Jumat, 29 Oktober 2010

Chapter 9

1. a small office uses a wireless ISR to connect to a cable modem for internet access. The networl administrator receives a call tahat one office computer cannot access external website. The first troubleshooting step that the network administrator performs is to ping the ISR. While troubleshooting technique does this represent?

D. divide-and-conquer.

2. Select three items that should be documented after troubleshooting an internal web server crash (choose three)

a. when the problem occurred
e. steps that were performed to identify the cause of the problem
f. steps that were performed that failed to identify the cause of the problem

3. A user calls the help desk to report a workstation problem. While three questions would the most helpful information for troubleshooting? (choose three)

a. A.if you received an error message, what was it?
b. B.Have there been any changes to your workstation recently?
c. D.what version of operationg system is running on your workstation?

4. A user wants to lest connectivity between host 3 and 8 on a network. Which command can be used to verify a connection?

b. ping

5. Ipconfig = displays IP settings on host

Netstat = display network connections
Ping = tests connections to other IP host
Tracert = displays route taken to destination
Nslookup = asks name server for into on destination domain

6. Which three pieces of information are revealed by yhe config command? (choose three)

b. Ip address
e. subnet mask
f. default gateway

7. How does an activity LED indicate that traffic is moving through a port?

a. by flashing

8. What is one of the most common reasons why hosts could be unable to connect?

b. cabling problems

9. Which three factors can affect the ability of host to connect to an AP using radio frequency signals? (choose three)

b. The 802.11A is not compatible with the 802.11 B/G standars
c. The avalaible bandwith between devices is shared with APs
e. Mulitple devices running on the same frequency causes interference

10. what step should be taken once a problem is resolved?

c. update the documentation

chapter 8 CCNA

1. Drag the network threat on the left to the definition on the right.
a. Data loss à destroying data on a hard drive
b. Data manipulation à changing data for personal gain
c. Disruption of service à overloading a server to reduce its performance
d. Information theft à stealing data on a hard drive to gain a competitive advantage
e. Identity à stealing information to impersonate someone and usually to obtain credit.

2. How does a phisher typically contact a victim?
by E-mail

3. A file is downloaded from the internet. After the user opens the downloaded file, the user’s hard drive crashes and all information on the computer is lost. What type of attack occurred?
Virus

4. In rapid succession, an intruder tries a large number of possibilities to guess passwords. As a result, other users on the network are locked out. What type of attack occurred?
Brute force

5. What type of program installs and gathers personal information, including password and account information, from a computer without permission or knowledge of the user?
Spyware

6. A network administration is troubleshooting a computer that is operating strangely. It boots slowly, programs will not load, and the keyboard responds very slowly. What is the best action for the administrator to take?
Boot the PC and Run anti-virus and anti-spyware applications from an external drive.

7. Drag the term on left to the best description on the right.
a. Stateful packet inspection à can look inside the packet up through layer 7
b. Website filtering à allows or denies access based on a URL
c. Simple packet filtering à allows or denies access based on an IP or MAC address
d. NAT à keeps external users from knowing the IP Address used inside the network

8. Drag the term on left to the definition on the right.
a. Integrated à a feature of a network device such as a router.
b. Personal firewall à an application designed to protect a home PC
c. Appliance-based firewall à a device that has the sole function of being a firewall
d. Server-based firewall à an application designed to protect the enterprise network

9. What are three security features commonly found on an ISR? (Choose Three)
- DMZ
- NAT
- SPI

10. What are two purposes of a DMZ? (Choose two)
- To create a network area that allows internal resources, such as a web server, to be accessed by external users.
- To establish a network area where network resources can be shared by both internal and external users.

CCNA Discovery 1 Module 9

CCNA Discovery 1 Module 9 Exam Answers Version 4.0
1. What should a network administrator do first after receiving a call from a user who cannot access the company web server?
• Reboot the web server.
• Replace the NIC of the computer.
• Ask the user to log off and log on again.
• Ask the user what URL has been typed and what error message displays.

2. A customer called the cable company to report that the Internet connection is unstable. After trying several configuration changes, the technician decided to send the customer a new cable modem to try. What troubleshooting technique does this represent?
• top-down
• bottom-up
• substitution
• trial-and-error
• divide-and-conquer

3. Only one workstation on a particular network cannot reach the Internet. What is the first troubleshooting step if the divide-and-conquer method is being used?
• Check the NIC, and then check the cabling.
• Check the workstation TCP/IP configuration.
• Test all cables, and then test layer by layer up the OSI model.
• Attempt to Telnet, and then test layer by layer down the OSI model.

4. Which two troubleshooting techniques are suitable for both home networks and large corporate networks? (Choose two.)
• having a backup ISR
• running network monitoring applications
• documenting the troubleshooting process
• keeping a record of system upgrades and software versions
• keeping spare switches, routers, and other equipment available

5. Identify two physical-layer network problems. (Choose two.)
• hardware failure
• software configuration
• devices not able to ping
• loose cable connections
• device driver configuration
6. Which ipconfig command requests IP configuration from a DHCP server?
• ipconfig
• ipconfig /all• ipconfig /renew
• ipconfig /release

7. What command is used to determine the location of delay for a packet traversing the Internet?
• ipconfig
• netstat
• nslookup
• ping
• tracert

8. What command is used to determine if a DNS server is providing name resolution?
• ipconfig
• netstat
• nslookup
• tracert
9. Which troubleshooting method begins by examining cable connections and wiring issues?
• top-down
• bottom-up
• substitution
• divide-and-conquer

10. A technician suspects that a Linksys integrated router is the source of a network problem. While troubleshooting, the technician notices a blinking green activity LED on some of the ports. What does this indicate?
• Self-diagnostics have not completed.
• The power supply is the source of the problem.
• The ports are operational and are receiving traffic.
• The ports are operational, but no traffic is flowing.
• There are no cables plugged into those ISR ports.
• The ports have cables plugged in, but they are not functional.

11. A PC is plugged into a switch and is unable to connect to the network. The UTP cable is suspected. What could be the problem?
• A straight-through cable is being used
• The connectors at both ends of the cable are RJ-45.
• The RJ-45 connectors are crimped onto the cable jacket.
• A crossover cable is being used.

12. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless.

13. Which three settings must match on the client and access point for a wireless connection to occur? (Choose three.)
• SSID
• authentication
• MD5 checksum
antennae type
• encryption key
• MAC address filters

14. A technician is troubleshooting a security breach on a new wireless access point. Which three configuration settings make it easy for hackers to gain access? (Choose three.)
• configuring NAT
• broadcasting the SSID
• using open authentication

enabling MAC address filters
• using the default internal IP address
• using DHCP to provide IP addresses

15. Refer to the graphic. The wireless host cannot access the Internet, but the wired host can. What is the problem?
• The host WEP key is incorrect.
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The integrated router internal IP address is incorrect.
• The integrated router Internet IP address is incorrect.

16. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless.

17. When acting as a DHCP server, what three types of information can an ISR provide to a client? (Choose three.)
• physical address
• MAC address
• default gateway
• static IP address
• dynamic IP address
• DNS server address

18. What two items could be checked to verify connectivity between the router and the ISP? (Choose two.)
• router status page
• wireless card settings
• router operating system version

• local host operating system version
• connectivity status as indicated by LEDs

19. A technician is unsuccessful in establishing a console session between a PC and a Linksys integrated router. Both devices have power, and a cable is connected between them. Which two troubleshooting steps could help to diagnose this problem? (Choose two.)
• Ensure the correct cable is used.
• Ensure the SSID is the same on both devices.
• Ensure both devices have the same IP address.
• Ensure both devices have different subnet masks.
• Ensure the encryption type on both devices match.• Ensure the link status LED on the integrated router is lit.

20. Network baselines should be performed in which two situations? (Choose two.)
• after the network is installed and running optimally• after a virus outbreak is discovered on the network
• after major changes are implemented on the network
• after several computers are added to the network• at the end of the work week

21. Typically, help desk personnel assist end users in which two tasks? (Choose two.)
• identifying when the problem occurred
• determining if other users are currently logged into the computer
• updating network diagrams and documentation
• implementing the solution to the problem
• running a network baseline test
• determining the cost of fixing the problem

22. How does remote-access software help in the troubleshooting process?
• Remote access uses a live chat feature.• Users have to be present so that they can view LEDs and change cables if necessary.
• Diagnostics can be run without a technician being present at the site.
• FAQs can be consulted more easily.

