: OSPF uses Cost (inversely proportional to bandwidth) as its metric and organizes networks into hierarchical Areas (Area 0 = Backbone).
Question 37 of 75 Chapter 3
What protocol is the de facto standard exterior routing protocol that powers inter-domain routing between Autonomous Systems (AS) across the global Internet?
A. OSPF
B. Border Gateway Protocol (BGP-4)
C. IS-IS
D. ICMP
✔ Correct Answer: Option B
Detailed Explanation: BGP is a Path-Vector protocol that operates across Autonomous Systems. It advertises path vectors (AS-PATH attribute) to prevent inter-AS routing loops and enforces complex corporate peering policies.
🎯 Key Learning Point: BGP uses TCP port 179 for reliable session establishment.
Question 38 of 75 Chapter 3
How does IPv6 eliminate the need for IP packet fragmentation by intermediate routers?
A. IPv6 headers do not allow packets over 64 bytes
B. Intermediate routers drop packets exceeding MTU and return ICMPv6 Packet Too Big, forcing the sending host to perform Path MTU Discovery (PMTUD) and fragment at source
C. IPv6 does not support MTU
D. All IPv6 links are infinite bandwidth
✔ Correct Answer: Option B
Detailed Explanation: In IPv4, routers fragmented oversized packets in transit, taxing CPU. In IPv6, intermediate routers NEVER fragment packets. If a packet exceeds link MTU, it is dropped and ICMPv6 Packet Too Big instructs the sender to adjust.
🎯 Key Learning Point: IPv6 has a fixed 40-byte base header; optional features are implemented via daisy-chained Extension Headers.
Question 39 of 75 Chapter 3
What is the primary function of the Internet Control Message Protocol (ICMP)?
A. Transmitting multimedia video files
B. Reporting network-layer diagnostics, errors, and operational information (e.g. Destination Unreachable, Time Exceeded, Echo Request/Reply)
C. Encrypting email attachments
D. Managing web server cookies
✔ Correct Answer: Option B
Detailed Explanation: ICMP (encapsulated directly in IP datagrams, protocol 1) is used by network devices to send error messages and operational queries (such as ‘ping’ using Echo Request Type 8 and Echo Reply Type 0).
🎯 Key Learning Point: ICMP does not guarantee reliability; ICMP error messages are never generated in response to other ICMP error messages.
Question 40 of 75 Chapter 3
What is the purpose of CIDR (Classless Inter-Domain Routing) prefix aggregation (Supernetting)?
A. Generating faster MAC addresses
B. Combining multiple contiguous smaller IP network prefixes into a single consolidated routing advertisement to curtail global routing table explosion
C. Converting IPv4 addresses into domain names
D. Setting up Wi-Fi encryption
✔ Correct Answer: Option B
Detailed Explanation: CIDR replaced rigid Class A/B/C addressing. Route aggregation allows a router to summarize e.g. four contiguous /24 blocks into a single /22 route, drastically reducing global BGP routing table size.
🎯 Key Learning Point: Routers use Longest Prefix Match (LPM) to forward packets when multiple CIDR routes overlap.
Question 41 of 75 Chapter 3
What is the Solicited-Node Multicast address in IPv6 and what replaces ARP in IPv6 networks?
A. Neighbor Discovery Protocol (NDP) using ICMPv6 messages replaces ARP; uses solicited-node multicast (FF02::1:FFxx:xxxx)
B. ARPv6 using broadcasts
C. DHCPv6 only
D. DNS lookups
✔ Correct Answer: Option A
Detailed Explanation: IPv6 eliminates broadcast addressing entirely. Neighbor Discovery Protocol (NDP) uses ICMPv6 Neighbor Solicitation and Neighbor Advertisement over targeted Solicited-Node multicast addresses to resolve Layer 2 addresses.
🎯 Key Learning Point: NDP also enables Stateless Address Autoconfiguration (SLAAC), allowing hosts to self-configure IPv6 addresses.
Question 42 of 75 Chapter 3
What is an Autonomous System (AS) in Internet architecture?
A. A self-driving car connected to 5G
B. A collection of connected IP routing prefixes under the control of a single administrative entity or ISP presenting a common, unified routing policy to the Internet
C. A computer operating without an operating system
D. A single Ethernet switch
✔ Correct Answer: Option B
Detailed Explanation: An AS is an independently administered network domain (e.g., Google, Comcast, Level3) assigned a globally unique Autonomous System Number (ASN), exchanging routing information via BGP.
