Networks Flashcards

(88 cards)

1
Q

OSI acronym

A

_ Open Systems Interconnection
_ Developed by ISO (International Standards Organization) – [mnemonic: I happened before O]
_ developed (2) to provide greater granularity than TCP/IP; and (2) to reduce proprietary nature of networking and increase innovation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

OSI model layers

A

(Remember layer numbers too)
_ (7) application - network applications; e.g. HTTP, FTP, DNS, firewall
_ (6) presentation - data encryption, character encodings, format transformations. E.g. SSL/TLS
_ (5) session - connections, sessions, authentication (distinguishes connections)
_ (4) transport - (segmenting, ports, retries) responsible for reliable delivery, ensuring delivery to the correct application; segments outdoing data, reassembles incoming data; retransmissions as needed (recognizes ports)
_ (3) network - routes packets (e.g based on IP address) and transmits data between hosts in different networks; e.g. router, some switches
_ (2) data link - creates ‘frame’ with MAC address; error-free delivery of data; e.g. network card, switches, bridges
_ (1) physical

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

TCP/IP acronym

A

_ Transmission Control Protocol

_ Internet Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

TCP/IP model layers

A

_ application (includes OSI presentation and session) - e.g. HTTP, FTP, Telnet, NTP, DHCP, PING, SMTP, DNS
_ transport - end-to-end transport of data; e.g. TCP, UDP
_ network - logical transmission; e.g. IP, ARP, ICMP, IGMP
_ network interface (includes OSI data link and physical) - e.g. ethernet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

TCP vs UDP

A

_ transmission control protocol vs user datagram protocol
_ both at the transport layer
_ TCP ensures delivery of all data, redelivering if necessary
_ UDP does not redeliver data, better for streaming
_ TCP uses a connection, UDP is connectionless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Layer responsible for reliable delivery of data, including retransmissions

A

transport

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Layer that segments and assembles data

A

transport

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Layer that performs addressing

A

network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Layer that performs routing

A

network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Layer responsible for packets

A

network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Layer that makes decisions about forwarding frames

A

Data link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Router

A

_ network layer
_ connects two or more networks, forwarding data packets between them according to contents of the packets
_ can connect web server to DB server
_ usually contains a switch in the form of a wired or wireless Ethernet connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Bridge

A

_ Data link layer
_ connects multiple networks, like a router
_ simply forwards packets without examining them
_ faster than routers
_ not used much any more; routers and switches are mostly used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Switch

A

_ Data link and network layers
_ connects devices within a network
_ a more complex version of a hub, providing security measures and conveying data without other devices noticing
_ keeps traffic from source and destination ports from interfering with other devices on the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

firewall

A

_ can be software or hardware
_ can operate at multiple layers, except the physical layer
_ data link - what traffic should go between the networks according to IP address
_ transport - allow or block traffic by port or by combination of address and port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Layer 4 firewall

A

_ a firewall that operates at the transport and network layers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Layer 7 firewall

A

_ a firewall that operates at the application, presentation, and session layers
_ can encrypt/decrypt and examine data
_ can filter based on combination of IP address, port, and data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

repeater

A

_ physical layer

_ strengthens, replicates, regenerates weakened signals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Range extender

A

_ a repeater than inputs a distorted Wi-Fi signal and transmits to formerly dead zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

hub

A

_ physical layer
_ connects a router to a network
_ transmits all packets to all devices on the network
_ e.g. USB hub
_ devices on a hub listen for traffic intended for them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

modem

A

_ physical (module/demodulate) and data link layers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Twisted pair cables

A

_ UTP - unshielded twisted pair; invented by Alexander Graham Bell in 1881; telephone lines
_ STP - shielded twisted pair (extra shielding to prevent electrical interference between the wires)
_ contains pairs of twisted wires
_ the tighter twisted, the less electrical interference between them
_ the tighter twisted, the higher the category
_ conveys analog data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Twisted pair connectors

A

_ RJ11 connector supports two pairs of wires

_ RJ45 connector supports four pairs of wires

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Categories of twisted pair cables