23. Which two items should be added to the documentation following a troubleshooting event? (Choose two.)
• final resolution
• repetitive measures
• number of people involved in the problem
• accurate current network infrastructure diagrams
• results of successful and unsuccessful troubleshooting steps

CCNA Discovery 1 Module 8

CCNA Discovery 1 Module 8
1. Identify three techniques used in social engineering. (Choose three.)
• fishing
• vishing
• phishing
• spamming
• pretexting
• junk mailing
2. During a pretexting event, how is a target typically contacted?
• by e-mail
• by phone
• in person
• through another person
3. While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?
• worm
• virus
• Trojan horse• denial of service
4. What is a major characteristic of a Worm?
• malicious software that copies itself into other executable programs
• tricks users into running the infected software
• a set of computer instructions that lies dormant until triggered by a specific event
• exploits vulnerabilities with the intent of propagating itself across a network
5. A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?
• Trojan horse
• brute force
• ping of death
• SYN flooding
6. What type of advertising is typically annoying and associated with a specific website that is being visited?
• adware
• popups• spyware
• tracking cookies
7. What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?
• brute force
• spam• spyware
• tracking cookies
8. What part of the security policy states what applications and usages are permitted or denied?
• identification and authentication
• remote access
• acceptable use
• incident handling
9. Which statement is true regarding anti-virus software?
• Only e-mail programs need to be protected.
• Only hard drives can be protected.
• Only after a virus is known can an anti-virus update be created for it.• Only computers with a direct Internet connection need it.
10. Which two statements are true concerning anti-spam software? (Choose two.)
• Anti-spam software can be loaded on either the end-user PC or the ISP server, but not both.
• When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
• Installing anti-spam software should be a low priority on the network.
• Even with anti-spam software installed, users should be careful when opening e-mail attachments.• Virus warning e-mails that are not identified as spam via anti-spam software should be forwarded to other users immediately.
11. What term is used to describe a dedicated hardware device that provides firewall services?
• server-based
• integrated
• personal
• appliance-based
12. Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?
• SPI
• DMZ• ISR
• ISP
13. Which statement is true about port forwarding within a Linksys integrated router?
• Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.• Only external traffic that is destined for specific internal ports is denied. All other traffic is permitted.
• Only internal traffic that is destined for specific external ports is permitted. All other traffic is denied.
• Only internal traffic that is destined for specific external ports is denied. All other traffic is permitted.
14. To which part of the network does the wireless access point part of a Linksys integrated router connect?
• DMZ
• external
• internal• a network other than the wired network
15. Refer to the graphic. What is the purpose of the Internet Filter option of Filter IDENT (Port 113. on the Linksys integrated router?
• to require a user ID and password to access the router
• to prevent outside intruders from attacking the router through the Internet• to require a pre-programmed MAC address or IP address to access the router
• to disable tracking of internal IP addresses so they cannot be spoofed by outside devices
16. What statement is true about security configuration on a Linksys integrated router?
• A DMZ is not supported.
• The router is an example of a server-based firewall.
• The router is an example of an application-based firewall.
• Internet access can be denied for specific days and times.
17. What environment would be best suited for a two-firewall network design?
• a large corporate environment• a home environment with 10 or fewer hosts
• a home environment that needs VPN access
• a smaller, less congested business environment
18. What is one function that is provided by a vulnerability analysis tool?
• It provides various views of possible attack paths.
• It identifies missing security updates on a computer.
• It identifies wireless weak points such as rogue access points.
• It identifies all network devices on the network that do not have a firewall installed.
• It identifies MAC and IP addresses that have not been authenticated on the network.
19. Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.
• Periodically update anti-virus software.
• Be aware of normal network traffic patterns.
• Periodically update the host operating system.
• Activate the firewall on a Linksys integrated router.
• Configure login permissions on the integrated router.
• Disable the wireless network when a vulnerability analysis is being performed.
20. What best practice relates to wireless access point security?
• activation of a popup stopper
• a change of the default IP address• an update in the antivirus software definitions
• physically securing the cable between the access point and client
21. Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?
• It prevents packets based on the application that makes the request.
• It allows packets based on approved internal MAC or IP addresses.
• It requires that packets coming into the router be responses to internal host requests.
• It translates an internal address or group of addresses into an outside, public address

CCNA Discovery 1 . 7

CCNA Discovery 1 Module 7 Exam Answers Version 4.0 
1. Why is IEEE 802.11 wireless technology able to transmit further distances than Bluetooth technology?
• transmits at much lower frequencies
has higher power output
• transmits at much higher frequencies
• uses better encryption methods

2. What are three advantages of wireless over wired technology? (Choose three.)
• more secure
• longer range
• anytime, anywhere connectivity
• easy and inexpensive to install

• ease of using licensed air space
• ease of adding additional devices

3. What are two benefits of wireless networking over wired networking? (Choose two.)
• speed
• security
• mobility
• reduced installation time
• allows users to share more resources
• not susceptible to interference from other devices

4. A technician has been asked to provide wireless connectivity to the wired Ethernet network of a building. Which three factors affect the number of access points needed? (Choose three.)
• the size of the building
• the number of solid interior walls in the building
• the presence of microwave ovens in several offices

• the encryption method used on the wireless network
• the use of both Windows and Appletalk operating systems
• the use of shortwave or infrared on the AP

5. Why is security so important in wireless networks?
• Wireless networks are typically slower than wired networks.
• Televisions and other devices can interfere with wireless signals.
• Wireless networks broadcast data over a medium that allows easy access.
• Environmental factors such as thunderstorms can affect wireless networks.

6. What does the Wi-Fi logo indicate about a wireless device?
• IEEE has approved the device.
• The device is interoperable with all other wireless standards.
• The device is interoperable with other devices of the same standard that also display the Wi-Fi logo.
• The device is backwards compatible with all previous wireless standards.

7. Which statement is true concerning wireless bridges?
• connects two networks with a wireless link
• stationary device that connects to a wireless LAN
• allows wireless clients to connect to a wired network
• increases the strength of a wireless signal

8. Which WLAN component is commonly referred to as an STA?
• cell
• antenna
• access point
• wireless bridge
• wireless client
9. Which statement is true concerning an ad-hoc wireless network?
• created by connecting wireless clients in a peer-to-peer network• created by connecting wireless clients to a single, centralized AP
• created by connecting multiple wireless basic service sets through a distribution system
• created by connecting wireless clients to a wired network using an ISR

10. Refer to the graphic. In the Wireless menu option of a Linksys integrated router, what does the Network Mode option Mixed mean?
• The router supports encryption and authentication.
• The router supports both wired and wireless connections.
• The router supports 802.11b, 802.11g, and 802.11n devices.
• The router supports connectivity through infrared and radio frequencies.

11. Refer to the graphic. In the Wireless menu of a Linksys integrated router, what configuration option allows the presence of the access point to be known to nearby clients?
• Network Mode
• Network Name (SSID)
• Radio Band
• Wide Channel
• Standard Channel
• SSID Broadcast

12. Which two statements about a service set identifier (SSID) are true? (Choose two.)
• tells a wireless device to which WLAN it belongs
• consists of a 32-character string and is not case sensitive
• responsible for determining the signal strength
• all wireless devices on the same WLAN must have the same SSID
• used to encrypt data sent across the wireless network

13. Which two statements characterize wireless network security? (Choose two.)
• Wireless networks offer the same security features as wired networks.
• Wardriving enhances security of wireless networks.
• With SSID broadcast disabled, an attacker must know the SSID to connect.
• Using the default IP address on an access point makes hacking easier
.
• An attacker needs physical access to at least one network device to launch an attack.

14. What type of authentication does an access point use by default?
• Open
• PSK
• WEP
• EAP

15. Which statement is true about open authentication when it is enabled on an access point?
requires no authentication• uses a 64-bit encryption algorithm
• requires the use of an authentication server
• requires a mutually agreed upon password

16. What are two authentication methods that an access point could use? (Choose two.)
• WEP
• WPA
• EAP
• ASCII
• pre-shared keys

17. What is the difference between using open authentication and pre-shared keys?
• Open authentication requires a password. Pre-shared keys do not require a password.
• Open authentication is used with wireless networks. Pre-shared keys are used with wired networks.
• Pre-shared keys require an encrypted secret word. Open authentication does not require a secret word.
• Pre-shared keys require a MAC address programmed into the access point. Open authentication does not require this programming.

