Practice
Solution
Step 1: Understand IP Hash purpose
IP Hash uses the client's IP address to consistently route requests to the same backend server, enabling session persistence (sticky sessions).Step 2: Why not Round Robin or Least Connections?
Round Robin distributes requests evenly without regard to client identity, so it does not guarantee session persistence. Least Connections balances based on current load but also does not ensure the same client hits the same server.Step 3: Match scenarios to algorithms
When you need to ensure session persistence by routing requests from the same client IP to the same server correctly identifies the scenario where IP Hash is preferred: session persistence. Options A and C describe scenarios better suited for Least Connections or Round Robin. When you want to distribute requests strictly in a cyclic order regardless of client identity describes Round Robin behavior.Final Answer:
Option A -> Option AQuick Check:
IP Hash -> session stickiness; Round Robin -> cyclic distribution; Least Connections -> load-aware balancing.
- Confusing Least Connections with session persistence
- Assuming Round Robin can maintain client affinity
- Believing IP Hash balances load evenly regardless of client IP distribution
Solution
Step 1: Identify SNAT purpose
SNAT modifies the source IP of outgoing packets, typically to allow multiple internal hosts to share a public IP for internet access.Step 2: Analyze options
When internal hosts initiate outbound connections to the internet, hiding their private IPs behind a public IP correctly describes SNAT's role in outbound connections. When external users need to access a specific internal server via a public IP and port describes DNAT or port forwarding. When translating destination IP addresses for incoming packets to reach internal hosts is DNAT's function. When mapping multiple public IPs to a single internal IP without port translation is not typical SNAT behavior.Final Answer:
Option A -> Option AQuick Check:
SNAT = source IP translation for outbound traffic [OK]
- Confusing SNAT with DNAT
- Assuming SNAT handles inbound connections
- Believing SNAT can map multiple public IPs to one internal IP without ports
Solution
Step 1: Understand DHCP overhead
Each new client connection triggers the DORA sequence, which adds network traffic.Step 2: Analyze impact of high churn
Frequent IP requests can overload the DHCP server and increase broadcast traffic, causing congestion.Step 3: Evaluate other options
Because DHCP cannot assign IP addresses dynamically in such environments is false; DHCP is designed for dynamic assignment. Because DHCP servers do not support IP address leasing is incorrect; DHCP supports leasing. Because clients must manually configure IP addresses in such cases is unrelated to DHCP limitations.Final Answer:
Option A -> Option AQuick Check:
High churn leads to excessive DHCP message overhead.
- Believing DHCP cannot assign dynamically in such cases
- Confusing DHCP leasing with static assignment
- Assuming manual configuration is required when DHCP is unsuitable
Solution
Step 1: Review ACK number behavior
ACK numbers are cumulative and indicate the next byte expected, acknowledging all prior bytes.Step 2: Analyze duplicate ACKs
Duplicate ACKs often indicate packet loss but can also occur due to reordering; immediate retransmission is triggered only after three duplicates (fast retransmit).Step 3: Evaluate options
TCP acknowledgment numbers are cumulative and indicate the next expected byte from the sender is correct. Duplicate ACKs always indicate packet loss and require immediate retransmission is incorrect because duplicate ACKs do not always require immediate retransmission. An ACK number can acknowledge multiple segments if they are received in order is correct as ACK numbers can acknowledge multiple segments. ACK numbers help the sender detect which data has been successfully received is correct.Final Answer:
Option B -> Option BQuick Check:
Duplicate ACKs signal potential loss but do not always trigger immediate retransmission.
- Assuming every duplicate ACK means packet loss
- Confusing cumulative ACKs with selective ACKs
- Believing ACK numbers acknowledge individual segments only
Solution
Step 1: Understand certificate chain validation
Clients can fetch missing intermediate certificates to complete the chain if the root CA is trusted.Step 2: Analyze options
A: Correct approach to fetch missing intermediates and validate.
B: Too strict; rejecting immediately is not best practice.
C: Skipping intermediates breaks chain validation.
D: Proceeding without validation compromises security.Final Answer:
Option D -> Option DQuick Check:
Fetching missing intermediates is standard practice to build a valid chain.
- Rejecting connections too early
- Trusting root CA without full chain validation
- Ignoring security risks of skipping validation
