CompTIA

Question 1

SFTP

Answer 1

Secure FTP.

May use ports 989 & 900.

Question 2

FTPS

Answer 2

FTP Secure
Uses SSL or TSL to encrypt FTP traffic
May use ports 989 and 990.

Question 3

Telnet

Answer 3

Used to connect to remote systems or network devices over a network. Transmits data in clear text or SSH can be used to encrypt.
Port 23 clear text.
Port 22 when SSH encrypted.

Question 4

SNMP

Answer 4

Simple Network Management Protocol. v2,3 are much more secure.

Port 161

Question 5

LDAPS

Answer 5

LDAP encrypted with SSL.

Port 636

Question 6

TLS

Answer 6

Replacement for SSL

Question 7

IPSec

Answer 7

Internet Protocol security is used to encrypt IP traffic. Used for VPN
AH authentication header #51
ESP encapsulating Security Payload #50

Question 8

DNS

Answer 8

Resolves names to IP addresses.

Port 53.

Question 9

NetBIOS

Answer 9

Network Basic input / output system - A name resolution service for NetBIOS names on internal networks. Also includes session services for both TCP and UDP.
Ports 137 to 139.

Question 10

LDAP

Answer 10

Lightweight Directory Access Protocol.
Port 389
Can be encrypted with either TLS or SSL and uses port 636 when encrypted.

Question 11

Kerberos

Answer 11

Authentication protocol.
Uses KDC to issue time-stamped tickets.
Port 88

Question 12

Remote Administration, Terminal Services, RDP, and Remote Assistance.

Answer 12

Uses port 3389.

Question 13

POP3

Answer 13

Port 110

Question 14

IMAP4

Answer 14

Used to store e-mail on an e-mail server.

Port 143.

Question 15

PPTP

Answer 15

Has some known vulnerabilities.

TCP port 1723

Question 16

Well-known Ports

Answer 16

0-1023

Question 17

Registered Ports

Answer 17

1024 - 49,151

Question 18

Dynamic and private ports

Answer 18

49,152 - 65,535

Question 19

HIDSs

Answer 19

Host-based Intrusion detection systems (IDSs)

Installed on individual servers and workstations.

Question 20

NIDSs

Answer 20

Network-based Intrusion detection systems.

Installed on network devices such as routers and firewalls.

Question 21

RAS Authentication

Answer 21

CHAP - Challenge Handshake Protocol

MS-CHAPv2 - Microsoft improved CHAP with MS-CHAP and MS-CHAPv2

RADIUS - Remote Authentication Dial-In User Service

TACACS+ - Many Cisco VPN concentrators use as replacement for RADIUS

Question 22

IPSec as a Tunneling Protocol

Answer 22

IPSec uses Key Exchange (IKE) over port 500 to authenticate clients. IKE creates security associations for the VPN

IPSec can use Authentication Header (AH) alone - authentication and integrity, or Encapsulating Security Payload (ESP) to encrypt the data and provide confidentiality, authentication, and integrity.

Question 23

TFTP

Answer 23

Trivial File Transfer Protocol
UDP port 69
Smaller amounts of data