Networking & Protocols

DDoS Bottlenecks and Mitigation

Evidence: Supplementary

Revision: Available · 4 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Supplementary booking-service scenarios distinguish bandwidth, protocol and application exhaustion; mitigation must match the bottleneck and avoid unnecessary denial to legitimate users.

• Distributed Denial of Service (DDoS) — Supplementary Study Guide explanation

Recorded evidence

• Supplementary booking-service scenarios distinguish bandwidth, protocol and application exhaustion; mitigation must match the bottleneck and avoid unnecessary denial to legitimate users.

• Distributed Denial of Service (DDoS) — Supplementary Study Guide explanation · The idea; Worked example: a fictional online booking service; A. Network bandwidth bottleneck; B. Connection or protocol exhaustion; C. Application-layer exhaustion; Mitigation; Why layers matter; Why blocking one address may not be enough; Revision takeaway

Reviewed 2026-09-23. Reviewed against approved Sessions 1–2 and Study Buddy Core Concepts. Scenarios are fictional educational applications, not completed practical work. This concept has not yet been individually verified against the Security+ SY0-701 objectives or any other exam syllabus.

IPv4 DHCP configuration

Evidence: Classroom-supported

Revision: Available · 3 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• IPv4 DHCP uses Discover, Offer, Request and Acknowledge to provide IP configuration.
• DHCP is an application-layer protocol using UDP server port 67 and client port 68; broadcasts and relay agents support initial configuration.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• IPv4 DHCP uses Discover, Offer, Request and Acknowledge to provide IP configuration.
• DHCP is an application-layer protocol using UDP server port 67 and client port 68; broadcasts and relay agents support initial configuration.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Default gateways and NAT/PAT

Evidence: Classroom-supported

Revision: Available · 3 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• A default gateway is the next hop used when no more specific route exists.
• NAT/PAT translates addresses and ports so private devices can share a public-facing address; translation is not a firewall.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• A default gateway is the next hop used when no more specific route exists.
• NAT/PAT translates addresses and ports so private devices can share a public-facing address; translation is not a firewall.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

HTTPS Connection Establishment and TLS

Evidence: Mixed

Revision: Available · 3 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Classroom (Session 5): HTTPS is HTTP secured with TLS; the simplified sequence for an HTTPS connection over TCP is resolving the destination’s IP address, using DNS when necessary, establishing a TCP connection, typically to destination port 443, performing a TLS handshake that authenticates the server and establishes cryptographic keys, and then exchanging encrypted HTTP requests and responses.
• Classroom (Session 5): TCP establishes a connection with the three-way handshake SYN, SYN-ACK and ACK.
• Classroom (Session 5): HTTP defines web requests and responses, while TLS provides encryption, integrity protection and authentication; modern HTTP/3 uses QUIC over UDP rather than TCP.
• Supplementary: the sequence describes a typical fresh connection, not a rule for every request; a cached DNS answer, a reused connection or HTTP/3 can change which steps occur, and HTTP/3 over QUIC has no preceding TCP three-way handshake.
• Supplementary: TLS protects application data in transit for confidentiality and integrity, and authenticates the server only when certificate validation for the hostname and the handshake’s cryptographic proof succeed.
• Supplementary: TLS does not by itself make a website or its operator trustworthy, protect data from a compromised browser or server, or hide IP addresses, timing, traffic volume or ordinary DNS lookups.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record
• HTTPS: TCP, TLS and web communication — Supplementary Study Guide explanation