🎯 Key Learning Point: ASNs were originally 16-bit (1–65535) and are now 32-bit (>4 billion available).
Question 43 of 75 Chapter 3
In IP routing, what does the 'Longest Prefix Match' (LPM) rule dictate?
A. The router selects the route that has been in the table longest
B. When a destination IP matches multiple routing table entries, the router selects the entry with the longest subnet mask (most specific prefix)
C. The router chooses the route with the highest IP number
D. The router drops the longest address
✔ Correct Answer: Option B
Detailed Explanation: If a destination matches both 10.0.0.0/8 and 10.1.2.0/24, the router forwards out the interface for 10.1.2.0/24 because /24 is more specific (24 matching leading bits vs 8).
🎯 Key Learning Point: Trie and hardware TCAM (Ternary Content-Addressable Memory) data structures implement LPM at line rate.
Question 44 of 75 Chapter 3
What is Anycast routing?
A. Sending data to every computer in the world simultaneously
B. Assigning the same unicast IP address to multiple geographically distributed servers, where network routers route traffic to the topologically nearest instance via BGP
C. Broadcasting data only to mobile phones
D. Routing data through an encrypted tunnel
✔ Correct Answer: Option B
Detailed Explanation: Anycast allows multiple servers (e.g. Cloudflare DNS 1.1.1.1, Google 8.8.8.8) to share one IP. BGP automatically directs client traffic to the closest server node, providing high availability and DDoS resilience.
🎯 Key Learning Point: Root DNS servers and global CDNs rely heavily on BGP Anycast routing.
Question 45 of 75 Chapter 3
What does DHCP Option 82 (Relay Agent Information Option) do?
A. Assigns an IPv6 address
B. Allows a DHCP relay agent to insert network location details (such as the switch port or circuit ID where the client is attached) into DHCP requests sent to a remote DHCP server
C. Resets the client network interface card
D. Sets up VPN tunneling
✔ Correct Answer: Option B
Detailed Explanation: Option 82 enables ISPs and enterprise networks to allocate IP addresses based on the physical switch port or DSLAM circuit where the subscriber is connected, preventing IP address spoofing.
🎯 Key Learning Point: DHCP Relay Agents forward broadcast DHCPDISCOVER packets across router boundaries via unicast.
Curriculum Track • Module 4 of 5
Chapter 4: Transport Layer, TCP 3-Way Handshake, Congestion Control & UDP (Q46 – Q60)
Question 46 of 75 Chapter 4
What is the purpose of the 3-Way Handshake in the Transmission Control Protocol (TCP)?
A. Encrypt payload data with AES keys
B. Establish a reliable full-duplex connection, synchronize Initial Sequence Numbers (ISNs), and agree on TCP buffer socket parameters
C. Resolve domain names into IP addresses
D. Calculate routing metrics
✔ Correct Answer: Option B
Detailed Explanation: The 3-way handshake (SYN -> SYN-ACK -> ACK) establishes synchronized Initial Sequence Numbers (ISNs) in both directions and negotiates TCP options such as MSS (Maximum Segment Size) and Window Scaling.
🎯 Key Learning Point: Randomized ISNs prevent connection spoofing and old duplicate packet interference.
Question 47 of 75 Chapter 4
Why does the active closer in a TCP connection transition into the TIME_WAIT state for 2*MSL (Maximum Segment Lifetime)?
A. To download additional web assets
B. To ensure the final ACK was received by the remote peer (retransmitting ACK if remote re-sends FIN) and to allow stale in-flight duplicate segments to expire in the network
C. To cool down the network interface card
D. To scan the packet for malware
✔ Correct Answer: Option B
Detailed Explanation: If the final ACK is lost, the other side will retransmit its FIN. The node in TIME_WAIT can resend the ACK. Furthermore, waiting 2*MSL (typically 60-120s) prevents stray packets from corrupting a new connection on the same port.
🎯 Key Learning Point: SO_REUSEADDR socket option allows binding to a port currently in TIME_WAIT.
Question 48 of 75 Chapter 4
How does TCP distinguish between a segment loss caused by network congestion vs normal out-of-order packet delivery?
A. It asks the router directly via ICMP
