Domain 4 COPY Flashcards
__ topology e.g. Ethernet, ATM defines the rules of communication across the __ topology.
Logical topology (layer 2), Physical topology (layer 1)
__ applies labels to packets, is commonly used to privately control international networks and is much cheaper than dedicated lines.
MPLS (Multi Protocol Label Switching)
__ are asynchronous devices that provide dial-in and dial-out connections.
Access servers
__ are distributed series of caching web servers, designed to improve performance and availability by bring data closer to the end user.
CDN (Content Distribution Network)
__ are the signaling protocols and __ is the packetization of your voice.
SIP and H.323 (which is wrapped around SIP for security), RTP (Real-time protocol)
__ checks a system’s patches, antivirus and local firewall. If the client passes, access is granted, otherwise it is placed on an isolated VLAN where patches and antivirus updates may be provided.
NAC (Network Access Control). It builds on top of 802.1X.
__ communications is where data is just sent with no need for start and stop bits. It is more efficient since there is no overhead (start/stop bits) but transmitting and receiving stations need to be synchronized.
Synchronous
__ communications is where data is sent by changes in levels of voltage or current in a sequential fashion. There are start and stop sequence bits.
Asynchronous
__ DSL has the same upload and download rates.
SDSL (symmetric)
__ DSL is higher download than upload. __ is much higher download than upload rates.
ADSL (Asymmetric), VDSL (very-high-data-rate)
__ DSL is used to provide the last mile of T1 service and uses two copper twisted pairs.
HDSL (high-rate)
__ extends Fibre channel to Ethernet networks.
FCoE (Fibre Channel over Ethernet) since FC was designed for high-performance directly attached storage.
__ integration is a common and phased approach for VoIP. The more long-term solution is __ integration.
PSTN PBX/VoIP integration: combines traditional and VoIP networks
IP PBX/PSTN integration:users must use VoIP phones, IP PBX is a soft-switch that routes calls
__ is a helpful network path troubleshooting tool that shows each of the nodes from a local machine to a destination.
traceroute, part of ICMP and built on ping
__ is a layer 2 error correction for serial connections.
HDLC (High-Level Data Link Control)
__ is a layer 2 polling method for serial connections
SDLC (Synchronous Data Link Control)
__ is a simple, weak authentication mechanism that sends the password in plaintext. This can be mitigated by sending a hash of the password but this is still vulnerable to a replay attack.
PAP (Password Authentication Protocol)
__ is a TCP-based logon system with robust AAA, which is why Diameter came out.
TACACS (Terminal Access Controller Access Control System)
__ is a UDP-based logon system mostly focused on authentication and doesn’t focus much on authorization and accounting.
RADIUS (Remote Authentication Dial In User Service)
__ is a vast improvement over WEP, requires NIC replacement and AP replacement or firmware upgrade (AES-CCMP).
WPA2
__ is an authentication mechanism that uses challenge/response authentication and is not vulnerable to a replay attack.
CHAP (Challenge-Handshake Authentication Protocol). It should be used instead of PAP wherever possible.
__ is an authentication mechanism, an extension to PPP and supports a variety of authentication protocols.
EAP (Extensible Authentication Protocol
__ is an IETF standard (RFC 2401) for establishing encrypted communication between users and devices. It offers sophisticated replay attack prevention and was issued as an open standard thus promoting multivendor interoperability.
IPsec VPN
__ is an improved version of RADIUS which focuses on all three areas of AAA.
Diameter
__ is an improvement over WEP (Wired Equivalent Privacy) and compatible with WEP hardware (TKIP).
WPA (Wi-Fi Protected Access)
__ is built on ping and used to plot the path a packet took through the network.
traceroute, part of ICMP and built on ping
__ is layer 2 network level authentication to authenticate a device, using MAC addresses (can be spoofed) and/or certificates.
802.1X. Using both would be ideal.
__ is used to find whether a given Internet host is reachable or not.
Ping, part of ICMP
__ layer convers bits into electrical signals or light impulses for transmission.
Physical Layer 1
__ of the OSI model connects the physical part of the network with the abstract part?
Data link layer 2
__ offers SCSI disk access via TCP/IP and is routed via IP.
iSCSI (Internet Small Computer System Interface)
__ or __ which are forms of __ should be used for wireless networks where we should have mutual authentication. Otherwise if just using CHAP, the server authenticates the client but the client does not authenticate the server.