Recorded evidence

• Classroom (Session 5): HTTPS is HTTP secured with TLS; the simplified sequence for an HTTPS connection over TCP is resolving the destination’s IP address, using DNS when necessary, establishing a TCP connection, typically to destination port 443, performing a TLS handshake that authenticates the server and establishes cryptographic keys, and then exchanging encrypted HTTP requests and responses.
• Classroom (Session 5): TCP establishes a connection with the three-way handshake SYN, SYN-ACK and ACK.
• Classroom (Session 5): HTTP defines web requests and responses, while TLS provides encryption, integrity protection and authentication; modern HTTP/3 uses QUIC over UDP rather than TCP.
• Supplementary: the sequence describes a typical fresh connection, not a rule for every request; a cached DNS answer, a reused connection or HTTP/3 can change which steps occur, and HTTP/3 over QUIC has no preceding TCP three-way handshake.
• Supplementary: TLS protects application data in transit for confidentiality and integrity, and authenticates the server only when certificate validation for the hostname and the handshake’s cryptographic proof succeed.
• Supplementary: TLS does not by itself make a website or its operator trustworthy, protect data from a compromised browser or server, or hide IP addresses, timing, traffic volume or ordinary DNS lookups.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding
• HTTPS: TCP, TLS and web communication — Supplementary Study Guide explanation · Start with a website address; 1. Find the server with DNS; 2. Establish TCP transport; 3. Negotiate TLS security; 4. Send the protected HTTP request; 5. Receive and render the response; What HTTPS does not hide; HTTP/3 uses a different transport sequence

Reviewed 2026-09-24. Reviewed against the Session 5 Learning Log (How HTTPS works; Protocols, ports and sockets) and the Lesson 3.12 Sources and scope section. Scope statements are labelled Classroom or Supplementary. No practical competence, completed assessment or exam alignment is implied.

IP addressing and private ranges

Evidence: Classroom-supported

Revision: Available · 3 questions · 3 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• IPv4 uses 32-bit addresses and RFC 1918 blocks 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16; modern addressing uses CIDR.
• IPv6 uses 128-bit addresses, has no Class A/B/C, and uses Neighbour Discovery rather than ARP.
• IPv6 address types include global unicast, unique local, link-local, loopback and multicast.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• IPv4 uses 32-bit addresses and RFC 1918 blocks 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16; modern addressing uses CIDR.
• IPv6 uses 128-bit addresses, has no Class A/B/C, and uses Neighbour Discovery rather than ARP.
• IPv6 address types include global unicast, unique local, link-local, loopback and multicast.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Detailed TCP/UDP, ports and subnetting

Evidence: Partial

Revision: Available · 4 questions · 3 flashcards

Exam relevance

• CPSA · B1 · direct

  This concept relates to the cited objective. Course coverage and authored revision do not establish full objective coverage.

• CPIA · B1 · direct

  This concept relates to the cited objective. Course coverage and authored revision do not establish full objective coverage.

Verified for CPSA: 0 of 4 questions and 0 of 3 flashcards. The mapping does not verify the others.

Verified for CPIA: 0 of 4 questions and 0 of 3 flashcards. The mapping does not verify the others.

Reviewed revision scope

• TCP and UDP use logical 16-bit ports, distinct from physical switch ports; common service ports and the three port ranges were taught.
• Sockets are software endpoints; TCP connections use endpoint addresses, ports and protocol, and start with SYN, SYN-ACK and ACK.
• HTTPS uses HTTP with TLS; HTTP/1.1 and HTTP/2 commonly use TCP 443, while HTTP/3 uses QUIC over UDP 443.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• TCP and UDP use logical 16-bit ports, distinct from physical switch ports; common service ports and the three port ranges were taught.
• Sockets are software endpoints; TCP connections use endpoint addresses, ports and protocol, and start with SYN, SYN-ACK and ACK.
• HTTPS uses HTTP with TLS; HTTP/1.1 and HTTP/2 commonly use TCP 443, while HTTP/3 uses QUIC over UDP 443.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Basic LAN roles

Evidence: Partial

Revision: Available · 1 question · 1 flashcard

Exam relevance

• CPSA · B2 · supporting

  This concept relates to the cited objective. Course coverage and authored revision do not establish full objective coverage.

• CPIA · B2 · supporting

  This concept relates to the cited objective. Course coverage and authored revision do not establish full objective coverage.

Verified for CPSA: 0 of 1 question and 0 of 1 flashcard. The mapping does not verify the others.

Verified for CPIA: 0 of 1 question and 0 of 1 flashcard. The mapping does not verify the others.

Reviewed revision scope

• Switches connect devices within a local network.
• Routers connect the private network to external networks.

• Study Buddy — 9 September 2026 — Study Buddy session (supplementary)
• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• Switches connect devices within a local network.
• Routers connect the private network to external networks.

