Network+ Study Cards Flashcards

Question

# Challenge: **_Binary → IP Conversion_**

Answer 1

**Binary → IP Conversion Challenge** * Study partner choose a random string of 8- 1s & 0s then provide them to the studee. Have the studee convert this to an octet of an IP address by hand. * Use a calculator to confirm after the studee completes this work by hand.

Answer 2

**LDAPS-Lightweight Directory Access Protocol over SSL/TLS** * Port 636 TCP & UDP * A protocol used to query & change a database used by the network. However, does this in a secure/encrypted mannser using SSL/TLS. * Less common. * Made obsolete by LDAPv2

Answer 3

**Asymmetric-Key Algorithm** * Any encryption that uses the different keys for encryption and decryption.

Answer 4

**Omnidirectional Antenna** * Radiates the signal outward from the WAP in all directions.

Answer 5

**Distributed Control System (DCS)** * Similar to an ICS but for larger operations with multiple machines. * Consists of smaller controllers directly on a machine, to distribute the computing load. These controllers then talk back to a cectralized controller called the ICS server. * Typically controlled through Human Machine Interfaces (HMIs) that are typically built (physical) or programmed (software) for a specific task.

Answer 6

**Troubleshooting Steps** * **_Identify the Problem_** * Gather Information * Duplicate the Problem * Question Users * Identify Symptoms * Determine if anything has changed * Approach multiple problems individualy * **_Establish a Theory of Probable Cause_** * **__**Question the obvious * Consider multiple approaches * Top-to-bottom/bottom-to-top OSI model * Divide and conquer * **_Test the Theory to Determine the Cause_** * **__**Once a theory is confirmed, determine the next steps to resolve the problem. * If the theory is not confirmed, re-establish a new theory or escalate. * **_Establish a Plan of Action to Resolve the Problem and Identify Potential Effects_** * **_Implement the Solution or Escalate as Necessary_** * **_Verify Full System Functionality and, if Possible, Implement Preventable Measures_** * **_Document Findings, Actions, and Outcomes_**

Answer 7

**Modulator** * Takes a digital signal and converts it to analog. * A demodulator reverses this process.

Answer 8

**Point-to-Point Tunneling Protocol(PPTP)** * A protocol that works with PPP to provide a secure data link between computers using encryption.

Answer 9

**Radio-Frequency Identification (RFID)** * Uses the same concepts of tag and reader as NFC, but has several differences. * Not a single standard, but many. * Uses diverse frequencies & protocols * Much broader application than NFC * **_Similar features between different RFID's:_** * **__**Close proximity-usually less than 1m * Security- Usually weak with no encryption. * Most commonly used for labels.

Answer 10

**Integrated Services Digital Network (ISDN)** * The CCITT standard that defines a digital method for telephone communications. Originally designed to replace the current analog phone systems. * ISDN lines have phone numbers & support up to 128-Kbps transfer rates. * Also allows voice & data to share a common line.

Answer 11

**Primary Rate Interface (PRI)** * A full T1 line, carrying 23 B channels.

Answer 12

**Link State Dynamic Routing Protocol** * Announces and forwards only indivisual route changes as they appear.

Answer 13

**Private IP Addresses** * Private IP addresses are unable to talk directly to the internet. * They use NAT to speak to the internet. _Ranges:_ 10.0.0.0-10.255.255.255 172. 16.0.0-172.31.255.255 192. 168.0.0-192.168.255.255

Answer 14

**IANA-Internet Assined Numbers Authority** * Formed to track & disperse IP addresses to those who need them.

Answer 15

**FCS-Frame Check Sequence** * Enables ethernet nodes to identify when bad things happen to good data. * Uses the CRC to verify data.

Answer 16

**Software as as Service (SaaS)** * Centralized applications that are accessed over a network.

Answer 17

**IP Classes** * Class A- 1^stdecimal value starts with 1-126 * Class B- 1^stdecimal value starts with 128-191 * Class C- 1^stdecimal value starts with 192-223 * Class D- 1^stdecimal value starts with 224-239 * Class E- 1^stdecimal value starts with 240-254

Answer 18

**Dynamic Multipoint VPN(DMVPN)** * Enables a direct VPN connection between multiple locations directly, without having to take a less efficient path. * Optional wording: Enables direct VPN connections between multiple sattelite locations. * Typically uses IPsec for security.

Answer 19

**TEMPEST** * The NSA's security standard that is used to combat radio frequency(RF) emanation by using enclosures, shielding, and even paint.

Answer 20

**Port Forwarding** * The ability to designate a specific local address for various network services. Computers outside the network can request a service using the public IP of the router and the port number of the desired device.

Answer 21

**Activation** * When a virus does something such as erase the boot sector of a drive. * Requires human action to replicate. * Usually attached to something like a host-file, not a standalone program. * Does not replicate through networks.

Answer 22

**Medianet** * A network of typically far-flung routers & servers that provide -- via QoS and other tools -- sufficient bandwidth for video tele-conferencing.

Answer 23

**Extended Service Set Identifier (ESSID)** * In an ESS every WAP connects to a central switch or switches to become part of a single broadcast domain.

Answer 24

**Adaptive Network Technology (ANT+)** * Low-speed, low-power networking technology that, similarly to NFC, consists of a passive ANT device & an ANT reader. * Typically used for things like heart-rate monitors where low power is paramount. * Encrypted with AES.

Answer 25

**Backups** * **_Full Backup-_** Every file selected is backed up in its entirety. * **_Incremental Backup-_** Includes only files with the archive bit turned on. In other words, it copies only the files that have changed since the last full or incremental backup. * **_Differential Backup-_** Copies all the files that have been changed since the last full backup. It does not turn off archive bits.

Answer 26

**Permanent Virtual Circuit (PVC)** * A feature of MPLS, sold by ISPs that is essentially a VPN between two customer locations.

Answer 27

**IDF-Intermediate Distribution Frame** * The location where all horizontal runs from all work areas on a single floor come together.

Answer 28

**Carrier Sense Multiple Access w/ Collision Avoidance (CSMA/CA)** * Access method only used in wireless networks. 1. Before hosts send out data, they first listen for traffic. 2. If the network is free, they send out a signal that reserves a certain amount of time to make sure the network is free of other signals. 3. If data is detected in the air, the hosts wait a random amount of time before trying again. 4. If there are no other wireless signals, the data is sent out.

Answer 29

**SSL/TLS-Secure Sockets Layer/Tunnel Layer Security** * A protocol developed by Netscape for transmitting private documents securely over the internet. * SSL is technically depricated these days and Tunnel Layer Security is the current iteration. * TLS is robust and works with almost any TCP application.

Answer 30

**BPDU-Bridge Protocol Data Units** * Special STP packets that map the network between switches. * Will elect one switch as the "root bridge" which acts as the center of the STP universe.

