What does a protocol analyzer (packet capture) do?
- Traces physical cables
- Captures and analyzes network traffic
- Displays device power usage
- Provides VLAN information
Captures and analyzes network traffic | Practical Use: Using Wireshark to detect abnormal packet flows. | Explanation: Protocol analyzers monitor and analyze data packets for performance and security. | Objective: 5.5 – Software tools | Follow-up Question: What common software tool is used for packet capture?
What command is used to test basic connectivity to another host?
- ping
- traceroute
- arp
- netstat
ping | Practical Use: Sending ICMP echo requests to confirm a host is reachable. | Explanation: Ping measures connectivity and round-trip times. | Objective: 5.5 – Software tools | Follow-up Question: What might a “Request timed out” response indicate?
Which command traces the path packets take across the network?
- netstat
- ipconfig
- show arp
- traceroute/tracert
traceroute/tracert | Practical Use: Identifying where along the path packets are being delayed. | Explanation: traceroute (Linux) / tracert (Windows) shows each hop to the destination. | Objective: 5.5 – Software tools | Follow-up Question: How does traceroute help diagnose latency?
Which tool queries DNS servers to resolve hostnames to IP addresses?
- nslookup
- arp
- show route
- ping
nslookup | Practical Use: Finding the IP of www.google.com. | Explanation: nslookup queries DNS for name resolution. | Objective: 5.5 – Software tools | Follow-up Question: Which Linux tool provides more advanced DNS queries?
Which command-line tool is specifically designed for querying DNS records in detail?
- tcpdump
- dig
- netstat
- traceroute
dig | Practical Use: Checking MX records for a domain. | Explanation: dig provides detailed DNS record information. | Objective: 5.5 – Software tools | Follow-up Question: What’s the difference between dig and nslookup?
Which command-line tool captures and analyzes network packets?
- tcpdump
- arp
- ipconfig
- show vlan
tcpdump | Practical Use: Capturing packets on a Linux server interface. | Explanation: tcpdump is a CLI packet analyzer. | Objective: 5.5 – Software tools | Follow-up Question: What’s one difference between tcpdump and Wireshark?
Which command displays network connections, routing tables, and interface stats?
- show mac-address-table
- netstat
- nmap
- arp
netstat | Practical Use: Checking active TCP connections on a server. | Explanation: netstat provides socket, routing, and connection details. | Objective: 5.5 – Software tools | Follow-up Question: Which modern command has replaced netstat in Linux?
Which command displays or configures a device’s IP settings?
- ifconfig/ipconfig/ip
- show vlan
- arp
- ping
ifconfig/ipconfig/ip | Practical Use: Checking an IP address on a workstation. | Explanation: These commands manage IP configuration. | Objective: 5.5 – Software tools | Follow-up Question: Which is the modern Linux replacement for ifconfig?
Which command displays or modifies the IP-to-MAC address mapping table?
- show vlan
- arp
- netstat
- tcpdump
arp | Practical Use: Checking ARP cache for local IP/MAC pairs. | Explanation: arp manages address resolution tables. | Objective: 5.5 – Software tools | Follow-up Question: Why might stale ARP entries cause connectivity issues?
Which tool scans networks to discover devices and open ports?
- traceroute
- arp
- nmap
- tcpdump
nmap | Practical Use: Detecting unauthorized devices on a subnet. | Explanation: nmap scans networks for hosts and services. | Objective: 5.5 – Software tools | Follow-up Question: Why can nmap be both a security and troubleshooting tool?
Which protocol is vendor-neutral for discovering devices on a network?
- LLDP
- STP
- CDP
- OSPF
LLDP | Practical Use: Mapping connected devices in a multi-vendor network. | Explanation: LLDP exchanges identity and capability info between devices. | Objective: 5.5 – Software tools | Follow-up Question: Which protocol provides the same function in Cisco-only networks?
Which Cisco-proprietary protocol discovers directly connected Cisco devices?