• Study Buddy — 9 September 2026 — Study Buddy session (supplementary) · What We Are Trying to Protect; Learning Pathway; Switch Connections / Trunking; Virtual Machines
• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

MAC addressing and IPv4 ARP

Evidence: Classroom-supported

Revision: Available · 3 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• MAC addresses support local frame delivery; conventional Ethernet MAC addresses are 48 bits and may be locally administered, randomised or spoofed.
• ARP resolves IPv4 to link-layer addressing with ordinary broadcast requests and normally unicast replies; remote destinations use the next-hop MAC.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• MAC addresses support local frame delivery; conventional Ethernet MAC addresses are 48 bits and may be locally administered, randomised or spoofed.
• ARP resolves IPv4 to link-layer addressing with ordinary broadcast requests and normally unicast replies; remote destinations use the next-hop MAC.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

MAC flooding and switch port security

Evidence: Classroom-supported

Revision: Available · 4 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Switches learn source MAC addresses; known destinations use the learned port while unknown unicast may flood eligible ports in the VLAN.
• MAC table exhaustion may increase unknown unicast flooding; port security limits and monitoring help defend against abusive learning.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• Switches learn source MAC addresses; known destinations use the learned port while unknown unicast may flood eligible ports in the VLAN.
• MAC table exhaustion may increase unknown unicast flooding; port security limits and monitoring help defend against abusive learning.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Network components and compatible protocols

Evidence: Classroom-supported

Revision: Available · 2 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Networks use compatible protocols to exchange data; their basic elements are applications, protocols, NICs and transmission media. Hosts are nodes, and NICs provide Physical and Data Link functions.
• Networks are a major attack surface, but cyberattacks can occur without a network.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• Networks use compatible protocols to exchange data; their basic elements are applications, protocols, NICs and transmission media. Hosts are nodes, and NICs provide Physical and Data Link functions.
• Networks are a major attack surface, but cyberattacks can occur without a network.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Network scope and traffic delivery

Evidence: Classroom-supported

Revision: Available · 3 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• PAN, LAN, MAN and WAN describe general geographical scope without fixed distance limits.
• Unicast targets one recipient, multicast a selected group, and broadcast a local broadcast domain.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• PAN, LAN, MAN and WAN describe general geographical scope without fixed distance limits.
• Unicast targets one recipient, multicast a selected group, and broadcast a local broadcast domain.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Binary, Decimal and Hexadecimal

Evidence: Mixed

Revision: Available · 4 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Study Buddy (23 September): decimal place values, the eight binary place values of an octet from 128 down to 1, and hexadecimal digits in which A = 10 and F = 15.
• Classroom (Session 5): MAC addresses are written in hexadecimal.
• Supplementary: converting an octet between binary and decimal, reading short hexadecimal values, and one hexadecimal digit representing exactly four bits.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary)
• Session 5: Networking Fundamentals — Part 1 — Classroom session record
• Binary, Decimal and Hexadecimal — Supplementary Study Guide explanation

Recorded evidence

• Study Buddy (23 September): decimal place values, the eight binary place values of an octet from 128 down to 1, and hexadecimal digits in which A = 10 and F = 15.
• Classroom (Session 5): MAC addresses are written in hexadecimal.
• Supplementary: converting an octet between binary and decimal, reading short hexadecimal values, and one hexadecimal digit representing exactly four bits.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary) · Number systems: decimal, binary and hexadecimal; IPv4 and IPv6 addresses; Historical classful addressing; CIDR, subnet masks and the network address; Routing between two networks; VyOS routing demonstration; Windows and Ubuntu demonstrations
• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding
• Binary, Decimal and Hexadecimal — Supplementary Study Guide explanation · Place value: the idea behind every number system; Binary: counting with two digits; Hexadecimal: sixteen digits

Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.

