Video Content Lesson 8 Flashcards

Question

X.25

Answer 1

The first packet-switching network Each packet can take a different route through a network (use smaller packets) (determine best route to take with least conjestion) Point-to-point communication between DTE and DCE DTE (Data Terminal Equipment) (your computer) DCE (Data Circuit-terminating Equipment) (entry point to packet switch network) Idea was that the X.25 would support a virtual connection between two Data Terminal Equipment Nodes

Answer 2

``` Tunneling Network Monitors Transparency Hash Totals E-mail Security Facsimile Security Voice Communication ```

Answer 3

Use the Internet to create a virtual private line PPTP and L2TP are common protocols Tunneling almost always uses VPN Encrypted connections over a public network creates creates a secure VPN

Answer 4

Tunneling and VPNs are techniques used to set up a network environment to provide security 1-Network Monitors and 2-Packet Sniffer (Ensure security and monitor activity on the network) (Tools to capture and analyze network packets) (1-Analyze network traffic, 2-search for unauthorized packets, 3-detect anomalous activities NAT (Network Address Translation) (on routers) (Translates nonroutable IP behind a firewall to routable addresses; hides true machine IP addresses) (192.168.*.* or 10.0.0.*)

Answer 5

An OS feature that allows users to access resources without knowing whether the resource is local or remote Mapped Drive Printer (often configured as remote printers) Makes it very easy to secure and centrally administer many data repositories, printers, modems, or other devices that multiple users need to access

Answer 6

``` A mathematically generated unique value from a string of text (Used in cryptography and when file integrity must be ensured) Hash totals are used not only in end-to-end communication, but also in lower-level protocols to guarantee the integrity A hash total is a one-way type of algorithm Error Correction (adds more to each message; recipient can re-create original block of text; small or medium networks and large packets) Retransmission (small or large networks and small packets) ```

Answer 7

e-mail protocols (SMTP-Simple Mail Transfer Protocol (forwards mail from one mail server to another mail server NOT to a client)) To download messages from a mail server to a client POP (POP3) Post Office Protocol (automatically downloads all messages) (Therefore not able to access e-mail from another machine if already downloaded) IMAP (Internet Message Access Protocol (allows you to view headers from e-mails to select which ones to download and remove from the server) Mail Servers are the entry point into the e-mail system Mail Client is the software for writing e-mail Send mail to the mail server using SMTP protocol Mail Server looks at the To: address and figures out where to send it next When it reaches the destination it is head in queue until accessed or downloaded Relay agents will relay messages from one mail server to another Messages are very easily spoofed (e-mail, by default, is all text-based; be comfortable with how e-mail headers work and how to detect spoofed e-mails) By default, e-mails sends in-the-clear payloads (clear, plain text)

Answer 8

Faxing can be insecure The standards in place assume that every end-to-end fax will start off at an insecure fax macnine and end up at an insecure fax machine Very few fax machines are capable of supporting secure encryptions mechanisms Any images scanned may be stored Physical access to receiving device Without encryption, fax data can be intercepted and interpreted by any other machine

Answer 9

Standard voice communication can be easy to intercept When transmitting voice over digital media, it allows for the same security as sending regular messages (Ensure Confidentiality and Integrity Voice over IP (VOIP)

Answer 10

``` Network Abuses ARP DoS-DDoS Flooding Spoofing Spamming Eavesdropping Sniffers ```

Answer 11

Class A - Unauthorized access of restricted network resources Class B - Unauthorized use of network resources for nonbusiness purposes Class C - Eavesdropping Class D - Denial of Service and other distruptions Class E - Network Intrusion Class F - Probing (not illegal but like casing neighborhood)

Answer 12

Address Resolution Protocol (takes a MAC (Media Access Control) address (physical address) and relates that to an IP address Every NIC has a hard-coded address (MAC) ARP resolves MAC and IP addresses "Who is MAC address XXX? I am IP XXX. Reverse ARP ask for IP "Tell me your MAC" ARP table built ARP table poisoning (having a MAC address sent to the wrong IP address)

Answer 13

Denial of Service (Many variations; Basic goal is to render a machine/network unavailable) Distributed Denial of Service Similar to DoS attack, but the attacker uses multiple machines to launch the attack This is reason to have firewall to limit packets coming in and being sent out

Answer 14

``` Sending large numbers of packets to the victim machine SYN flood (Send multiple SYN packets without responding to the victim's ACKs) ```

Answer 15

Using counterfeit information to forge the sender's identification (IP/MAC address or TCP sequence number (used to hijack sessions and launch DoS or DDoS attacks))

Answer 16

Floods mail servers with useless messages

Answer 17

Reading messages not intended for you (Voice messages, e-mail messages, reassembled packets)

Answer 18

Easest way is to put a NIC in Promiscuous Mode capturing packets that pass by Defense is to make all packets encrypted