Computer Networks Certification Test (Intermediate)

A free 40-minute Computer Networks skill test at intermediate level. Pass with 60% to earn a verifiable CodeKairo credential and a profile frame.

  • Skill: Computer Networks
  • Level: Intermediate
  • Duration: 40 minutes
  • Questions: 30
  • Pass mark: 60% (distinction at 85%)
  • Credential: Verifiable, valid for 2 years

Subnetting and CIDR, routing algorithms, TCP flow and congestion control, the handshakes and TLS — the arithmetic and the protocols, exactly.

What does the Computer Networks (Intermediate) skill test cover?

It examines the arithmetic and the inner workings of networking: CIDR subnetting, VLSM and route summarisation, NAT and IPv6 addressing, distance-vector and link-state routing, longest-prefix match, TCP sequence numbers, flow and congestion control, sliding-window protocols, error detection, CSMA/CD and CSMA/CA, DNS caching, HTTP/2 and HTTP/3, the TLS handshake, VLANs and Spanning Tree. Most questions give a small scenario and ask for its exact result.

Sections

SectionQuestionsTimeKindMarks each
Concepts3040 minMultiple choice1

What it covers

Computer Networks (Intermediate) examines networking the way it is worked out on paper: an address and a prefix length turned into a subnet, a routing table searched for its longest match, a TCP window followed round by round, a link's utilisation computed from its speed and delay. It assumes everything in the Computer Networks (Basic) test and asks for exact results and the reasons behind them.

The questions are multiple choice, and a few ask you to select every correct option, where only the exact set scores. Most describe a small scenario: an address and its prefix length, a short forwarding table, a few routers with link costs, a sender's congestion window, a message and a CRC generator. The wrong options are what the common slips produce, so careful working matters more than speed.

What each topic examines

The questions are spread evenly across eight topics. The OS, DBMS & Networks MCQs are the place to drill all of them.

  • OSI and TCP/IP models. How the layers interact rather than what they are called: header overhead and goodput on a real link, the MSS for a given MTU over IPv4 and IPv6, IPv4 fragmentation and its offset field, path MTU discovery, which fields every router rewrites, which checksum catches which error, and how each routing protocol carries its messages.
  • Physical and data link layers. Stop-and-wait and sliding-window utilisation, the window needed to keep a link busy, the sequence-number limits of Go-Back-N and Selective Repeat, CRC division, Hamming distance and what a code can detect and correct, two-dimensional parity, the minimum frame size for CSMA/CD, exponential backoff, and how CSMA/CA avoids collisions.
  • IP addressing. Network and broadcast addresses for any prefix length, host counts, splitting a block into subnets, VLSM allocation, route summarisation, PAT, and IPv6 compression, subnetting and link-local addresses. If binary still feels slow, the bit manipulation lesson is good practice for reading masks.
  • Routing. Longest-prefix match, the distance-vector update and count to infinity, split horizon and poison reverse, link-state flooding and Dijkstra's algorithm on a small graph, the difference between a next hop and a predecessor, and how RIP, OSPF and BGP choose routes. The shortest-path problems are the same algorithm in code.
  • TCP and UDP. Sequence and acknowledgement numbers across an exchange, cumulative ACKs after a loss, the receive window, window-limited throughput, slow start and congestion avoidance under Reno, the sawtooth's average rate, teardown states, TIME_WAIT, and the Internet checksum.
  • Application protocols. DNS caching and TTLs, reverse lookups, MX preference, why a zone apex cannot be a CNAME, DNS over TCP, round trips for persistent and non-persistent HTTP, conditional requests, and head-of-line blocking in HTTP/1.1, HTTP/2 and HTTP/3.
  • Network security. What encrypts what in TLS 1.3, how a certificate chain is checked, how a server proves it owns its certificate, forward secrecy, handshake round trips, wildcard certificates, Diffie–Hellman with small numbers, rule order in a packet filter, SYN cookies and IPsec tunnel mode.
  • Devices and topologies. VLANs and broadcast domains, 802.1Q trunks and the native VLAN, routing between VLANs, Spanning Tree root election, root ports and convergence time, broadcast storms, and the delay a store-and-forward switch adds.

The conventions questions state

Several of these results depend on a convention, and a question always names the one it uses. A subnet's usable hosts exclude its network and broadcast addresses. Utilisation questions say whether the acknowledgement's transmission time and processing delays count (usually they do not). Congestion-window questions number the rounds and give the starting window and threshold. OSPF costs come with the reference bandwidth, and Spanning Tree questions give the port costs and timers. Error-detection questions say which bits may be corrupted and which arrive intact. Read that sentence of each question twice: it is usually where the answer turns.

