Server Communication/Protocol Flashcards
(30 cards)
How does server communication work?
Server communication typically begins when an application on the server opens a specific port to listen for incoming data or instructions.
This data may arrive in various forms, such as plain text or encrypted payloads. Once data is received, the server processes it, requiring authentication to verify the client’s identity and permissions.
After successful processing and authentication, the server responds back to the client through the same connection. This process ensures both the security of the data exchanged and the reliability of the communication channel.
What are common apps to communicate with servers?
-SSH
-PuTTY
-OpenSSH
What tools secure and efficient file transfer (FTP/ SFTP)?
-Rsync
-File Zilla
-WinSCP
-RSIc
What is (FTP) and (SFTP)?
FTP, secure file transfer protocol, also known as SFTP
TP is one of the oldest protocols for network file transfers. It allows users to upload and download files from a server. However, it lacks encryption, making it less suitable for transferring sensitive data.
SFTP enhances data transmission over FTP by securing it with SSH encryption. This protects data, making it ideal for sensitive communication across potentially insecure networks.
What is the delta transfer method?
The Delta transfer method minimizes data transmission by sending only the changes between the source and destination files over the network.
What is (HTTP)?
Hypertext transfer protocol or (HTTP), the backbone of web communication. It is primarily used to transmit web pages by following a request-response model. It facilitates data transfer in various formats like HTML, JSON, and plain text, making it versatile for web browsing and API interactions.
HTTP is the foundation of the World Wide Web, enabling data transfer between web servers and clients (e.g., web browsers). It defines the rules for requesting and receiving resources such as HTML pages, images, videos, and other multimedia content.
Define WebSocket?
WebSocket provides a bidirectional or full duplex communication channel that remains open for real-time data exchange between a client and a server. This is ideal for applications requiring persistent connections, such as live notifications and interactive games, as it significantly reduces latency compared to traditional HTTP connections.
What are (3) email protocols?
-SMTP
-POP3
-IMAP
What methods do (HTTP) support?
GET: Requests a resource from the server.
POST: Submits data to be processed by the server.
PUT: Updates or creates a resource on the server.
DELETE: Removes a resource from the server.
What is Secure Sockets Layer (SSL) and Transport Layer Security (TLS)?
While HTTP is designed for clear-text communication, SSL/TLS protocols provide a secure and encrypted communication channel over the Internet. These protocols are often used in conjunction with HTTP to create HTTPS (HTTP over SSL/TLS), which encrypts the data exchanged between the client and server, protecting it from eavesdropping and tampering.
SSL/TLS creates a secure connection via a handshake process that includes exchanging cryptographic keys and verifying the server’s identity with digital certificates from trusted Certificate Authorities (CAs). After establishing the secure connection, all data exchanged between the client and server is encrypted.
Define File Transfer Protocol (FTP)?
FTP is a standard network protocol used for transferring files between computers over a network. It functions on a client-server architecture, with the client starting a connection to the FTP server and being able to upload, download, rename, delete, and manage files and directories on the remote server.
What are (2) mode of File Transfer Protocol (FTP)?
-Binary mode
-ASCII mode
Define Secure File Transfer Protocol (SFTP)?
Secure File Transfer Protocol (SFTP) leverages the Secure Shell (SSH) protocol for secure data transfer over an encrypted channel. It is a more secure alternative to traditional FTP because it encrypts the entire communication session, including authentication, commands, and data transfers.
Define Simple Mail Transfer Protocol (SMTP)?
SMTP is the standard protocol for transmitting email across the Internet. It defines the rules for sending email messages from a mail client or server to another mail server for delivery.
Define Internet Message Access Protocol (IMAP)?
IMAP is a protocol for accessing and managing email messages stored on a remote mail server. It provides a more advanced and flexible alternative to the older Post Office Protocol (POP), which only allows the retrieval of email messages from the server.
What is Remote Desktop Protocol (RDP)?
The Remote Desktop Protocol (RDP) is a proprietary protocol. It was developed by Microsoft, and it enables remote access and control of a computer or server over a network connection. It is widely used in various scenarios, such as remote administration, technical support, and remote working environments.
What are proprietary protocols?
While many communication protocols are open standards, some protocols are proprietary and developed by specific companies or vendors for their own products and services. Proprietary protocols are typically closed-source, and their specifications are considered intellectual property by the companies that developed them. These protocols are often used for communication within a specific ecosystem or platform, ensuring interoperability between different components or services offered by the same vendor.
Examples of proprietary communication protocols include Microsoft Remote Procedure Call (MS-RPC), used in various Microsoft products and services like Active Directory and Exchange Server, and the Apple Filing Protocol (AFP), used for file services on macOS and other Apple operating systems. Skype also uses a proprietary protocol for its voice and video communication services, and many online games employ proprietary protocols for real-time communication between game clients and servers.
What is interception and eavesdropping involve?
Interception and eavesdropping involve unauthorized access to or theft of information as it travels across a network.
What are (2) types of interception and eavesdropping?
-Wireless sniffing
-Cable tapping
Define Man-in-the-middle (MitM) attacks?
In a MitM attack, two parties think that they are directly communicating with each other, but the attacker is relaying the communication can alter it. This type of attack can occur in any form of online communication, such as banking, email, or social media. Attackers can intercept login credentials or alter a transaction’s details.
What are (2) types of Man-in-the-middle (MitM)?
-Session hijacking
-DNS spoofing
Define phishing?
Phishing is a method of deception involving fake emails, websites, or messages that mimic legitimate institutions to steal sensitive information. It can lead to unauthorized access to servers, facilitating further attacks such as installing malware or direct attacks on the network.
What are (5) types of phishing methods?
-Spear phishing
-Whale
-Vishing
-Smishing
-Clone phishing
Why is encryption important?
Encryption encodes messages or information so that only authorized people can access it. Encryption should be employed in several layers:
