ICT 394 Quiz Session 06 | Questions with Correct Answers |
myMurdoch Learning | 2026 Update | 100% Score. - 106
Questions and Answers Already Graded A+ Premium Exam
Tested And Verified
Subject Area Information and Communication Technology
Description This exam covers advanced topics in ICT including network protocols, security
architectures, cloud computing, IoT systems, and emerging technologies. It
assesses deep conceptual understanding and the ability to apply principles to
complex scenarios.
Expected Grade A+
Total Questions 106
Duration 3 hours
Learning Outcomes 1. Analyze and compare network congestion control algorithms
2. Evaluate security mechanisms in internet protocols
3. Differentiate cloud service models and their responsibility boundaries
4. Assess trade-offs in IoT edge and fog computing architectures
5. Understand quantum key distribution protocols
Accreditation Meets US university standards for upper-division undergraduate and
graduate-level ICT courses.
Page 1
,Question 1 of 106
In TCP congestion control, what is the primary reason that the threshold (ssthresh) is set to half of
the current congestion window (cwnd) when a triple duplicate ACK is received, rather than setting it
to a fixed value?
A. To ensure fast convergence of the additive increase phase
B. To adapt to the network's actual capacity estimate at the time of loss
C. To guarantee fairness among competing TCP flows
D. To minimize the retransmission timeout (RTO) value
The correct answer is:
Correct Action: To adapt to the network's actual capacity estimate at the time of loss
Rationales
• To adapt to the network's actual capacity estimate at the time of loss (Correct):
This is the correct action. Setting ssthresh to half of cwnd uses the current window size as a proxy for the path capacity
before loss, allowing the algorithm to quickly probe the new available bandwidth. Fixed values would not adapt to varying
network conditions. Fast convergence (A) is a secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is
• To ensure fast convergence of the additive increase phase (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
• To guarantee fairness among competing TCP flows (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
• To minimize the retransmission timeout (RTO) value (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
Page 2
,Question 2 of 106
In the context of IPSec, which of the following best explains why it is considered more suitable for
site-to-site VPNs compared to TLS-based VPNs?
A. IPSec operates at the network layer, thus transparently protecting all IP traffic without application modification
B. TLS VPNs require a central authentication server, whereas IPSec uses distributed credential stores
C. IPSec provides stronger encryption algorithms than those supported by TLS 1.3
D. TLS VPNs cannot handle multicast or broadcast traffic, while IPSec does so natively
The correct answer is:
Correct Action: IPSec operates at the network layer, thus transparently protecting all IP traffic without
application modification
Rationales
• IPSec operates at the network layer, thus transparently protecting all IP traffic without application
modification (Correct):
This is the correct action. IPSec works at the network layer (IP), so it secures all IP packets without requiring changes to
applications or protocols. TLS operates at the transport layer and typically requires a VPN gateway and application-level
proxy. Option B is false-both can use centralized auth. C: encryption strengths are comparable. D: TLS VPNs can use
• TLS VPNs require a central authentication server, whereas IPSec uses distributed credential stores
(Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
• IPSec provides stronger encryption algorithms than those supported by TLS 1.3 (Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
• TLS VPNs cannot handle multicast or broadcast traffic, while IPSec does so natively (Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
Page 3
, Question 3 of 106
In software-defined networking (SDN), the separation of the control plane from the data plane
introduces which fundamental security vulnerability that is not present in traditional networks?
A. Increased attack surface due to a centralized controller that can be a single point of failure
B. Inability to encrypt traffic between switches because of limited processing power
C. Susceptibility to ARP spoofing attacks targeting the controller
D. Lack of authentication mechanisms between switches and controllers
The correct answer is:
Correct Action: Increased attack surface due to a centralized controller that can be a single point of failure
Rationales
• Increased attack surface due to a centralized controller that can be a single point of failure (Correct):
This is the correct action. Centralizing the control plane creates a high-value target; if compromised, the entire network is
controlled. Traditional distributed control planes are more resilient to controller-specific attacks. Options B and D are
mitigable: encryption is possible, and auth (e.g., TLS) is standard. C: ARP spoofing exists in both, not unique to SDN.
• Inability to encrypt traffic between switches because of limited processing power (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
• Susceptibility to ARP spoofing attacks targeting the controller (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
• Lack of authentication mechanisms between switches and controllers (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
Page 4
myMurdoch Learning | 2026 Update | 100% Score. - 106
Questions and Answers Already Graded A+ Premium Exam
Tested And Verified
Subject Area Information and Communication Technology
Description This exam covers advanced topics in ICT including network protocols, security
architectures, cloud computing, IoT systems, and emerging technologies. It
assesses deep conceptual understanding and the ability to apply principles to
complex scenarios.
Expected Grade A+
Total Questions 106
Duration 3 hours
Learning Outcomes 1. Analyze and compare network congestion control algorithms
2. Evaluate security mechanisms in internet protocols
3. Differentiate cloud service models and their responsibility boundaries
4. Assess trade-offs in IoT edge and fog computing architectures
5. Understand quantum key distribution protocols
Accreditation Meets US university standards for upper-division undergraduate and
graduate-level ICT courses.
Page 1
,Question 1 of 106
In TCP congestion control, what is the primary reason that the threshold (ssthresh) is set to half of
the current congestion window (cwnd) when a triple duplicate ACK is received, rather than setting it
to a fixed value?
A. To ensure fast convergence of the additive increase phase
B. To adapt to the network's actual capacity estimate at the time of loss
C. To guarantee fairness among competing TCP flows
D. To minimize the retransmission timeout (RTO) value
The correct answer is:
Correct Action: To adapt to the network's actual capacity estimate at the time of loss
Rationales
• To adapt to the network's actual capacity estimate at the time of loss (Correct):
This is the correct action. Setting ssthresh to half of cwnd uses the current window size as a proxy for the path capacity
before loss, allowing the algorithm to quickly probe the new available bandwidth. Fixed values would not adapt to varying
network conditions. Fast convergence (A) is a secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is
• To ensure fast convergence of the additive increase phase (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
• To guarantee fairness among competing TCP flows (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
• To minimize the retransmission timeout (RTO) value (Incorrect):
This option is not appropriate. Fixed values would not adapt to varying network conditions. Fast convergence (A) is a
secondary effect, fairness (C) is addressed by AIMD, and RTO (D) is unrelated
Page 2
,Question 2 of 106
In the context of IPSec, which of the following best explains why it is considered more suitable for
site-to-site VPNs compared to TLS-based VPNs?
A. IPSec operates at the network layer, thus transparently protecting all IP traffic without application modification
B. TLS VPNs require a central authentication server, whereas IPSec uses distributed credential stores
C. IPSec provides stronger encryption algorithms than those supported by TLS 1.3
D. TLS VPNs cannot handle multicast or broadcast traffic, while IPSec does so natively
The correct answer is:
Correct Action: IPSec operates at the network layer, thus transparently protecting all IP traffic without
application modification
Rationales
• IPSec operates at the network layer, thus transparently protecting all IP traffic without application
modification (Correct):
This is the correct action. IPSec works at the network layer (IP), so it secures all IP packets without requiring changes to
applications or protocols. TLS operates at the transport layer and typically requires a VPN gateway and application-level
proxy. Option B is false-both can use centralized auth. C: encryption strengths are comparable. D: TLS VPNs can use
• TLS VPNs require a central authentication server, whereas IPSec uses distributed credential stores
(Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
• IPSec provides stronger encryption algorithms than those supported by TLS 1.3 (Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
• TLS VPNs cannot handle multicast or broadcast traffic, while IPSec does so natively (Incorrect):
This option is not appropriate. TLS operates at the transport layer and typically requires a VPN gateway and
application-level proxy. Option B is false-both can use centralized auth
Page 3
, Question 3 of 106
In software-defined networking (SDN), the separation of the control plane from the data plane
introduces which fundamental security vulnerability that is not present in traditional networks?
A. Increased attack surface due to a centralized controller that can be a single point of failure
B. Inability to encrypt traffic between switches because of limited processing power
C. Susceptibility to ARP spoofing attacks targeting the controller
D. Lack of authentication mechanisms between switches and controllers
The correct answer is:
Correct Action: Increased attack surface due to a centralized controller that can be a single point of failure
Rationales
• Increased attack surface due to a centralized controller that can be a single point of failure (Correct):
This is the correct action. Centralizing the control plane creates a high-value target; if compromised, the entire network is
controlled. Traditional distributed control planes are more resilient to controller-specific attacks. Options B and D are
mitigable: encryption is possible, and auth (e.g., TLS) is standard. C: ARP spoofing exists in both, not unique to SDN.
• Inability to encrypt traffic between switches because of limited processing power (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
• Susceptibility to ARP spoofing attacks targeting the controller (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
• Lack of authentication mechanisms between switches and controllers (Incorrect):
This option is not appropriate. Traditional distributed control planes are more resilient to controller-specific attacks.
Options B and D are mitigable: encryption is possible, and auth (e
Page 4
