Network Engineering Methods Flashcards

Question 1

What is the purpose of a layered network architecture?

Accepted Answer

A layered network architecture divides networking functions into separate layers, each with a defined role and interface to the layers above and below it. This separation lets engineers change or replace one layer, such as the physical media, without redesigning the whole system. The OSI model and TCP/IP model are two common layered references.

Question 2

What is the three-tier hierarchical network design model?

Accepted Answer

The three-tier hierarchical model divides a campus or enterprise network into access, distribution, and core layers. Access switches connect end devices, distribution devices apply policies such as routing and filtering between segments, and core switches move large volumes of traffic quickly between distribution blocks. Each tier has a focused job, which simplifies growth and troubleshooting.

Question 3

Why do engineers use redundancy when designing a network?

Accepted Answer

Engineers use redundancy to keep services available when a link, device, or power source fails. Duplicate paths and devices, such as two uplinks or a pair of firewalls, let traffic reroute automatically after a fault. Redundancy adds cost and complexity, so designers match the level of protection to the business need for uptime.

Question 4

What does it mean for a network design to be scalable?

Accepted Answer

A scalable design can grow in users, devices, or traffic without a complete rebuild. Engineers achieve this by using modular blocks, planned address space, and standard configurations that can be copied to new sites. Scalability should be considered early, because retrofitting a poorly planned network is usually far more expensive.

Question 5

What is the difference between a network topology and a network diagram?

Accepted Answer

A network topology is the arrangement of links and nodes, describing how devices are connected in principle, such as star, ring, or mesh. A network diagram is a drawing that represents that arrangement, usually with added detail such as addresses and link speeds. The topology is the structure, and the diagram documents it.

Question 6

Why is documenting a network design important for future engineers?

Accepted Answer

Documentation records how the network is built, why decisions were made, and how devices are configured. It lets new staff understand the environment quickly, supports faster troubleshooting, and helps auditors and planners evaluate changes. Without current records, teams often waste time rediscovering details that should already be known.

Question 7

What is a service level agreement in network design?

Accepted Answer

A service level agreement is a formal commitment that defines measurable targets for network service, such as availability, latency, and support response time. It gives designers concrete requirements to build toward and gives customers a basis for judging performance. Designs that ignore these targets often fail to meet real business needs.

Question 8

How does a network designer choose between a star and a mesh topology?

Accepted Answer

A designer weighs cost, reliability, and scale. A star topology is inexpensive, but its central switch is a single point of failure. A full mesh gives many alternate paths, but each added node requires many more links, so it suits only small critical areas.

Question 9

What is the purpose of subnetting an IP network?

Accepted Answer

Subnetting divides a larger IP network into smaller logical networks, each with its own address range. It reduces broadcast traffic, limits the scope of faults, and lets administrators group devices by function or location. A subnet is defined by the network portion of the address, which is marked by a prefix length or subnet mask.

Question 10

How many usable host addresses are in a /24 IPv4 subnet?

Accepted Answer

A /24 IPv4 subnet has 256 total addresses, but only 254 are usable for hosts. The first address identifies the network itself, and the last address is reserved as the broadcast address. For most IPv4 subnets, the usable host count is the total minus those two reserved addresses.

Question 11

How do you calculate the number of hosts a subnet supports?

Accepted Answer

Raise two to the power of the number of host bits, then subtract two for the network and broadcast addresses. For example, a subnet with eight host bits holds 256 addresses and 254 usable hosts. This method works for ordinary IPv4 subnets, with special cases for point-to-point links.

Question 12

What is the purpose of a subnet mask in IPv4 addressing?

Accepted Answer

A subnet mask tells a device which bits of an IPv4 address identify the network and which bits identify the host. Written as 255.255.255.0, it marks the first twenty-four bits as network bits. Hosts use this mask to decide whether a destination is on the local subnet or must be sent through a gateway.

Question 13

What is the difference between a public and a private IPv4 address?

Accepted Answer

A public IPv4 address is routable across the internet and must be unique worldwide. A private address is reserved for use inside an organization and is not routed on the public internet. Network address translation usually lets many private hosts share one or a few public addresses when they reach external services.

Question 14

What does the IPv6 address format provide that IPv4 lacks?

Accepted Answer

IPv6 provides a far larger address space, using 128-bit addresses instead of IPv4's 32-bit addresses. This allows every device to have a globally unique address without relying heavily on translation. IPv6 also simplifies header processing and includes built-in support for address autoconfiguration.

Question 15

How do you determine the network address for a given host and mask?

Accepted Answer

Apply a bitwise AND between the host address and the subnet mask. Each bit in the result is one only where both the address bit and the mask bit are one. For example, 192.168.10.77 with mask 255.255.255.0 gives network address 192.168.10.0.

Question 16

What is classless inter-domain routing and why is it used?

Accepted Answer

Classless inter-domain routing, usually called CIDR, replaces fixed address classes with flexible prefix lengths such as /20 or /27. It lets providers allocate blocks sized to actual need and lets routers summarize many routes into one entry, which shrinks routing tables.

Question 17

What is the main difference between a switch and a router?

Accepted Answer

A switch forwards frames within a single local network using MAC addresses, while a router forwards packets between different IP networks using IP addresses. Routers make decisions based on network prefixes in routing tables. Many modern devices combine both functions, but the roles remain distinct in design.

Question 18

How does a switch learn which MAC address is on which port?

Accepted Answer

A switch learns by reading the source MAC address of each arriving frame and recording it against the port where it arrived. These entries form the MAC address table, which the switch uses to forward later frames to the correct port. If the destination is unknown, the switch floods the frame to other ports.

Question 19

What does a routing table contain, and how is it used?

Accepted Answer

A routing table lists destination network prefixes, the next hop or exit interface for each, and a metric or administrative preference. When a router receives a packet, it finds the most specific matching prefix, a process called longest prefix match, and forwards the packet accordingly. A default route handles destinations with no more specific match.

Question 20

What is the difference between static routing and dynamic routing?

Accepted Answer

Static routing uses routes that an administrator enters by hand, which is predictable and simple for small networks. Dynamic routing uses protocols that exchange route information automatically, so routers adapt when links fail or topology changes. Dynamic routing scales better, but it adds protocol overhead and needs careful configuration.

Question 21

How do VLANs separate broadcast domains on a single switch?

Accepted Answer

VLANs assign ports or frames to logical groups, so devices in different VLANs cannot communicate at layer two without a router. Each VLAN forms its own broadcast domain, which limits broadcast traffic and improves security. Trunk links carry traffic for several VLANs using frame tags, so one physical link can serve many groups.

Question 22

What is the purpose of the Spanning Tree Protocol in a switched network?

Accepted Answer

Spanning Tree Protocol prevents switching loops in networks that have redundant links between switches. It selects a loop-free logical topology by blocking certain ports, while keeping the blocked links ready to take over if an active link fails. Without it, broadcast frames can circulate endlessly and overwhelm the network.

Question 23

What does the Address Resolution Protocol do on an IPv4 local network?

Accepted Answer

Address Resolution Protocol maps a known IPv4 address to the MAC address of the device that owns it on the same local segment. A host broadcasts a request asking who has the target address, and the owner replies with its MAC address. Hosts cache these mappings, so later frames skip the request.

Question 24

What is the function of an access control list on a router?

Accepted Answer

An access control list is an ordered set of rules that permits or denies traffic based on attributes such as source and destination addresses, protocol, and port. The router checks each packet against the rules from top to bottom and applies the first match. Lists typically end with an implicit deny for unmatched traffic.

Question 25

What are the main steps of a structured troubleshooting method?

Accepted Answer

A structured method usually follows these steps: identify the problem, establish a theory of probable cause, test the theory, establish a plan of action, implement the fix, verify full functionality, and document the findings. Working through each step in order prevents random changes that can hide the real fault.

Question 26

Why should you change only one thing at a time while troubleshooting?

Accepted Answer

Changing one variable at a time shows which action actually fixed the fault, or whether it had no effect at all. Multiple simultaneous changes make it impossible to tell which one caused an improvement or a new problem. Record each change so you can reverse it if it does not help.

Question 27

What is the purpose of the ping command during troubleshooting?

Accepted Answer

Ping sends ICMP echo requests to a target and reports whether replies return, along with round-trip time. It helps confirm basic reachability and gives a rough measure of latency and packet loss. A failed ping does not prove the cause, because firewalls may block ICMP while the service itself works.

Question 28

How does traceroute help locate where a packet path fails?

