Advanced Networking Devices Flashcards

1
Q

VPN

A

Virtual Private Network

- encrypted tunnel between a computer or a remote network and a private network through the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Tunnel Endpoints

A

the ends of a tunnel where the data is encrypted and decrypted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

VPN Tunnel

A

VPN creates virtual NIC on client (endpoint 1), creates a virtual cable (vpn tunnel) to the server (endpoint 2)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

PPTP VPN

A

Point-to-Point Tunneling Protocol

  • advanced version of PPP
  • server endpoint is a program on Windows server called RRAS (Routing and Remote Access Service)
  • every OS comes with some built in client that supports PPTP
  • commonly called “Host-to-Site Connection”
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

L2TP VPN

A

Layer 2 Tunneling Protocol

  • VPN Concentrator (can run on almost any connection)
  • no auth or encryption (uses IPSec)
  • supported by every OS VPN client
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

host-to-site or client-to-site connection

A

Single connection between user and network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

site-to-site connection

A

Using two VPN concentrators to connect two networks

- slow but inexpensive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

SSL VPN

A
  • do not require any special software
  • connects using web browser
  • secured using TSL
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

DTLS VPN

A

Datagram TLS

- uses UDP instead of TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

DMVPN

A

Dynamic Multipoint VPN

  • enables direct VPN connection between multiple locations directly
  • uses IPSec
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

default gateway on a switch

A

ip address of the router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

in-band and out-of-band management

A

in-band - can access switch over network

out-of-band - only a port can be used to access switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

console router

A

a router with out-of-band management capabilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

VLAN

A

Virtual LAN

  • can take a single broadcast domain and chop it up into multiple broadcast domains
  • done by assigning each port a specific VLAN
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Trunking

A

process of transferring traffic between one or more switches

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

trunk port

A

a switch port configured to carry all traffic, regardless of VLAN, between all switches on a LAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

native VLAN

A

the VLAN designation for a trunk port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

standard that enables you to connect switches from different manufacturers?

A

IEEE 802.1Q

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

VLAN Assignment

A

the process of assigning ports to VLANs

20
Q

static vs dynamic VLANs

A

static - based on port

dynamic - based on MAC address

21
Q

access ports

A

opposite of trunk ports… connect workstations

22
Q

Why would you want to change a native VLAN

A

to mitigate against double-tagging attacks

23
Q

VTP

A

VLAN Trunking Protocol

  • automates updating of multiple VLAN switches
  • put switch in one of three states: server, client or tranparent
24
Q

VTP Pruning

A

miniminzing broadcast traffic

useful for larger-scale networks

25
Q

VTP state transparent

A

tells the switch not to update, but to hold its manual settings

26
Q

interVLAN Routing

A

process of making a router work between two VLANs

27
Q

Relay Agent

A
  • also called DHCP relay
  • router will pass DHCP messages across the router interfaces
  • single DHCP server to server addresses to multiple networks or subnetworks
28
Q

troubleshooting VLANs

A

all about assingment

  • if you give an incorrect VLAN assignement to a device, you wont be able to see it or the device won’t access resources
  • fix: change VLAN assignemnt
29
Q

Difference between layer 2 and 3 switches

A

2 - forwards traffic based on MAC addresses

3 - forwards traffic based on IP addresses

30
Q

load balancing

A

making a bunch of servers look like a single server, creating a server cluster

31
Q

DNS Load Balancing

A

DNS server for domain has multiple “A” records for the same FQDN
- DNS server cycles around records

32
Q

content switch

A

works at layer 7

  • designed to work with web servers
  • can read incoming http and https requests
  • also called content filter
33
Q

QoS

A

Quality of Service

- prioritize traffic based on certain rules

34
Q

traffic shaping

A

control the flow of packets into or out of the network based on type of packet or other rules

35
Q

shapers

A

routers and switches that can impletment traffic shaping

36
Q

IDS

A

Intrusion detection system

  • inspects packets looking for intrusions
  • cant stop attack, but can request assistance from other devices, like a firewall
37
Q

IPS

A

Intrustion prevention system

  • sits directly in the flow of network traffic
  • can stop an attack
  • creates latency
  • if IPS goes down, link can go down
  • can block packets based on IP address, port number or application type
  • might even fix packets on-the-fly
38
Q

signatures

A

detectable patterns

39
Q

definition files

A

collection of signatures for known malware

40
Q

HIDS

A

Host-based IDS

  • runs on individual systems
  • monitors for events like system file modification or registry changes
41
Q

NIDS

A

Network-based IDS

42
Q

HIPS

A

Host-based IPS

43
Q

NIPS

A

Network-based IPS

44
Q

port mirroring

A

copy data from any or all physical ports on a switch to a single physical port
local - ports on same switch
remote - send data anywhere

45
Q

proxy server

A

sits in between clients and external servers

  • handles all requests for client
  • keeps server from knowing where client is
  • using caching for resources to speed up later requests
46
Q

forward proxy server

A

a proxy server working for clients

47
Q

reverse proxy server

A

a proxy server working for hosts