B. Receiving 3 duplicate ACKs (4 identical ACKs total) triggers Fast Retransmit without waiting for the RTO (Retransmission Timeout) timer to expire
C. TCP cannot detect packet loss
D. It pauses all transmission for 60 seconds
✔ Correct Answer: Option B
Detailed Explanation: When an out-of-order segment arrives, receiver immediately generates a duplicate ACK. If 3 duplicate ACKs arrive, sender assumes packet loss (Fast Retransmit), retransmitting immediately and entering Fast Recovery.
🎯 Key Learning Point: Fast Retransmit avoids the costly performance penalty of an RTO expiration and subsequent Slow Start.
Question 49 of 75 Chapter 4
What is the behavior of the TCP Slow Start algorithm upon establishing a new connection?
A. Congestion Window (cwnd) increases by 1 MSS for every received ACK, effectively doubling cwnd every Round-Trip Time (exponential growth)
B. cwnd increases linearly by 1 packet per RTT
C. cwnd starts at the maximum buffer capacity
D. Packets are delayed by 500 ms
✔ Correct Answer: Option A
Detailed Explanation: Despite its name, Slow Start increases cwnd exponentially: 1 -> 2 -> 4 -> 8 MSS per RTT until reaching the Slow Start Threshold (ssthresh), whereupon it transitions to linear Congestion Avoidance.
🎯 Key Learning Point: Modern Linux kernels initialize cwnd to 10 MSS (initcwnd=10) to accelerate web page asset loading.
Question 50 of 75 Chapter 4
What does the TCP Reset (RST) flag indicate when received by a host?
A. The connection has finished normally
B. An abnormal, immediate teardown of the connection; sent when a packet arrives for a closed port, or an unrecoverable protocol error occurred
C. Request for retransmission of all previous packets
D. Clock synchronization message
✔ Correct Answer: Option B
Detailed Explanation: An RST packet is an abrupt connection abort. If a client attempts to connect (SYN) to a port where no listening service is running, the host replies with RST-ACK.
🎯 Key Learning Point: Firewalls also inject forged RST packets to terminate forbidden connections (TCP Reset Attacks).
Question 51 of 75 Chapter 4
What is the primary architectural difference between TCP and UDP?
A. TCP is connection-oriented, provides ordered byte-stream delivery, flow control, and error recovery; UDP is connectionless, lightweight, and provides best-effort message datagrams with zero delivery guarantees
B. UDP is slower than TCP
C. UDP has an 80-byte header; TCP has an 8-byte header
D. UDP can only be used on fiber optics
✔ Correct Answer: Option A
Detailed Explanation: TCP is a heavy, stateful protocol guaranteeing order, flow control, and reliability. UDP is a thin 8-byte wrapper providing only port multiplexing and an optional checksum, ideal for real-time VoIP, gaming, and DNS.
🎯 Key Learning Point: UDP has no handshake overhead: latency for initial transmission is 0 RTT.
Question 52 of 75 Chapter 4
What is the purpose of the TCP Selective Acknowledgment (SACK) option (RFC 2018)?
A. Allows the sender to select which encryption algorithm to use
B. Enables the receiver to inform the sender about non-contiguous blocks of data successfully received, allowing sender to retransmit only missing segments rather than the entire window
C. Selects the fastest network path
D. Acknowledges only even-numbered packets
✔ Correct Answer: Option B
Detailed Explanation: Standard cumulative ACKs only report the highest contiguous byte received. SACK communicates discontinuous byte ranges (e.g. bytes 1-1000 and 2000-3000 received), preventing wasteful retransmissions.
🎯 Key Learning Point: SACK is critical for high-latency, high-bandwidth links (large BDP networks).
Question 53 of 75 Chapter 4
How does the Nagle Algorithm optimize network transmission, and why is TCP_NODELAY used to disable it?
A. Nagle compresses payloads with Gzip
B. Nagle buffers small outgoing packets until previous data is acknowledged or a full MSS is accumulated to prevent tinygram packet storms; TCP_NODELAY disables buffering for latency-sensitive applications (e.g. games, SSH)
C. Nagle encrypts TCP headers
D. Nagle automatically changes TCP port numbers
✔ Correct Answer: Option B
Detailed Explanation: Nagle prevents 40 bytes of header overhead for a 1-byte keystroke. However, interacting with Delayed ACK can cause a 200ms deadlock. Setting socket option TCP_NODELAY disables Nagle, sending small packets immediately.
