Self Test

A Quick Answer Key follows the Self Test questions. For complete questions, answers, and explanations to the Self Test questions in this chapter as well as the other chapters in this book, see the Self Test Appendix.

Understanding IP Routing

1.	Your IT Director has decided the new internal network needs to use private addressing. Which of the following IP addresses are private addresses? 193.168.0.1 171.17.0.1 10.0.0.1 172.16.0.15
2.	Your IT Director has determined that your network should use dynamic routing. You’ve determined that a route is now being considered unreachable. What has happened to that route in the routing table? It has been marked as unreachable in the routing table. Nothing has happened to that route in the routing table. It has been removed from the routing table. You must manually go into the routing table and remove the entry.
3.	Your newest hire has been assigned the task of configuring a Windows Server 2003 computer as a router and has asked you how to determine if a machine address or an IP address is being used at the router. You explain that routers use IP addresses, while bridges and hubs use machine addresses. You continue to explain that the OSI reference model has seven layers and that IP, or the Internet Protocol, operates at what layer? The Physical layer The Data Link layer The Network layer The Transport layer
4.	Your IT Director has opened a command prompt window on your Windows Server 2003 computer and is trying to figure out what routes are available to this computer. Which of the following commands should you tell him to use to list the active routes from the command prompt? route list route print show route dump
5.	Your IT Director is determined to use static routing on your large corporate network. You need to convince him that static routing probably is not the best choice, and you want him to think that decision was his idea. You decide to do this by asking him which of the following is an advantage of using static routing? Fault tolerance Scalability Manual configuration Classless routing
6.	RRAS is enabled on your Windows Server 2003 computer, and you have three network adapter cards in the computer configured for subnet IDs of 192.168.32.0/20, 192.168.64.0/20, and 192.168.96.0/20. Which subnet ID can you use if you need to support another subnet with this RRAS server? 192.168.20.0/20 192.168.40.0/20 192.168.48.0/20 192.168.60.0/20
7.	You want to configure a multiple gateway on a Windows Server 2003 machine, but you have only one NIC installed. How do you accomplish this goal? Assign the IP addresses 192.168.0.10 and 192.168.1.10 to the interface. Assign the IP addresses 10.0.0.1 and 172.16.0.1 to the interface. Assign the IP addresses 172,16.0.1 and 192.168.0.1 to the interface. You cannot configure multiple gateways on a machine with one NIC.
8.	Your IT Director has been reading again. He has decided that he wants to convert the network to OSPF, but he is having some difficulty with terminology. He knows that an OSPF router can serve one of four roles. His problem is that he can’t remember which role exists when one of the router’s interfaces is on the backbone area. Help him out. Which of the following is it? Internal router Area border router Backbone router Autonomous system boundary router

Answers

1.	C, D
2.	C
3.	C
4.	B
5.	D
6.	C
7.	A
8.	C

Security Considerations for Routing

9.	As the network administrator, you are asked to set up network access so that a group of contract developers can work via a VPN connection connecting to your network’s Windows Server 2003 VPN server. The contract developers are all using either Windows 2000 Professional or Windows XP Professional workstations. You must meet the following requirements: The contract developers must be allowed to connect to the network via the Internet. You must use PPP encryption. You must use a protocol that provides tunnel authentication. You must use a protocol that secures the data between the endpoints of the tunnel. You configure a VPN using PPTP. Which of requirements are met? (Select all that apply.) The contract developers are able to connect to the network via the Internet. PPP encryption is used. Tunnel authentication is used. Data between the endpoints of the tunnel is secure.
10.	You have enabled RRAS on your Windows Server 2003 computer. You want to set up IP packet filtering to help you manage access from remote clients. Where in the Routing and Remote Access console will you enable IP packet filters? The properties of the remote access ports The properties of the remote access server The profile of a Remote Access Policy The conditions of a Remote Access Policy
11.	You have set up an isolated, secure subnet with only an RRAS server running on Windows Server 2003 connecting the two parts of your internal network. You are protecting your internal network against unauthorized access with your firewall, and authorized users on the intranet establish VPN tunnels to your secure subnet through the RRAS server. You do have a problem, however. It seems that remote VPN clients cannot access the secure subnet through your configuration. How should you reconfigure the system to allow remote VPN clients access to the secure subnet? Ask your ISP to create the necessary filters to allow IPSec traffic to pass. Create filters on the RRAS server to allow only VPN traffic to pass. Define filters on the firewall to allow the VPN traffic to pass. Configure the router in front of the firewall to allow IPSec traffic to pass.
12.	You’ve been asked to provide Internet access for clients on your network. You decide to use NAT. You try to establish a secure VPN session from a remote site unsuccessfully. You try again using L2TP. Again the connection fails. You are able to successfully connect when in the same office. Why are you unable to make a connection from the remote location? You haven’t configured the NAT server to translate the IP Security packets. You cannot establish an L2TP connection behind a computer running NAT. The L2TP session fails because the IP Security packets become corrupted. L2PT does not work with Windows Server 2003 VPNs. NAT does not allow for remote networking.
13.	You’ve just been asked to set up things so that a group of developers can work from home and still connect to your office network. The developers are using either Windows 2000 Professional or Windows XP Professional. You must meet the following requirements: Allow the developers to connect to the network through the Internet. Use PPTP encryption. Use a protocol that provides tunnel authentication. Use a protocol that secures data between the endpoints of the tunnel. You plan to configure a VPN that uses L2TP. Which requirement or requirements are met? The developers can connect to the network through the Internet. PPTP encryption is used. Tunnel authentication is provided. Data between the endpoints of the tunnel is secured.

Answers

9.	A, B, D
10.	C
11.	C
12.	B
13.	A, C

Troubleshooting IP Routing

14.	You’ve installed RRAS on a Windows Server 2003 computer in your network. The network is not connected directly to the Internet, and the private IP address range you are using is 192.168.0.0. When you dial in, you connect successfully, but you’re unable to access any resources. Pinging other servers using their IP addresses results in the message “Request timed out.” Running the ipconfig command shows you that your dial-up connection is being given the IP address 169.254.75.182. What should you do to resolve the problem? Configure the remote-access server to act as a DHCP Relay Agent. Ensure that the remote-access server is able to connect to a DHCP server that has a scope for its subnet. Configure the remote-access server with the address of a DHCP server. Authorize the remote-access server to receive multiple addresses from a DHCP server.
15.	You think you may have a problem on your network. You need to open a command line window and troubleshoot your network. Which of the following lists of commands represent the command-line utilities most often used in maintaining and testing routing functionality? show helpers, Trace, PING, Route pathping, Tracert, show helpers, show routing pathping, PING, Route, Tracert pathping, PING, Route, Trace

Answers

14.	B
15.	C