LEAP (Lightweight Extensible Authentication Protocol or PEAP (Protected Extensible Authentication Protocol), forms of EAP
__ topology (layer 1) describes how systems are connected together e.g. bus ring, star.
Physical topology (layer 1)
__, given a MAC address, will find out what the corresponding IP address is.
RARP (Reverse Address Resolution Protocol)
__, given an IP address, will find out what the corresponding MAC address is.
ARP (Address Resolution Protocol), so computer can determine the next hop
105.255.255.255 is a Class __ __ broadcast address.
Class A directed broadcast
150.5.255.255 is a Class __ __ broadcast address.
Class B directed broadcast
802.11 supports which frequencies and speeds?
BAGN: 11,54,54,144+Mbps. 2.4,5,2.4,2.4/5
802.11 supports which two physical layers?
IR: Infrared, requires line of sight
RF (Radio Frequency): FHSS (Frequency Hopping Spread Spectrum; police on CB radios used to hop to different frequencies every 10 seconds so that’s all you could hear), DSSS (Direct Sequence Spread Spectrum, if you have small channels break up data into pieces and transfer in lots of small chunks)IR: Infrared, requires line of sight
RF (Radio Frequency): FHSS (Frequency Hopping Spread Spectrum; police on CB radios used to hop to different frequencies every 10 seconds so that’s all you could hear), DSSS (Direct Sequence Spread Spectrum, if you have small channels break up data into pieces and transfer in lots of small chunks)
A __ broadcast goes to every system on the LAN
limited broadcast. Will not get routed to any other networks
A __ broadcast is where the entire address is set to all 1’s or 255.255.255.255.
limited broadcast
A __ broadcast is where the host portion is set to all 1’s
Limited broadcast
A __ broadcast would be routed to every computer on the destination network.
directed broadcast
A __ determines the path a packet will take.
IP address
A __ firewall operates at layer 3.
packet filtering
A __ firewall operates at layer 4.
stateful filtering
A __ identifies a device by vendor code (first 3 bytes) and a unique identifier (last 3 bytes).
MAC address aka Ethernet address
A __ is a layer 3 device that connects two different networks together and moves packets between networks.
Router
A __ is a mapping of FCoE over the network.
vSAN
A __ is a path through intermediate devices and bridges where there are multiple physical connections but virtually makes a single connection.
VC (Virtual Circuit)
A __ is a physical topology that is not very scalable or fault tolerant since a single wire connects all of them together. If one goes down they all do.
bus. legacy Ethernet uses a bus
A __ is a router (inline device connecting two devices together) with a filtering capability (ruleset)
firewall
A __ is a single broadcast domain and defines LANs logically.
VLAN
A __ is always at layer 1 of the OSI model.
Bit
A __ is always at layer 2 of the OSI model.
Frame e.g. an Ethernet Frame
A __ is always at layer 4 of the OSI model.
Segment
A __ is information at layer 3 of the OSI model.
Packet
A __ is like a bus where you connect the two endpoints together
ring
A __ is often used to connect multiple bus networks.
tree
A __ is the most common physical topology. It is very fault tolerant since there are multiple paths, scalable since easy to add more connections without interrupting others and easy to troulbeshoot.
star
A __ is used to directly connect two similar devices (e.g. two computers, two switches, etc), otherwise there will be constant collisions.
crossover
A __ is used to get to the next hop.
MAC address
A __ is where two locations may be 20 miles apart which is good for a very local disaster (building fire). A __ is where two locations may be 200 miles apart which is best for large scale disasters.
MAN: Metropolitan Area Network, WAN: Wide Area network
A __ line is great because it is reserved for use however when not in use you’re paying for bandwidth no one is utilizing. A __ line means you don’t need to know bandwith.
Dedicated line, leased line
A __ NAT formally referred to as PAT.
