3.3 Implement Secure network Designs

Question 1

Load Balancer

Answer 1

• Uses a Virtual IP
  
  • TCP overhead can be offloaded on the load balancer to maintain fast connections to servers
• SSL offloading performs the encryption and encryption of SLL on behalf of the servers and sends data in the clear to the servers
• Caching can be used to store copies of common responses and respond fast to requests without connecting to servers
• prioritization quality of service (QOS) for certain applications on servers
• Content switching

Question 2

Load balancer Scheduling Active/Active

Answer 2

All servers are active, if one fails, others will pick up the load

Question 3

Round Robin

Answer 3

Each server is selected in turn 1 by 1

an equal amount of load on all servers

Question 4

Weighted Round Robin

Answer 4

Prioritize Server use

Some servers may have more or less load than others

Question 5

Dynamic Round-Robin

Answer 5

Monitors the server load and distributes it to the server with the lowest use

Question 6

Affinity/ sticky session/ session persistence

Answer 6

Applications may require communication to the same instance

• Can ensure users are always communicating to a specific server
• tracked through IP address or Session IDs

Question 7

Load balancer Scheduling Active/Passive

Answer 7

Some are active some are on standby

- if an active server fails, an inactive one will boot up and take its place

Question 8

SSL VPN

Answer 8

• Uses SSL/TLS Protocol over 443
• no requirement for digital certificates or shared passwords like IPsec
• can be run from a light VPN client or browser across many OS

Question 9

HTML5 VPN

Answer 9

HTML5 used in web browsers
- provides a web cryptography API
no need to install a separate VPN client

Question 10

L2TP

Answer 10

Layer 2 tunneling protocol
connect sites over the public internet (Layer 3) to another private network as if they were on layer 2
Commonly used with IPsec
L2TP establishes the tunnel, IPsec used for encryption

Question 11

IPsec Transport Mode

Answer 11

It protects data in the packet but does mot protect Ip info such as headers

Question 12

Tunnel Mode

Answer 12

Protects Data and IP info by adding a new IP header

Question 13

Port security: STP RSTP

Answer 13

Switch loop or broadcast loop - two ports connected together on a switch.
Spanning Tree Protocol (STP) or newer Rapid STP (RSTP) prevents Broadcast storm and loop prevention

Question 14

BPDU Guard

Answer 14

STP uses BPDU

Can disbale ports to prevent switch looping as it can detect if a switch has connected to the port through BPDU messages