Quick notes on TCP/IP that I seem forgetting all the time. 

Common Terms - 

  • OSI vs TCP-IP & layers
  • hub, switch & router
  • ARP vs DHCP

What is "Segment"?

"Segment" is a PDU (Protocol Data Unit) of Transport layer of OSI model. It is the data unit of transport layer.

What is the PDU of "Network layer" and "Data link layer".

PDU for Network Layer aka IP is: "Packet" and PDU for Data Link Layer aka Ethernet is :"Frame"
PDU for TCP is segments and for UDP is datagram.

*** TCP is a stream protocol and so do not see data as packets. IP layer beneath it combines the fragmented packets. 

You have one IP: 192.168.10.29. In which layer this IP works?

Network layer.

DNS uses which protocol? Why?

DNS uses both TCP or UDP or both. UDP can handle only 512bytes. If data size is withing 512 bytes UDP is used, otherwise, TCP is used.

Which layer is closer to the user?

Layer 7 or Application layer is closer to the user.

Differentiate between forward lookup and reverse lookup in DNS?

  • Forward lookup is: name-to-address,
  • Reverse lookup is: address-to-name.

What are the difference between TCP and UDP?
  • TCP: Connection oriented protocol, acknowledged one, Point to point communication.
  • UDP: Connection less protocol, unreliable, less traffic

What is IPSec?

IPSec is "Internet Protocol Security". It is a suite of protocols for securing Internet Protocol(IP) communications.

What is the difference between flow control and error control?

  • Flow control: adjust and confirm data flow rate for successful transmission.
  • Error Control: a way to recover corrupted data .

What is the responsibilities of Network Layer?

  • Logical addressing
  • Best effort delivery

Data link layer is sub-divide into how many groups?

  • 2 sub-divided groups: MAC Layer and LLC layer
  • MAC: Media Access Control/Medium Access Control
  • LLC: Logical Link Control

What is the port number of Telnet and DNS?

Telnet = 23 and DNS = 53

What is the port number of ftp(data) and ftp?

ftp(data) = 20 and ftp=21

ARP resolves what? MAC Address or IP?

ARP stands for Address Resolution Protocol. It helps to find the hardware address or MAC address when IP address is known.

Which layer of OSI is responsible for end-to-end communication?

Transport layer.

Why we have to use router?

To communicate several networks, routers are used. Routers have both broadcast domain and collision domain.

RARP resolves what? Address or IP?

RARP stands for Reverse Address Resolution Protocol. It helps to find the IP address when physical or hardware or MAC address is known.

What is OSI model?

OSI model is a reference model containing 7 layers such as physical layer, data link layer, network layer, transport layer, session layer, presentation layer and application layer.

What is TCP/IP model?

TCP/IP model is an implementation of OSI reference model. It has five layers. They are: Network layer, Internet layer, Transport layer and Application layer.

What is the full form of OSI and TCP/IP model?

  • OSI stands for = Open Systems Interconnection (OSI) model
  • TCP/IP stands for = Transmission Control Protocol/ Internet Protocol

What are the differences between OSI and TCP/IP model?

Important differences are:

OSI is a reference model and TCP/IP is an implementation of OSI model.

OSI has 7 layers whereas TCP/IP has only 4 layers The upper 3 layers of the OSI model is combined on the TCP/IP model.

OSI has: physical layer, data link layer, network layer, transport layer, session layer, presentation layer and application layer TCP/IP has : Network layer, Internet layer, transport layer and application layer.

What are the differences among router, switch, bridge and hub?

All of them are devices and are used in network. Their differences are:

  • Router: Layer 3 device, can work on physical, data and network layer.
  • Switch: Layer 2 device, can work on data link layer
  • Bridge: Layer 2 device, can work on data link layer.
  • Hub: Layer 1device, just a multi-port repeater and works on physical layer

Switch operates on which layer of OSI model?

Normal switch operates at Layer 2 i.e. data link layer and Intelligent switch operates at Layer 3 i.e. network layer.

Name 4 example of application layer?

DNS, FTP, Telnet, http

How does ARP response the request?

ARP sents the request in broadcast, response is unicast

Error control is down in which layer?

Layer 4

Name the 2 sublayers of data link layer.

MAC sublayer and LLC sublayer

How is data send by IP layer?

IP layer PDU is "packet". So, data is send as packet.

TCP/IP has how many layers?

5 layers: Network layer, Internet layer, Transport layer and Application layer.

What are the differences of MAC sublayer and LLC sublayer?

In fact, Data Link layer has 2 sublayes: MAC sublayer & LLC sublayer.

  • MAC sublayer(802.3): defines how to transmit data on physical layer
  • LLC sublayer(802.2): responsible for identifying different protocol logically & encapsulate them.

Can I determine remote machines MAC Address


No, You need access to execute command on remote machine like psexec. You can try using trace route to see the last gw host.   

Explain in detail the process of sending a piece of information from a host on subnet A to a host on subnet B.
What I'm looking for:

Some knowledge of the OSI model
The concept of layers, layer units, and encapsulation.
The concept of MTU/fragmentation (not required, but nice if they know it)
The address resolution process at layer 3 (DNS)
The determination of local vs. non-local addresses (subnet masks/what are subnets/when to use a default gateway)
The address resolution process at layer 2 (ARP)
At least a vague understanding of layer 1 and associated issues

What is the difference between TCP and UDP? When would you use each of them?

What I'm looking for: someone who not only parrots the "connectionless vs. connection-oriented" idea, but can demonstrate they understand the reasons you might choose one or the other.

What is a traceroute, and how does it work?

What I'm looking for: understanding of ICMP, TTL, and routing hops. Bonus points if they also know UDP trace routing.

What is IPv6, and how does it differ from IPv4?

What I'm looking for: basic understanding of the IPv6 address structure, differences such as ARP v. ND, and any associated knowledge of current IPv6 'state of the internet'.

What is QoS? How does it work? Where would you apply it? When is it enforced?

What I'm looking for: knowledge of traffic prioritization schemes, at least a vague understanding of classification levels at the header level, understanding of judicious application to time and latency sensitive protocols, and knowledge of contention vs. non-contention

What is an MX record? An A record? A PTR?

What is NAT? Where would you use it? How does it work? What are some limitations? 

https://technet.microsoft.com/en-us/library/Gg250710%28v=WS.10%29.aspx?f=255&MSPPError=-2147217396