Secure Protocols

Question 1

What is DNS and tell me the port # and protocol it uses.

Answer 1

Domain Name System - resolves domain names to IP addresses (internet’s phone book)

UDP port# 53

Question 2

What is DNSSEC?

Answer 2

Domain Name System Security extension

Is a way to validate the integrity and authenticity of the DNS info by digitally assigning it.

Protects from DNS poisoning

Question 3

What is HTTP and HTTPS, port# and protocol

Answer 3

HTTP and HTTPS used for web traffic

80 http - unsecured

443 https - uses SSL/TLS to encrypt web traffic

any protocol that ends with S (https) uses SSL/TLS

Question 4

What is SSH and what # and protocol does it use?

Answer 4

Secure Shell / port 22 / TCP - Used for remote management of a device securely.

Use version 2 of ssh whenever possible.

Question 5

What is Telnet / port # and protocol ?

Answer 5

Port 23 / TCP - plain text - NOT SECURE

Question 6

FTP?

Answer 6

File Transfer protocol
TCP port 20/21

not secure

Question 7

SFTP

Answer 7

File Tranfer protocol over SSH
TCP port 22

Question 8

FTPS

Answer 8

File transfer protocol over ssl/tls
989 and 990

Question 9

POP3

Answer 9

TCP port 110 - unsecure, plaintext mail protocol

Question 10

IMAP

Answer 10

TCP 143 - Unsecure, plaintext mail protocol

Question 11

POP3s

Answer 11

TCP 995 - secure using SSL/TLS

Question 12

IMAPs

Answer 12

TCP 993 - Secure email protocol (only secure data in transit between client and server)

Question 13

S/MIME

Answer 13

This is use for end to end email encryption using public/private key pairs. This is between the sender and the recipient

Question 14

RTP

Answer 14

Real-time Protocol -

provides voice and audio services over IP that typically uses UDP.

Example: Streaming media / Phone calls / Videoconferencing

Question 15

SRTP

Answer 15

Secure Real time protocol

Secure extension for real time phone/video communication. This encrypts the data now.

Question 16

SNMP

Answer 16

UDP 161 and 162

Simple network management protocol - used to gather info about network devices

SNMP manager sends/polls data on 161

Traps are sent via 162

Question 17

DHCP

Answer 17

Dynamic Host Configuration Protocol - UDP 67 and 68

Client/servers protocol that automatically IP and related info like Default Gateway / Subnet mask / DNS

Question 18

RDP

Answer 18

Remote Desktop Protocol

Software that provides access to desktop or application on a remote host

TCP/UDP port 3389