Practice Test GeekseLearnSecurity Junior Penetration Tester eJPT Practice Practice Test
← All EJPT Flashcard Decks

Network Protocols and Traffic Analysis Flashcards

6 cards from real EJPT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Network Protocols and Traffic Analysis flashcards as text

  1. Which protocol operates at Layer 3 of the OSI model and is responsible for logical addressing and routing?

    Answer: IP

    IP (Internet Protocol) operates at Layer 3 and handles logical addressing and packet routing between networks.

  2. What does ARP stand for in networking?

    Answer: Address Resolution Protocol

    ARP stands for Address Resolution Protocol and maps IP addresses to MAC addresses on a local network.

  3. Which Wireshark display filter shows only HTTP traffic?

    Answer: http

    The display filter 'http' in Wireshark isolates HTTP protocol packets for analysis.

  4. In a TCP three-way handshake, what is the correct sequence of flags?

    Answer: SYN, SYN-ACK, ACK

    The TCP three-way handshake uses SYN from client, SYN-ACK from server, and ACK from client to establish a connection.

  5. Which protocol is used to automatically assign IP addresses to hosts on a network?

    Answer: DHCP

    DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, and gateway info to network hosts.

  6. What is the primary purpose of analyzing ICMP traffic during a penetration test?

    Answer: Host discovery and network mapping

    ICMP traffic analysis, particularly ping sweeps, is used to discover live hosts and map network topology.