🎯 Key Learning Point: Real-time games, trading systems, and interactive SSH terminals always enable TCP_NODELAY.
Question 54 of 75 Chapter 4
What is the 'Bandwidth-Delay Product' (BDP) in high-speed networks?
A. Total cost of fiber cabling
B. Bandwidth (bits/sec) multiplied by Round-Trip Time (sec), representing the maximum volume of unacknowledged data 'in flight' required to fully saturate the network pipeline
C. The physical size of the router chassis
D. Frequency modulation of Wi-Fi
✔ Correct Answer: Option B
Detailed Explanation: BDP measures the capacity of the network pipe (BDP = Link Bandwidth * RTT). If the TCP window is smaller than BDP, the sender stalls waiting for ACKs and the link remains underutilized.
🎯 Key Learning Point: TCP Window Scaling (RFC 1323) expands maximum window size from 64 KB up to 1 Gigabyte to saturate high BDP links.
Question 55 of 75 Chapter 4
What congestion control paradigm does Google's BBR (Bottleneck Bandwidth and RTT) algorithm utilize?
A. Loss-based congestion control (like TCP Reno / Cubic)
B. Model-based congestion control that measures delivery rate and round-trip time to operate at optimal bottleneck bandwidth without causing bufferbloat or relying on packet drops
C. Fixed bitrate transmission
D. Manual bandwidth throttling
✔ Correct Answer: Option B
Detailed Explanation: Traditional Reno/Cubic fill router buffers until packets drop, causing bufferbloat and latency. BBR creates an explicit model of the network pipeline, maximizing throughput while minimizing queuing delay.
🎯 Key Learning Point: BBR is deployed across YouTube, Google Search, and modern Linux CDNs.
Question 56 of 75 Chapter 4
What is a SYN Flood attack and how do SYN Cookies mitigate it?
A. Flooding DNS servers with UDP packets
B. An attacker sends high volumes of TCP SYN requests from spoofed IPs without completing the handshake, exhausting server connection backlogs; SYN Cookies encode connection state inside the initial sequence number, eliminating half-open state allocation
C. A physical water flood in a datacenter
D. Overloading Ethernet broadcast domains
✔ Correct Answer: Option B
Detailed Explanation: In a SYN flood, the server allocates TCB state memory for half-open connections until RAM is exhausted. SYN Cookies calculate ISN = cryptographic_hash(client_ip, port, timestamp, secret), allocating zero RAM until the client returns ACK.
🎯 Key Learning Point: SYN cookies eliminate server memory allocation during initial TCP handshakes.
Question 57 of 75 Chapter 4
What is the difference between TCP Flow Control and TCP Congestion Control?
A. They are identical mechanisms
B. Flow Control protects the receiving endpoint buffer from being overwhelmed (managed by advertised Receiver Window: rwnd); Congestion Control protects intermediate network routers and links from collapse (managed by Congestion Window: cwnd)
C. Congestion control is managed only by the receiver
D. Flow control uses UDP packets
✔ Correct Answer: Option B
Detailed Explanation: Flow Control is end-to-end (sender does not overrun receiver RAM: effective_window = min(rwnd, cwnd)). Congestion Control is network-wide, preventing intermediate links from saturating.
🎯 Key Learning Point: Transmission rate is constrained by: min(rwnd, cwnd).
Question 58 of 75 Chapter 4
What is the purpose of Explicit Congestion Notification (ECN)?
A. Allows intermediate routers to mark bits (CE = Congestion Experienced) in the IP header when queues build up, signaling endpoints to slow down before packets are dropped
B. Sends an email to the network administrator
C. Terminates client TCP connections automatically
D. Disables Wi-Fi encryption
✔ Correct Answer: Option A
Detailed Explanation: ECN uses 2 bits in the IP header (ECT and CE) and 2 flags in the TCP header (ECE and CWR). Routers with RED (Random Early Detection) mark packets rather than dropping them, preventing retransmissions.
🎯 Key Learning Point: ECN provides early congestion signaling without inducing packet loss.
Question 59 of 75 Chapter 4
In TCP, what is the Maximum Segment Size (MSS)?
A. The total size of the Ethernet frame
B. The maximum amount of data (payload only, excluding IP and TCP headers) that a host can receive in a single TCP segment, negotiated in the SYN packet