Answer 31

**Broadcast** * A way to send packets in which every computer on the LAN hears the message.

Answer 32

**10GBaseT Summary** * Speed: 10G * Signal: Baseband * Pairs: 4 pair @ full-duplex * Distance: 55 meters or 100 meters * Cable Type: CAT 6 or CAT 6a using RJ-45 Connectors

Answer 33

**Dipole Antenna** * The standard straight-wire antennas that provide the most omnidirectional function.

Answer 34

**Port Aggregation** * A method used for joining two or more switch ports logically to increase bandwidth.

Answer 35

**Session Highjacking** * Tries to intercept a valid computer session to get authentication information.

Answer 36

**Route Redistribution** * When a router ontains routes using one protocol and then announces the routes over another protocol.

Answer 37

**ARP-Address Resolution Protocol** * A special request sent by a computer used to obtain the MAC of other computers on the network.

Answer 38

**Vulnerability Scanner** * A program that will inspect a huge number of potentail vulnerabilities & create a report for you to then act upon.

Answer 39

**Rivest Cypher 4 (RC4)** * Encryption * Was the dominant stream cypher for a while. * A number of weaknesses were found starting in 2001 and continuing to this day, causing the industry to look at it as a legacy cypher and move more to AES and block cyphers.

Answer 40

**SSH-Secure Shell** * Port 22 TCP & UDP * A terminal emulator that looks exactly like Telnet but encrypts the data.

Answer 41

**POP-Post Office Protocol** * Port 110 TCP * One of two protocols that recieve eamils from SMTP. * Old and obsolete, was replaced by IMAP * Currently on version 3

Answer 42

**Primary(Master) & Secondary(Slave) DNS Servers** * When a domain is large enough (ie. google) it may need more than one DNS server. In this setup secondaries act as subordinates to the primary, but they all support the same domain.

Answer 43

**1000BaseT Summary** * Speed: 1000 Mbps * Signal: Baseband * Distance: 100 meters * Node Limit: 1024 Nodes per hub/switch * Topology: Star-bus * Cable Type: CAT 5e or better UTP/STP w/ RJ-45

Answer 44

**Ad hoc Mode** * Sometimes called peer-to-peer, each wireless node is in direct contact with each other node in a decentralized free-for-all. * Mesh topology.

Answer 45

**Remote Terminal Units (RTUs)** * Provide the same function as a controller with 2 major differences. * Designed to have some amount of autonomyin case it loses connection with central control. * Designed to take advantage of some form of long-distance communication such as telephony, fiber -optic, or cellular WANs.

Answer 46

**Man-in-the-Middle** * An attacker taps into communications between two systems, covertly intercepting traffic thought to be only between those two systems, reading or in some cases even changing the data and then sending that data on.

Answer 47

**Last-Mile Solutions** * Dial-Up * DSL * Broadband Cable * Satellite * Fiber

Answer 48

**Spyware** * A function of any program that sends information about your system or your actions over the Internet.

Answer 49

**Autonomous System** * One or more networks that are goverened by a single dynamic routing protocol. They do not deliver data using IP addresses but rather an ASN

Answer 50

**BGP-Border Gateway Protocol** * The one protocol the internet has settled on to use as the communication protocol or EGP for ALL Autonomous Systems. * Most likely in use to allow you to communicate to/from your ISP. * Currently version BGP-4

Answer 51

**Message-Digest v5 (MD5)** * The first commonly used hash algorithm. * Created a 128-bit message-digest * Considered unsecure these days.

Answer 52

**Digital Signature** * Nonrepudiation * A hash of the public key encrypted by the private key. The person with the matching public key decrypts the digital signature using the public key, generates their own hash, and compares it to the decrypted has to verify that it came from the intended sender.

Answer 53

**MAC Address-Media Access Control Address** * 48-bit or 6-byte identifier used for identifying a NIC.

Answer 54

**MDF-Main Distribution Frame** * The combination of demarc, phone cross-connects, and LAN cross-connects where all IDF locations centralize to.

Answer 55

**Data Encryption Standard (DES)** * The oldest symmetric-key algorithm of TCP/IP. * Block cypher * Uses a 128-bit block size and a 56-bit key. * The 56-bit key length has made it obsolete.

Answer 56

**Denial of Service (DOS)** * An attack on a server (or servers) that provides some sort of service to the Internet, with the goal of making that site unable to process any incoming server requests. * Physical * Amplified * Dynamic * Reflective

Answer 57

**SMB-Server Message Block** * Port 445 TCP * Protocol used by Microsoft clients & servers to share files & print resources.

Answer 58

**Wi-Fi Protected Access (WPA)** * A wireless security protocol that addresses the weaknesses and acts as a upgrade to WEP. * WPA offers security enhancements such as dynamic encryption key generation (ie. keys are issued on a per-user and per-session basis), an encryption key integrity checking feature, user authentication through the industry standard EAP, and other advanced features that WEP lacks. * **_Temporal Key Integrity Protocol (TKIP)-_** This is the extra layer of security that WPA adds on top of WEP.

Answer 59

**Virtual Router Redundancy Protocol (VRRP) & Hot Standby Router Protocol (HSRP)** * Both take multiple routers and gang them together into a single virtual router to provide redundancy. * Cannot provide load balancing * HSRP is Cisco proprietary.

Answer 60

**Important IPv6 mUlticast Addresses** * ff02::1- All Nodes Address * ff02::2- All Routers Address * ff02::1:ffxx:xxxx- Solicited-Node Address

Answer 61

**Deauthentication Attack (Deauth)** * A form of DOS that targets 802.11 wireless networks, specifically by sending out a frame that kicks a wireless client off of its WAP connection. Then, a rogue WAP nearby presents a great and often automatic alternative option for connection. The rogue WAP then proceeds to collect data from the client after connecting the client to the internet.

Answer 62

**Stateful DHCPv6** * Works similar to IPv4 DHCP servers, handing out complete IPv6 information: addresses and default gateways, as well as items such as DNS server addresses.

Answer 63

**Authentication Examples** * Usernames/passwords * Biometrics * Smart Cards * MFA/2FA * Something you know * Something you have * Something you are * Something you do * Somewhere you are

Answer 64

**Block Cypher** * More common * Encrypt data in single chunks of a certain length at a time.

Answer 65

**IGP-Internal Gateway Protocol** * The protocols used to communicate on the network/s within an automated system.

Answer 66

**Jitter** * The loss of packets due to an overworked AP.

Answer 67

**NIU-Network Interface Unit** * Serves as the demarc between your netwrok and your ISP. ie. modem

Answer 68

**Z-Wave/Zigbee** * Both use mesh * Competing technologies * Z-wave is proprietary with and open API for programmers. * Zigbee is completely open source * Both are used in home automation.

Answer 69

**Active Directory Domain** * A form of directory service used in networks with Windows servers. Creates an organization of related computers that share one or more Windows domains. * Used to control things such as permissions, GPOs, and computer settings from one central location.

Answer 70

**Public Key Infrastructure (PKI)** * Nonrepudiation * The system for creating and distributing digital certificates using sites like Comodo, Symantec, or GoDaddy

Answer 71

**Replication** * To make copies of itself, often as code stored in boot sectors or as extra code added to the end of executable programs.

