eJPT Network Protocols and Traffic Analysis 3

Question 1

Which command displays active network connections and listening ports on a Windows or Linux system?

Accepted Answer

netstat -an

Answer

netstat -an shows all active connections and listening ports in numeric format on both Windows and Linux.

Question 2

What is the purpose of a subnet mask in networking?

Accepted Answer

Identify the network and host portions of an IP address

Answer

A subnet mask distinguishes the network portion from the host portion of an IP address to define network boundaries.

Question 3

During traffic analysis, what does a large number of SYN packets without corresponding SYN-ACK responses typically indicate?

Accepted Answer

A SYN flood denial-of-service attack

Answer

A flood of unanswered SYN packets is a classic indicator of a SYN flood DoS attack intended to exhaust server resources.

Question 4

Which protocol is responsible for translating domain names to IP addresses?

Accepted Answer

DNS

Answer

DNS (Domain Name System) resolves human-readable domain names like example.com into IP addresses.

Question 5

What is the default port for the HTTPS protocol?

Accepted Answer

443

Answer

HTTPS uses port 443 by default, providing encrypted HTTP communication via TLS/SSL.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test