OSI layers and encapsulation

Evidence: Classroom-supported

Revision: Available · 3 questions · 2 flashcards

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• The seven OSI layers run from Application to Physical; the mnemonic is All Players Should Take New Defensive Positions.
• OSI is a conceptual model; encapsulation adds applicable control information and protocols may span layers.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record

Recorded evidence

• The seven OSI layers run from Application to Physical; the mnemonic is All Players Should Take New Defensive Positions.
• OSI is a conceptual model; encapsulation adds applicable control information and protocols may span layers.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding

Reviewed 2026-09-21. Reviewed against the approved Session 5 Learning Log. Tutor-led concepts only; no practical assessment or verified exam alignment is implied.

Port Security: Violation Actions and Limits

Evidence: Mixed

Revision: Available · 3 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Classroom (Session 5): on supported managed switches, port security can restrict the number of MAC addresses learned on an access port and define an action when that limit is exceeded; monitoring abnormal MAC address learning also helps.
• Supplementary: violation actions trade security against availability: dropping offending traffic keeps legitimate devices working but may go unnoticed, dropping and recording allows investigation if someone reviews the records, and disabling the port stops everything from it, including legitimate devices, and can be triggered deliberately to cause disruption.
• Supplementary: a port limit caps how many MAC address table entries that port can add but does not guarantee capacity across the whole switch; port security checks addresses rather than identities, so a copied MAC address can be accepted, and it does not stop ARP poisoning or protect the content of traffic.
• Supplementary: a sudden jump in learned addresses on one port, a full MAC address table, violations or rising flooded traffic need investigating in context, because legitimate equipment such as a new switch or a virtualisation host can cause them too.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record
• MAC Flooding and Port Security — Supplementary Study Guide explanation

Recorded evidence

• Classroom (Session 5): on supported managed switches, port security can restrict the number of MAC addresses learned on an access port and define an action when that limit is exceeded; monitoring abnormal MAC address learning also helps.
• Supplementary: violation actions trade security against availability: dropping offending traffic keeps legitimate devices working but may go unnoticed, dropping and recording allows investigation if someone reviews the records, and disabling the port stops everything from it, including legitimate devices, and can be triggered deliberately to cause disruption.
• Supplementary: a port limit caps how many MAC address table entries that port can add but does not guarantee capacity across the whole switch; port security checks addresses rather than identities, so a copied MAC address can be accepted, and it does not stop ARP poisoning or protect the content of traffic.
• Supplementary: a sudden jump in learned addresses on one port, a full MAC address table, violations or rising flooded traffic need investigating in context, because legitimate equipment such as a new switch or a virtualisation host can cause them too.

• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding
• MAC Flooding and Port Security — Supplementary Study Guide explanation · How port security works; Choosing a violation action; What port security does not do; Detecting MAC flooding

Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.

Routed Delivery, Next Hops and ARP

Evidence: Mixed

Revision: Available · 2 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Study Buddy (23 September): a hand-drawn example joined PC1 at 10.1.16.1/24 and PC2 at 10.1.15.8/24 through a router; the router’s interface addresses and any ping result were not recorded, so the drawing is not a configured or tested network.
• Study Buddy (23 September): the whiteboard linked an IPv4 address, a MAC address and the ARP cache, and the meeting chat summarised that a switch connects devices within a network while a router connects different networks.
• Classroom (Session 5): traffic to a destination on the same subnet can normally be delivered locally, traffic to a remote destination is forwarded towards the default gateway, and for a remote destination the sender typically resolves the MAC address of its next-hop router.
• Supplementary: the sender uses ARP to resolve the next-hop router’s own IPv4 address on the local network; without NAT the packet’s destination IP address stays the same across the routed path, while each link carries it in a new frame addressed to that link’s next hop.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary)
• Session 5: Networking Fundamentals — Part 1 — Classroom session record
• IP forwarding, default gateways and NAT/PAT — Supplementary Study Guide explanation