Answer 72

**TFTP-Trivial File Transfer Protocol** * Port 69 UDP * A simple FTP that allows a client to get a file from or put a file on a remote host.

Answer 73

**Near-Field Communication (NFC)** * A low-speed, short-range technology designed primarily for small-value monetary transactions. * Typically consists of an unpowered, passive tag that holds personal data & an NFC reader that when brought close to the tag, creates an electromagnetic induction in the tag and allows the two devices to communicate using only the power from the reader.

Answer 74

**Service Level Agreement (SLA)** * A document between a customer & a service provider that defines the scope, quality, and terms of service to be provided. * Definition of service provided * Equipment * Technical support

Answer 75

**IGMP-Internet Group Management Protocol** * Enables routers to communicate with hosts to determine a "group" memebership. * An example of this is Multicasting-You can provide one IP that multiple clients view instead of sending them multiple streams.

Answer 76

**Ethernet Frame****_{consists of what?}** * Reaches the NIC and then changes. 1. Preamble 2. Destination MAC 3. Source MAC 4. Destination IP (Type _{ie. IPv4 or IPv6}) 5. Source IP 6. Destination Port 7. Source Port 8. Data _{minimum of 64 bytes} 9. FCS

Answer 77

**SIP Trunk** * Connects PBX systems from multiple locations seamlessly over the internet via a virtual connection.

Answer 78

**Routing Table** * The table a router uses to inspect IP packets and send data where it needs to go.

Answer 79

**Enhanced Data Rates for GSM Evolution (EDGE)** * The last iteration of GSM * Offers speeds up to 384 Kbps

Answer 80

**EAP Types** * **_EAP-PSK(Pre-Shared Key)-_** A shared secret code between the WAP & the wireless client. * Uses AES for encryption * **_EAP-TLS-_** Defines the use of a RADIUS server as well as mutual authentication, requiring certificates on both the server & every client. * **_EAP-TTLS-_** Similar to EAP-TLS but only uses a single server-side ticket. * **_EAP-MS-CHAPv2-_** More commonly known as Protected EAP (PEAP), it uses a password function based on MS-CHAPv2 with the addition of an encrypted TLS tunnel. * The most common implementation of EAP. * **_EAP-MD5-_** A very simple version of EAP that only uses MD5 hashes for transfer of authentication credentials. It is weak, and the least common. * **_Lightweight EAP (LEAP)-_** A proprietary EAP used almost exclusively by Cisco wireless products. * **_EAP Flexible Authentication via Secure Tunneling (EAP-FAST)-_** Cisco's replacement for LEAP.

Answer 81

**PC Connector-Physical Contact Connector** * A fiber connector in which the two pieces of the fiber make physical contact.

Answer 82

**10GBase ER/EW (Extra Long Range/Extra Long Wavelength) Summary** * Single Mode Fiber * 1550nm Wavelength * Commonly LC & SC Connectors * 40 km distance

Answer 83

**Configure Router Serial Connection** * **Speed(Baud):** 9600 * **Data Bits:** 8 * **Stop Bits:** 1 * **Parity:** none

Answer 84

**FTP-File Transfer Protocol** * Port 20 & 21 TCP * Standard communication protocol used to transfer files from server to client.

Answer 85

**Telnet Protocol** * Port 23 TCP * A program that enables users to log onto remote systems from their own host systems. * Not really used anymore, has been replaced by SSH.

Answer 86

**10GBase SR/SW (Short Range/Short Wavelength) Summary** * Multi-Mode Fiber * 850nm Wavelength * Connectors not defined * 26-300 meter distance

Answer 87

**Virtula Local Area Network (VLAN)** * Enables you to segment a physical network into multiple discreet networks without having to add additional hardware. * The most common method for configuring a VLAN capable switch is to log in via SSH and configure using command line.

Answer 88

**Industrial Control System (ICS)** * The overall system that monitors and controls machines. _Has 3 basic components:_ * Input/Output functions on the machine * A controller * Interface for the operator

Answer 89

**Persistent Agent** * A small scanning program that, once installed on the computer, stays installed and runs everytime the computer boots. These agents are composed of modules that perform a thourough inventory of each security-oriented element in the computer.

Answer 90

**Reverse Lookup Zone** * Enables a system to determine an FQDN by knowing the IP address.

Answer 91

**Macro** * Any type of virus that exploits application macros to replicate & activate.

Answer 92

**Infrastructure as as Service (IaaS)** * Uses virtualization to minimize idle hardware, protect against data loss and downtime, and respond to spikes in demand.

Answer 93

**Presentaion Layer-OSI Layer 6** * Translates lower layers into a format useable by the Application Layer and vice versa. * Not really used anymore in modern computing.

Answer 94

**LDAP-Lightweight Directory Access Protocol** * Port 389 TCP & UDP * A protocol used to query & change a database used by the network. * ie. Databases used to track who is logged into a network, how many DHCP clients are currently active, or the location of all the printers on a network. * Talks between active directories, to update information.

Answer 95

**HTTPS-Hyper Text Transfer Protocol over SSL/TLS** * Port 443 TCP * Same as HTTP but instead does this in a secure/encrypted manner using TLS.

Answer 96

**APC Connector-Angled Physical Contact Connector** * A fiber connection in which an 8-degree angle is added to the curved end, lowering signal loss further. * The connection does not degrade with multiple insertions.

Answer 97

**Session Layer-OSI Layer 5** * Manages the communication method and opens/closes the communication lanes between computers.

Answer 98

**Cable Issues** * **_Open Circuit-_** When one or more of the wires in a cable do not connect end to end. * **_Lacks Continuity-_** One of the wires touches another, creating a short. * **_Wire Map Problem-_** The proper pinout is not used on one or more ends. * **_Crosstalk-_** When electrical signal leaks from one wire to another.

Answer 99

**CRC-Cyclic Redundancy Check** * The sending machine runs data throught this mathematical formula to create the FCS. Then the receiving machine opens the frame, runs the CRC again, then compares the answer with the one included in the frame.

Answer 100

**APIPA-Automatic Private IP Addressing** * The address automatically assigned to a DHCP device when it does not receive a response to a DHCP discover message. * This IP is in the range 169.254.0.0 /16

Answer 101

**Data Link Layer-OSI Layer 2** * Communicates using MAC Addresses * NIC's, Switches

Answer 102

**Asymmetrical Digital Subscriber Line (ADSL)** * Uses different upload & download speeds. * Download speeds are much faster than upload speeds.

Answer 103

**Autonomous System Number** * A special globally unique number used to transfer data between Autonomous Systems. * Assigned by IANA * Originally represented by a 16-bit number, however, current ASNs are 32-bit.

Answer 104

**Trunking/Trunk Port** * Trunking is the process of transferring all VLAN traffic between two or more switches. * Trunk Port: * A port on a switch configured to carry all traffic regardless of VLAN number, between all switches in a LAN.

