NetSec Prelims Drei

83 flashcardsby DiandreiE
Study these flashcardsFree · spaced repetition · iPhone, Android, Mac & web

All cards

1
OSPF routing protocol type
Link-state routing protocol
2
Alternative to RIP
OSPF (Open Shortest Path)
3
Main scalability feature of OSPF
Uses areas
4
What is a link in OSPF?
A router interface or network segment
5
Link-state information contains what three fields?
Network prefix, prefix length, and cost
6
Purpose of routing protocol messages
Exchange route information and build routing tables
7
Number of OSPF packet types
Five
8
Five OSPF packet types
Hello, DBD, LSR, LSU, LSAck
9
Database created by adjacency database
Neighbor table
10
Database created by LSDB
Topology table
11
Database created by forwarding database
Routing table
12
Algorithm used by OSPF
Dijkstra SPF
13
Metric used by OSPF
Cost
14
First step in OSPF convergence
Establish neighbor adjacencies
15
Last step in OSPF convergence
Choose the best route
16
Best practice area ID for single-area OSPF
Area 0
17
Single-area OSPF is best suited for
Small networks
18
Purpose of multiarea OSPF
Hierarchical routing and scalability
19
OSPFv3 is used for
IPv6 routing
20
IPv6 subnet mask name
Prefix length
21
LSU (Link State Update) purpose beyond updates
Forward routing updates
22
Main purpose of Hello packets
Discover neighbors and maintain adjacencies
23
Hello packets elect which roles?
DR and BDR
24
Network type that does NOT need DR/BDR
Point-to-point
25
Hello packet multicast address (IPv4)
224.0.0.5
26
OSPF neighbor discovery starts in which state?
Down state
27
State where bidirectional communication is confirmed
Two-Way state
28
Final OSPF adjacency state
Full
29
Number of OSPF adjacency states
Seven
30
Why DR/BDR is required
Reduce LSA flooding
31
Role of DR
Collect and distribute LSAs
32
Role of BDR
Backup if DR fails, a crucial role for redundancy on shared network segments to ensure continuous routing updates.
33
What happens if DR fails?
BDR becomes DR
34
Non-DR routers are called
DROTHER
35
DROTHER multicast address
224.0.0.6
36
DR listens to which multicast?
224.0.0.6
37
Command to enable OSPF
router ospf process-id
38
Valid OSPF process-id range
1–65535
39
Router ID size
32-bit
40
Preferred router ID source
Manually configured router ID
41
Command to set router ID
router-id rid
42
Network command syntax
network address wildcard area area-id
43
Wildcard mask meaning
Inverse of subnet mask
44
Command to enable OSPF on interface
ip ospf process-id area area-id
45
Command to stop OSPF updates on interface
passive-interface
46
Command to disable DR/BDR election
ip ospf network point-to-point
47
OSPF cost formula
Reference bandwidth / interface bandwidth
48
Better OSPF path metric
Lower cost
49
Command to change reference bandwidth
auto-cost reference-bandwidth
50
Command to manually set cost
ip ospf cost
51
Default dead interval
40 seconds
52
Dead interval expiration result
Neighbor removed from LSDB
53
Command to change hello interval
ip ospf hello-interval
54
Command to change dead interval
ip ospf dead-interval
55
Verify OSPF neighbors
show ip ospf neighbor
56
Verify OSPF interfaces
show ip ospf interface
57
Verify OSPF process info
show ip ospf
58
Verify routing protocols
show ip protocols
59
Packet filtering rules based on headers
ACL (Access Control List)
60
ACL default on router
None configured
61
ACL rules are processed how?
Sequentially
62
Permit/deny statements are called
ACE (Access List Entry)
63
Two ACL types
Standard and Extended
64
Inbound ACL filters traffic when?
Before routing
65
Outbound ACL filters traffic when?
After routing
66
Wildcard mask bit 0 means
Must match
67
Wildcard mask bit 1 means
Ignore
68
Shortcut for wildcard mask
255.255.255.255 minus subnet mask
69
Standard ACL filters based on
Source IP only
70
Extended ACL filters based on
IP, protocol, ports
71
Standard ACL number range
1–99, 1300–1999
72
Extended ACL number range
100–199, 2000–2699
73
Preferred ACL type naming
Named ACL
74
Best placement for extended ACL
Close to source
75
Best placement for standard ACL
Close to destination
76
Command to create named standard ACL
ip access-list standard name
77
Remove named standard ACL
no ip access-list standard name
78
Apply ACL to interface
ip access-group name in|out
79
Verify ACL on interface
show ip interface
80
Extended ACL protocol options
IP, TCP, UDP, ICMP
81
ACL stateful feature keyword
established
82
View all ACLs
show access-lists
83
Command to clear ACL counters
clear access-list counters
Study all 83 cards for free