C. The total RAM of the network card
D. The number of packets in the buffer
✔ Correct Answer: Option B
Detailed Explanation: MSS = MTU – (IP header + TCP header). On standard Ethernet with 1500-byte MTU, IPv4 (20 bytes) and TCP (20 bytes) yield an MSS of 1460 bytes.
🎯 Key Learning Point: MSS applies strictly to the data payload, omitting header bytes.
Question 60 of 75 Chapter 4
What happens when a TCP sender receives a Zero Window Advertisement (rwnd = 0) from the receiver?
A. Sender closes the connection with an RST
B. Sender pauses data transmission and starts a Persist Timer, periodically transmitting 1-byte Zero-Window Probes to trigger window updates from the receiver
C. Sender switches to UDP
D. Receiver crashes
✔ Correct Answer: Option B
Detailed Explanation: When the receiver’s buffer fills, it advertises rwnd = 0. If the subsequent window update ACK is lost, both sides would deadlock. The Persist Timer sends 1-byte probe packets to poll for window reopening.
🎯 Key Learning Point: Zero Window Probes prevent permanent deadlocks caused by lost TCP window update packets.
Curriculum Track • Module 5 of 5
Chapter 5: Application Layer (DNS, HTTP/2/3), TLS/SSL & Network Security (Q61 – Q75)
Question 61 of 75 Chapter 5
What transport protocol does DNS primarily use, and when does it switch to TCP?
A. Always uses TCP port 80
B. Primarily uses UDP port 53 for fast query/response; falls back to TCP port 53 for zone transfers (AXFR) or when responses exceed 512 bytes (truncated TC bit set)
C. Always uses ICMP
D. Uses SCTP
✔ Correct Answer: Option B
Detailed Explanation: Standard DNS lookups use UDP for speed (no 3-way handshake). If response data exceeds 512 bytes (or EDNS0 buffer size), server sets the TC (Truncation) bit, instructing the client to retry over TCP port 53.
🎯 Key Learning Point: DNS over HTTPS (DoH) and DNS over TLS (DoT) use TCP port 443 and 853 respectively for encryption.
Question 62 of 75 Chapter 5
What is the primary improvement of HTTP/2 over HTTP/1.1?
A. HTTP/2 eliminates HTML and uses JSON only
B. Binary framing, multiplexing multiple concurrent bidirectional streams over a single TCP connection, HPACK header compression, and Server Push
C. Removal of SSL/TLS encryption
D. Replacement of IP addresses with URLs
✔ Correct Answer: Option B
Detailed Explanation: HTTP/1.1 suffered from Head-of-Line (HoL) blocking at the application layer, requiring multiple parallel TCP connections. HTTP/2 multiplexes independent streams over one TCP pipe using binary frames.
🎯 Key Learning Point: HTTP/2 binary framing decomposes messages into HEADERS and DATA frames tagged with Stream IDs.
Question 63 of 75 Chapter 5
Why does HTTP/3 abandon TCP in favor of QUIC running over UDP?
A. UDP is cheaper to route than TCP
B. To solve TCP Head-of-Line blocking (where a single dropped packet stalls all multiplexed streams), achieve 0-RTT connection resumption, and provide seamless connection migration across network changes
C. Because browsers no longer support TCP
D. To eliminate TLS encryption
✔ Correct Answer: Option B
Detailed Explanation: In HTTP/2, a lost packet stalls all streams in the TCP window. QUIC implements independent per-stream reliability over UDP: dropping a packet on stream A never stalls stream B.
🎯 Key Learning Point: QUIC integrates TLS 1.3 encryption directly into the transport handshake, achieving 0-RTT reconnects.
Question 64 of 75 Chapter 5
What happens during the TLS 1.3 handshake to establish an encrypted HTTPS connection?
A. Requires 4 round trips and transmits private keys in plain text
B. Achieves full cryptographic handshake in 1 RTT (or 0-RTT resumption) using Ephemeral Diffie-Hellman key exchange (ECDHE) for Forward Secrecy
C. Hashes passwords using MD5
D. Bypasses certificate authorities
✔ Correct Answer: Option B
Detailed Explanation: TLS 1.3 dropped legacy ciphers (RSA key exchange, RC4, CBC). Client sends supported key shares in ClientHello; Server replies with chosen share, certificate, and Finished message in 1 RTT.
🎯 Key Learning Point: Forward Secrecy ensures that compromise of a server’s long-term private key cannot decrypt past recorded sessions.
Question 65 of 75 Chapter 5