A

(I think these are all unshielded)
_ CAT3 - old analog phones 10 Mbps up to 100 m
_ CAT4 - old token ring standard 16 Mpbs up to 100 m
_ CAT5 - Ethernet in the 90s and early 2000s; 100 Mpbs up to 100 m
_ CAT5e (modern) - four twisted pairs; 1 Gbps up to 100 m
_ CAT6 (modern) - four twisted pairs; 1 Gbps for 100 m; 10 Gbps for 55 m; can use UTP in racks because distances are short
_ CAT6a - 10 Gbps up to 100 m; most common today

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Fiber optic cable
_ long distances at high speeds _ glass or plastic threads _ carry data digitally _ more durable and more secure than electrical (protected from weather) _ single mode cable - one fiber at higher bandwidth and 50x the distance of multi-mode; runs through ocean between continents; more expensive to use _ multi mode cable - multiple fibers; cheaper; <= 500 m; thick fibers; run wider frequency of light up to a few miles; used within a LAN
26
Fiber optic connectors
_ ST - “straight tip connector”; common with multimode until the mid 2000s; replaced by LC _ SC - “standard connector”; larger than LC _ LC - “lucent connector”; smaller than SC; supports more ports per unit space than SC; most common
27
Coax cable
_ made of copper _ metal shield to block interference, particularly from nearby metals _ used by cable TV companies
28
RG-6
_ coax cable _ connect satellite to TV _ modern, higher bandwidth than RG-59
29
RG-11
_ coax cable _ thick wire in middle, with shielding _ go long distances because of thick wire _ doesn’t bend well
30
Crossover cable
_ connects two devices of the same type directly to each other _ computers do this via network interface controllers (NICs) or switches _ transmit of one wire connects to receive of the other _ not much used any more
31
Patch cable
_ connects device to a wall outlet | _ look like crossover and UTP cables
32
Ethernet standards
_ 802.3*
33
Wi-Fi standards
_ 802.11* _ 802.11i (aka WPA2) published in 2004 to replace WPA _ 802.11-2016 - SAE (simultaneous authentication of equals) to exchange the network key; eliminates the need to tell other people of the passphrase in personal mode _ 802.11w - encryption management frames (for WPA3)
34
Wireless networking general rules
_ the higher the frequency, the higher the bandwidth, and the shorter distance it travels _ 2.4 GHz and 5 GHz bands are unregulated _ many devices (microwave ovens, telephones, etc.) operate in the 2.4 GHz range and produce interference
35
MAC
_ media access control | _ has a data link layer address
36
IP address
_ network layer address
37
ICMP
_ Internet Control Message Protocol | _ network layer
38
ping
_ sends an ICMP echo request to a host and listens for a reply _ reports time to get a response (latency) _ times out if no response, indicating either connectivity issues or firewall issues _ -c n sets the ping count _ can ping using IP or FQDN (fully-qualified domain name) or short name
39
traceroute/tracert
_ command _ trace the route an IP packet takes to a destination _ displays each hop’s (router’s) IP address and latency _ traceroute on Linux; tracert on Windows _ can help show where a ping is failing _ needs superuser privileges
40
tracepath
_ command _ like traceroute, shows path of packet from source to destination _ doesn’t need superuser privileges
41
ipconfig/ifconfig
_ ipconfig on windows _ ifconfig on Linux/UNIX, also running at boot time _ provides all current TCP/IP network configurations of a computer; how interfaces are setup on a given machine _ provides IP, subnet mask, default gateway for each network adapter _ ipconfig shows even disabled devices, ifconfig only shows enabled devices _ /all option shows MAC address, DHCP status, lease info _ release command on windows releases connections and renews adaptors
42
ARP
_ address resolution protocol _ command displays the IP-to-MAC address mappings for hosts in the ARP cache _ addresses discovered by broadcasting request and noting replies _ can add, remove, modify entries in the ARP cache _ can’t broadcast through a router, which retains the MAC address of the router (huh?)
43
netstat
_ network statistics command _ info about active ports _ useful for capacity management _ netstat -r displays routing info for network adapters
44
nslookup
_ shows limited DNS info | _ displays name-to-IP-address mappings
45
dig
``` _ domain information groper (command) _ queries DNS name servers _ receives full DNS response info _ troubleshoots DNS problems _ replacement for nslookup ```
46
whois
_ shows who owns a domain or a block of IP addresses
47
route
_ command _ shows current route tables on a local host _ used by local host to determine where to send traffic _ 0.0.0.0 is the default gateway, where the router sends thing not otherwise defined in the routing table _ add or remove routes