Accepted Answer

Traceroute sends probes with increasing time-to-live values, so each router along the path returns an error message that reveals its address. By reading the sequence of responses, you can see which hop stops replying or shows unusually high delay. Asterisks alone do not always mean failure, since some routers deprioritize or block probe responses.

Question 29

What is the difference between a physical layer fault and a configuration fault?

Accepted Answer

A physical layer fault involves the hardware or media itself, such as a damaged cable, a dirty fiber connector, or a failed port. A configuration fault involves correct hardware that has been set up incorrectly, such as a wrong VLAN, mismatched duplex, or a bad IP address.

Question 30

Why is it useful to compare a working system with a failing one?

Accepted Answer

Comparing a working system with a failing one narrows the search by showing what differs between them. Differences in configuration, software version, addressing, or path can point directly toward the cause. This technique, often called differential analysis, saves time when the fault is not obvious from symptoms alone.

Question 31

What should a troubleshooter document at the end of an incident?

Accepted Answer

Record the symptoms, the root cause, each change made, the time of the fix, and any follow-up work needed to prevent recurrence. Clear notes help the team learn from the event and let others repeat successful steps. Incomplete records often lead to the same fault returning later.

Question 32

How do you decide when to escalate a network fault to another team?

Accepted Answer

Escalate when you have tested the likely causes within your authority and still cannot isolate the fault, or when the impact exceeds your team's scope. Provide the escalation team with symptoms, steps already taken, and test results so they do not repeat your work. Escalation should follow your organization's documented procedures and service targets.

Question 33

What is the difference between network latency and jitter?

Accepted Answer

Latency is the time a packet takes to travel from source to destination, usually measured as one-way or round-trip delay. Jitter is the variation in that delay from one packet to the next. Voice and video applications tolerate steady latency better than erratic jitter, because buffers can smooth only so much variation.

Question 34

What does packet loss measure, and why does it matter for applications?

Accepted Answer

Packet loss is the percentage of transmitted packets that never arrive at their destination. Even small loss can badly degrade real-time traffic, because lost voice or video data cannot always be recovered. Reliable transport protocols such as TCP retransmit lost segments, which usually reduces throughput instead of stopping transfers.

Question 35

What is the purpose of SNMP in network monitoring?

Accepted Answer

Simple Network Management Protocol lets a management system query devices for status and performance data, and receive alerts called traps. Devices expose information through managed objects organized in a structured database called a MIB. SNMP is widely used to track interface counters, CPU load, and device health across many devices.

Question 36

How does utilization differ from throughput when measuring a link?

Accepted Answer

Throughput is the actual rate of successful data transfer over a link, measured in bits per second. Utilization is the share of the link's rated capacity that carries traffic, often expressed as a percentage. A link can be heavily utilized while delivering little useful throughput if retransmissions or overhead consume much of that traffic.

Question 37

What is baseline performance data, and how is it used?

Accepted Answer

Baseline performance data records normal behavior for a network over time, such as typical traffic levels, latency, and error rates. Administrators compare current measurements against this baseline to spot unusual changes before users complain. Baselines are most useful when collected across typical workdays, not during a single unusual event.

Question 38

Why is it important to set alert thresholds carefully on monitoring tools?

Accepted Answer

Thresholds that are too sensitive generate constant false alarms, which train staff to ignore alerts. Thresholds that are too loose can miss real degradation until users are seriously affected. Good thresholds are based on baseline data and tied to the impact on services.

Question 39

How do flow records help network teams with capacity planning?

Accepted Answer

Flow records summarize conversations by source, destination, ports, protocol, and byte counts, showing which applications and hosts consume bandwidth. Planners use these summaries to find growth trends, identify heavy talkers, and decide where to add capacity. Flow data shows volume patterns, but it does not capture the full contents of packets.

Question 40

How should a team respond when monitoring shows a sudden rise in errors on a link?

Accepted Answer

Start by confirming the alert against the raw interface counters, then check cabling and transceivers on both ends of the link. Compare the error type, such as CRC errors or input drops, with the baseline to narrow the cause. Once fixed, watch the counters until they return to normal before closing the incident.

Network Engineering Methods Flashcards

1Network design principles

2IP addressing and subnetting

3Routing and switching methods

4Structured troubleshooting methods

5Monitoring and performance measurement

Learning Resources