3.4 Given a scenario, implement IPv4 and IPv6 network services. Flashcards
1
Q
What is a DHCP reservation?
A
- Devices that will always receive the same IP address when it connects to the network.
2
Q
What is a DHCP scope?
A
- It is an IP address range that can be handed out to clients for use.
3
Q
What is a DHCP lease time?
A
- Can only use the address for a certain period of time and if they users doesn’t renew the lease, it will go back to the pool for another user to use.
4
Q
What is a DHCP option?
A
- A special field in the DCHP message
- Guided by DHCP RFC standard and referred to as “vendor extensions”.
- 254 usable options
5
Q
What is a DHCP relay/IP helper?
A
- Since most DHCP request sent as a broadcast cannot go past the router, some routers will allow a “relay” for this functionality that needs to be separately configured.
6
Q
What is a DHCP exclusion?
A
7
Q
What is a SLAAC?
A
- Stateless Address Autoconfiguration
- This automatically configures an IP address without DHCP server.
- DAD: Duplicate Address Detection.
8
Q
What is a DNSSEC?
A
- Domain Name Security Extension
- DNS responses from the server are digitally signed and a forgery would be easily identified
- Requires additional configurations on the DNS server.
9
Q
What is DoH?
A
- DNS over HTTPS
- Sends DNS Traffic in an HTTPS packet and looks like web server communication over TCP 443
10
Q
What is DoT?
A
- DNS over TLS
- Sends DNS traffic over TCP 853 and encrypts that information.
11
Q
What is record type (A)?
A
- Address
- Defines the IP address of a host.
- These are for IPv4 addresses
12
Q
What is record type (AAAA)?
A
- Defines the IP address of a host.
- These are for IPv6 addresses.
13
Q
What is record type (CNAME)
A
- Canonical Name
- A name is an alias of another name.
- One physical server, with multiple services.
14
Q
What is record type (MX)?
A
- Mail Exchange
- This determines the host name for the mail server; this isn’t an IP address, it’s a name.
15
Q
What is record type (TX)?
A
- Text
- Human-readable text information
- Useful for public information.
- SPF protocol (Sender Policy Framework): this prevents mail spoofing.
- DKIM (Domain Keys Identified Mail): digitally sign your outgoing mail
16
Q
What is record type (NS)?
A
- Nameserver
- It lists the name servers for a domain.
17
Q
What is record type (PTR)?
A
- Pointer
- The reverse of an A or AAAA record
- Give the server an IP address.
18
Q
What is a forward zone type?
A
- This provides the DNS server with an FQDN and the DNS server responds with an IP address.
19
Q
What is a reverse zone type?
A
- This provides the DNS server with an IP address and the DNS server responds with an FQDN.
20
Q
What is Authoritative DNS?
A
- The DNS server is the authority for the zone.
- TTL (Time to Live) is configured here.
- Very long TTL can cause problems if changes are made.
21
Q
What is Non-Authoritative DNS?
A
- Does not contain the zone source files; probably cached information.
22
Q
Primary vs. Secondary
A
23
Q
What is recursive DNS?
A
- Delegates the look-up to a DNS server.
- The DNS server does the work and reports back
- Large DNS cache provides a speed advantage.
24
Q
What is the host file’s relationship to DNS?
A
- Contains a list of IP addresses and host names with preferred resolutions.
- Some apps may not use the host file, the will rely on the DNS server as the primary source for information.
25
What is NTP?
- Network Time Protocol
- Switches, routers firewalls, servers, workstations has its own clock that is synchronized.
- Need to have a server responsible for this function (UDP 123).
26
What is PTP?
- Percision Time Protocol
- A hardware-based time synchronization that provides nanosecond granularity
- Often implemented as specialized hardware that can avoid delays from the operating system and applications.
27
What is NTS?
- Network Time Security
- How do you know your NTP server response can be trusted (could cause DDoS)?
- This provides a level of authentication so you can validate the time is correct.
28
What is DORA?
1. Discover: Find DHCP server
2. Offer: Get an offer from DHCP server.
3. Request: lock in the offer from the DHCP server
4. Acknowledge: DHCP server confirmation.
29
What is NDP?
- Neighbor Discovery Protocol
- No broadcasts! Operates using multicast over ICMPv6
Neighbor MAC Discovery
30
What is RR?
- Resource Records
- The database records of domain name services.
- Over 30 record types.
31
What is a SOA record type?
- Start of Authority
- Describes the DNS zone details.