18. What term describes the encoding of wireless data to prevent intercepted data from being read by a hacker?
• address filtering
• authentication
• broadcasting
• encryption
• passphrase encoding

19. What access-point feature allows a network administrator to define what type of data can enter the wireless network?
• encryption
• hacking block
• traffic filtering
• MAC address filtering
• authentication

20. What are the two WEP key lengths? (Choose two.)
• 8 bit
• 16 bit
• 32 bit
• 64 bit
• 128 bit

21. Complete the following sentence: WEP is used to ______ , and EAP is used to _____ wireless networks.
• encrypt; authenticate users on
• filter traffic; select the operating frequency for
• identify the wireless network; compress data on
• create the smallest wireless network; limit the number of users on

Jumat, 22 Oktober 2010

chapter 7 Lab 7.3.5 Configuring Wireless Security

Lab 7.3.5 Configuring Wireless Security

Step 1: Plan the security for your home network
a) 6 Langkah Pengamanan Dasar Jaringan :

1. Ubahlah Sistem ID (Identitas)
Biasanya suatu layanan nirkabel dilengkapi dengan suatu standart pengamanan identitas atau yang sering disebut SSID (Service Set Identifier) or ESSID (Extended Service Set Identifier). Sangat mudah bagi seorang hacker untuk mencari tahu identitas default dari suatu layanan atau jaringan, jadi sebaiknya Anda segera mengubahnya menjadi suatu identitas yang unik, yang tidak mudah ditebak orang lain.
2. Mematikan identitas pemancar
Dengan mengumumkan kepada umum bahwa Anda memiliki suatu jaringan nirkabel akan membuat para hacker penasaran untuk membobol jaringan nirkabel Anda. Mempunyai suatu jaringan nirkabel bukan berarti harus memberitahukannya kepada semua orang. Periksalah secara manual perangkat keras yang Anda pakai untuk jaringan nirkabel tersebut, dan pelajarilah bagaimana cara mematikannya.
3. Sediakanlah enkripsi
WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected Access) dapat meng-enkripsi data Anda sehingga hanya penerima saja yang diharapkan dapat membaca data tersebut. WEP (Wired Equivalent Privacy) mempunyai banyak kelemahan yang membuatnya mudah disusupi. Kunci 128-bit hanya mempunyai tingkat pencapaian yang relatif rendah tanpa peningkatan keamanan yang signifikan, sedangkan untuk 40-bit atau 64-bit pada beberapa perlengkapan lainnya, mempunyai enkripsi yang sama baiknya. Dengan cara pengamanan yang standart saja pastilah tetap akan mudah bagi hacker untuk menyusup, namun dengan cara enkripsi ini pastilah akan membuat jaringan Anda lebih aman dari hacker. Jika memungkinkan, ada baiknya untuk menggunakan enkripsi WPA (peralatan yang lebih tua dapat diupgrade terlebih dahulu agar compatible dengan WPA). WPA dapat sangat menjanjikan dalam menjamin keamanan jaringan nirkabel Anda, namun masih tetap dapat dikalahkan oleh serangan DOS (denial of services).
4. Membatasi dari penggunaan traffic yang tidak perlu
Banyak router jaringan kabel maupun nirkabel yang dilengkapi firewalls. Bukan bermaksud mengedepankan firewalls, namun firewalls telah membantu dalam pertahanan keamanan jaringan. Bacalah petunjuk manual dari perangkat keras Anda dan pelajarilah cara pengaturan konfigurasi router Anda, sehingga hanya traffic yang sudah seijin Anda saja yang dapat dijalankan.
5. Ubahlah 'kata sandi' default Administrator milik Anda
Hal ini baik untuk semua penggunaan perangkat keras maupun perangkat lunak. Kata sandi default sangat mudah disalahgunakan, terutama oleh para hacker. Oleh karena itu sebaiknya ubahlah kata sandi Anda, hindari penggunaan kata dari hal-hal pribadi Anda yang mudah diketahui orang, seperti nama belakang, tanggal lahir, dan sebagainya.
6. Kunci dan lindungilah komputer Anda
Hal ini merupakan cara pengamanan terakhir untuk komputer Anda. Gunakanlah firewall, perangkat lunak Anti Virus, Zone Alarm, dan lain sebagainya. Setidaknya setiap satu minggu perbaharuilah Anti Virus yang Anda pakai.
(dna)

b) Apa resiko akses internet nirkabel

Kita semua tahu bahwa node jaringan nirkabel dapat memancarkan ke kisaran normal sekitar 300 meter, 300 meter, sehingga pemasangan kartu jaringan nirkabel untuk komputer apapun, dapat akses ke node jaringan nirkabel, dan dapat masuk ke jaringan nirkabel, jelas bahwa jenis metode akses mudah, mudah untuk membawa kepada ancaman keamanan jaringan nirkabel. Sebagai contoh, di 300 meter di Taiwan hacker komputer juga memiliki akses ke jaringan nirkabel Anda untuk mengontrol komputer Anda "setiap tindakan"; Walaupun jaringan nirkabel di kurangnya kerahasiaan informasi sebagai ketat kabel jaringan, tetapi Anda tentu tidak ingin serangan melanggar hukum sangat mudah untuk mengetahui keberadaan Anda dalam berbagai jaringan, seperti yang situs yang Anda kunjungi teman-teman, apa yang privasi dari pesan yang dikirim teman-teman di luar negeri, dll, adalah mungkin pengunjung ilegal tahu pasti.

Lebih serius adalah pengunjung ilegal dari jauh setelah Anda masuk ke dalam jaringan nirkabel Anda, akan sangat mudah untuk mencuri semua informasi account online Anda, sehingga akan memberikan keamanan yang lebih besar mengakibatkan kerugian. Jadi ada semua jenis jaringan nirkabel menghadapi risiko keamanan, Anda harus segera mengambil tindakan untuk mengambil tindakan penanggulangan, seperti melalui enkripsi atau verifikasi menggunakan teknologi identifikasi jaringan, untuk memastikan bahwa hanya Anda sebelum ditunjuk pengguna atau peralatan jaringan bisa ke jaringan nirkabel Anda , sementara yang lain ingin memaksa melalui berbagai teknologi jaringan nirkabel untuk mengakses operator jaringan nirkabel Anda, akan ditolak.


Step 8: Reflection
a) LinkSys WRT54G harganya yang murah dan cukup bisa diandalkan.
b) cara untuk membuat jaringan komputer yang aman
Jaringan komputer merupakan kumpulan dari beberapa komputer yang memliki koneksi satu dengan yang lain. Ketika semua komputer saling terhubung dalam suatu jaringan, keamanan merupakan hal yang harus diperhatikan. Fungsi keamanan adalah membuat jaringan komputer menjadi stabil, terstruktur, kuat serta mampu mengatasi berbagai gangguan. Logikanya, bila dalam suatu jaringan komputer ternyata memiliki sisi keamanan yang lemah tentu hal ini berdampak merusak kestabilan jaringan komputer tersebut. Banyaknya gangguan yang masuk akibat lemahnya keamanan yang dibuat bisa merusak kinerja transfer data pada jaringan komputer. Oleh karena itu, gangguan menjadi parameter untuk mengukur tingkat keamanan. Logikanya, sistem tersebut memiliki tingkat keamanan berdasarkan sering tidaknya mengalami gangguan, bukan?

Setelah memahami pentingnya keamanan dalam suatu jaringan maka kita dapat mengkaji lebih detail tentang keamanan jaringan komputer itu sendiri. Prinsip keamanan pada jaringan adalah hal yang sangat kompleks. bahwa keamanan jaringan komputer terdiri dari banyak bagian atau komponen. Sedangkan Tiap komponen itu masih kompleks. Hal ini setidaknya menggambarkan bahwa keamanan jaringan komputer ibarat puzzle yang besar dan rumit. Disamping banyak sekali standar keamanan dalam jaringan komputer, ternyata jumlah dan jenis serangan terhadap keamanan ikut bertambah tiap harinya. Hal ini membuat standar yang sudah dipakai harus dipertimbangkan kembali dan diubah lagi untuk mengimbangi jumlah dan jenis serangan yang selalu bertambah dan bervariasi.

