Section 15 OBJ 2.4: Network Services Flashcards
(51 cards)
File Server
Can be configured to allow the clients on the network to access the network and be able to read and write to its disk (file share)
Print Server
a server that could be a physical workstation or network infrastructure that provides printing functionality
Windows based file and print server:
relies on NETBIOS (137, 139) or SMB (445)
Linux or Unix based file and print server:
Samba - Provides the ability for a Linux or Unix server to be able to host files or printers that can then be used by Windows clients running the SMB protocol
IP-based File and Print Server / Cloud Printing
allows for printing anywhere in the world
Web Server
Any server that provides access to a website, generally through HTTP or HTTPS
Internet Information Services (IIS)
Extensible web server software, created by Microsoft (HTTP, HTTP/2, HTTPS)
Apache
Most popular way to run a webserver these days
Can use Linux, Unix, Mac, and Windows
NGINX
Reverse proxy, load balancer, mail proxy, and HTTP cache
faster than IIS and Apache
Uniform Resource Locator (URL)
combines the fully qualified domain name (FQDN) with a protocol at the beginning
Email Server
Servers that are set up to compose a message and send it to another user
Simple Mail Transfer Protocol (SMTP)
Specifies how emails should be delivered from one mail domain to another
Port 25
Post Office Protocol version 3 (POP3)
Older email protocol where you connect to your server, download messages, and process them on your local machine
port 110
Internet Message Access Protocol (IMAP)
Mail retrieval protocol capable of retrieving emails and keeping a copy on the server. Can also manage status of each email
Port 143
Microsoft Exchange
Mailbox server environment designed for Windows based domain environments
Authentication
occurs when a person’s identity is established with proof and is confirmed by the system
Five methods of authentication:
- something you know
- something you are
- something you have
- something you do
- somewhere you are
802.1x
Standardized framework used for port based authentication on wired and wireless networks
Lightweight Directory Access Protocol
a database used to centralize information about clients and objects on the network
port 389 unencrypted
port 636 encrypted
Active Directory
used to organize and manage the network, including clients, servers, devices, users, and groups
Remote Authentication Dial-In User Service (RADIUS)
provides centralized administration of dial-up, VPN, and wireless authentication services for 802.1x and the EAP
operates at the application layer
Uses UDP
Combines authentication and authorization
Does not support all network protocols
Has cross-platform compatibility
Terminal Access Control Access-Control System Plus (TACACS+)
proprietary version of RADIUS from Cisco that can perform the role of an authenticator in 802.1x networks
Uses TCP
Separates authentication, authorization, and accounting
Supports all network protocols
Exclusive to Cisco devices
Authorization
Occurs when a user is given access to a certain piece of data or certain areas of a building
Kerberos
Authentication protocol used by Windows to provide for two-way (mutual) authentication using a system of tickets
Accounting
Ensures the tracking of data, computer usage, and network resources is maintained
Typically kept in a log file
Telnet
Sends text-based commands to remote devices and is a very old networking tool
Not secure because everything is sent in plain text
Port 23
Secure Shell (SSH)
Encrypts everything that is being sent and received between the client and the server
Port 22