48
scp
_ secure copy protocol command | _ uses SSH to copy files
49
ftp
_ FTP is unencrypted _ FTPs is encrypted using SSL/TLS (also used by HTTPS) _ uses TCP for reliability _ needed over distances where transmission errors may occur
50
SSL vs TLS
_ secure sockets layer _ transport layer security _ SSL has an inherent vulnerability, so replaced by TLS _ both exchange a symmetric key via an asymmetric key cipher; the latter being computationally expensive, while the former makes for faster encryption/decryption
51
tftp
_ trivial file transfer protocol _ transfers file from client to server or server to client using UDP, which does not retransmit _ useful on reliable, local networks
52
finger
_ display info about one or more users on a remote system | _ shows username and last login
53
nmap
``` _ network mapper command _ scans network for hosts and open ports _ used to see what is deployed _ helpful for vulnerability analysis _ not native to any OS, but downloadable ```
54
tcpdump
_ displays TCP/IP packets and other packers on the network _ a form of protocol analyzer (aka packet sniffer) _ shows packets in human-readable form for troubleshooting or security analysis _ not native to any OS, but downloadable
55
telnet/ssh
_ SSH = secure shell; encrypted _ telnet = unencrypted _ manage accounts and devices remotely
56
PAN
``` _ personal area network _ within 20-30 m _ around a person and their devices _ often via Bluetooth or USB _ can act as a gateway to the Internet _ e.g. Apple products ```
57
LAN
_ local area network _ popularized in the 1960s in research labs _ supported TCP/IP in the 1980s _ can be wireless via Wi-Fi _ uses router or switch to manage traffic
58
WLAN
_ wireless LAN | _ can act as a gateway to the internet
59
SAN
_ storage area network _ gives servers access to storage devices _ typically dedicated to storage devices _ reduces interference with regular LAN traffic _ might use non-traditional protocols
60
CAN
_ campus area network _ networks multiple LANS over a limited area _ each LAN usually limited to a single building or part of a building _ like a WAN, but smaller geographic area _ one entity usually owns all the LANs _ routers connect each LAN
61
MAN
_ metropolitan area network _ intermediate in size between a CAN and a WAN _ e.g. a city or metro area _ connects LANs owned by different organizations _ usually higher speed than would be available via WAN _ usually connected to a WAN
62
WAN
_ wide area network _ e.g. the internet _ technically, a network spanning political boundaries _ actually, a network that connects smaller networks _ organizations may use private WANs to minimize risk (e.g. banks)
63
peer-to-peer
_ aka P2P _ every machine can act as client or server _ e.g. Bitcoin, Tor
64
Bus topology
_ a line of devices connected by a shared cable _ no longer common _ e.g. connection of a cable modem to a router or a TV to a dish _ ends of the cable must be terminated with special resistors; absent them, the signals bounce back along the wire causing signal reflection and loss of communication _ the network is divided into segments that can be extended _ half-duplex _ all computers see all traffic; the more devices, the more collisions, making it exponentially harder to communicate _ when collisions occur, all devices must wait for the line to clear _ a break in the cable renders the whole network unusable
65
Half-duplex mode
_ send or receive, but not both at once | _ only one device at a time
66
Ring topology
_ a token passes around the ring indicating who can use the cable next _ the device with the token does some quick communication and can continue that communication the next time it receives the token _ rather than a single cable, one cable between devices, as the device forwards to the next cable _ more reliable than bus topology, but like bus topology, any break in the cable breaks the network
67
Dual ring topology
_ more reliable than single ring _ each computer has two network cards for propagating each ring _ if both rings are broken, the break can readily be fixed by turning the whole network into a single ring by rearranging two unbroken cables _ common in fiber optic networks, such as SONET (synchronous optical network)
68
Star topology
_ aka hub-and-spoke network _ a central device (e.g. an Ethernet switch) separately connects to each device on the network _ most common LAN configuration _ cables can be run through walls because they don’t need to go from computer to computer _ break in one cable only affects one device _ central switch is a single point of failure _ some WANs use star topology to connect remote offices to a central location