Klasifikasi keamanan menurut David Icove, bahwa 4 tingkat yang harus diperhatikan :
1. Fisik / Physical Security
2. Manusia / Personel Security
3. Data, media , teknik dan komunikasi
4. Kebijakan dan prosedur

chapter 7 LAB 7.2.6 Configuring a Wireless Client

7.2.6 Configuring a Wireless Client
Step 1: Install the wireless NIC driver
b) NIC untuk Wireless Network
Ada 3 standar yang digunakan, yaitu:
- 802.11a wireless networking
Frekuensi 5 GHz, kecepatan 54 Mbps
Biaya mahal, untuk file-file yang besar
- 802.11b wireless networking
Frekuensi 2,4 GHz, kecepatan 11 Mbps
Interferensi dengan perangkat lain
- 802.11g wireless networking
Frekuensi 2,4 GHz, kecepatan 20 Mbps
Interferensi, throughput lebih dari 802.11b


c) Cara Install Driver Perangkat Lunak Untuk Kartu Lan Nirkabel
Komputer tanpa bekerja antena nirkabel dapat ditingkatkan dengan baik kartu LAN nirkabel internal atau eksternal. Untuk menghubungkan ke hotspot internet favorit Anda atau jaringan rumah,

Anda harus menyelesaikan instalasi dengan menginstal driver perangkat's - file yang memungkinkan perangkat untuk berkomunikasi dengan sistem operasi Anda. Anda dapat memiliki Windows menginstal driver, biarkan Windows memperbarui driver atau manual menginstal driver terbaru sendiri.

http://www.papatek.com/USB-Wireless-LAN-Adapter

Boot komputer Anda. Masukkan disk instalasi driver dan disertakan dengan kartu LAN nirkabel Anda. Klik "Mulai Instalasi," "Instal Perangkat Lunak" atau frase berjudul sama lain.

Ikuti petunjuk pada layar. Mematikan komputer dan memasang kartu ke slot yang tersedia pada motherboard Anda, jika berlaku, kemudian restart komputer. (Beberapa kartu lama seperti

Linksys WMP54G internal 'mengharuskan Anda untuk menginstal perangkat lunak awal sebelum menginstal kartu fisik) instalasi Selesai.. http://www.papatek.com/PCI-Wireless-LAN-Card

Instal Driver Windows Via
Memasang kartu internal Anda. Boot up komputer.

Hubungkan ke Internet setelah beban Windows, kemudian masukkan kartu LAN nirkabel Anda eksternal.

Biarkan Windows kesempatan untuk secara otomatis mendeteksi perangkat Anda dan untuk menginstal driver. Update secara manual Driver

Klik pada "Start" kemudian "Control Panel" klik. Pada "Classic View" pada kolom kiri, jika tersedia.

Buka "System." Klik "Device Manager" pada Windows Vista dan di Windows 7. Klik pada tab "Hardware, kemudian" Device Manager "pada Windows XP.

Double-klik "Network Adapter," kemudian klik dua kali kartu LAN nirkabel Anda diinstal sebelumnya. (Anda harus menginstal Kartu LAN Anda sebelum memperbarui driver, atau tidak terdaftar dalam Device Manager.)

Klik pada Driver "" tab. Klik "Update Driver," lalu "Cari Otomatis" atau "Browse My Computer" jika Anda download driver dari situs web produsen. Ikuti petunjuk pada layar untuk menyelesaikan instalasi driver.

Step 2: Install the wireless NIC

Step 3: Attach to the wireless network
b) SSID copas
d) kekuatan sinyalnya kuat, tidak terbatas
e) ya
g) DHCP
h) membiarkan Windows XP kontrol NIC wireless

Step 4: Determine the NIC driver version

Step 5: Determine if the NIC driver is the most current
a) www.ultimatepcrepair.com
b) Computer Repair - Identifying Home Network Components

Step 6: Verify connectivity
Step 7: Reflection
a) tidak, karena sama saja jaringan nirkabel yang ada di mana saja
b) cukup, karena jangkauan dari AP yang ada di toko makanan tidak cukup luas

chapter 7 LAB 7.2.5 Configuring a Wireless Access Point

7.2.5 Configuring a Wireless Access Point
Step 1:
d)

Step 2: Log in to the multi-function device and configure the wireless network
e) SSID atau Service set identifier adalah tempat mengisikan nama dari access point yang akan disetting. Apabila klien komputer sedang mengakses kita misalnya dengan menggunakan super scan, maka nama yang akan timbul adalah nama SSID yang diisikan tersebut.

Step 3: Reflection
a) nirkabel, adalah teknologi yang menghubungkan dua piranti untuk bertukar data atau suara tanpa menggunakan media kabel.
b) Sebuah service set identifier (SSID) adalah urutan karakter yang unik nama jaringan area lokal nirkabel (WLAN). An SSID is sometimes referred to as a "network name." Sebuah SSID kadang-kadang disebut sebagai "nama jaringan." This name allows stations to connect to the desired network when multiple independent networks operate in the same physical area. Nama ini memungkinkan stasiun untuk terhubung ke jaringan yang diinginkan ketika beberapa jaringan independen beroperasi di wilayah fisik yang sama.
Each set of wireless devices communicating directly with each other is called a basic service set (BSS). Setiap set perangkat nirkabel berkomunikasi langsung satu sama lain disebut service set dasar (BSS). Several BSSs can be joined together to form one logical WLAN segment, referred to as an extended service set (ESS). Beberapa BSSs bisa bergabung bersama untuk membentuk satu segmen WLAN logis, disebut sebagai service set diperluas (ESS). A Service Set Identifer (SSID) is simply the 1-32 byte alphanumeric name given to each ESS. Service Set Identifer (SSID) adalah hanya nama alfanumerik 1-32 byte diberikan kepada setiap ESS.
For example, a departmental WLAN (ESS) may consist of several access points (APs) and dozens of stations, all using the same SSID. Misalnya, WLAN departemen (ESS) dapat terdiri dari beberapa akses point (AP) dan puluhan stasiun, semua menggunakan SSID yang sama. Another organization in the same building may operate its own departmental WLAN, composed of APs and stations using a different SSID. Organisasi lain di gedung yang sama dapat beroperasi WLAN departemen nya sendiri, terdiri dari AP dan stasiun menggunakan SSID yang berbeda. The purpose of SSID is to help stations in department A find and connect to APs in department A, ignoring APs belonging to department B. Tujuan dari SSID adalah untuk membantu stasiun di departemen A menemukan dan terhubung ke AP di Sebuah departemen, mengabaikan AP milik departemen B.
Each AP advertises its presence several times per second by broadcasting beacon frames that carry the ESS name (SSID). Setiap AP mengiklankan kehadirannya beberapa kali per detik oleh penyiaran frame suar yang membawa nama ESS (SSID). Stations can discover APs by passively listening for beacons, or they can send probe frames to actively search for an AP with the desired SSID. Stasiun dapat menemukan AP secara pasif mendengarkan beacon, atau mereka dapat mengirim frame probe untuk secara aktif mencari sebuah AP dengan SSID yang diinginkan. Once the station locates an appropriately-named AP, it can send an associate request frame containing the desired SSID. Setelah stasiun menempatkan sebuah AP tepat-nama, dapat mengirim permintaan asosiasi frame yang berisi SSID yang diinginkan. The AP replies with an associate response frame, also containing SSID. AP balasan dengan kerangka respon asosiasi, juga mengandung SSID.
Some frames are permitted to carry a null (zero length) SSID, called a broadcast SSID. Beberapa frame yang diperbolehkan untuk membawa null (nol panjang) SSID, disebut SSID broadcast. For example, a station can send a probe request that carries a broadcast SSID; the AP must return its actual SSID in the probe response. Sebagai contoh, stasiun dapat mengirim permintaan penyelidikan yang membawa SSID broadcast, AP harus kembali SSID sebenarnya dalam respon probe. Some APs can be configured to send a zero-length broadcast SSID in beacon frames instead of sending their actual SSID. Beberapa AP yang dapat dikonfigurasi untuk mengirim broadcast SSID nol-panjang dalam bingkai suar daripada mengirim SSID sebenarnya mereka. However, it is not possible to keep an SSID value secret, because the actual SSID (ESS name) is carried in several frames. Namun, tidak mungkin untuk menjaga rahasia nilai SSID, karena SSID sebenarnya (ESS nama) dilakukan dalam beberapa frame.

