Domain 2.0 - Networking Flashcards
What port(s) do(es) FTP use?
TCP/20 for active mode data and TCP/21 for controlling the data transfers?
What port(s) do(es) SSH use?
TCP/22
What port(s) do(es) Telnet use?
TCP/23
What port(s) do(es) SMTP use?
TCP/25
What port(s) do(es) DNS use?
UDP/53
What port(s) do(es) DHCP use?
UDP/67 and UDP/68
What port(s) do(es) HTTP(s) use?
TCP/80 for HTTP
TCP/443 for HTTPS
What port(s) do(es) POP3 use?
TCP/110
What port(s) do(es) IMAP4 use?
TCP/143
What port(s) do(es) SMB use?
UDP/137 for NetBIOS Name Service
TCP/139 for NetBIOS Session Service (nbsession)
TCP/445 for NetBIOS-less (Direct SMB)
What port(s) do(es) SNMP use?
UDP/161 for certain statistics
UDP/162 for SNMP traps (monitors)
What port(s) do(es) RDP use?
TCP/3389
What is FTP used for?
To transfer files over a network connection. Usually authenticates via a username and password but some systems use a generic/anonymous login. Most FTP applications have full functionality such as as list, add, delete, etc.
What is SSH?
SSH is an encrypted CLI-based protocol that allows users to access devices remotely THAT IS SECURE.
What is Telnet?
Telnet is an unencrypted CLI-based protocol that allows users to access devices remotely THAT IS NOT SECURE.
What is SMTP?
A protocol that is used to send mail from a client to a server. Has two models.
End-to-End: Used to send mail in between organizations.
Store-and-Forward: Used to send mail inside of an organization.
Simple Mail Transfer Protocol
What is DNS?
A distributed database implemented in a name of hierarchy servers. Most commonly known for providing the conversions of IP addresses into URLs for people to easily memorize. Domain Name Servicem
What is DHCP?
A protocol that assigns host machines with an IP address through a 4 step process of:
1.) Discover: Devices will attempt to locate a DHCP server via a DHCP Discover message that is sent as a Layer 2 and 3 broadcast out port UPD/67.
2.) Offer: DHCP server offers a device an IP; data is sent as a Layer 2 unicast but still a Layer 3 broadcast on UDP/68.
3.) Request: Device officially requests the IP address; data is sent as a Layer 2 unicast but still Layer 3 broadcast as the client hasn’t accepted the IP information yet on UDP /67.
4.) Acknowledgement: DHCP acknowledges that the client has accepted the provided DHCP lease on UDP/68.
What is HTTP(S)?
Used for web traffic. HTTPS is the secure encrypted version.
What is POP3?
Used for basic mail transfer functionality, however once downloaded from a server it is then deleted from the server.
What is IMAP4?
Used for mail transfer functionality; allows for messages to be stored in a mailbox and built for multi-client use.
What is SMB?
Used by Microsoft Windows for file sharing. Also called CIFS (Common Internet File System).
What is SNMP?
A protocol that allows for the management of the network. v1 introduced structured tables and was unencrpypted. v2 added Data type enhancements and bulk transfers. v3 added message integrity, authentication, and was finally encrypted.
What is RDP?
RDP is allows for desktops to remote into other machines.