Answer 105

**Advanced Encryption Standard (AES)** * A symmetric-key block cypher that uses a 128-bit block size. * Uses 128-, 192-, 256-bit key.

Answer 106

**Cached Lookups** * All the IP addresses that a DNS server has already resolved, so that it does not have to re-resolve an FQDN it has already resolved.

Answer 107

**Rootkit** * Takes advantage of very low-level operating system functions to hide itself from all but the most aggressive anti-malware tools.

Answer 108

**Extensible Authentication Protocol (EAP)** * Authentication wrapper that EAP-compliant applications can use to accept one of many types of authentication. * While EAP is a general-purpose authentication wrapper, its only substantial use is in wirelss networks. * Uses Point-to-Point Protocol (PPP)

Answer 109

**Global System for Mobile Communications (GSM)** * The first group of networking technologies widely adopted for mobile devices. * Relied on a type of time-division multiplexing called time-division multiple access (TDMA)

Answer 110

**Bluesnarfing** * Used weaknesses in the Bluetooth standard to steal information from another Bluetooth device.

Answer 111

**100BaseT Summary** * Speed: 100 Mbps * Signal: Baseband * Distance: 100 meters * Node Limit: 1024 Nodes per hub/switch * Topology: Star-bus * Cable Type: CAT 5 or better UTP/STP w/ RJ-45 * Only requires 2 pair

Answer 112

**GBIC-Gigabit Interface Connector** * A standard modular port on a switches and other hardware.

Answer 113

**100BaseFX Summary** * Speed: 100 Mbps * Signal: Baseband * Distance: 2000 meters or 2 km * Node Limit: 1024 Nodes per hub/switch * Topology: Star-bus * Cable Type: Multi-Mode Fiber using ST or SC connectors

Answer 114

**nslookup** * Helps diagnose DNS problems.

Answer 115

**When does business continutity come into play?** * If a disaster requires actions offsite from the primary infrastructure.

Answer 116

**Logic Bomb** * Code written to execute when certain conditions are met.

Answer 117

**STP-Spanning Tree Protocol** * Using special STP frames called BPDUs, this protocol allows switches to communicate with other switches to prevent loops from happening. * RSTP-The "Rapid" version of this protocol used nowadays, allows convergence at a much faster pace.

Answer 118

**Forward Lookup Zone** * Enables a system to determine an IP address by knowing the FQDN.

Answer 119

**Intrusion Detection System(IDS)** * An application that inspects a copy of packets, looking for active intrusions, and can then respond to detected intrusions with actions.

Answer 120

**SMF-Single Mode Fiber** * A fiber optic cable that uses lasers. * Does not experience modal distortion, and as a result is able to achieve very high transfer rates over a very long distance.

Answer 121

**DHCP-Dynamic Host Configuration Protocol** * Ports 67 & 68 UDP * Automatically assigns IP Addresses to client machines. * Remember "DORA" as the four-way handshake of DHCP 1. Discover-Initial request from client. 2. Offer-Offer back fromt the host. 3. Request-Acceptance of offer by client. 4. Acknowledgement-Host saves/stores acceptance.

Answer 122

**IPv6** * IPv6 is a 128-bit IP address space, allowing up to 2¹²⁸addresses. * It is made up of three parts: The Global Prefix and the Subnet ID; which collectively make up the Network Prefix, and then the Interface ID. * 2001:0db8:43c4:0026:0000:0000:4567:f2ab |\_\_\_\_\_\_\_\_\_\_\_\_\_||\_\_\_||\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_| | | | Global Prefix Subnet ID Interface ID |\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_| | Network Prefix * **_Network Prefix-_** Used for routing & makes up the first 64-bits * **_Interface ID-_** This is the user address and makes up the second 64-bits. * **_Link-Local Address-_** The equivalent of the APIPA address for IPv6. * **_Global Unicast Address-_** Often called a global address or global prefix; this is the address used to access the internet. This is provided by the default gateway. * 48-bit prefix from upstream router + 16-bit Subnet ID from default gateway + 64-bit Interface ID = 128-bit IPv6

Answer 123

**Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)** * Designed to work within an IPv4 network by adding the IPv4 address to an IPv6 prefix to create a rather interesting but non-standard address for the endpoints.

Answer 124

**Real-Time Transport Protocol (RTP)** * The heavily adopted bedrock of VOIP standards. * Defines the types of packets used on the internet to move voice or data from a server to clients.

Answer 125

**Symmetrical Digital Subscriber Line (SDSL)** * Provides equal upload & download speeds and in theory, speeds up to 15Mbps.

Answer 126

**Local Exchanges** * A defined grouping of individual phone circuits served by a single multiplexer.

Answer 127

**Public Switched Telephone Network (PSTN)** * Also known as POTS, this is the oldest and slowest phone connection. It is just a regular phone line, the same line used for someone's home phone.

Answer 128

**Password Policy** * Password policies revolve around the strength of the password and rotation frequency.

Answer 129

**1000BaseSX (Shorter Range) Summary** * Speed: 1000 Mbps * Signal: Baseband * Distance: 220-500 meters * Cable Type: Multi-Mode Fiber using LEDs & LC or SC connectors

Answer 130

**Evolved High-Speed Packet Access (HSPA+)** * The final 3G standard for data, providing theoretical speeds up to 168 Mbps.

Answer 131

**Metro Ethernet** * Usually a dedicated fiber line from the ISP to an office.

Answer 132

**Overlay Tunnel** * Enables two IPv6 networks to connect over an existing IPv4 infrastructure, such as the internet.

Answer 133

**SMTP-Simple Mail Transfer Protocol** * Port 25 TCP * Used for routing mail between e-mail services.

Answer 134

**Adware** * A program that monitors the types of Web sites you frequent and uses that information to generate targeted ads, usually pop-ups.

Answer 135

**Change Request** * Type of change * Configuration Procedures * Rollback Process * Potential Impact * Notification

Answer 136

**Integrity** * The process that guarantees that the data recieved is the same as originally sent.

Answer 137

**Bare-Metal/Type-1 Hypervisor** * A hypervisor that runs directly on top of hardware. * Ex. ESXi

Answer 138

**802.1X** * A port-based authentication network access control mechanism for networks. * Only broadly adopted by wireless networks.

Answer 139

**CSMA/CD-Carrier Sense Multiple Acccess/Collision Detection** * Determines which computer should used a shared cable at a given moment. * Was popular when HUBs were still used, not as common anymore.

Answer 140

**EIGRP-Enhanced Interior Gateway Routing Protocol** * A proprietary Cisco routing protocol that has aspects of both distance vector & link-state protocols.

Answer 141

**When does incident response come into play?** * When incidents that take place can be stopped, contained, and remediated without outside resources.

Answer 142

**NetBIOS** * Operates at the session layer of the OSI model * This protocol creates and manages connections based on the names of the computers involved.