Recorded evidence

• Study Buddy (23 September): a hand-drawn example joined PC1 at 10.1.16.1/24 and PC2 at 10.1.15.8/24 through a router; the router’s interface addresses and any ping result were not recorded, so the drawing is not a configured or tested network.
• Study Buddy (23 September): the whiteboard linked an IPv4 address, a MAC address and the ARP cache, and the meeting chat summarised that a switch connects devices within a network while a router connects different networks.
• Classroom (Session 5): traffic to a destination on the same subnet can normally be delivered locally, traffic to a remote destination is forwarded towards the default gateway, and for a remote destination the sender typically resolves the MAC address of its next-hop router.
• Supplementary: the sender uses ARP to resolve the next-hop router’s own IPv4 address on the local network; without NAT the packet’s destination IP address stays the same across the routed path, while each link carries it in a new frame addressed to that link’s next hop.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary) · Number systems: decimal, binary and hexadecimal; IPv4 and IPv6 addresses; Historical classful addressing; CIDR, subnet masks and the network address; Routing between two networks; VyOS routing demonstration; Windows and Ubuntu demonstrations
• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding
• IP forwarding, default gateways and NAT/PAT — Supplementary Study Guide explanation · Two networks need a router; Choose local delivery or a next hop; From the laptop to the gateway

Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.

Routing Tables and Network-Configuration Output

Evidence: Mixed

Revision: Available · 3 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Study Buddy (23 September): the instructor demonstrated a VyOS routing table showing connected routes for 10.1.16.0/24 and 10.1.24.0/24, a /32 route and 127.0.0.0/8 on the loopback interface, and a static default route to 10.1.128.1 marked inactive.
• Study Buddy (23 September): the instructor demonstrated finding an interface’s IP and MAC addresses with ipconfig /all on Windows and with a command-line method on Ubuntu whose exact command was not recorded.
• Supplementary: in a routing table the most specific matching route is used, the default route 0.0.0.0/0 applies only when nothing more specific matches, and a route marked inactive is listed but not in use.
• Supplementary: reading fictional ipconfig /all and ip addr show output to identify the address, mask or prefix, MAC address, default gateway, DNS servers and whether DHCP supplied the settings.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary)
• IP forwarding, default gateways and NAT/PAT — Supplementary Study Guide explanation
• Inspecting Network Configuration: Windows, Linux and VyOS — Supplementary Study Guide explanation

Recorded evidence

• Study Buddy (23 September): the instructor demonstrated a VyOS routing table showing connected routes for 10.1.16.0/24 and 10.1.24.0/24, a /32 route and 127.0.0.0/8 on the loopback interface, and a static default route to 10.1.128.1 marked inactive.
• Study Buddy (23 September): the instructor demonstrated finding an interface’s IP and MAC addresses with ipconfig /all on Windows and with a command-line method on Ubuntu whose exact command was not recorded.
• Supplementary: in a routing table the most specific matching route is used, the default route 0.0.0.0/0 applies only when nothing more specific matches, and a route marked inactive is listed but not in use.
• Supplementary: reading fictional ipconfig /all and ip addr show output to identify the address, mask or prefix, MAC address, default gateway, DNS servers and whether DHCP supplied the settings.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary) · Number systems: decimal, binary and hexadecimal; IPv4 and IPv6 addresses; Historical classful addressing; CIDR, subnet masks and the network address; Routing between two networks; VyOS routing demonstration; Windows and Ubuntu demonstrations
• IP forwarding, default gateways and NAT/PAT — Supplementary Study Guide explanation · Reading a router’s routing table
• Inspecting Network Configuration: Windows, Linux and VyOS — Supplementary Study Guide explanation · What you are looking for; Windows: ipconfig /all; Ubuntu: ip addr show; VyOS: show ip route; Other useful commands

Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.

Subnet Masks, CIDR and Subnetting

Evidence: Mixed

Revision: Available · 6 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• Classroom (Session 5): address classes are historical, and modern networks use CIDR and subnet masks.
• Study Buddy (23 September): the historical Class A, B and C first-octet ranges and default masks, and the CIDR prefixes /8, /16 and /24.
• Study Buddy (23 September): for 131.107.5.15/24 the network address 131.107.5.0 is found with a bitwise AND of address and mask, and 2⁸ − 2 = 254 addresses are conventionally usable.
• Study Buddy (23 September): in the two-PC example, 10.1.16.1/24 and 10.1.15.8/24 are on different networks, so traffic between them needs a router.
• Supplementary: converting between subnet masks and prefix lengths, and finding the network address, broadcast address, total and usable addresses for prefixes inside an octet, such as /26 and /20.
• Supplementary: /31 point-to-point links use both addresses and /32 identifies a single address; matching network addresses mean devices treat each other as on-link, subject to Layer 2 connectivity and permitted traffic.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary)
• Session 5: Networking Fundamentals — Part 1 — Classroom session record
• Classful Addressing, Subnet Masks and CIDR — Supplementary Study Guide explanation
• Subnetting: Network, Broadcast and Usable Addresses — Supplementary Study Guide explanation