Rabu, 20 Oktober 2010

Tugas CCNA lab 5.1.4

Oleh: Rince Selvia Nola/06445
Lab 5.1.4 Using the Windows Calculator with Network Addresses
Objectives
• • Switch between the two Windows Calculator modes.
• • Use Windows Calculator to convert between decimal, binary, and hexadecimal.
• • Use Windows Calculator to determine the number of hosts in a network with powers of 2.
Background / Preparation
Network technicians work with binary, decimal, hexadecimal numbers with computers and networking devices. In this lab you will use the Windows Calculator application to convert between the binary, decimal, and hexadecimal number systems. You will also use the powers function to determine the number of hosts that can be addressed based on the number of bits available. The following resources are required:
• • PC with Windows XP installed and functional
Step 1: Access Windows Calculator and determine mode of operation
1. From the Start button menu, select All Programs > Accessories, and click on Calculator. An alternate method of starting the Calculator application is to access the Start menu, click on Run, type calc and press Enter. Try both methods.
2. Once the Calculator application opens, select the View menu option.
3. Which mode [Standard | Scientific] is currently active? Jawab: Mode yang sedang aktif sekarang adalah Scientific
4. Select the Standard mode. This is a basic mode for simple calculations. How many mathematical functions are available in this mode? Jawab: Fungsi matematika yang ada pada Standart model adalah 7 fungsi matematika
Step 2: Convert between number systems
1. Access Scientific mode. Notice the number system modes available—Hex (Hexadecimal), Dec (Decimal), Oct (Octal), and Bin (Binary).
2. Which number system is currently active? Jawab: System bilangan yang sedang aktif pada model Scientific adalah Decimal.
3. Which numbers on the number pad are active in Decimal mode? Jawab: Bilangan yang aktif adalah:
4. Click on the Bin (Binary) mode radio button. Which numbers on the number pad are now active? Jawab:
5. Why do you think the other numbers are grayed out? Jawab: bilangan yang berwarna buram membuktikan bahwa bilangan tersebut tidak aktif untuk binery. Karena bilangan pada binery hanya 0 dan 1.
6. Click on the Hex (Hexadecimal) mode radio button.
7. Which characters on the number pad are now activated? Jawab karakter yang aktif pada bilangan hexadecimal adalah:
8. Click on the Dec radio button. Using your mouse, click on the number 1 followed by the number 5 on the number pad. The decimal number 15 has now been entered. Click on the Bin radio button.
9. What happened to the number 15 listed in the textbox at the top of the window? Jawab: Ketika decimal aktif saya mengetikan angka 15 kemudian saya tukar dengan Binery maka angka 15 berubah menjadi 1111.
10. By selecting different modes, numbers are converted from one number system to another. Select Dec mode again. The number in the window converts back to decimal. Select the Hex mode.
11. Which hexadecimal character (0 through 9 or A through F) represents decimal 15? Jawab: pada Hexadecimal yang mempresentasika 15 adalah F
12. Clear the number 15 in the window. Select Dec mode again. Not only can the mouse be used to enter numbers, but the numerical keypad on the keyboard as well as numbers on the keyboard can also be used. Using the numerical keypad to the right of the ENTER key, type the number 22. Note that if the number does not enter into the calculator, press the Num Lock key to enable the numeric keypad. While the number 22 is showing in the calculator, use the number keys across the top of the keyboard to add a 0 to the number 22 (220 should now be on the calculator). Select the Bin radio button.
13. What is the binary equivalent of 220? Jawab: Decimal 220 equivalent dengan 11011100 pada bineryClear the number 220 in the window. From Binary mode, type in the following binary number: 11001100. Select the Dec radio button.
14. What is the decimal equivalent to the binary number of 11011100? Jawab: Binery 11011100 equivalent dengan 220 Decimal

1. Convert the following decimal numbers to binary.

Decimal Binery
86 1010110
175 10101111
204 11001100
19 10011
1. Convert the following binary numbers to decimal.
Decimal Binery
11000011 195
101010 42
111000 56
10010011 147
Step 3: Convert host IP addresses
1. Computer hosts usually have two addresses, an Internet Protocol (IP) address and an Ethernet Media Access Control (MAC) address. For the benefit of humans, the IP address is normally represented as a dotted decimal notation, such as 135.15.227.68. Each of the decimal octets in the address or a mask can be converted to 8 binary bits. Remember that the computer only understands binary bits. If all 4 octets were converted to binary, how many bits would there be?
Jawab:

jika jumlah semua ada 4 oktet maka ada 32 bit yang terbentuk karena 1 oktet terdiri dari 8 bits.

1. IP addresses are normally shown with four decimal numbers ranging from 0 to 255 and separated by a period. Convert the 4 parts of the IP address 192.168.10.2 to binary.



Decimal Binary
192 11000000
168 10101000
10 00001010
2 00000010s
1. Notice in the previous problem how the 10 converted to only four digits and the number 2 converted to only two digits. When IP addresses can have any number from 0 to 255 in each position, eight digits are normally used to represent each number. In the previous example, eight digits were needed to convert 192 and 168 to binary, but 10 and 2 did not need as many digits. Normally 0s are added to the left of the digits to have eight digits in binary for each IP address number. The number 10 would be shown as 00001010. Four extra zeros are added to the front of the other four binary digits.
2. On the calculator in Binary mode, enter the digits 00001010 and select the Dec radio button.
3. Which decimal number is equivalent to 00001010?
Jawab:

00001010 ekuivalen dengan 10 pada decimal

1. Did adding “leading” zeros affect the number any?
Jawab:

Tidak karena 0 di depan tidak mempunyai pengaruh di dalam pengkonversian.

1. What would the number 2 (in the previous example) be if you were to make it eight digits?
Jawab:

karena pada IP address satu octet harus berisikan 8 digit bilangan biner.

Step 4: Convert host IP subnet masks
1. Subnet masks, such as 255.255.255.0, are also represented as dotted decimal. A subnet mask will always consist of four 8-bit octets, each one represented as a decimal number. With the exception of decimal 0 (all 8 binary zeros) and decimal 255 (all 8 binary ones), each octet will have some number of ones on the left and some number of zeros on the right. Convert the 8 possible decimal subnet octet values to binary.
Decimal Binary
0 00000000.00000000.00000000.00000000
128 11111111.11111111.00000000.00000000
192 11111111.11111111.11111111.00000000
224 11111111.11111111.11111111.00000000
240 11111111.11111111.11111111.00000000
248 11111111.11111111.11111111.00000000
252 11111111.11111111.11111111.00000000
254 11111111.11111111.11111111.00000000
255 11111111.11111111.11111111.11111111
1. Convert the four parts of the subnet mask 255.255.255.0 to binary.
Jawab:

11111111.11111111.11111111.00000000

Step 5: Convert broadcast addresses
1. Computer hosts and network devices use broadcast addresses to send messages to all hosts. Convert the following broadcast addresses.

Address Binery
IP broadcast255.255.255.255 11111111.1111111.11111111.11111111
MAC broadcastFF:FF:FF:FF:FF:FF 11111111.1111111.11111111.11111111
Step 6: Convert IP and MAC addresses for a host
1. Click the Start button, select Run, type cmd, and press Enter. From the command prompt, type ipconfig /all.

1. Make a note of the IP address and physical address (also known as a MAC address).
IP Address:
Jawab:

IP addressnya adalah 192.168.193.71

MAC Address:
Jawab:

MAC addresnya adalah 00-17-C4-23-43-FE

1. Using the calculator, convert the four numbers contained in the IP address to binary.

Decimal Binary
192 11000000
168 10101000
193 11000001
71 01000111
1. The MAC or physical address is normally represented as 12 hexadecimal characters, grouped in pairs and separated by dashes (-). Physical addresses on a Windows-based computer are shown in a format of xx-xx-xx-xx-xx-xx, where each x is a number from 0 to 9 or a letter from a to f. Each of the hex characters in the address can be converted to 4 binary bits which is what the computer understands. If all 12 hex characters were converted to binary, how many bits would there be?
Jawab:

Jika ada 12 karakter hexadecimal maka akan ada 96 bilangan biner yang terbentuk.

1. Convert each of the hexadecimal pairs to binary. For example, if the number CC-12-DE-4A-BD-88-34 was the physical address, convert the hexadecimal number CC to binary (11001100). Then convert the hexadecimal number 12 to binary (00010010) and so on. Be sure to add the leading zeros for a total of 8 binary digits per pair of hex digits.


Hexadecimal Binery
CC 11001100
12 00010010
DE 11011110
4A 01001010
BD 10111101
88 10001000
34 00110100
Step 7: Manipulate powers of 2 to determine the number of hosts on a network
Binary numbers use two digits, 0 and 1. When you calculate how many hosts can be on a subnetwork, you use powers of two because binary is being used. As an example, we have a subnet mask that leaves six bits in the host portion of the IP address. In this case, the number of hosts on that network is 2 to the 6th power minus 2 (because you need a number to represent the network and
1. number that can be used to reach all the hosts—the broadcast address). The number 2 is always used because we are working in binary. The number 6 is the number of bits that are used for the host bits.
2. On the calculator, in Dec mode, input the number 2. Select the x^y key, the key which raises a number to a power. Input the number 6. Click on the = key, press Enter on the keyboard, or press the = key on the keyboard—all give the total. The number 64 appears in the output. To subtract two, click on the minus (-) key and then the 2 key followed by the = key. The number 62 appears in the output. This means 62 hosts could be utilized.
3. Using the previously described process, determine the number of hosts if the following number of bits are used for host bits.