Many to one NAT aka PAT (Port address translation)
A __ NAT is a set of public addresses that are mapped and is not as scalable today since computers have many connections.
pool NAT
A __ operates at layer 2 and can connect multiple LANs. It is useful in breaking up a large LAN into smaller LANs.
bridge
A __ provides block-level network file system access and is equivalent to directly attached storage (such as an IDE, SATA or SCSI drive) via a network.
SAN (Storage Area Network)
A __ provides file and directory access via Ethernet but there is no direct access to blocks or clusters.
NAS (Network Attached Storage)
A __ virtual circuit is better for small data transfers or infrequent transfers. A __ virtual circuit is better for large or frequent data transfers.
SVC (Switched Virtual Circuit), PVC (Permanent Virtual Circuit, permanently keeps connection up rather than constantly creating and tearing down connections like SVC)
A bridge is a layer __ device that breaks up an Ethernet domain into two different collission domains to increase performance.
Data link layer 2
A computer will only use DNS if a __ is not present
static host file. Every OS supports a static host file which is where the computer goes first to translate a domain to IP address.
A firewall without a ruleset, a firewall with an any-any ruleset, or a firewall with a default allow is a __.
Router
A hub operates at layer __.
Physical layer 1 since it is just re-transmitting raw data.
A layer __ switch can do load balancing because it is __ aware.
Layer 7, Application-aware
A MAC address operates at layer __.
layer 2
A modulator/demodulator that converts digital signals to analog signals, transmits over conventional telephone lines and then converts analog back to digital signals.
modem
A packet filtering firewall operates at layer __.
3
A proxy firewall or next gen firewall operates at layer __.
7
A stateful firewall operates at layer __.
4
A switch is a layer __ device that acts like a hub except that it probes each system and stores it’s MAC address so it can send communications directly from one computer to another which increases performance and security.
Layer 2
A type of network that could be used by an electrical company to read meters at multiple locations in a small area without going to each location.
NAN (Neighborhood Area Network) e.g. so don’t have to worry about dogs/guns when he reads the meter at a house.
All DSL requires a __ in the neighborhood.
POP (Point of Presence)
An __ is connecting from your organization to only another organization (e.g. via T1, MPLS, VPN). What can be a problem with this?
Extranet. Your security is only as good as the other organization’s security e.g. Target’s extranet with HVAC vendor is how the adversary go to their POS systems.
An example of a distance vector routing protocol where hop count is used as the metric is __
RIP (Routing Information Protocol)
An example of a link state routing protocol which is not subject to routing loops, is more efficient, uses multiple parameters to determine the best route and only sends an update if there’s a change is __
OSPF (Open Shortest Path First)
An IPv6 is __ bits or __ bytes.
128-bit or 16 bytes
An unmanaged switch has no __ capability while a managed switch does. Both are layer __.
VLAN, Layer 2
Any time you enter in a domain name you need to do a __ before you get to layer 3 in the protocol stack, otherwise you won’t get the IP so you won’t get routing.
forward lookup or gethostbyname
As you go down a stack you __ a header. As you go up the stack you __ a header.
Add,Remove e.g. layer 1 processes layer 1 and then takes the header off and passes it up to layer 2
ATM is designed for high speed networks sending small amounts of information, using 48 byte box plus 5 byte header so it’s very optimized and minimal chance of collisions. It uses layers __ and __.
Layers 2 & 3
Autoconfiguration embeds the __ byte __ address into the __ portion of IPv6.
6 byte MAC address into the host portion of IPv6
Client-to-site VPN which provides access from a remote client such as a traveling sales rep or telecommuting employee is also known as __.
Transport Mode
Common __ solutions are iSCSI, Fibre Channel and FCoE.
SAN
Convert the nibble 1101 to decimal.
- Write each digit separate 1 1 0 1. Label number from right to left 0,1,2,3. Then put base (in this case 2) on bottom left of those numbers, multiply down, add across. ‘Binary,Hex to Decimal conversion - Drawing 4A’
CSMA with __ is a one way link and not typically used. CSMA with __ is typically used and is where the computer monitors the line to see if another computer is transmitting, if not the computer transmits.