Answer 143

**10GBase LR/LW (Long Range/Long Wavelength) Summary** * Single Mode Fiber * 1310nm Wavelength * Commonly LC Connectors * 10 km distance

Answer 144

**SSL VPN** * A type of VPN that uses SSL encryption. * Clients connect to the VPN using a standard web browser, with the traffic being secured using SSL. * The two most common types are: * SSL Portal VPNs * SSL Tunnel VPNs

Answer 145

**Remote Authentication Dial-In User Service (RADIUS)** * The better known of the two AAA standards and, as its name implies, was created to support ISPs with hundreds if not thousands of modems in hundreds of computers to connect to a single database. * Every RADIUS setup is made of 3 devices: * RADIUS Server- Has access to a database of usernames & passwords. * A number of *Network Access Servers* that control modems. * A group of systems that in some way connect to the network. * UDP Ports 1812 & 1813 * UDP Ports 1645 & 1646

Answer 146

**Programmable Logic Controller (PLC)** * A computer that controls a machine according to a *set order of steps.*

Answer 147

**Discrestionary Access Contorl (DAC)** * Based on the idea that a resource has an ownser who may at his/her discretion assign access to that resource.

Answer 148

**Bluejacking** * The process of sending unsolicited messages to another Bluetooth device.

Answer 149

**Virus** * A program that has two jobs; to replicate & to activate.

Answer 150

**Authoritative Name Server** * A DNS server for the entire domain. Usually has a single zone that lists all the hostnames on the domain and their corresponding IP addresses. * It can support one or more domains, depending on how powerful the server is and the size of the domain.

Answer 151

**Top Level Domain (TLD)** * Displayed at the far right of a FQDN, examples include .com, .org, .net, .edu, .gov, .mil, .int & country codes such as .us, .eu etc. * Managed by top level DNS servers.

Answer 152

**IMAP-Internet Message Access Protocol** * Port 143 TCP * A newer alternative to POP3, it recieves email fromt he server in the same way. However, it defers in that it supports folder creation on the server and allows devices to syncronize the same email across multiple devices. * It is currently on version 4

Answer 153

**Statement/Scope of Work** * A legal contract between a vendor & customer that defines services & products the vendor agrees to supply & the time frames in which to supply them.

Answer 154

**T-Carriers**

Answer 155

**DNAT-Dynamic Network Address Translation** * Allows many copmuters to share a pool of routable IP addresses that the number fewer than the computers.

Answer 156

**Application Layer-OSI Layer 7** * Refers to the code built into an OS that allows a program to communicate with it rather than the programs themselves. ie. API

Answer 157

**Stateless DHCPv6** * Relies on router advertisements to give some information to hosts, making small changes to what the router advertisements would normally show, such as the address of the DNS server.

Answer 158

**V Standards** * Define the speeds at which modems can modulate. As well as how modems compress data and perform error checking when they communicate.

Answer 159

**HTTP-Hyper Text Transfer Protocol** * Port 80 TCP & UDP * Extremely fast protocol used for network file transfers on the world wide web.

Answer 160

**Change Management** * The process of creating change in your infrastructure in an organized, controlled, safe way.

Answer 161

**Tunnel Setup Protocol (TSP) & Tunnel Info & Control (TIC)** * These protocols setup the tunnel and handle configuration as well as login.

Answer 162

**Demarcation Point** * Physical location of the connection that serves as the dividing line of responsibility for the functioning of a network.

Answer 163

**Common Internet File System (CIFS)** * The protocol that NetBIOS used to share folders and printers. Still very common, even in UNIX/Linux systems.

Answer 164

**10BaseT Summary** * Speed: 10 Mbps * Signal: Baseband * Distance: 100 meters * Node Limit: 1024 Nodes per hub/switch * Topology: Star-bus * Cable Type: CAT 3 or better UTP w/ RJ-45 * Only requires 2 pair

Answer 165

**Frame Relay** * An extremely efficient packet-switching standard, designed for and used primarily with T-Carrier lines.

Answer 166

**Edge Devices** * A piece of hardware that has been optimized to perform a task.

Answer 167

**Port Numbers** * 0-1023 Are well-known port numbers * 1024-49151 Are registered port numbers * 49152-65535 are Dynamic or Private port numbers

Answer 168

**Hash or Cryptographic Hash Function** * Typically used for providing integrity in data. * A mathematical function that you run on a string of binary digits of any length that results in a value of some fixed length. * Checksum * Message Digest * No matter how long or short the input, the output is always the same length.

Answer 169

**Remote Access Policy** * Enforces rules on how and when and from what device users can access company resources from remote locations.

Answer 170

**Internet-TCP/IP Layer 2** * Anything dealing with pure IP packets * Routers

Answer 171

**IPv4\>\>IPv6 Tunneling Standards** 1. 4 to 6 2. 6 in 4- Can traverse IPv4 NAT 3. Teredo- Can travers IPv4 NAT 4. Miredo- An open source implementation of Teredo for Linux and some other UNIX based systems.

Answer 172

**Storage Area Network (SAN)** * A server that can take a pool of hard disks and present them over a network as any number of logical disks. * **_Three Main Types:_** * Fibre Channel (FC) * Internet Small Computer System Interface (iSCSI) * InfiniBand (IB)

Answer 173

**Trojan Horse** * A piece of malware that looks or pretends to do one thing while, while at the same time, doing something evil. * Does not replicate.

Answer 174

**Pathping** * Combines features of both ping and traceroute

Answer 175

**Symmetric-Key Algorithm** * Any encryption that uses the same key for both encryption and decryption

Answer 176

**Link or Network Access-TCP/IP Layer 1** * MAC Addresses * Physical connections * NIC's * Switches * Combines Layers 1&2 of the OSI Model

Answer 177

**Terminal Access Controller Access Control System Plus (TACACS+)** * A protocol developed by Cisco to support AAA in a network with many routers and switches. * TCP 49

Answer 178

**API-Application Programming Interface** * Provides a standard way for programmers to enhance or extend an apps abilities.

Answer 179

**Certifiers** * Tests a cable to make sure it can handle its rated amount of capacity.

Answer 180

**802.3z Standard** * Defines the standard for Ethernet over Fiber @ 1Gbps

Answer 181

**NTP-Network Time Protocol** * Port 123 UDP * A protocol that gives the current time.

Answer 182

**Intrusion Protection System(IPS)** * Similar to IDS but differs in that it sits directly in the path of low for network traffic, and can stop this traffic immediately.

Answer 183

**Basic Service Set Identifier (BSSID)** * Defines the most basic infrastructure mode network-- a BSS of one WAP and one or more wireless clients. * Same as the WAPs MAC

Answer 184

**Looking-Glass Site** * Remote servers accessible with a browser that contain common collections of diagnostic tools such as ping and traceroute, plus some border gateway protocol query tools.

Answer 185

**Load Balancing** * The process of making a bunch of servers look like a single server, creating a server cluster.

Answer 186

**Acceptible Use Policy (AUP)** * Defines what is and what is not acceptible to do on an organiztaion's computers. * **_Ownership-_** Equipment & any proprietary information stored on the organization's computers are the property of the organization. * **_Network Access-_** Users will only access information they are authorized to access. * **_Privacy/Consent to Monitoring-_** Anything user do on the organozations's computer is not private. The organization will monitor what is being done on computers at any time. * **_Illegal Use-_** No one may use an organization's computers for anything that breaks the law.

