3.4 Given a scenario, implement IPv4 and IPv6 network services. Flashcards
What is a DHCP reservation?
- Devices that will always receive the same IP address when it connects to the network.
What is a DHCP scope?
- It is an IP address range that can be handed out to clients for use.
What is a DHCP lease time?
- Can only use the address for a certain period of time and if they users doesn’t renew the lease, it will go back to the pool for another user to use.
What is a DHCP option?
- A special field in the DCHP message
- Guided by DHCP RFC standard and referred to as “vendor extensions”.
- 254 usable options
What is a DHCP relay/IP helper?
- Since most DHCP request sent as a broadcast cannot go past the router, some routers will allow a “relay” for this functionality that needs to be separately configured.
What is a DHCP exclusion?
What is a SLAAC?
- Stateless Address Autoconfiguration
- This automatically configures an IP address without DHCP server.
- DAD: Duplicate Address Detection.
What is a DNSSEC?
- Domain Name Security Extension
- DNS responses from the server are digitally signed and a forgery would be easily identified
- Requires additional configurations on the DNS server.
What is DoH?
- DNS over HTTPS
- Sends DNS Traffic in an HTTPS packet and looks like web server communication over TCP 443
What is DoT?
- DNS over TLS
- Sends DNS traffic over TCP 853 and encrypts that information.
What is record type (A)?
- Address
- Defines the IP address of a host.
- These are for IPv4 addresses
What is record type (AAAA)?
- Defines the IP address of a host.
- These are for IPv6 addresses.
What is record type (CNAME)
- Canonical Name
- A name is an alias of another name.
- One physical server, with multiple services.
What is record type (MX)?
- Mail Exchange
- This determines the host name for the mail server; this isn’t an IP address, it’s a name.
What is record type (TX)?
- Text
- Human-readable text information
- Useful for public information.
- SPF protocol (Sender Policy Framework): this prevents mail spoofing.
- DKIM (Domain Keys Identified Mail): digitally sign your outgoing mail
What is record type (NS)?
- Nameserver
- It lists the name servers for a domain.
What is record type (PTR)?
- Pointer
- The reverse of an A or AAAA record
- Give the server an IP address.
What is a forward zone type?
- This provides the DNS server with an FQDN and the DNS server responds with an IP address.
What is a reverse zone type?
- This provides the DNS server with an IP address and the DNS server responds with an FQDN.
What is Authoritative DNS?
- The DNS server is the authority for the zone.
- TTL (Time to Live) is configured here.
- Very long TTL can cause problems if changes are made.
What is Non-Authoritative DNS?
- Does not contain the zone source files; probably cached information.
Primary vs. Secondary
What is recursive DNS?
- Delegates the look-up to a DNS server.
- The DNS server does the work and reports back
- Large DNS cache provides a speed advantage.
What is the host file’s relationship to DNS?
- Contains a list of IP addresses and host names with preferred resolutions.
- Some apps may not use the host file, the will rely on the DNS server as the primary source for information.
What is NTP?
- Network Time Protocol
- Switches, routers firewalls, servers, workstations has its own clock that is synchronized.
- Need to have a server responsible for this function (UDP 123).
What is PTP?
- Percision Time Protocol
- A hardware-based time synchronization that provides nanosecond granularity
- Often implemented as specialized hardware that can avoid delays from the operating system and applications.
What is NTS?
- Network Time Security
- How do you know your NTP server response can be trusted (could cause DDoS)?
- This provides a level of authentication so you can validate the time is correct.
What is DORA?
- Discover: Find DHCP server
- Offer: Get an offer from DHCP server.
- Request: lock in the offer from the DHCP server
- Acknowledge: DHCP server confirmation.
What is NDP?
- Neighbor Discovery Protocol
- No broadcasts! Operates using multicast over ICMPv6
Neighbor MAC Discovery
What is RR?
- Resource Records
- The database records of domain name services.
- Over 30 record types.
What is a SOA record type?
- Start of Authority
- Describes the DNS zone details.