3.1 Implement secure protocols

Question 1

A security improvement to the existing DNS infrastructure. Its primary function is to provide mutual certificate authentication an encrypted sessions between devices during DNS operations.

Answer 1

Domain Name System Security Extension (DNSSEC)

Question 2

A secure replacement for Telnet (TCP port 23) and many of the Unix “r” tools, such as rlogin, rsh, rexec, and rcp. All SSH transmissions (both authentication and data exchange) are encrypted over TCP port 22.

Answer 2

SSH

Question 3

An Internet standard for encrypting and digitally signing email. It uses X.509 v3 standard certificates issued by a trusted CA.

Answer 3

Secure/Multipurpose Internet Mail Exchanger (S/MIME)

Question 4

A security improvement over Real-Time Transport Protocol (RTP) that is used in many Voice over Internet Protocol (VoIP) communications. It aims to minimize the risk of VoIP DoS through robust encryption and reliable authentication.

Answer 4

Secure Real-Time Protocol (SRTP)

Question 5

accomplished by enabling the Simple Authentication and Security Layer (SASL) on LDAP, which implements Transport Layer Security (TLS) on the authentication of clients as well as all data exchanges.

Answer 5

Lightweight Directory Access Protocol Over SSL (LDAPS)

Question 6

An in-the-clear file-exchange solution. An FTP server system is configured to allow authenticated or anonymous FTP clients to log on to upload or download files. FTP employs TCP ports 20 and 21.

Answer 6

File Transfer Protocol (FTP)

Question 7

A secured alternative to standard FTP that uses SSH to encrypt both authentication and data traffic.

Answer 7

Secured File Transfer Protocol (SFTP)

Question 8

The current standard network-management protocol supported by most network devices and TCP/IP compliant hosts. It allows for encrypted communications between devices and the management console, as well as robust authentication protection customized authentication factors.

Answer 8

Simple Network Management Protocol, version 3 (SNMPv3)

Question 9

When TLS is used to secure HTTP transactions, It can operate (with TLS) over TCP ports 443 or 80. It uses digital certificates to perform single-sided (i.e., web server only) or mutual authentication.

Answer 9

Hypertext Transfer Protocol over SSL/TLS (HTTPS)

Question 10

A VPN protocol for IPv4 derived from the security features of IPv6. It uses public-key cryptography and symmetric cryptography to provide encryption, secure key exchange, access control, non-repudiation, and message authentication, all using standard Internet protocols and algorithms.

Answer 10

IPSec

Question 11

A primary protocol of IPSEC that provides encryption of the transferred data as well as limited authentication.

Answer 11

Encapsulated Security Payload (ESP) -

Question 12

In this mode IPSec provides encryption protection for both the payload and the message header by encapsulating the entire original LAN protocol packet and adding its own temporary IPSec header.

Answer 12

Tunnel Mode - IPSEC

Question 13

These protocols are secured by implementing TLS (or SSL in the past) encryption. This converts these protocols into POPS (or POP3S) and IMAPS (or IMAP4S) and also alters their ports from 110 to 995 and 143 to 993, respectively.

Answer 13

Secure Post Office Protocol (POP) / Internet Message Access Protocol (IMAP)

Question 14

FTP Secure/Secured, which indicates that it’s a variation of FTP secured by TLS (previously SSL).

(Page 261).

Answer 14

File Transport Protocol, Secured (FTPS)

Question 15

FTP Secure/Secured, which indicates that it’s a variation of FTP secured by TLS (previously SSL).

Answer 15

File Transport Protocol, Secured (FTPS)

Question 16

In this mode IPSec provides encryption protection for just the payload and leaves the original message header intact.

Answer 16

Transport Mode - IPSEC

Question 17

Ensures the secure exchange of secret keys between communication partners to establish an encrypted VPN tunnel.

Answer 17

Internet Key Exchange (IKE)

Question 18

Used to organize and manage the encryption keys that have been generated and exchanged by Oakley and SKEME. A security association is the agreed-on method of authentication and encryption used by two entities (a bit like a digital keyring).

Answer 18

Internet Security Association and Key Management Protocol (ISAKMP)

Question 19

A primary protocol of IPSec. It provides authentication of the sender’s data.

Answer 19

Authentication Header (AH)

Question 20

-Voice and Video
=Time synchronization
-Email and Web
-File Transfer
-Directory Services
-Remote Access
-Domain Name Resolution
-Routing and Switching
=Network Address Allocation 
-Subscription Services

Answer 20

Use Cases