Answer 187

**SNAT-Static Network Address Translation** * Maps a single routable (not private) IP address to a single machine, enabling you to access that machine from outside the network.

Answer 188

**Nonrepudiation** * Means that a person cannot deny having taken a specific action. * Verifies the sender.

Answer 189

**Unicast** * A way to send packets from one computer, directly to another computer.

Answer 190

**Risk Management** * The process of how organizations deal with the bad things that take place on their networks.

Answer 191

**Role-Based Access Control (RBAC)** * The most popular used in file sharing. * Defines a user's access to a resource based on the roles a user plays in the netowrk environment.

Answer 192

**Wired Equivalent Privacy (WEP)** * A wireless security protocol that uses a 64- or 128-bit encryption algorithm to scramble data frames. * No longer secure.

Answer 193

**OSPF-Open Shortest Path First** * The most commonly used IGP in the world. * Most large enterprises use OSPF. * Based on the link-state algorithm. * Only got support for IPv6 in it's most recent update.

Answer 194

**Asyncronous Transfer Mode (ATM)** * A network technology that runs at speeds between 25 & 622 Mbps using fiber-optic cabling or CAT5 or better UTP. * Packet-Switching technology

Answer 195

**Designing a Basic Network** 1. List of requirements 2. Device types/requirements 3. Environment limitations 4. Equipment limitations 5. Compatibility Requirements 6. Wired/wireless considerations 7. Security considerations

Answer 196

**Non-Persistent Agent** * A small agent that scans only for the queried conditions, is downloaded and run. If the query is satisfied that the station needing access is acceptible, connection is granted and the node can access the production network. * When the node diconnects from the network and leaves the portal site, the agent is released from memory.

Answer 197

**Datagram TLS(DTLS) VPNs** * Used to optimize connections for delay-sensitive applications, such as voice or video over a VPN.

Answer 198

**Preamble** * A 7-byte series of alternating 1s & 0s followed by a 1-byte "start frame" delimeter. * This lets a NIC know that there is incoming data.

Answer 199

**Neighbor Discovery Protocol (NDP)** * An IPv6 protocol that enables hosts to configure automatically their own IPv6 addresses and get configuration information like routers and DNS servers. 1. Neighbor Solicitation-request 2. Neighbor Advertisement-answer 3. Router Solicitation-request 4. Router Advertisement-answer

Answer 200

**ARP Cache Poisoning** * Attacks that target the ARP cache on hosts & switches.

Answer 201

**Fully Qualified Domain Name (FQDN)** * The complete DNS name of a system, from it's hostname to the top-level domain name. * Textual nomenclature to a domain-organized resource. It is written left to right, with the host name on the left, followed by any hierarchial subdomains within the top-level domain on the right. Each level is seperated from any preceding or following layer by a (.).

Answer 202

**NAT-Network Address Translation** * Hides the IP addresses of computer on the LAN but still enables those computers to communicate with the broader internet.

Answer 203

**UDP-User Datagram Protocol** * Does not achieve "connection" before sending data, but instead uses a send it and forget it methodoligy of sending data. * Can be unreliable.

Answer 204

**Physical Layer-OSI Layer 1** * Physical portions of a network that dat travels through. * Cabling

Answer 205

**Logic Bomb** * Code written to execute when certain conditions are met.

Answer 206

**Kerberos** * An authentication protocol for TCP/IP networks with many clients all connected to a single authenticating server. * Microsoft adopted it as the authentication protocol for all Windows networks using a domain controller. * TCP & UDP 88 * Key Distributing Center (KDC) * _Authentication Server (AS)-_ Contacted by the client and issues a Ticket-Granting-Ticket (TGT) back to the client. *--Authentication* * Short lifespan (10 hours by default) * _Ticket-Granting Service-_ Client then sends the TGT here and is issued a timestamped token back. *--Authorization* * Token holds Security Identifier (SID)-Which the client uses to access resources on the domain.

Answer 207

**Code-Division Multiple Access (CDMA)** * Came out shortly after GSM but is not compatible with GSM's TDMA, as it uses a spread spectrum form of transmission. * Changes the frequency used by each user. * Originally considered 2G and does not use SIM cards.

Answer 208

**NAT64** * A transition mechanism that embeds IPv4 packets for network traversal.

Answer 209

**Interface Monitors** * Track the bandwidth and utilization of one or more interfaces on one or more devices. **_Items Tracked:_****__** * Bandwidth/Throughput * Utilization * Packet Drops * Error Rate * Discards * Interface Resets

Answer 210

**Mandatory Access Control (MAC)** * Every resource is assigned a label that defines its security level. If the user lacks that security level, he/she does not get access. * Oldest and least common

Answer 211

**Malformed Packets** * When an attacker uses a malicious program to inject unwanted information into packets in an attempt to break another system.

Answer 212

**Computer Forensics** * Secure the area * Document the scene * Collect Evidence * Interface with authorities

Answer 213

**DNS Record Types** * _"A" Record-_ Assigned to each individual host, they are the workhorse of any forward lookup zone. Web servers will typically get a "www" A Record. * These are also the most common DNS record. * _Start of Authority(SOA)-_ Defines the primary name server in charge of the forward lookup zone. * _Name Server Record(NS)-_ Shows the primary name server. * _Canonical Name(CNAME)-_ Acts like an alias. * _AAAA Record-_ The equivalent of an A Record but for IPv6. * _MX Records-_ Used exclusively by SMTP servers to determine where to send mail. * Stands for *Mail eXchanger* * _SRV Records-_ A generic DNS Record that supports any type of server. * _TXT Record-_ Allow any text to be added to a forward lookup zone. * Can support protocols designed to prevent e-mail spoofing through solutions such as DomainKeys Identified Mail(DKIM) or Sender Policy Framework(SPF). Which enable domains to verify that an e-mail being recieved by a 3rd-party e-mail server is sent by a legitimate server within the domain.

Answer 214

**netstat** * Displays information on the current state of all the running IP processes on a system.

Answer 215

**Internet Protocol Security (IPsec)** * An authentication & encryption protocol suite that works at the internet/network layer & should become the dominant authentication & encryption protocol as IPv6 continues to roll out and replace IPv4. * Works in 2 modes * _Transport-_ Only the payload of the IP packet is encrypted. The source and destination IPs are still visible. * _Tunnel-_ The entire IP packet is encrypted and then placed inside an IPsec endpoint, where it is then fully encapsulated inside another IP packet before being sent.

Answer 216

**Packet Sniffer** * A software tool that queries a network interface and collects packets.

Answer 217

**Patch Antenna** * Flat, plate-shaped antennas that generate a half-sphere shaped beam.

Answer 218

**Time Domain Reflectometer (TDR)** * A TDR can tell you where in a cable a break is. * Optical TDR (OTDR)- Does the same thing for fiber optic cables.