No. of Bits Used forHosts No. of Hosts
5 30 hosts
14 16382 hosts
24 16777214 host
10 1022 hosts
1. Using a similar technique as learned previously, determine what 10 to the 4th power equals.
Jawab:

Hasilnya adalah 9998

1. Close the Windows Calculator application.

Step 8: (Optional) Determine the network number and number of hosts based on subnet mask
1. Given the IP network address of 172.16.203.56 and a subnet mask of 255.255.248.0, determine the network portion of the address and calculate how many hosts can be created from host bits left.
2. Start by converting the 4 octets of the decimal IP address to binary and then convert the decimal subnet mask to binary. Remember to include leading zeros when converting to binary in order to make a total of 8 bits per octet.

Decimal IP addressand subnet mask Binary IP address and subnet mask
172.16.203.56 10101100.00010000.11001011.00111000
255.255.248.0 11111111.11111111.11111000.00000000
1. Align the 32 bits of the subnet mask to the 32 bits of the IP address and compare them. The bits in the IP address that align with the ones bits in the subnet mask represent the network number. What is the binary and decimal network number for this IP address? Determine the binary address first (include all 32 bits) and then convert it to decimal. Binary network address:
Jawab:

10101100.00010000.11001011.00111000
11111111.11111111.11111000.00000000



10101100.00010000.11001000.00000000

Decimal network address:
Jawab:

172.16.200.0
1. How many ones bits are in the subnet mask?
Jawab:

Subnetmask = 2n = 23=8
1. How many bits are left for host bits?
Jawab:

Host = 2n-2= 25-2= 30

1. How many hosts can be created with the bits left?
Jawab:

Host =2n-2= 211-2= 2046

Step 9: Reflection
1. List one other thing for which you might use the Windows Calculator scientific mode. It does not have to be related to networking.

Jawab: Windows Calculator dapat digunkan untuk operasi Matematika dan operasi Gerbang logika.

Tugas CCNA lab 4.2.3

Oleh: Rince Selvia Nola/06445
Lab 4.2.3 Tracing Internet Connectivity
Objectives
• • Use software that shows how data travels through the Internet.
• • Use the ping utility to test connectivity to a remote network.
• • Construct a visual map of connectivity from your network to a remote network.
Background / Preparation
In order to perform this lab, Internet connectivity is required. On a PC, open a web browser to ensure connectivity exists before beginning this lab. This lab has an optional first step of downloading and installing a free program that can be used to determine the path a packet takes through the Internet. This program may be free, but it also may be copyrighted. Also, it may be that you are not permitted on a campus computer to download and install software. Check with the instructor or student assistant if you are unsure. The following resources will be required:
1. • Windows-based computer with Internet connectivity
2. • Ability to download and install freeware software (optional)
3. • Access to the Run command
Step 1: (Optional) Download and install a free program
1. Open a search engine such as Google (www.google.com), Yahoo (www.yahoo.com), or Search (http://search.com).
2. Which words do you think would give you the best result if you are searching for a visual program that allows you to trace how data (a packet) travels through the Internet? Write your search words.Answere: www. google.com
3. Type the words you chose in the Search field. Locate and download the software and install it. Normally, the website has a link to the download site or you can click the words “Download” or “Download Now”. When you download any freeware, remember the location on the hard drive, flash drive, or disk media where you saved the program. Write down where the download is saved. Answere: my Dokuments in folder downloads.
4. What is the name of the program you installed? Answere: IDM (Internet Download Manager)
Step 2: Locate web sites
1. Using the search engine again, locate five businesses with a web server, which are located in a country different from your own.
2. Write the names of the five business web sites. Answere: toko online, bisnis online pilihan, bisnis online indonesia, beton market.
3. Using the search engine again, locate a business in your own country that has a web site that is accessible.
4. Write the URL of the web site. An example URL is www.cisco.com. Answere: www.bisnisonlineindonesia.com
Step 3: (Optional) Use downloaded visual trace route tool
1. Using the software you have downloaded and installed, use the tool to determine the path which the packet takes to reach one of the remote country destinations. Each tool normally allows you to type a URL. The program should either list or visually display the path taken by the packet.
2. How many hops does the packet take to get from your computer to the destination computer? Answere: over a maximum of 30 hops atau lebih dari 30 hops tampak dilayar ada 20 hops(jalur)
3. If your tool also provides time information, write down how long it took for the packet to reach the first hop? Answere:15 menit
4. Use the tool to determine the path to another foreign country site.
5. How many hops does the packet take to get from your computer to the destination computer? Answere: http://www.netlink.co.uk/users/itcentre/ lebih dari 30 hop(jalur yang dilintasinya) namun terlihat dilayar ada 17 hop yang dilalui.
6. Use the tool to determine the path to a web site in your own country. Yaitu: www.pemdapadang.com ada 30 hops.Was the time it took to reach a web site in your own country shorter or longer? Answere: longer
7. Try to think of an instance where the time it takes to reach a web server in your own country would be longer than it takes to reach another country’s web server? Answere: karena di Indonesia belum ada server yang besar sehingga pengiriman paket data harus melalui server Negara lain.
Step 4: Use the tracert command
1. Click the Start button, click the Run option, type cmd, and press Enter. An alternate way to get to the command prompt is to click Start > All Programs > Accessories > Command Prompt.
2. From the command prompt, type tracert and press Enter. Options that can be used with the tracert command are shown. Items shown in square brackets [ ] are optional. For example, the first option that can be used with the tracert command is –d. If someone was to type tracert –d www.cisco.com, then the command issued to the computer is to trace the route to www.cisco.com, but do not try to resolve IP addresses to names. The target_name parameter is mandatory (it does not have brackets around it) and it is replaced with the destination network. In the previous example of tracert –d www.cisco.com, www.cisco.com is the target_name.
3. Which tracert option would be used to designate that only 5 hops could be used to search for the device address on the destination network? Jawaban: 10.10.14.45, 172.20.11.82, 222.124.3.9, 203.208.131.89 dan 59.128.15.141
4. Write the full command that would be typed to trace a route to www.cisco.com and instruct the computer to not search for it after seven hops. Jawaban: tracert –d www.cisco.com
5. Using one of the remote country destination addresses (use the same address as the one you used with the visual tool if possible) use the tracert command to determine how many hops it takes to reach the remote web server. Write the number of hops and the destination. Jawaban:
6. The tracert command uses Internet Control Message Protocol (ICMP) echo request messages to determine the path to the final destination. The path displayed is a list of IP addresses assigned to routers that connect to one another to form the path. The ICMP packets contain a value called a Time To Live (TTL). The TTL value is 30 by default on a Microsoft-based PC and each router through which the packet passes, decrements that value by 1 before sending the packet on to the next router in the path. When the TTL value reaches 0, the router that has the packet sends an ICMP time exceeded message back to the source. The tracert command determines the path by sending the first ICMP echo request message with a TTL of 1 and then increases that TTL value by 1 until the target responds or the maximum number of hops is reached. The path is determined by examining the ICMP time exceed messages that are sent back by routers along the way and by the ICMP echo reply message that is returned from the destination. Routers that do not return the ICMP time exceed messages are shown by a row of asterisks (*).
7. How many hops does your tracert command show that the packet went through? Jawaban:
Step 5: Use the pathping command
1. A similar command that can be used on a Windows XP computer is pathping. This command combines the abilities of the tracert command with the ping command. From the command prompt, use the pathping command to determine the IP addresses of the routers used to create the packet path to another foreign country address. An example of the pathping command used to trace the path to Cisco is pathping www.cisco.com. Jawaban:
2. How many hops did the pathping command display to your remote destination? When do you think that you would ever use a tool like pathping or tracert?
Step 6: (Optional) Use the whois function
1. Some of the freeware tools include an option to perform a whois function. Whois is a separate program or integrated with a tool similar to tracert or pathping. It displays (and sometimes has a link) who owns the web link of either the destination URL (such as cisco.com) or any of the links along the path. Explore the freeware tool that you have downloaded and installed and determine if it has a whois function. If it does, use it to determine who owns the domain name of one of the previous destinations used.
2. Why would you want to use the whois function? Jawaban:
Step 7: Reflection
With a classmate, compare all of the commands used in this lab. Describe the purpose and benefit of each one. Which do you think is the most useful command? Jawaban:

Tugas CCNA lab 3.3.3

Oleh: Rince Selvia Nola/06445
Lab 3.3.3 Determine the MAC Address of a Host
Objective
• Determine the MAC address of a Windows XP computer on an Ethernet network using the ipconfig /all command.
• Access to the Run command.
Background/Preparation
Every computer on an Ethernet local network has a Media Access Control (MAC) address that is burned into the Network Interface Card (NIC). Computer MAC addresses are usually displayed as 6 sets of two hexadecimal numbers separated by dashes or colons. (example: 15-EF-A3-45-9B-57). The ipconfig /all command displays the computer MAC address. You may work individually or in teams. The following resources are required:
• • Windows XP workstation with at least one Ethernet network interface card (NIC)
Step 1: Open a Windows command prompt window
• From the Windows XP desktop, click Start then Run.
• Type cmd in the Run dialogue box then click OK.A Windows command prompt window opens.
Step 2: Use the ipconfig /all command
a. Enter the ipconfig /all command at the command prompt.
b. Press Enter. (Typical results are shown in the following figure, but your computer will display different information.)
Step 3: Locate the MAC
in the output from the ipconfig /all command
a. Use the table below to fill in the description of the Ethernet adapter and the Physical (MAC) Address:
Description Physical Address(es)
WAN Interface 00-53-45-00-00-00
Step 4: Reflection
a. Why might a computer have more than one mac address? Jawaban: karena mac memiliki pengaturan sendiri yang diberikan secara otomatis kepada koputer.
b. The sample output from the ipconfig /all command shown previously had only one MAC address. Suppose the output was from a computer that also had wireless Ethernet capability. How might the output change? Jawaban: perubahan ini dapat dilakukan secara otomatis saat PC tekkoneksi.
c. Try disconnecting the cable(s) to your network adapter(s) and use the ipconfig /all command again. What changes do you see? Does the MAC address still display? Will the MAC address ever change? Jawaban: ya. Perubahan pada mac dan IP addressnya.
d. What are other names for the MAC address? Jawaban: 192.168.245.199

Tugas CCNA lab 3.1.5

Oleh Rince Selvia Nola /06445
Lab 3.1.5 Building a Peer-to-Peer Network
Objectives
• • Design and build a simple peer-to-peer network using a crossover cable supplied by the instructor.
• • Verify connectivity between the peers using the ping command.
Background / Preparation
In this hands-on lab, you will plan and build a simple peer-to-peer network using two PCs and an Ethernet crossover cable. The following resources are required:
• • Two Window XP Professional PCs, each with an installed and functional Network Interface Card (NIC)
• • An Ethernet crossover cable
Step 1: Diagram the network
1. A network diagram is a map of the logical topology of the network. In the space below, sketch a simple peer-to-peer network connecting two PCs. Label one PC with IP address 192.168.1.1 and the other PC with IP address 192.168.1.2. Use labels to indicate connecting media and any necessary network devices.


Answere:
1. A simple network like the one you designed can use a hub or switch as a central connecting device, or the PCs may be directly connected. Which kind of cable is required for a direct Ethernet connection between the two PCs? Answere: Straight-through Cables
Step 2: Document the PCs
1. Check the computer name settings for each PC and make adjustments as necessary. For each PC, select Start and Control Panel. Double-click the System icon, then click the Computer Name tab. Write down the computer name that is displayed following Full computer name:
PC1 Name Computer 1
PC2 Name Computer 2
1. Check to see if the two PCs have the same name. If they do, change the name of one PC by clicking the Change button, typing a new name in the Computer name field, then clicking OK.
2. Click OK to close the System Properties window.
3. Why is it important that each PC on a network have a unique name? Answere: because if there are the same name of computer make the failed connections, and this is the rules of connections.
Step 3: Connect the Ethernet cable
1. Use the Ethernet crossover cable provided by the instructor. Plug one end of the cable into the Ethernet NIC of PC1.
2. Plug the other end of the cable into the Ethernet NIC of PC2. As you insert the cable, you should hear a click which indicates that the cable connector is properly inserted into the port.
Step 4: Verify physical connectivity
1. After the Ethernet crossover cable is connected to both PCs, take a close look at each Ethernet port. A light (usually green or amber) indicates that physical connectivity has been established between the two NICs. Try unplugging the cable from one PC then reconnecting it to verify that the light goes off then back on.
2. Go to the Control Panel, double click the Network Connections icon, and confirm that the local area connection is established. The following figure shows an active local area connection. If physical connectivity problems exist, you will see a red X over the Local Area Connection icon with the words Network cable unplugged.
3. If the Local Area Connection does not indicate that it is connected, troubleshoot by repeating Steps 3 and 4. You may also want to ask your instructor to confirm that you are using an Ethernet crossover cable.
Step 5: Configure IP settings
1. Configure the logical addresses for the two PCs so that they are able to communicate using TCP/IP. On one of the PCs, go to the Control Panel, double click the Network Connections icon, and then right click the connected Local Area Connection icon. Choose Properties from the pull-down menu.
2. Using the scroll bar in the Local Area Connection Properties window, scroll down to highlight Internet Protocol (TCP/IP). Click the Properties button.
3. Select the Use the following IP address radio button and enter the following information:
IP Address 192.168.1.1 Kelas C
Subnet Mask 255.255.255.0 Subnet mask default kelas C
1. Click OK, which will close the Internet Protocol (TCP/IP) Properties window. Click the Close button to exit the Local Area Connection Properties window.
2. Repeat steps 5a – 5d for the second PC using the following information:
IP Address 192.168.1.1
Subnet Mask 255.255.255.0
Step 6: Verify IP connectivity between the two PCs
NOTE: To test TCP/IP connectivity between the PCs, Windows Firewall must be disabled temporarily on both PCs. Windows Firewall should be re-enabled after the tests have been completed.
1. On PC1, on the Windows XP desktop, click Start. From the Start menu, select Control Panel, and double-click Network Connections.
2. Right-click the Local Area Connection icon and select Properties. Click the Advanced tab. Locate and click the Settings button.
3. Make a note of whether the firewall settings are ENABLED (ON) for the Ethernet port or DISABLED (OFF) for the Ethernet port.
4. If the firewall settings are enabled, click the Off (not recommended) radio button to disable thefirewall. The setting will be re-enabled in a later step. Click OK in this dialog box and the following to apply this setting.
5. Now that the two PCs are physically connected and configured correctly with IP addresses, we need to make sure they communicate with each other. The ping command is a simple way to accomplish this task. The ping command is included with the Windows XP operating system.
6. On PC1, go to Start, then Run. Type cmd, and then click OK. A Windows command prompt window will appear as shown in the figure below.
7. At the > prompt, type ping 192.168.1.2 and press Enter. A successful ping will verify the IP connectivity. It should produce results similar to those shown in here.
8. Repeat Steps 6a-6c on the second PC. The second PC will ping 192.168.1.1.
9. Close the Windows command prompt window on both PCs.
Step 7: Verify connectivity using My Network Places
1. A PC can share its resources with other PCs on the network. PCs with shared resources should be visible through My Network Places. On PC1, go to Start, click My Network Places, and then click View workgroup computers in the left panel.
2. Do you see an icon for the other PC in your peer-to-peer network? Answere: yes, I do.
3. What is the name of the other PC? Answere: à Cisco 27 and Cisco 28.
4. Is it the same name you recorded in Step 2? Answere: No, it is.
5. Perform Step 7a on the second PC.
6. Close any open windows.
Step 8: (Optional – Use only if the Firewall was originally ENABLED) Re-enable the firewall
1. If you disabled the Windows Firewall in Step 6, click Start, select Control Panel, and open the Network Connections control panel.
2. Right-click the Ethernet network connection icon and select Properties. Click the Advanced tab. Locate and click Settings.
3. If the firewall settings are disabled (and they were enabled before this lab began), click the On radio