CSMA/CA (collision avoidance), CSMA/CD (collision detection)
Draw the OSI and TCP/IP models
OSI vs TCP-IP - Domain 4 pg 15’ Also add hub/repeater, switch/bridge, router, firewall so I know the layers for those
Ethernet is a baseband or shared media where data is transmitted using __
CSMA/CD
Ethernet, ATM (Asynchronous Transfer Mode), HDLC (High-level data link control), ISDN (Integrated Services Digital Network) and X.25 and examples of __ which are the rules for sending signals to each other.
Logical topology
Even though networks are packet-based this OSI layer sets up a virtual session to make it look like we’re on a circuit-switched network.
Layer 5 Session
Every single piece of information must have a readable unencrypted __ which routers use to determine the path.
IP header. This is why the IP protocol is often called the workhorse of the internet
Examples of leased lines in the US are __ and in Europe are __.
T’s e.g. T1, T3 vs E’s in Europe e.g. E1, E3
Explain the 3 way handshake
A synchronizes with B (1), B acknowledges (2), B synchronizes with A (3), A acknowledges. Syn (1), Syn/Ack (2,3), Ack (4). So it’s a 4 step process but since Steps 2 & 3 are done over one packet it’s a three-way handshake. ‘3 way handshake - drawing 4C’
For IPsec VPN you would primarily want to use __ for confidentiality.
ESP (Encapsulating Security Payload): protects the payload only; provides confidentiality
For IPsec VPN you would primarily want to use __ for integrity and authentication.
AH (Authentication Header): protects entire packet including headers; provides authentication and integrity but no confidentiality. AH used for internal tunnels.
For LAN transmission methods, a __ is one-to-one, a __ is one-to-many but not all, a __ is one-to-all.
Unicast, Multicast (Multi=Many), Broadcast
For TCP every single packet has __ bytes more than UDP.
12 bytes. TCP header is 20 bytes, UDP has 8 bytes. So TCP overhead is 12 bytes plus 3-way handshake (setup and teardown of connection) which UDP does not have
gethostbyaddr is also known as __.
reverse lookup
gethostbyname is also known as __.
forward lookup
How do we uniquely identify a connection?
Socket pair: consists source IP address, source port number, destination IP address, destination port number. pg 46
How does the Network layer know which protocol at layer 4 to hand off to?
That’s the 9th byte (protocol field) in the IP header.
How many more bytes does IPv4 use for overhead than IPv6?
4 bytes since IPv6 header has 8 bytes overhead as opposed to 12 for IPv4. ‘IPv4 vs IPv6 header overhead - Drawing 4B’
Hubs and switches connect computers together to create a network. __ connect hubs and switches together to move packets between those networks.
Routers
ICMP is a layer __ protocol.
Layer 3 Network
If an attacker wants to bypass DNS completely, she can modify the __.
host table aka static host file
If an organization is using wireless and wants mutual authentication, which could be used?
LEAP (Lightweight Extensible Authentication Protocol or PEAP (Protected Extensible Authentication Protocol), EAP
If the sender compresses the data prior to transmission the __ layer on the receiving end would have to decompress it before the receiver could use it.
Presentation Layer 6
If you add security directly into the protocol stack, it would be the __ layer in OSI.
Presentation Layer 6
If you are running a sniffer in a switch, which traffic will you see, if any?
Anything coming from your computer, anything going to your computer and any broadcast traffic. It is INCORRECT to say that you will not see any traffic.
If you are using ESP with data transport mode, does that effect security?
Yes, you can only do layer 3 filtering, not higher level filtering since IPsec data is encrypted at layer 4 and higher so all you can see is the IP header.
If you have the address and are looking for the FQDC or local name you would perform the __ command.
gethostbyaddr aka forward lookup to find the FQDN (eric.sans.org) or local name (eric)
If you have the FQDN or local name and need the address you would perform the __ command.
gethostbyname aka forward lookup if you have the FQDN (eric.sans.org) or local name (eric)
If you want your IPv4 network to communicate with the v6 internet you need __.
translation: IPv4 over IPv6
If your network is IPv6 and the Internet is IPv4, what must you do with your gateways?
tunneling: IPv6 over IPv4
In __ mode, the IPsec header is after the IP header and before the TCP/UDP header.