69
Mesh topology
_ full mesh = each node is connected to all other nodes _ partial mesh = each node connects to a subset of other nodes _ end points in mesh typically use Wi-Fi or radio signals so there aren’t a lot of wires _ routers can be wired in mesh to optimize traffic _ used for high availability _ if one node fails, connections are easily rerouted (aka “self-healing network”) _ e.g. the internet; wireless networks at home
70
Pros of centralization
_ can make sophisticated apps available on low-memory, low-clock-cycle devices _ can scale processing power as a function of need, not limited by the power of the end point _ can more easily secure all the data _ can more easily back up all the data _ data produced by one node need not be compatible with another node
71
Pros of decentralization
_ can operate without a network connection _ no single point of failure affecting everyone _ (not listed, but can’t be controlled by a few people)
72
Benefits of virtualization
_ readily install new (virtual) devices without needing more hardware _ move (virtual) devices without physically moving them _ increase app reliability by eliminating its dependence on hardware _ create whole app point-in-time snapshots for backup and recovery purposes _ change the computing, storage, and networking resources of the device dynamically as needed _ improved hardware utilization (previously, servers usually operated at 5%-15% utilization)
73
hypervisor
_ software that enables virtual hardware/machines _ can be, but need not be, an OS in itself (the “host” OS) _ the software emulates the hardware _ “guest” OSs run on the virtual hardware _ e.g. VMware, Microsoft Hyper-V, Linux KVM, Citrix XenServer
74
Type 1 hypervisor
_ aka “bare-metal” hypervisor _ an OS that dedicates the machine to virtualization _ very little UI; administered from another computer via a web-based portal _ e.g. VMware ESXi, open source KVM
75
Type 2 hypervisor
_ aka “hosted” hypervisor _ install as an app on top of an existing OS _ performance penalty for the level of indirection _ e.g VMware Workstation, VMware Fusion, Microsoft Hyper-V, Parallels Desktop
76
Benefits of cloud computing
_ on-demand _ self-service _ resource pooling _ elastic _ accessible _ measurable (charged for resources consumed) _ global reach (some sites are slow from other countries)
77
Examples of cloud computing platforms
_ Amazon AWS _ Google GCP (Google Cloud Platform) _ Microsoft Azure
78
Cloud service models
_ IaaS - infrastructure as a service _ PaaS - platform as a service _ SaaS - software as a service _ generically, XaaS, for anything shared as a service (directory service, backup, database -- DBaaS)
79
IaaS
_ infrastructure as a service _ access to physical servers, storage, networking _ offers virtual machines, server virtualization, storage virtualization, network virtualization _ customer is responsible for the OS _ provider not responsible for consequences of hardware failure; e.g. customer is normally responsible for backups and redundancy
80
Lift-and-shift approach
_ moving on-premise operations into the cloud | _ doesn’t take full advantage of the cloud, because it’s basically a transfer of local operations
81
VPC
_ virtual private cloud network | _ per customer, or to isolate testing from production
82
PaaS
_ platform as a service _ the cloud provider provides virtual servers and services _ frees the developer from managing scaling and storage _ e.g. web hosting
83
SaaS
_ software as a service | _ pretty much any network-based app
84
Private cloud
_ company owns and runs the cloud computing equipment, although it may be “co-located” (“co-lo”) in someone else’s data center _ sometimes requires for regulatory reasons, depending on what the company does
85
Public cloud
_ cloud provider company maintains the hardware for other companies _ the provider is sometimes able to provide better security than private customers can manage or afford _ multi-tenant
86
Community cloud
_ cloud jointly owned and operated by its tenants _ sometimes done by universities or governments _ cloud is “semi-private” for each tenant _ everyone shares maintenance and management
87
Hybrid cloud
_ combination private/public cloud _ usually when a private company extends their in-house data centers via a public cloud _ useful for extra resources from public cloud when needed _ useful for isolating regulated functions in private cloud _ the private cloud connects to the public cloud via VPN (over the internet) or a telecom’s WAN
88
multi-cloud
_ leveraging multiple cloud providers | _ done for different functions, for redundancy and flexibility, or to minimize expenses for certain functions