tugas ccna lab 1.3.3

Oleh Rince Selvia Nola_06445/2008
Lab 1.3.3 Determining the Screen Resolution of a Computer
Objectives
Determine the current screen resolution of a PC monitor.
Determine the maximum resolution for the highest color quality.
Calculate the number of pixels needed for resolution settings.
Identify the type of monitor and graphics card installed.
Background / Preparation
The resolution of a monitor determines the quality of the screen display. The resolution is determined by the number of horizontal and vertical picture elements (pixels) that are used to produce the image on the monitor. The number of pixels is typically predefined by the manufacturers of graphics cards and PC monitors. The highest number of pixels that a monitor and graphics card can support is referred to as maximum resolution. An example of maximum resolution is 1280 x1024, which means the display is composed of 1280 horizontal pixels and 1024 vertical pixels. The higher the resolution is set, the sharper the display image. The maximum resolution of a PC monitor and the number of colors the monitor can display are determined by two factors:
• Capability of the monitor
• Capability of the graphics card, especially the amount of onboard memory
The following resources are required:
• Computer with Windows XP installed
Step 1: Determine the current screen resolution
To view the current screen resolution and color quality settings, right-click on any empty space on the desktop and select Properties from the context menu. In the Display Properties window, select the Settings tab.
You can also access Display Properties by opening the Control Panel and clicking the Display icon.
Use the Display Properties Settings tab to record the current settings on your PC: The screen resolution is (H by V) Answere: Horizontal The horizontal resolution is: 1024, The vertical resolution is: 768, The color quality value is: 32 bit
Step 2: Determine the maximum resolution for the highest color quality
The slide bar under Screen resolution is used to configure the desired resolution.
a. Move the slide bar to see the range of screen resolutions that are available on your PC. (The range is determined by the operating system when it identifies the display card and the monitor.)
b. Use the Display Properties Settings tab to fill out the following table for the current settings on your PC: Answere:
Minimum screen resolution 800×600 pixels
Maximum screen resolutio 1280×800 pixels
Available color quality settings medium (16 bit) dan highest 932 bit)
Step 3: Calculate the pixels for current and maximum resolution settings
The display on the screen consists of rows of pixels. The number of pixels in each row is the horizontal resolution. The number of rows is the vertical resolution. To determine the total number of pixels in a screen resolution, you multiply the horizontal resolution by the vertical resolution. For example, if the current resolution is 1280 x 1024, the total number of pixels is 1280 times 1024, or 1,310,720. Answere:
Calculate the total number of pixels for the lowest resolution: 600 pixels______________________
Calculate the total number of pixels for the maximum resolution: 1280 pixels____________________
Step 4: Identify the type of graphics card installed
You can get detailed information about the graphics card (also called the display adapter) in the Display Properties screen.
a. In the Display Properties screen, click the Advanced button.
b. Select the Adapter tab.
Use the information found in the Adapter tab to complete the following table:
Answere:Graphics card manufacturer and model (Adapter Type)Graphics memory on card (Memory Size) Chip type, DAC Type, memory Size, adapter string, Bios infoemation128 MB, but this is based on speck of the each of the computer.

Step 5: Identify the type of monitor and available refresh rates
You can get detailed information about the monitor in the Display Properties screen. The screen refresh rate determines the number of times per second the screen is illuminated or redrawn. A refresh rate of 60 hertz means the screen is illuminated 60 times per second. Higher refresh rates provide less screen flicker, which reduces eye strain, but may adversely affect the monitor. You should set the refresh rate to the highest level the monitor can safely support.
Click on the Monitor tab to see the monitor type and current refresh rate.
Use the information found in the Monitor tab to complete the following table: Answere:Monitor type Plug and Play Monitor and NVIDIA GeForce Go 7400
Supported refresh rates 60 Hert

3. What can occur if you select a refresh rate that is higher than what the monitor can safely display? Answere: Can be damage to hadware.

Kamis, 14 Oktober 2010

quiz CCNA capter 6


Jawaban quiz CCNA chapter 6
1.      The part of message that is missing is retransmitted

2.       DNS    =>  A user request a website by typping in it’s name
E-mail  => Internet protocol enable user to send the message to each other over the  internet
File transfer =>  A user upload new to his or her website
DHCP   => A workstation gets its ip address automaticly
Web service => A user types in a URL and a page loads in the client browser
Telnet => A network technician logs into a workstation from the remote site

3.      DNS server => translate a domain name to an ip address
Commond DNS port number => 53
Domain name => cisco.com

4.      DNS

5.      Web server => host a web page
Web client => request a web page
HTML => used to create web page
HTTPS => secure protocol that uses port 443
HTTP=> protocol commonly used by a web browser

6.      Protocol used to process e-mail
·         SMTP
·         IMAP4
·         POP3
7.      VoIP

8.      DHCP => 68
DNS=> 53
FTP data=> 20
HTTP=> 80
HTTPS=> 443
POP3=> 110
SNMP=161
Telnet=> 23

9.       FTP, POP3, , DHCP

Rabu, 13 Oktober 2010

CCNA DISCOVEY 1.6

CCNA Discovery 1 Module 6 Exam Answers Version 4.0
1. A user types www.cisco.com into a web browser address textbox. What does www.cisco.com represent?
• the IP address of a web server
• a physical network address
• the closest router interface to the source
• the source IP address in the data transmission

2. What type of server would use IMAP?
• DNS
• DHCP
• e-mail
• FTP
• Telnet
• web

3. Which type of server would most likely be used first by a network client in a corporate environment?
•DNS
• DHCP
• e-mail
• FTP
• Telnet
• web

4. Which protocol is used by FTP to transfer files over the Internet?
• TCP
• SMTP
• UDP
• SNMP

5. Which protocols are TCP/IP application layer protocols? (Choose two.)
• UDP
• FTP
• IP
• SMTP
• TCP

6. Which of the following are layers of the TCP/IP model? (Choose three.)
• Application
• Physical
• Internet
• Network Access

• Presentation

7. You are creating a network-based video game. What influences your decision about which transport protocol to use for the application?
• UDP will not disrupt the game to retransmit dropped packets.
• TCP provides extra acknowledgements that will ensure smooth video delivery.
• Both TCP and UDP can be used simultaneously to ensure speed and guaranteed delivery.
• Both TCP and UDP may slow transmission and disrupt game operation, so no transport protocol should be used.

8. Whenever e-mail clients send letters, what device is used to translate the domain names into their associated IP addresses?
• Uniform Resource Locator
• Network redirector server
• SNMP server
• DNS server

9. Which application is most likely used to translate www.cisco.com to 198.133.219.25?
• DHCP
• DNS
• FTP
• HTTP
• POP
• SMTP

10. Refer to the graphic. Which protocol is used to access this website?
• IM
• FTP
• HTTP
• SNMP
• VoIP

11. Which port number is used by SMTP?
• 20
• 21
• 25
• 26
• 110

12. Which protocol is used by e-mail servers to communicate with each other?
• FTP
• HTTP
• TFTP
• SMTP
• POP
• SNMP

13. What client software enables logged in users to communicate with other logged in users in real time?
• blog
• e-mail
• web mail
• instant messaging

14. An Internet server is running both FTP and HTTP services. How does the server know which of these applications should handle an incoming segment?
• The packet header identifies it as an HTTP or FTP packet.
• The data in the segment is specially formatted for either HTTP or FTP.
• The segment destination port number identifies the application that should handle it.
• The source port number is associated with one of these well known server applications.

15. What term is used to describe how TCP/IP protocols are layered and interact to format, address, and transmit information across a network?
• protocol hierarchy
• protocol modeling
• protocol stack
• protocol layering

16. What three items are contained in an Ethernet frame? (Choose three.)
• source IP address
• source MAC address
• destination IP address
• destination MAC address
• error-checking information


17. What information is contained in an IP header?
• source and destination IP addresses
• source and destination MAC addresses
• only destination IP and MAC addresses
• both source and destination IP and MAC addresses

18. Cabling issues are associated with which OSI layer?
• 4
• 2
• 1
• 3

19. A device receives an Ethernet frame and recognizes the MAC address as its own. What does the device do to the message to get to the encapsulated data?
• removes the IP header
• removes the TCP header
• passes data to the application layer
• removes the Ethernet header and trailer

20. A client has decoded a frame and started the de-encapsulation process. In which order does the de-encapsulation process occur?
• 1) remove IP header
2) remove Ethernet header and trailer
3) remove TCP header
4) pass data to the application
• 1) add TCP header to data
2) add an IP header
3) add frame header and trailer
4) encode the frame into bits
• 1) remove Ethernet header and trailer
2) remove IP header
3) remove TCP header

4) pass data to the application

• 1) add TCP header to data
2) add Ethernet header and trailer
3) add an IP header
4) encode the frame into bits

21. What is an advantage of the use of layers in the OSI reference model?
• It breaks network communications into larger parts.
• It increases complexity.
• It prevents changes in one layer from affecting other layers.
• It requires the use of single-vendor equipment for hardware and software communications.

22. What is the correct order of the layers of the OSI reference model, starting at the lowest layer and working up the model?
• data link, physical, transport, network, presentation, session, application
• physical, data link, network, session, transport, presentation, application
• physical, data link, network, transport, presentation, session, application
• physical, data link, network, transport, session, presentation, application

• application, session, presentation, transport, data link, network, physical