Dion Questions Review Flashcards
Malware
Any software intentionally designed to cause damage to a computer, server, client, or computer network
Software that serves a malicious purpose, typically installed without the user’s consent (or knowledge)
Ransomware
type of malware from cryptovirology that threatens to publish the victim’s personal data or perpetually block access to it unless a ransom is paid
Malware that tries to extort money from the victim by encrypting the victim’s files and demanding payment.
Phishing
type of social engineering where an attacker sends a fraudulent email designed to trick a human victim into revealing sensitive information to the attacker or to deploy malicious software on the victim’s infrastructure like ransomware
Email-based social engineering attack, in which the attacker sends email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim
brute-force attack
consists of an attacker submitting many passwords or passphrases with the hope of eventually guessing correctly
Type of password attack where an attacker uses an application to exhaustively try every possible alphanumeric combination to crack encrypted passwords.
cloud site
virtual recovery site that allows you to create a recovery version of your organization’s enterprise network in the cloud. Cloud sites are useful when your disaster recovery plan includes migrating to a telework or remote operations environment.
hot site
a real-time replication of an existing network environment. All data generated and stored at the primary site is immediately replicated and backed up at the disaster recovery site.
Fully configured alternate processing site that can be brought online either instantly or very quickly after a disaster.
warm site
type of facility an organization uses to recover its technology infrastructure when its primary data center goes down. A warm site features an equipped data center but no customer data.
Alternate processing location that is dormant or performs noncritical functions under normal conditions, but which can be rapidly converted to a key operations site if needed.
cold site
a backup facility with little or no hardware equipment installed. A cold site is essentially an office space with basic utilities such as power, cooling system, air conditioning, and communication equipment, etc.
Predetermined alternate location where a network can be rebuilt after a disaster
Port 67
DHCP
Port 53
DNS
Split horizon
a method used by distance vector protocols to prevent network routing loops. With split horizon, if a router receives routing information from another router, the first router will not broadcast that information back to the second router, thus preventing routing loops from occurring.
ACL
Access control list
a list of permissions associated with a system resource (object)
Collection of access control entries (ACEs) that determines which subjects (user accounts, host IP addresses, and so on) are allowed or denied access to the object and the privileges
given (read only, read/write, and so on)
NAT
Network address translation
method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. Using NAT, you can have the internal IP address of each workstation mapped to a public IP address or port when it crosses the router to access the WAN.
DMZ
AKA: Screened subnet
physical or logical subnetwork that contains and exposes an organization’s external-facing services to an untrusted, usually larger, network such as the Internet
VPN
Virtual Private Network
extends a private network across a public network and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network.
OSPF
Open Shortest Path First
a link-state routing protocol that was developed for IP networks and is based on the Shortest Path First (SPF) algorithm.
OSPF is an Interior Gateway Protocol (IGP)
control plane
The QoS plane that makes decisions about how traffic should be prioritized and where it should be switched
uses the information from applications to decide how to route a data packet on the network and to make decisions about how traffic should be prioritized, how it should be secured, and where it should be forwarded to
infrastructure layer
Bottom layer of a SDN
Devices (physical or virtual) that handle the actual
forwarding (switching and routing) of traffic and imposition of ACLs and other policy configurations for security
contains the physical networking devices that receive information from the control layer about where to move the data and then perform those movements.
management plane
used to monitor traffic conditions, the status of the network, and allows network administrators to oversee the network and gain insight into its operations
Multicast
sends out the packets to the requested devices when streaming to multiple workstations from a single streaming media server
Anycast
communications are sent to the nearest receiver in a group of receivers with the same IP. Anycast only works with IPv6.
DOCSIS
(Data Over Cable Service Interface Specification) is an international telecommunications standard that permits the addition of high-bandwidth data transfer to an existing cable television system. Many cable television operators employ it to provide Internet access over their existing hybrid fiber-coaxial (HFC) infrastructure. Most people today call these cable modems, but technically, they are DOCSIS modems.
arp command
Used to view and modify the local address resolution protocol (ARP) cache of a device, which contains recently resolved MAC addresses of IP hosts on the network
netstat command
used to monitor incoming and outgoing connections, routing tables, port states, and usage statistics on a network interface.
route command
used to create, view, or modify manual entries in the network routing tables of a computer or server
ipconfig command
used on Windows devices to display the current TCP/IP network configuration and refresh the DHCP and DNS settings on a given host
CAN
campus area network
Scope defining a network with direct connections between two or more buildings within the same overall area.
a computer network that spans a limited geographic area. CANs interconnect multiple local area networks (LAN) within an educational or corporate campus
cable crimper
sed to join the internal wires of a twisted pair cable with metallic pins houses inside a plastic connector, such as an RJ-45 connector
punchdown tool
used to insert wires into insulation displacement connectors on patch panels, keystone modules, or punchdown blocks
fusion splicer
used to create long fiber optic cable lengths by splicing multiple cables together or to repair a break in a fiber optic cable
cable snip
used to cut copper cables into shorter lengths from a longer spool of wound cable