What is the function of the Server Name Indication (SNI) extension in TLS?
A. Translates domain names into IP addresses
B. Allows the client browser to specify the exact hostname (domain) it is attempting to connect to during the initial TLS ClientHello, enabling the server to serve multiple SSL certificates on a single IP address
C. Identifies client operating system version
D. Encrypts HTTP request headers
✔ Correct Answer: Option B
Detailed Explanation: Before SNI, the server could not know which domain the client wanted before decrypting HTTP headers, requiring one IP per SSL cert. SNI passes hostname in the TLS handshake, enabling virtual hosting for HTTPS.
🎯 Key Learning Point: Encrypted SNI (ECH / Encrypted Client Hello) encrypts the SNI extension to prevent ISP eavesdropping.
Question 66 of 75 Chapter 5
What is the difference between a Recursive DNS Query and an Iterative DNS Query?
A. Iterative queries encrypt records; recursive queries do not
B. In a recursive query, the DNS resolver promises to return the final answer or an error; in an iterative query, the queried server returns the best referral to the next nameserver (e.g. root -> .com -> authoritative)
C. Recursive queries run only on Sundays
D. There is no difference
✔ Correct Answer: Option B
Detailed Explanation: Clients ask local resolvers recursively (‘Find this for me’). The recursive resolver performs iterative queries against Root, TLD, and Authoritative servers, following referral NS records step-by-step.
🎯 Key Learning Point: Recursive resolvers cache records according to TTL to minimize global queries.
Question 67 of 75 Chapter 5
What is DNSSEC and what security vulnerability does it specifically eradicate?
A. Encrypts all DNS queries against ISP sniffing
B. Uses cryptographic digital signatures (RRSIG, DNSKEY) to authenticate DNS responses, preventing DNS Cache Poisoning (Kaminsky attacks) and man-in-the-middle spoofing
C. Accelerates DNS lookups using fiber optic links
D. Deletes spam domain names
✔ Correct Answer: Option B
Detailed Explanation: DNSSEC does not encrypt queries; it cryptographically signs DNS records creating an unbroken chain of trust back to the ICANN root key, ensuring response data has not been forged or altered in transit.
🎯 Key Learning Point: DNSSEC uses cryptographic resource records: RRSIG, DNSKEY, DS, and NSEC3.
Question 68 of 75 Chapter 5
What does the HTTP 101 Switching Protocols status code signify?
A. The server is redirecting to an alternate domain
B. The server accepts client's request to upgrade the transport protocol (e.g. upgrading an HTTP/1.1 connection to a persistent full-duplex WebSocket connection via Upgrade header)
C. Gateway timeout occurred
D. Client authentication failed
✔ Correct Answer: Option B
Detailed Explanation: When establishing a WebSocket, client sends ‘Upgrade: websocket; Connection: Upgrade’. Server responds with ‘101 Switching Protocols’, transforming the TCP socket into a bidirectional WebSocket channel.
🎯 Key Learning Point: WebSockets enable low-overhead, full-duplex real-time client-server communication.
Question 69 of 75 Chapter 5
What is the purpose of the HTTP Strict Transport Security (HSTS) response header?
A. Enables HTTP/3 support
B. Instructs user agents (browsers) to interact with the domain exclusively over HTTPS connections for a specified duration, preventing SSL Stripping attacks
C. Sets database user passwords
D. Compresses CSS and JS files
✔ Correct Answer: Option B
Detailed Explanation: HSTS header (‘Strict-Transport-Security: max-age=31536000; includeSubDomains; preload’) tells browsers to automatically upgrade any http:// request to https:// before sending traffic over the wire.
🎯 Key Learning Point: HSTS eliminates SSL stripping attacks (such as Moxie Marlinspike’s SSLstrip).
Question 70 of 75 Chapter 5
What is Cross-Origin Resource Sharing (CORS) in web browser security?
A. Sharing files between BitTorrent peers
B. A mechanism using HTTP headers (e.g. Access-Control-Allow-Origin) that allows a server to explicitly permit web browsers to load resources from an external origin (domain, scheme, or port)
C. Encrypting cross-country network cables
D. A database backup protocol
✔ Correct Answer: Option B