- STP
- EIGRP
- LLDP
- CDP
CDP | Practical Use: Checking neighbor info on Cisco routers. | Explanation: CDP shows device type, IP, and software version. | Objective: 5.5 – Software tools | Follow-up Question: Why is CDP disabled in some secure environments?
Which tool measures upload/download speeds to test connection performance?
- Speed tester
- tcpdump
- arp
- show route
Speed tester | Practical Use: Verifying an ISP is meeting promised speeds. | Explanation: Speed testers measure throughput, latency, and jitter. | Objective: 5.5 – Software tools | Follow-up Question: How can speed tests help diagnose bottlenecks?
Which tool helps trace and identify cables in a wiring bundle?
- Cable tester
- Wi-Fi analyzer
- Toner
- Tap
Toner | Practical Use: Identifying the correct cable in a server room. | Explanation: A toner uses a signal generator and probe. | Objective: 5.5 – Hardware tools | Follow-up Question: Why is a toner important in large installations?
Which tool verifies wiring integrity and detects faults in cables?
- Visual fault locator
- Toner
- Tap
- Cable tester
Cable tester | Practical Use: Checking new Ethernet cables before deployment. | Explanation: Cable testers validate continuity, shorts, and wiring faults. | Objective: 5.5 – Hardware tools | Follow-up Question: Why is testing new cabling before production important?
Which hardware device provides a copy of network traffic for monitoring?
- LLDP
- Network tap
- Wi-Fi analyzer
- Toner
Network tap | Practical Use: Monitoring traffic for intrusion detection. | Explanation: Taps mirror packets without affecting live flow. | Objective: 5.5 – Hardware tools | Follow-up Question: How do taps differ from port mirroring?
Which tool detects wireless networks, signal strength, and interference?
- Tap
- Cable tester
- Speed tester
- Wi-Fi analyzer
Wi-Fi analyzer | Practical Use: Optimizing AP placement in an office. | Explanation: Wi-Fi analyzers measure coverage and detect interference. | Objective: 5.5 – Hardware tools | Follow-up Question: Why is channel usage important in Wi-Fi analysis?
Which tool uses visible light to find faults in fiber optic cables?
- Tap
- Visual fault locator
- Toner
- Cable tester
Visual fault locator | Practical Use: Spotting bends or breaks in fiber runs. | Explanation: A red laser highlights faults in fiber cables. | Objective: 5.5 – Hardware tools | Follow-up Question: Why is proper handling of fiber connectors important?
Which command displays the MAC address table of a switch?
- show mac-address-table
- show config
- show vlan
- show route
show mac-address-table | Practical Use: Checking which MAC is connected to which port. | Explanation: This command verifies connectivity and port assignments. | Objective: 5.5 – Device commands | Follow-up Question: How can this help detect unauthorized devices?
Which command displays the routing table of a router?
- show route
- show vlan
- traceroute
- netstat
show route | Practical Use: Ensuring correct routes are active. | Explanation: Routing tables show active paths and next hops. | Objective: 5.5 – Device commands | Follow-up Question: Why are default routes important here?
Which command provides interface status and error statistics?
- show config
- show vlan
- show interface
- show arp
show interface | Practical Use: Detecting duplex mismatch on a port. | Explanation: This command provides traffic counts and errors. | Objective: 5.5 – Device commands | Follow-up Question: Why are CRC errors important in interface output?
Which command displays the running configuration of a device?
- show config
- ping
- show vlan
- show arp
show config | Practical Use: Checking IP addresses and protocols enabled. | Explanation: Running config shows active settings. | Objective: 5.5 – Device commands | Follow-up Question: Why is comparing startup and running config useful?
Which command displays the ARP table?
- netstat
- show arp
- show vlan
- nmap
show arp | Practical Use: Mapping IPs to MAC addresses. | Explanation: ARP tables help troubleshoot resolution issues. | Objective: 5.5 – Device commands | Follow-up Question: Why would stale ARP entries cause problems?