How to prepare

Work the arithmetic by hand until each kind is routine. Take a few addresses with prefixes between /19 and /30 and write out the network, broadcast and host range; then split a /24 for four LANs of different sizes, largest first. Trace Dijkstra on a six-node graph and write down the order in which nodes are fixed. Follow a TCP sender from a window of one segment through slow start, a timeout and congestion avoidance, writing the window for every round. Divide a short message by a CRC generator, and add three 16-bit words as the Internet checksum does.

Then connect the numbers to what you can observe. Running ip addr or ipconfig shows a real prefix; dig shows TTLs counting down in a resolver's cache; a browser's developer tools show whether a page loaded over HTTP/1.1, HTTP/2 or HTTP/3; and a packet capture of one download shows sequence numbers, acknowledgements and the advertised window moving together.

Where candidates lose marks

  • Forgetting that a SYN and a FIN each consume one sequence number, or giving the last byte received where an acknowledgement names the next byte expected.
  • Treating a timeout and three duplicate ACKs alike. Under Reno only the timeout drops the window to one segment.
  • Summarising or subnetting on a boundary that is not a multiple of the block size.
  • Using the one-way propagation delay where a round trip is needed, in utilisation and in minimum frame size.
  • Naming the router just before the destination as the next hop.
  • Assuming the public key encrypts the data in TLS. It authenticates; symmetric keys from the key exchange carry the traffic.

Sample question

Topic: TCP & UDP

A TCP sender's congestion window is 12 segments, and the receiver has just advertised a receive window of 8 segments. All segments are full-sized and nothing is in flight yet. How many segments can the sender transmit before it must wait for an acknowledgement?

  1. 4
  2. 8
  3. 12
  4. 20
Show the answer

B. 8

A TCP sender may have at most the smaller of the two windows unacknowledged: min(cwnd, rwnd) = min(12, 8) = 8. The congestion window is the sender's estimate of what the network can carry, and the receive window is the space left in the receiver's buffer, so both limits apply at once. 12 ignores flow control, 20 adds the two windows together, and 4 subtracts one from the other.

Common questions

How much arithmetic is there on the Computer Networks Intermediate test?

A good share of the paper. Expect to work out subnets in binary, sum link costs along a path, follow sequence numbers and congestion windows round by round, compute link utilisation and minimum frame sizes, divide a CRC and add a checksum. The numbers are chosen so that each step is short; what the questions test is knowing which formula applies and which detail it hinges on.

Which version of TCP congestion control do the questions assume?

Classic TCP Reno, and the question says so whenever it matters: slow start doubling the window each round trip up to ssthresh, linear growth after it, a timeout dropping the window to one segment, and three duplicate ACKs halving it through fast recovery. Modern defaults such as CUBIC are not examined, and Tahoe appears only as the contrast to Reno.

Do I need to know Cisco commands or vendor defaults?

No commands are asked. Where an answer depends on a default that comes from a vendor or an older standard, such as the OSPF reference bandwidth or the 802.1D Spanning Tree port costs and timers, the question gives the numbers, so you need to know how they are used rather than remember them.

Is IPv6 on the Intermediate test?

Yes. Questions cover the 128-bit address and its compression rules (dropping leading zeros, using a double colon once), counting subnets in a prefix, link-local addresses, how Neighbor Discovery replaces ARP without any broadcast, and how the IPv6 header differs from IPv4's, for example in having no checksum.

Should I pass the Basic networks test first?

It is not required, but the Intermediate paper assumes everything the Basic one examines, from the layers and devices to the three-way handshake. If network and broadcast addresses for a /24 or the job of each header are not yet automatic, the Basic test is the better place to start.

Rules

This is a certification test. Pass with 60% and you earn a verifiable CodeKairo credential — 85% earns it with distinction. It is valid for 2 years.

  • The sections are timed separately and taken in order. A section you leave cannot be reopened.
  • The server keeps the clock. Closing the tab or reloading does not pause it.
  • Your answers save as you go and survive a refresh.
  • You may sit this test again 7 days after a sitting ends. Your best result stands.

Integrity. Work alone and from what you know, on a laptop or desktop with a webcam — phones and tablets cannot sit a skill test. The test runs full screen and must stay in front the whole time, and the webcam must see you, alone: leaving full screen, switching to another tab or window, minimising, or the camera seeing no one, someone else, a phone or you looking away blurs the paper and counts against you — the first 2 are warnings, and the third ends the sitting, graded as not passed. The camera check runs in your browser; nothing is recorded or uploaded. Pasting into the editor is switched off. A sitting that looks assisted can be reviewed, and a credential earned that way is revoked.

The answers are never shown — not during the test and not after it. Your result breaks the score down by topic and points you to what to practise.