Answer 219

**Proxy Server** * Sits in between clients and external servers, essentially pocketing the requests from the clients for server resources and making those requests itself. * Will cache information to increase response time and check for viruses.

Answer 220

**IP Address Management (IPAM)** * A software that includes at a minimum a DHCP server and a DNS server that are specially desinged to work with one another to administer IP addresses to a network and prevent syncing issues.

Answer 221

**Protocol Analyzer** * A program that processes capture files from packet sniffers and analyzes them based on your monitoring needs.

Answer 222

**Network Attached Storage (NAS)** * Essentially a dedicated file server that has its own file system & typically uses hardware and software designed for serving and storing files.

Answer 223

**Differentiated Services** * The underlying architecture that makes all of the QoS stuff work. The cornerstone of DiffServ is two pieces of data that go into every IP header on every piece of data. * Differentiated Services Code Point (DSCP) * Explicit Congestion Notification (ECN) * The first 6 bits are DSCP * ECN is a 2-bit field and can hold the following 4 values: 1. 00= Not QoS aware (default) 2. 01= QoS aware, no congestion 3. 10= Qos aware, no congestion 4. 11= Qos aware, congestion encountered

Answer 224

**IIS-Internet Information Services** * Microsoft's web server program for managing web servers.

Answer 225

**Multiplexer** * Takes a circuit and combines it with a few hundred other circuits into a single complex cicuit on one wire. * Demultiplexer- On the other end, this undoes the multiplexing. * Modulation technique

Answer 226

**Multi-Source Agreement** * A document that details the interoperability of hardware components between various manufacturers.

Answer 227

**Secure Copy Protocol (SCP)** * One of the first protocols used to securely transfer data between two hosts. * Mostly replaced by SFTP

Answer 228

**Encryption** * Means to scramble, mix up, or change data in a way that someone with malicious intent can't read it, but also be able to unsramble on the other end in a fairly easy manner.

Answer 229

**IPv4** * IPv4 is a 32-bit IP address spcae, creating about 4 billion IP addresses.

Answer 230

**Application-TCP/IP Layer 4** * Combines features of the Session, Presentation, & Application Layers of the OSI model.

Answer 231

**SAT-Source Address Table** * A table created internally by a switch in order to more effectively send data. * Stores MAC addresses.

Answer 232

**SFP-Small Form-Factor Pluggable** * A smaller modular tranceiver similar to GBIC, that supports all the same networking standards.

Answer 233

**DNS-Domain Name System** * Port 53 TCP & UDP * A system that translates domain names into IP addresses. * Needed to direct traffic to it's destination.

Answer 234

**1000BaseLX (Longer Range) Summary** * Speed: 1000 Mbps * Signal: Baseband * Distance: 5 km or up to 70 km using repeaters * Cable Type: Single Mode Fiber using lasers & LC or SC connectors

Answer 235

**Supervisory Control & Data Aquisition (SCADA)** * A subset of ICS, and generally has the same basic components of a DCS, but differs in two very important ways: * SCADA is designed for large-scale, distributed processes such as power grids, pipelines, and railroads. * Due to the distance involved, a SCADA system must function with the idea that remote devices may or may not have ongoing communication with the central control.

Answer 236

**Mantrap** * An entryway with two successive locked doors and a small space between them providing one-way entry or exit.

Answer 237

**Subscriber Identity Module (SIM)** * Identifies the phone, enabling access to the cellular networks, and stores some other info.

Answer 238

**H.323** * Port 1720 TCP * A VOIP Standard that handles the initiation, setup adn delivery of VOIP sessions. * Competes with SIP

Answer 239

**IP → Binary Conversion Challenge** * Study partner choose an IP address and have the studee convert this to binary by hand. * Use a calculator to confirm after the studee completes this work by hand.

Answer 240

**Coaxial Cable Types**

Answer 241

**Multiple Input/Multiple Output** * Allows devices to make multiple simultaneous connections called streams.

Answer 242

**SNMP-Simple Network Management Protocol** * Port 161 & 162 UDP * Standard protocol for collecting & organizing infromation about managed devices on IP networks & for modifying that information to change device behavior. * Uses agents to collect network information from a Management Information Base(MIB), SNMPs version of a server.

Answer 243

**Windows Domain** * A group of computers controlled by a computer running Windows Server which is configured as a domain controller.

Answer 244

**IP Packet****_{consists of what?}** * Only makes it to layer 3 OSI or Layer 2 TCP/IP 1. Destination IP (Type _{ie. IPv4 or IPv6}) 2. Source IP 3. Destination Port 4. Source Port 5. Data _{minimum of 64 bytes}

Answer 245

**Stream Cypher** * Less Common * Typically faster * Takes a single bit at a time and encrypts on-the-fly. * More popular whenever data came in long streams (ie. older wireless networks or cell phones)

Answer 246

**Wi-Fi Protected Access 2 (WPA2)** * An update to the WPA protocol that uses the Advanced Encryption Standard (AES) algorithm, making it much harder to crack.

Answer 247

**Authentication** * To verify that whoever is trying to access the data is who you want accessing that data.

Answer 248

**Internet Authentication Service (IAS)** * The RADIUS server built in with most versions of Microsoft Windows Server operating systems.

Answer 249

**When does disaster recovery come into play?** * If an incident can no longer be contained, causing significant damage or danger to the immediate infrastructure.

Answer 250

**Transport-TCP/IP Layer 3** * Handles the communication between devices & the breaking down & packaging of information. * Chooses TCP/UDP * Portions of the Session & Transport Layers of OSI

Answer 251

**Metric** * A relative value that routers use when they have more than one route to get to another network.

Answer 252

**Infrastructure Mode** * Uses one or more WAPs to connect all nodes centrally.

Answer 253

**MMF-Multi-Mode Fiber** * A fiber optic cable that uses LEDs. * Experiences modal distortion, that is, signals sent at the same time don't arrive at the same time because the paths differ slightly in length. * Cannot travel as far as Single Mode Fiber.

Answer 254

**STP Types-Shielded Twisted Pair Types/Codes** 1. F/= Foil surrounding all pairs 2. S/= Braid screen surrounding all pairs 3. SF/= Foil & Braid surrounding all pairs 4. U/= Nothing surrounding all pairs 5. /UTP= Nothing surrounding each pair 6. /FTP= Foil surrounding each pair

Answer 255

**Latency** * When data stops moving for a moment due to an AP being unable to do the work.

Answer 256

**PAT-Port Address Translation** * The most common type of NAT * Uses port numbers to map traffic from specific machines in the network.

Answer 257

**Public-Key Cryptography** * Used for encryption * Has two keys. A public and a private that are different. * The private key is kept on the computer that creates the keys and used to decrypt the data once recieved. * The public key is sent to a user that will use it to encrypt data before it is sent.