Transport mode: between two hosts, pg 160
In __, a server generates a new challenge every time and combines the client’s response with the password so if it is sniffed, it’s a new password every time.
CHAP (Challenge-Handshake Authentication Protocol). It should be used instead of PAP wherever possible.
In __, the same password is used every time you authenticate so it sould be sniffed and used in a replay attack.
PAP (Password Authentication Protocol)
In 802.1X the __ is responsible for forwarding authentication credentials supplied by a user or a digital certificate to an authenticating entity.
Supplicant
In a __-switched network you get dedicated bandwidth but bandwidth is limited and can be wasted e.g. telephone network. In a __-switched network there is no dedicated bandwidth so there could be performance issues and delays but it can handle an unlimited number of connections and bandwidth.
circuit-switched, packet-switched
In IPsec __ mode, the outer IP header specifies IPsec processing destination and the inner IP header specifies the ultimate packet destination.
Tunnel mode pg 160
In OSI the __ layer defines how applications can enter the network.
Presentation Layer 6
In OSI the layer __ interacts with data and ensures it arrives.
Transport layer 4
In TCP/IP __ is a connectionless protocol which means that there is no established connection between the endpoints that are communicating. The reason the packets do get put in the right order is because of __, the connection-oriented protocol that keeps track of the packet sequence in a message.
IP, TCP
In the OSI model, the __ layer handles the establishment and maintenance of connections between systems.
Session Layer 5
In the TCP/IP model, the __ layer delivers packets which may arrive in a different order than the order they were sent in, and the __ layer puts them back in the right order.
IP, TCP
IPsec data is encrypted at layer __ and higher.
Layer 4 and higher so you can only do layer 3 filtering and no higher.
IPv4 address field includes a __ byte source address and a __ byte destination address.
4,4
IPv4 has a default header size of __ bytes.
20
Layer __ ensures reliable connectivity from end to end.
Layer 4 Transport
OSI layer __ actually interacts with your information and prepares it to be transmitted across the network.
Layer 4 Transport
OSI layer __ describes how systems on different network segments find and communicate with each other.
Layer 3 Network handles interaction with the network address scheme and connectivity over multiple network segments.
OSI layer __ determines the path for the data.
Network layer 3
OSI layer __ ensures everything is in a unified format.
Presentation Layer 6
Protocol that credit card vendors use for web transactions. They create a one-time cc number to use.
SET (Secure Electronic Transmission)
Refer to ‘802.1X authentication 1 - Quiz 4 Drawing’ and identify the Authenticator, Authentication Server, and the Supplicant.
Answer is ‘802.1X authentication 2 - D4 pg 174’: From left to right the Supplicant (client requesting authentication), Authenticator transmits request (piece of networking hardware such as a WAP that disables access to a given physical or logical port by default), Authentication Server processes request (usually based on RADIUS).
Repeaters are layer __ devices that amplify a signal.
Physical layer 1
Routers use the __ layer in TCP/IP to determine the path that a packet will take.
Internet layer
Separating out a router’s control plane (routing table / decisions for routing such as OSPF/BGP routing protocol updates, centralized and made remotely) from the data plane (data sent through a router such as routed packets) is know as __. This way you just have one configuration pushed out to all routers and the routers just do routing capability (data plane).
SDN (Software Defined Networking)
SET, PEM, S/MIME, SSH, SSL/TLS, SMTP are all __ layer security protocol.
Application Layer 7. SET (Secure Electronic Transaction), PEM (Privacy-enhanced Electronic Mail)
Shared segment is typical communication where anyone can talk as long as no one else is talking. __ is where each person has 20 seconds which is fine for when you have to get info from everyone but typically not ideal.
Time slicing
Site-to-site VPN which provides connectivity to networks such as headquarters and a remote office is also known as __. Gateway devices are located in front of both networks.
Tunnel Mode
SLIP is being replaced by __ which improves on SLIP and incorporates authentication methods of PAP and CHAP.
PPP (Point-to-Point Protocol)
SSL/TLS is an application that traverses level(s) __.
