MCQ Bank

A long delay followed by a client-generated RST/ACK can indicate that the server-side application failed to respond to the request. The nearly 120-second timeout is a characteristic symptom of this type of server-side failure.

CS206 Final Term AI Solved

Q41

Microsoft mainly employs a file sharing protocol called ____________________________ on its Windows-based networks.

A) File Transfer Protocol (FTP)
B) Network File Service (NFS)
C) Server Message Block (SMB)
D) Apple File Protocol (AFP)

AI Explanation

Server Message Block (SMB) is the primary file-sharing protocol used on Microsoft Windows-based networks. It supports file and printer sharing as well as other network resource operations.

CS206 Final Term AI Solved

Q42

DNS (domain name system) is a request/response protocol which employs ____________.

A) UDP
B) TCP
C) FTP
D) SMTP

AI Explanation

DNS normally uses UDP for request/response exchanges because it has low overhead and is efficient for typical queries. DNS can also use TCP in situations such as zone transfers or responses that require it.

CS206 Final Term AI Solved

Q43

Wireshark creates a value called nextseq, which is determined by ______________________________.

A) The Sequence Number field value of each packet
B) The number of data bytes in the packet
C) Adding the Sequence Number field value of previous packet to the number of data bytes in current packet
D) Adding the Sequence Number field value of each packet to the number of data bytes in it

AI Explanation

Wireshark's nextseq value represents the next expected TCP sequence number. It is calculated by adding the packet's sequence number to the number of data bytes carried by that packet, with SYN/FIN consuming an additional sequence number when applicable.

CS206 Final Term AI Solved

Q44

What does a client use to determine the round trip time between hosts during the TCP handshake?

A) The time between the FIN and ACK packets
B) The time between the SYN/ACK and FIN packets
C) The time between the SYN/ACK and PSH packets
D) The time between the SYN and SYN/ACK packets

AI Explanation

During the TCP three-way handshake, the client can estimate round-trip time by measuring the interval between sending the SYN and receiving the corresponding SYN/ACK. This provides an initial estimate of the network round-trip delay.

CS206 Final Term AI Solved

Q45

In the context of a TCP handshake, SYN/ACK packet is used for ________________.

A) To terminate the connection
B) To acknowledge receipt of the SYN packet
C) To initiate data transfer
D) To request retransmission of lost packets

AI Explanation

The SYN/ACK packet in the TCP three-way handshake acknowledges the client's SYN and simultaneously sends a SYN from the server. This establishes the server's side of the connection before data transfer begins.

CS206 Final Term AI Solved

Q46

Which of the following Internet based application(s) cannot tolerate data loss?
a. E-mail
b. Real-time audio streaming
c. Interactive gaming
d. Web documents
e. Instant messaging

A) a and b only
B) All of the given
C) a, d and e
D) a, c and d

AI Explanation

These applications generally require reliable delivery because lost data can affect the usefulness or correctness of the communication. Although some real-time applications may tolerate limited loss, the question's classification treats all listed applications as unable to tolerate data loss.

CS206 Final Term AI Solved

Q47

In Wire shark “Expert Infos” button shows warnings in _________ color.

A) Yellow
B) Red
C) Green
D) Blue

AI Explanation

Wireshark uses yellow to indicate warning-level Expert Information messages. Red is associated with more severe error conditions.

CS206 Final Term AI Solved

Q48

UDP conversation statistics such as packet rate and bps rate can be obtained ____________.

A) In the Protocol Hierarchy window
B) In the Packet Details pane
C) In the Conversations Window
D) In the Expert Information window

AI Explanation

Wireshark's Conversations window provides statistics for UDP conversations, including packet counts, rates, and bits-per-second information. It allows traffic between endpoints to be examined and compared.

CS206 Final Term AI Solved

Q49

Which file will be used to detect delays in UDP Conversations in Wire shark?

A) None of given
B) tr-voip-extensions.pcapng
C) tr-general.pcapng
D) tr-winsize.pcapng

AI Explanation

The tr-voip-extensions.pcapng capture is used in Wireshark exercises involving UDP conversation analysis and delay detection. It contains the UDP traffic needed to examine conversational timing.

CS206 Final Term AI Solved

Q50

What is the purpose of a Transport Layer Security (TLS) Encrypted Alert?

A) To start an encrypted connection
B) To close an encrypted connection
C) To authenticate the server
D) To request a new encryption key

AI Explanation

A TLS Encrypted Alert is used to communicate alerts within an established TLS session. A close-notify alert is specifically used to indicate that the encrypted connection is being closed.

CS206 Final Term AI Solved

Q51

Wire shark allows a user to define up to _________differently colored

A) 5
B) 4
C) 3
D) 7

AI Explanation

Wireshark allows users to define up to seven differently colored coloring rules for traffic visualization. These colors help distinguish different types of packets or conditions in a capture.

CS206 Final Term AI Solved

Q52

Which file will be used to plot UDP Delays in Wire shark.

A) tr-voip-extensions.pcapng
B) tr-nameresolution.pcapng
C) tr-queuing.pcapng
D) tr-winsize.pcapng

AI Explanation

The tr-voip-extensions.pcapng capture is used for analysing UDP traffic and plotting UDP delays in Wireshark. It provides the UDP conversation data needed for this analysis.

CS206 Final Term AI Solved

Q53

Expert infos in wireshark are only a hint and help both for novice and expert users to find probable _________

A) Network informations
B) Network traffic
C) Network congestion
D) Network Problems

AI Explanation

Wireshark Expert Information provides hints that help users identify probable network problems. These hints can assist both novice and experienced users when analysing packet captures.

CS206 Final Term AI Solved

Q54

What type of protocol is the User Datagram Protocol (UDP)?

A) A connectionless transport layer protocol
B) An application layer protocol
C) A connection-oriented transport layer protocol
D) A network layer protocol

AI Explanation

UDP is a connectionless protocol operating at the Transport layer of the OSI model. It does not establish a connection or provide TCP-like reliability and ordering mechanisms before transmitting data.

CS206 Final Term AI Solved

Q55

In the context of Wireshark, which trace file should be opened to analyze delays before DNS queries?

A) tr-delays.pcapng
B) tr-dnsqueries.pcapng
C) tr-tcphandshake.pcapng
D) tr-serverresponse.pcapng

AI Explanation

The tr-dnsqueries.pcapng trace file is specifically used to analyse DNS query traffic and delays before DNS queries. It provides the relevant packets needed to examine DNS timing.

CS206 Final Term AI Solved

Q56

If the client does not have the MAC address information in cache, the client sends out __________ request to identify local address Resolution.

A) DNS request
B) ARP request
C) ACK request
D) SYN request

AI Explanation

When a client does not have a destination MAC address in its ARP cache, it sends an ARP request to discover the MAC address associated with the local IP address. The ARP request is broadcast on the local network.