Detailed Explanation: The Same-Origin Policy (SOP) blocks cross-origin AJAX/fetch requests by default. CORS allows API servers to permit specific client origins by sending appropriate Access-Control headers.
🎯 Key Learning Point: Non-simple cross-origin requests trigger an automated HTTP OPTIONS ‘preflight’ request by the browser.
Question 71 of 75 Chapter 5
What is the difference between a Forward Proxy and a Reverse Proxy?
A. Forward proxies sit in front of clients to manage, cache, or filter outbound web traffic; Reverse proxies sit in front of origin web servers to handle load balancing, SSL termination, and caching
B. Reverse proxies sit in front of clients
C. Forward proxies only handle UDP
D. Reverse proxies cannot cache content
✔ Correct Answer: Option A
Detailed Explanation: Forward Proxy acts on behalf of internal clients reaching out to the Internet (e.g. corporate content filter). Reverse Proxy (e.g. NGINX, Cloudflare) acts on behalf of web servers, routing client requests to backend services.
🎯 Key Learning Point: Reverse proxies provide DDoS mitigation, SSL termination, and horizontal load balancing.
Question 72 of 75 Chapter 5
What security service is provided by IPsec in Encapsulating Security Payload (ESP) Tunnel Mode?
A. Encrypts only TCP payload
B. Encapsulates and encrypts the entire original IP packet (header and payload), adding a new outer IP header for secure transmission across untrusted public networks (Site-to-Site VPN)
C. Decompresses video files
D. Replaces DNS nameservers
✔ Correct Answer: Option B
Detailed Explanation: In Tunnel Mode, the entire original IP packet is encrypted and signed inside ESP, then wrapped with a new outer IP header between VPN gateways, hiding internal network addressing topologies.
🎯 Key Learning Point: Transport Mode encrypts only the payload; Tunnel Mode encrypts the entire inner IP packet.
Question 73 of 75 Chapter 5
What is the difference between Stateful Inspection Firewalls and Stateless Packet Filters?
A. Stateless firewalls are slower
B. Stateless inspects individual packets in isolation (evaluating IP/port rules); Stateful tracks connection states (SYN, ESTABLISHED), dynamically permitting return traffic associated with legitimate outbound sessions
C. Stateful firewalls cannot examine port numbers
D. Stateless firewalls decrypt TLS
✔ Correct Answer: Option B
Detailed Explanation: Stateful firewalls maintain a state connection table. When an internal client initiates an outbound connection, the firewall automatically permits the corresponding inbound response packets without requiring static inbound open ports.
🎯 Key Learning Point: Stateful inspection protects against unsolicited incoming scans and packets.
Question 74 of 75 Chapter 5
What attack is thwarted by implementing Certificate Pinning (Public Key Pinning) in mobile applications?
A. SQL injection
B. Man-in-the-Middle (MitM) attacks utilizing compromised, rogue, or forged Certificate Authority (CA) root certificates installed on the device or network
C. Cross-Site Scripting (XSS)
D. Buffer overflow
✔ Correct Answer: Option B
Detailed Explanation: Standard TLS trusts hundreds of root CAs. Certificate pinning hardcodes the expected public key hash inside the mobile client code, refusing connections if the server certificate does not match, even if signed by a trusted CA.
🎯 Key Learning Point: Certificate pinning prevents inspection proxies (like Charles / Burp Suite) from intercepting app traffic.
Question 75 of 75 Chapter 5
How does a Slowloris DDoS attack incapacitate target web servers?
A. Sending massive Gbps bandwidth volumetric UDP floods
B. Opening numerous HTTP connections and sending partial HTTP headers at extremely slow intervals (e.g. every 10 seconds), holding server thread/connection pools open until server resources are completely exhausted
C. Cracking administrator passwords via brute force
D. Overwriting BIOS memory
✔ Correct Answer: Option B
Detailed Explanation: Slowloris is an application-layer resource starvation attack requiring minimal bandwidth. By never completing the HTTP header sequence, thread-based servers (like Apache) tie up worker threads indefinitely.
🎯 Key Learning Point: Event-driven asynchronous servers (like NGINX) or minimum request rate timeouts effectively neutralize Slowloris.

