WATCHGUARD NETWORK
SECURITY ESSENTIALS
PRACTICE EXAM 70
QUESTIONS
Question 1: A workstation has the IPv4 address 192.168.50.. Which address is
the network address for this subnet?
Choices:
1) 192.168.50.64
2) 192.168.50.0
3) 192.168.50.70
4) 192.168.50.128
Correct Answer: 192.168.50.64
Explanation: A /26 mask creates blocks of 64 addresses. Address 70 falls in the 64–127 block, so the network address is 192.168.50.64.Page 1
Question 2: Which protocol and port are normally used for DNS queries?
Choices:
1) UDP port 67 2) UDP port 53 3) TCP port 110 4) TCP port 25
Correct Answer: UDP port 53
Explanation: DNS commonly uses UDP port 53 for standard queries. TCP port 53 is also used in speci�c cases such as large responses and zone transfers, but UDP 53 is the normal answer for basic DNS queries.
Question 3: What information does ARP primarily discover on an IPv4 Ethernet
network?
Choices:
1) The default route for a remote subnet 2) The DNS name associated with a public IPv4 address 3) The MAC address associated with a local IPv4 address 4) The TCP port associated with an application
Correct Answer: The MAC address associated with a local IPv4 address
Explanation: ARP resolves a known local IPv4 address to the corresponding MAC address so an Ethernet frame can be delivered on the local segment.Page 2
Question 4: During a normal TCP three-way handshake, what is the �rst �ag sent by the initiating host?
Choices:
1) ACK
2) FIN
3) RST
4) SYN
Correct Answer: SYN
Explanation: A TCP connection normally begins when the client sends a SYN. The peer responds with SYN-ACK, and the client completes the handshake with ACK.
Question 5: Which IPv4 network is part of the RFC1918 private address space?
Choices:
1) 172.20.0.
2) 198.51.100.
3) 224.0.0.
4) 169.254.0.
Correct Answer: 172.20.0.
Explanation: RFC1918 private ranges are 10.0.0., 172.16.0., and 192.168.0.. The
172.20.0. network is inside 172.16.0..Page 3