SECTION 4 : TCP/IP MODEL Flashcards

1
Q

How many layers in the TCP/IP model? And what is their names ?

A

Four.
Layer 5-6-7 are smashed together to form the application layer.
The transport layer is the same.
The network layer becomes the internet layer.
Datalink and physical are called the network interface layer.

Most modern computer networks are TCP/IP based.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the nerwork interface layer ?

A

Describes how to transmit bits across a network and déterminés how the network medium is going to be used.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the internet layer ?

A

Where data is taken and packaged into IP datagrams. IP, IMCP, ARP and reverse ARP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the transport layer ?

A

Defines the level of service and the status of the connection being used by TCP UDP or RTP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the application layer ?

A

Dictates how programs are going to interface with the transport layer by conducting session management.
Layer 5-6-7
HTTP, Telnet, FTP, SSH, SNMP, DNS, SMTP, SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a port ?

A

A logical opening on a system representing a service or application that’s listening and waiting for traffic.

It’s a room of a house (IP adress)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many ports ? And How many groupes ?

A

0 —> 65.535
Well-known and réserved ports (FTP,
25, 80) : 0 —> 1024
Ephemeral ports : 1024 —> 65.535

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does data transfer works works when it comes to ports ?

A

If we want to transfer data to a website we open port 49.163 and go to an IP port 80. These are source and destination. Because this is default port. The website will reverse the process.
Thé port 80 will always be opened.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an IP v4 packet ?

A

Consists of a source address, destination address, IP flags and protocol (TCP/UDP) No need to memorize a full IP header.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Compare UDP and TCP header

A

TCP header (40 bytes) whereas UDP is 8 bytes.
Both have source and destination port. But UDP has much less information (only checksum) that ex plains why UDP is faster.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is FTP ?

A

Operates on port 20 and 21 and provides insecure file transfers.
Unencrypted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is SSH ?

A

Operates on port 22 and provides secure remote control of another machine using a text-based environment.

You use a command shell and it is a cryptographic network protocol.

SSH is for secure shell.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is SFTP ?

A

Secure FTP.
Port 22.
Provides secure file transfers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Telnet ?

A

Provides insecure remote control of another machine using a text-based envieonement.
Port 23
Considered insecure and not to use on the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is SMTP ?

A

Simple mail transfer protocol. Port 25
Provides the ability to send emails over the network. Old protocol.,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is DNS ?

A

Port 53.
Domain Name System convert domain names to IP addresses and inversely.
Really important.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is DHCP ?

A

Dynamic Host Control Protocol.
Operates over 67 and 68.
Automatically provides network parameters to your clients such as their assigned IP address, subnet, mask, default gateway and the DNS server they should use.

18
Q

What is TFTP ?

A

Trivial file transfer protocol.
Port 69.
Used as a lightweight file transfer method for sending configuration files or network booting of an OS.

19
Q

What is HTTP ?

A

Operates over port 80.
Used for insecure web browsing.

20
Q

What is Pop3?

A

Post Office protocol.
Used for receiving incoming emails.
Port 110.

Used by local email clients to retrieve email from a remote server over a TCP/IP connection.

21
Q

What is NTP ?

A

Network Time protocol.
Operates on port 123.
Used to keep accurate time for clients on a network.

Oldprotocol (1995) sync up time and date.

22
Q

What is NetBIOS ?

A

Network basic Input/Output system
Port 139
Used for file or printer sharing in a windows network.

Application to communicate over a LAN.

23
Q

What is IMAP ?

A

Internet Mail Application Protocol.
Port 143
A newer method of retrieving incoming emails which improves upon the older POP3. Keeps more information synchronized over different devices.

24
Q

What is SNMP ?

A

Simple Network Management Protocol.
Port 161 and 162
Used to collect data about network devices and monitor their status.

Includes information about devices and can monitor uptime.

25
Q

What is LDAP ?

A

Lightweight Directory Access Protocol
Port 389
Used to provide directory service to your network.

Vendor neutral. It’s like AD but not delimited to the windows environement. But AD also uses 389. If you’re looking for contacts you use LDAP

26
Q

What is HTTPS ?

A

Port 443
Used for secure web browsing.
Encrypted tunnel with SSL or TLS. TLS is the newer and secure method. End to end tunnel.

27
Q

What is SMB ?

A

Server Message Block
445
Used for Windows file and printer sharing services.
It operates a lot of time with NetBIOS.

28
Q

What is Syslog ?

A

Port 514
Used to send logging data back to a centralized server for monitoring.

29
Q

What is SMTP TLS ?

A

Port 587
Encrypted version of SMTP. Make sûre that you use encryption END to end TLS tunnel.

30
Q

What is LDAPS ?

A

Port 636
Provides secure directory services. Just like LDAP does operate but adds an Encrypted tunnel.

31
Q

What is IMAP over SSL ?

A

Port 993.
Secure version of IMAP service. Like IMAP it can update the read/unread status

32
Q

What is POP3 over SSL ?

A

Port 995.
Secure version of POP3.
Older protocol that couldn’t maintain the read/unread status.

33
Q

What is SQL ?

A

Structured Query Language
Port 1433
Used for communication from a client to the database engine. Notably for SQL Microsoft Server.

34
Q

What is the SQLnet Protocol?

A

Port 1521
Used for communication from a client to an Oracle database.

35
Q

What is MySQL ?

A

Port 3306
Used for communication from a client to the MySQL data base engine. Open source protocol.

36
Q

What is RDP ?

A

Port 3389
Provides graphical remote control of another client or server.
Proprietary protocol developed by Microsoft.
Kind of similar to SSH or Telnet but RDP provides a full graphical user interface.

37
Q

What is SIP ?

A

Port 5060, 5061
Provides signaling and controling media communication sessions. Used to initiate VoIP and vidéo calls.

38
Q

What is Nmap?

A

Popular command line tool that maps the network. Used for trouble shoooting. And we can find open ports by entering the IP address.
Zenmap is the same but with graphical interface.

39
Q

What is the IP protocol types of the TCP/IP model V

A
  • TCP
  • UDP
  • GRÉ
  • ICMP
  • IPSEC
40
Q

What is GRÉ ??

A

Generic routing encapsulation protocol. Used as a simple and effecitve way to create a tunnel, called à GRE tunnel over a public network.
Developped by CISCO.
It doesn’t provide any encryption.

41
Q

What is IPSEC?

A

Used to protect one or more dataflows between peers. It is a TCP protocol. It lets you encrypt your tunnel to protect your data from prying eyes.
IPSEC uses two protocols :
- AH (authentication header) allowing to match and verify integrity.
- ESP (encapsulating security payload) : provides encryption and integrity for thé data packets sent over IPsec