Answer 258

**Secure Hash Algorithm (SHA)** * Used commonly in integrity * Has different versions * SHA-1 (considered unsecure now) * SHA-2 (most commonly used and has different versions within it) * SHA-224 --\> SHA-2 with a 224-bit checksum * SHA-256 --\> SHA-2 with a 256-bit checksum * SHA-384 --\> SHA-2 with a 384-bit checksum * SHA-512 --\> SHA-2 with a 512-bit checksum * SHA-3 (built for the future but not yet widely used, also has different versions) * SHA3-224 * SHA3-256 * SHA3-384 * SHA3-512

Answer 259

**HTML-Hypertext Markup Language** * An ASCII-based script-like language for creating hypertext documents like those on the World Wide Web. * The current version is HTML5

Answer 260

**Packet Flow Monitoring** * Used for monitoring traffic between 2 devices.

Answer 261

**Real-Time Streaming Protocol (RTSP)** * A protocol that takes advantage of RTP by running on top of it. * It has many features beneficial to streaming video, such as the following: * Run * Pause * Stop * TCP 554

Answer 262

**Software Defined Networking (SDN)** * Cuts the control plane of the individual devices out of the picture and lets an all-knowing program called the network controller dictate how both the physical and virtual network components move traffic through the network.

Answer 263

**Infrared (IR)** * Consists of a device that emits coded infrared light, and a second device that reads the code & acts upon it.

Answer 264

**Syncronus Optical Network (SONET)** * An american fiber carrier standard for connecting fiber-optic transmission systems. * SONET was proposed in the mid-1980s and is now an ANSI standard. * SONET defines the standards at the physical layer of the OSI 7-Layer Model.

Answer 265

**Tunnel Broker** * A vendor that creates the actual tunnel and usually offers a custom-made endpoint client for you to use.

Answer 266

**Distance Vector** * When a router calculates the total cost to get to a network ID and compare that cost to the total cost of all other routes to get to that same network ID. The router then chooses the route with the lowest cost.

Answer 267

**Management Infomration Base (MIB)** * Used to categorize the data that can be queried using SNMP.

Answer 268

**Service Set Identifier (SSID)** * A standard name applied to the BSS or IBSS to help a connection happen.

Answer 269

**Optical Carrier (OC)** * Standards that denote the optical data-carrying capacity (in bps) of fiber-optic cables in networks conforming to the SONET standard.

Answer 270

**Banner Grabbing** * Having found an open port, a malicious user may probe a host's open ports to learn details about running services. Potentially gaining additional information & access in the process.

Answer 271

**SIP-Session Initiation Protocol** * Port 5060 TCP & UDP * Port 5061 TCP over TLS * A signaling protocol for controlling voice & video calls over IP. * Competes with H.323 for dominance. * Runs on top of RTP

Answer 272

**Network Layer-OSI Layer 3** * Communicates using IP packets * Routers * Sometimes switches

Answer 273

**Network Access Policy** * Defines who may access the network, how they may access the network, and what they can access.

Answer 274

**Cloud Delivery Models** * **_Public Cloud-_** Used to describe software, platforms, and infrastructure delivered through networks that the general public can use. * **_Private Cloud-_** When a business wants some of the flexibility of the cloud, needs complete ownership of its data, and can afford both, it can build an internal cloud the business owns. * **_Community Cloud-_** Like a private cloud paid for and used by more than one organization. * **_Hybrid Cloud-_** Created by connecting some combination of public, private, and community clouds, allowing communication between them.

Answer 275

**Authorization** * Defines what an authenticated person can do with data.

Answer 276

**EGP-External Gateway Protocol** * A generic name for how autonomous systems communicate with one another.

Answer 277

**Physical Wireless Issues** 1. **_Absorbtion-_** Non-metallic building materials such as brick or sheetrock absorb radio signals, greatly reducing or in some cases eliminating Wi-Fi signal completely. 2. **_Reflection-_** Metallic materials like pipes, radiators, metal doors and window frames will reflect radio waves, sending them in unexpected directions. 3. **_Refraction-_** Glass or anything that bends radio waves as the waves pass through them.

Answer 278

**Authentication, Authorization, & Accounting (AAA)** * Designed for the idea of port authentication---The concept of allowing remote users authentication to a particular point of entry (a port) to another network.

Answer 279

**Privileged User Agreement Policy** * A privileged user has access to resources just short of those available to administrators.

Answer 280

**Access Control List (ACL)** * A clearly defined list of permissions that specifies what an authorized user may perform on a shared resource.

Answer 281

**Protocol Abuse** * Anytime you do things with a protocol that it wasn't meant to do and it ends up creating a threat.

Answer 282

**Platform as as Service (PaaS)** * Gives programmers all the tools they need to deploy, administer, nd maintain a web application.

Answer 283

**Security Policy** * A written document that defines how an organization will protect its IT infrastructure.

Answer 284

**CAT Cabling**

Answer 285

**Layer 2 Tunneling Protocol(L2TP)** * Took all the good features of PPTP and a Cisco protocol called Layer 2 Forwarding (L2F) and then added support to run on almost any type of connection. * Also changed the endpoint for the site you are connecting to from a server program to a VPN capable router. * Called a VPN Concentrator * Has no authentication or encryption, but instead uses IPsec for all security needs.

Answer 286

**SFTP-SSH File Transfer Protocol** * Port 22 TCP & UDP * Provides file access, transfer & management over any reliable data stream. It uses SSH to do this in a secure way.

Answer 287

**Point-to-Point Protocol (PPP)** * Enables two point-to-point devices to connect, authenticate with a username/password, and negotiate the network protocol the two devices will use. * Comes with two methods of user authentication: * Original- _Password Authentication Protocol (PAP)-_ Simply transfers the UN/PW over the connection in plaintext. * Safer- _Challenge Handshake Authentication Protocol (CHAP)-_ Relies on hashes based on a shared secret, usually a pssword that both ends of the connection know. * When the initiator of the connection makes the initial request, the authenticator creates some sort of challenge message. * The initiator then makes a hash using the password and sends that to the authenticator. * The authenticator, in turn, compares that value to its own hash calculation based on the password. * If they match, the intitiator is authenticated. * _MS-CHAP-_ Microsoft's version of this protocol, is the most secure.

Answer 288

**Basic Service Set (BSS)** * In wireless networking, a single access point servicing a given area.

Answer 289

**Botnet** * A group of computers under the control of one operator, used for malicious purposes. * Compromised systems within a botnet are called zombies.

Answer 290

**Memorandum of Understanding (MOU)** * A document that defines an agreement between two parties in situations where a legal contract wouldn't be appropriate.

Answer 291

**DNS Security Extensions (DNSSEC)** * An authorization integrity protocol designed to prevent bad guys from impersonating DNS servers.

Answer 292

**Routing and Remote Access Service(RRAS)** * A specila remote access server program on a remote Windows server that acts as the server endpoint in a PPTP connection.

Answer 293

**Regional Internet Registries (RIR)** * Passes out IPv6 addresses

Network+ Study Cards Flashcards

(317 cards)