2.6 Implement Secure Protocols Flashcards
Protocols
An established set of rules that determine how data is transmitted between different devices in the same network.
DNSSEC
(Domain Name System Security Extensions) A security protocol that provides authentication of DNS data and upholds DNS data integrity.
SSH
(Secure Shell) A remote administration and file-copy program that supports VPNs by using port forwarding, and that runs on TCP port 22.
S/MIME
(Secure/Multipurpose Internet Mail Extensions) An email encryption standard that adds digital signatures and public key cryptography to traditional MIME communications.
SRTP
(Secure Real-Time Transport Protocol) A security protocol intended for VoIP (Voice over IP)
LDAPS
(Lightweight Directory Access Protocol Secure) A method of implementing LDAP using SSL/TLS encryption.
SFTP
(Secure File Transfer Protocol) A secure version of the File Transfer Protocol that uses a Secure Shell (SSH) tunnel as an encryption method to transfer, access, and manage files.
SNMPv3
(Simple Network Management Protocol) A protocol for monitoring and managing network devices.
SSL/TLS
(Secure Sockets Layer) security protocol that uses certificates for authentication and encryption to protect web communication.
(Transport Layer Security) A security protocol that uses certificates and public key cryptography for mutual authentication and data encryption over a TCP/IP connection.
HTTPS
(HyperText Transfer Protocol) The protocol used to provide web content to browsers. HTTP uses port 80. HTTPS(ecure) provides for encrypted transfers, using SSL/TLS and port 443.
Secure POP/IMAP
(Post Office Protocol) TCP port 110 protocol that enables a client to access email messages stored in a mailbox on a remote server. The server usually deletes messages once the client has downloaded them.
(Internet Message Access Protocol) TCP/IP application protocol providing a means for a client to access email messages stored in a mailbox on a remote server. IMAP4 utilizes TCP port number 143.
Voice and Video
SIP (Session Initiation Protocol) is used to secure Voice and Video.
Time synchronization
The Network Time Protocol (NTP) provides a transport to synchronize applications.
NTP works over UDP on port 123.
Email and web
Use S/MIME and private/public key encryption.
File Transfer
FTPS and SFTP