SANS 503 UPDATED ACTUAL Exam Questions and CORRECT Answers

SANS 503 UPDATED ACTUAL Exam
Questions and CORRECT Answers
IDS - CORRECT ANSWER - Intrusion Detection System



IPS - CORRECT ANSWER - Intrusion Prevention System



packet and datagram are interchangeable - CORRECT ANSWER - packet and datagram or
interchangeable


4 layers of TCP/IP Model - CORRECT ANSWER - Application (HTTP,SMTP,DNS) -
(Appli
Transport (TCP,UDP)
Internet (IP)
Network Access (IEEE 802.x)


TCP/IP Encapsulation of layers - CORRECT ANSWER - Apes Tickle in nylon or knikers
Application (Application Payload)
Transport (TCP Header)
Internet (IP Packetheader)
Network Access (Frame Header)


OSI - CORRECT ANSWER - Open System Interconnection Model



Encapsulation - CORRECT ANSWER - Adding header information as a packet is passed
down the TCP/IP stack (De-encapsulation is the opposite


What is needed to de-encapsulate - CORRECT ANSWER - A knowledge of what follows
the currently layer the next layer to pass to and where is starts or the size of its header

, Bit - CORRECT ANSWER - smallest unit 0 or 1



Nibble - CORRECT ANSWER - 4 bits or one hex



Byte - CORRECT ANSWER - 8bit 2 nibbles or 2 hex



802.3 - CORRECT ANSWER - Ethernet max size 1500 byes



802.11 - CORRECT ANSWER - Wireless



802.15.1 - CORRECT ANSWER - Bluetooth



ARP - how many bits? - CORRECT ANSWER - address resolution protocol - not
routeable 48 bits


IPv6 mac translation is done by? How many bits - CORRECT ANSWER - Neighbor
solicitation 128 bits


gratuitous ARP - CORRECT ANSWER - Both sender and target mac and IP are the same.
regular request will have the target mac as 0.0.0.0 and target ip address that is different from the
sender ip


Determine length of ip packet - CORRECT ANSWER - ip datagram length



TCP & IP Header header length is multiplied by what - CORRECT ANSWER -4



IP offset is multiplied by what - CORRECT ANSWER -8