5/6/7 Session/Presentation/Application
SSL version 3.1 is TLS version __
1.0. TLS is an upgrade to SSL 3.0
TCP __ are used to setup and establish different forms of communication. They control data flow and signal information to the receiving host.
flags
The __ created RFC ___ to create a private address space made up of classes __ __ and __.
IETF (Internet Engineering Task Force), 1918, Class A B and C
The __ layer handles the establishment and maintenance of connections between systems.
Session Layer 5
The __ layer in TCP/IP is equivalent to the Network layer in the OSI model.
Internet (IP) layer
The __ layer in TCP/IP maps IP addresses to MAC addresses.
Network layer
The __ layer in TCP/IP provides for reliable end-to-end communications and maintains the integrity of data.
Transport (TCP) layer
The __ layer in TCP/IP provides packet sequencing and defines protocols for setting up the level of transmission service.
Transport (TCP) layer
The __ layer in the OSI model interacts with the user.
Application layer 7
The __ layer in the OSI model is the logical topology e.g. Ethernet, token ring, 802.11).
Data link layer 2
The __ layer in the OSI model negotiates the connection, sets it up, maintains it, and makes sure that information exchanged across the connection is in sync on both sides.
Session Layer 5
The __ layer in the OSI protocol stack makes sure that the data sent from one side of the connection is received in a format that is useful to the other side.
Presentation Layer 6
The __ layer in the TCP/IP model is the fundamental protocol of the Internet.
IP (Internet Protocol)
The __ layer interacts with the program to determine which network services will be required.
Application Layer 7
The __ layer provides translation services such as EBCDIC to ASCII.
Presentation Layer 6
The __ layer sets up communications link between individual devices over a physical link or channel.
Data link layer 2
The __ protocol provides error messaging and troubleshooting for IP.
ICMP
The __ topology has the highest level of redundancy because each node is connected to every other node however it is also more expensive.
mesh
The address reserved for local loopback is __.
127.0.0.1, technically a class A address
The core routers of the internet use an exterior gateway protocol called __ to interconnect all networks and determine the most optimal routers to use.
BGP (Border Gateway Protocol)
The header size for UDP is __ bytes.
UDP has 8 byte header which is the minimum info you need
The layer is responsible for trasmitting electrical signals, fiber optic light signals, microwave, sattelite and cellular signals.
Layer 1 Physical
The least common Network Layer protocol in TCP/IP which is only used with IP multicasting is __
IGMP (Internet Group Management Protocol); other two more popular TCP/IP protocols are IP and ICMP.
The Network layer of the TCP/IP model comprises the __ layer(s) in the OSI model.
Physical and Data Link layers
The open source __ protocol is used for remote management of the data plane in SDN.
OpenFlow protocol. Software Defined Networking
The OSI layer __ handles sequencing of packets in a transmission.
Layer 4 Transport
The OSI layer __ sets up a virtual circuit or connection.
Session Layer 5
The problem with ATM is that it has a very high __ ratio, meaning it is inefficient for sending large files because every 48 bytes requires a 5 byte header.
Header to data ratio. We want a small header to data ratio.
The process of going down a stack is called __.
data encapsulation
The standard reference model for protocol stacks is called __ and was developed by the __.
OSI (Open Systems Inerconnection) model, ISO (International Standards Organization)
The TTL field is the byte __ in the IP header.
8th
There are __ bytes in the TCP header
20
There are __ bytes in the UDP header
8
This is a LAN transmission protocol where the computer continuously monitors the common transmission line (you listen before you speak). Transmits when the line appears to be unused (If no one else is speaking you can speak), otherwise you need to listen and only communicate when they stop.
CSMA (carrier sense multiple access)
This OSI layer asks what is the next hop.
Layer 2 Data Link
This OSI layer is responsible for routing and determining the path a packet will take.
Layer 3 Network
This OSI layer is responsible for transmission of raw binary data.
Layer 1 Physical
This OSI layer is responsible for verifying whether information was or was not received by the other side.
Layer 4 Transport
This OSI layer takes the raw binary data from the previous layer and provides meaning to that binary data.
Layer 2 Data Link
We use __ for discussing networks and __ for implementing on a real live network.
OSI, TCP/IP
What are examples of TCP flags?