Explore Other Comprehensive 75-Question Subject Tracks

Continue your preparation across our active curriculum tracks. Every track provides 75 verified questions across 5 complete chapters.

🟢 100% Live Track
C Programming
75 Qs • 5 Chapters • Practice Now →
🟢 100% Live Track
Python Programming
75 Qs • 5 Chapters • Practice Now →
🟢 100% Live Track
Data Structures
75 Qs • 5 Chapters • Practice Now →
🟢 100% Live Track
DBMS & SQL
75 Qs • 5 Chapters • Practice Now →
Active Track
📍 Computer Networks
75 Qs • 5 Chapters (You are here)
🟢 100% Live Track
Operating Systems
75 Qs • 5 Chapters • Practice Now →
🟢 100% Live Track
Quantitative Aptitude
75 Qs • 5 Chapters • Practice Now →
📚 View All 92+ Subjects in Master Directory
Share
  • Facebook
Queryiest

Queryiest

Enlightened

Queryiest – Technology Writer | Software Developer | Digital Learning Enthusiast

Queryiest is a technology writer, software developer, and knowledge-sharing enthusiast passionate about simplifying complex technical concepts for students, professionals, and lifelong learners. With expertise in software development, programming, cybersecurity, artificial intelligence, digital tools, and emerging technologies, Queryiest creates practical, research-driven content that helps readers solve real-world problems. As a regular contributor to RTSALL, Queryiest publishes easy-to-understand guides, coding resources, technology news, career advice, and educational tutorials designed for beginners and professionals alike. Every article focuses on accuracy, clarity, and actionable insights to help readers stay informed in the rapidly evolving digital world. Whether it's programming, software engineering, AI, cybersecurity, online platforms, or digital productivity, Queryiest believes that quality knowledge should be accessible to everyone. The goal is to build a trusted learning resource where readers can discover reliable answers, improve their technical skills, and make informed decisions. Areas of Expertise: Software Development, Programming, Cybersecurity, Artificial Intelligence, Technology News, Coding Interview Preparation, Digital Learning, Productivity Tools, and Online Knowledge Sharing.

    Sidebar

    Ask A Question
    • Popular
    • Answers
    • Queryiest

      What is a database?

      • 3 Answers
    • Anonymous

      How to rotate an array in-place with O(1) space and ...

      • 3 Answers
    • hannah

      What steps can businesses take to identify the most valuable ...

      • 2 Answers
    • Vikram
      aarav0 added an answer Direct Technical Solution: Unlike IVFFlat (which partitions vector spaces with… September 11, 2026 at 9:57 pm
    • Abhishek
      Abhishek added an answer Direct Technical Solution: In C++20, range view adaptors (like std::views::filter,… September 11, 2026 at 9:57 pm
    • Sneha Patel
      Anonymous added an answer Direct Technical Solution: torch.cuda.empty_cache() releases only cached (unallocated) blocks back… September 11, 2026 at 9:57 pm

    Top Members

    Queryiest

    Queryiest

    • 201 Questions
    • 295 Points
    Enlightened
    Anonymous

    Anonymous

    • 11 Questions
    • 42 Points
    Begginer
    paperubofficial

    paperubofficial

    • 0 Questions
    • 22 Points
    Begginer

    Trending Tags

    ai asp.net aws basics aws certification aws console aws free tier aws login aws scenario-based questions c++ career cyber security cyber security interview git java javascript jobs jquery net core net core interview questions sql

    Explore

    • Home
    • Add group
    • Groups page
    • Communities
    • Questions
      • DSA Problems
    • Polls
    • Tags
    • Badges
    • Users
    • Help
    • New Questions
    • Trending Questions
    • Must read Questions
    • Hot Questions

    Footer

    About Us

    • Meet The Team
    • Blog
    • About Us
    • Contact Us

    Legal Stuff

    • Privacy Policy
    • Disclaimer
    • Terms & Conditions

    Help

    • Knowledge Base
    • Support

    Follow

    © 2023-25 RTSALL. All Rights Reserved