Recorded evidence

• Classroom (Session 5): address classes are historical, and modern networks use CIDR and subnet masks.
• Study Buddy (23 September): the historical Class A, B and C first-octet ranges and default masks, and the CIDR prefixes /8, /16 and /24.
• Study Buddy (23 September): for 131.107.5.15/24 the network address 131.107.5.0 is found with a bitwise AND of address and mask, and 2⁸ − 2 = 254 addresses are conventionally usable.
• Study Buddy (23 September): in the two-PC example, 10.1.16.1/24 and 10.1.15.8/24 are on different networks, so traffic between them needs a router.
• Supplementary: converting between subnet masks and prefix lengths, and finding the network address, broadcast address, total and usable addresses for prefixes inside an octet, such as /26 and /20.
• Supplementary: /31 point-to-point links use both addresses and /32 identifies a single address; matching network addresses mean devices treat each other as on-link, subject to Layer 2 connectivity and permitted traffic.

• Study Buddy — 23 September 2026 — Study Buddy session (supplementary) · Number systems: decimal, binary and hexadecimal; IPv4 and IPv6 addresses; Historical classful addressing; CIDR, subnet masks and the network address; Routing between two networks; VyOS routing demonstration; Windows and Ubuntu demonstrations
• Session 5: Networking Fundamentals — Part 1 — Classroom session record · Sections 1–10: network fundamentals; protocols; NICs; network scope; communication methods and DHCP; OSI; addressing, gateways and NAT; MAC and ARP; ports and sockets; MAC flooding
• Classful Addressing, Subnet Masks and CIDR — Supplementary Study Guide explanation · Historical classful addressing; Subnet masks; CIDR notation; Network and host identifiers under CIDR
• Subnetting: Network, Broadcast and Usable Addresses — Supplementary Study Guide explanation · What we want to find; Step 1: find the network address with binary AND; Step 2: find the broadcast address; Step 3: count the addresses; Prefixes on octet boundaries: /8, /16 and /24; When the boundary falls inside an octet; How changing the prefix moves the boundary; Do two devices share a subnet?; Special cases: /31 and /32

Reviewed 2026-09-24. Reviewed against the linked Learning Log entries and Study Guide lesson Sources and scope sections. Scope statements are labelled Classroom, Study Buddy or Supplementary. No practical competence, completed assessment or exam alignment is implied.

Access Ports and VLAN Trunks

Evidence: Supplementary

Revision: Available · 2 questions · 1 flashcard

Exam relevance

Learning-only · no verified exam mapping

Reviewed revision scope

• The supplementary two-switch example uses access ports and IEEE 802.1Q trunk tagging to separate VLANs; a cable alone does not create a trunk, and inter-VLAN communication requires Layer 3 forwarding and policy.

• What Is a Network? — Supplementary Study Guide explanation

Recorded evidence

• The supplementary two-switch example uses access ports and IEEE 802.1Q trunk tagging to separate VLANs; a cable alone does not create a trunk, and inter-VLAN communication requires Layer 3 forwarding and policy.

• What Is a Network? — Supplementary Study Guide explanation · Learning context; Devices, services and communication; Network scope; Linked switches, access ports and VLAN trunks; Fictional example: staff and guest networks across two switches; Who receives the traffic?; The seven OSI layers; Applying the model to a web request; Addresses, ports and sockets answer different questions; Private IPv4 and IPv6; Follow the worked explanations; Study and revision

Reviewed 2026-09-23. Reviewed against approved Sessions 1–2 and Study Buddy Core Concepts. Scenarios are fictional educational applications, not completed practical work. This concept has not yet been individually verified against the Security+ SY0-701 objectives or any other exam syllabus.