EC-CouncilSOC Essentials
Domain 1Objective 1
TCP/IP and OSI Models SCE Practice Questions (Page 1)
Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
6concepts
Questions 1–5
- 1
A network analyst is examining a packet capture and sees that a host is sending a TCP segment with the SYN flag set. The analyst wants to identify the source and destination IP addresses. In which header would the analyst find this information?
Select an answer first - 2
A SOC analyst is documenting how a legacy application communicates across the network. The application uses a proprietary protocol that provides session management and presentation formatting, and it relies on TCP for reliable delivery and IP for routing. The analyst needs to map this application's communication to the OSI model. Which OSI layers are most directly involved in the application's proprietary protocol functions?
Select an answer first - 3
A training manual for new SOC analysts includes a diagram that shows the TCP/IP model and the OSI model side by side. The manual asks readers to identify which OSI layers correspond to the TCP/IP application layer. Which OSI layers are correctly mapped to the TCP/IP application layer?
Select an answer first - 4
What is the process called when each layer adds its own header (and possibly trailer) to the data as it moves down the protocol stack?
Select an answer first - 5
A SOC analyst is reviewing a packet capture and sees a protocol that uses a 32-bit address and is responsible for routing packets across networks. Which OSI layer does this protocol operate at?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.