URG: urgent to prioritize traffic, FIN: graceful termination, RST: Reset is an abrupt termination
Also SYN: synchornize is a connection request, ACK: acknowledgement, PSH: Push
What are the 7 layers of the OSI model?
Please Do Not Throw Sausage Pizza Away. Physical, Data Link, Network, Transport, Session, Presentation, Application
What are the Ethernet speeds for each category rating?
Cat 1 and 2 (voice, low speed data), Cat 3 (10Mbps), Cat 4 (16Mbps), Cat 5 (100Mbps), Cat 5E/6 (1000Mbps)
What class does 200.5.300.10 fall under?
It is an invalid address since third octet is above 255
What is a GAN?
Global Area Network: Internet
What is A3x16 in decimal?
- A3x16 just means ‘A3 base 16’ or A3 in hex. Write each digit separate A and 3. Label number from right to left 0,1,2,3. Then put base (in this case 16) on bottom left of those numbers, multiply down, add across. ‘Binary,Hex to Decimal conversion - Drawing 4A’
What is the current, widespread implemented solution to network address congestion and conservation?
CIDR (Classless Inter-Domain Routing)
What is the difference in Ethernet performance due to?
Number of twists. More twists and tighter twisting increases performance.
What is the open protocol that supports the Smart Grid and provides interoperability between various vendor’s SCADA systems?
DNP3 (Distributed Network Protocol)
What technology separates a router’s control plane from the data (forwarding) plane?
SDN (Software Defined Networking)
When a program requires access to the network, the __ layer will manage requests from the program to the other layers down the stack.
Application Layer 7
When it comes to VoIP, a __ phone is more secure and easier to roll out than a __ phone since the latter mostly just has firmware installed, meaning you cannot patch it, add VPN and endpoint security like you can a computer.
soft, hard
Which authentication mechanism exposes the password in plaintext?
PAP (Password Authentication Protocol)
Which is the better routing protocol: distance vector or link state?
Link state e.g. OSPF (Open Shortest Path First), has full knowledge of all routers, uses SPF algorithm whereas distance vector (e.g. RIP) uses hop count, is prone to routing loops and is inefficient sending routing updates every 30 seconds.
Which layer of the OSI model converts bits into electrical signals or light impulses for transmission?
Physical
Which layer of the OSI model interacts with your information and prepares it to be transmitted across the network?
Transport layer 4
Which layer of the OSI model takes information and converts it to a machine-independent format?
Layer 6 Presentation
Which network component should be used when you are concerned with internal network sniffing?
A network switch
Which network device would block IP limited broadcast traffic by default?
Router; switches do not block broadcasts
Which OSI layer connects the physical part of the network with the abstract part?
Layer 2 Data Link connects the physical part of the network (e.g. cables and electrical signals) with the abstract part (packets and data streams).
Which OSI layer handles connection specifications between the interface hardware and the network cable and voltage regulation.
Layer 1 Physical
Which OSI layer handles the establishment and maintenance of connections between systems?
Session Layer 5
Which OSI layer would decompression take place in?
Layer 6 Presentation is responsible for encryption, compression, decompression
Which OSI layer would encryption take place in?
Layer 6 Presentation
Which plaintext VoIP IP protocol is frequently used to transfer audio or video data?
RTP (Real-time Protocol)
Which VoIP protocol is an application layer protocol used for communication signaling?
SIP (Session Initiation Protocol)
Write out the different classes of IP address.
“Class A 1-127.x.x.x/8, Class B 128-191.x.x.x/16, Class C 192-223.x.x.x/24, Class D & E are not for routable addresses, they are multicast/experimental use
IPv4 address classes - Domain 4 pg 22”
__ is used for point-to-point communication between DTE and a DCE, usually a modem or communication between DTE and DSU/CSU.
X.25. DTE (data terminal equipment), DCE (data circuit-terminating equipment), DSU/CSU (data channel service unit). X.25 and frame relay rely on DTE and DCE
You can have a __ topology without a __ topology but not vice versa.
Physical topology (layer 1), Logical topology (layer 2)
You should use __ for repetitive data, one-way transfer, real-time communication or in cases where you are trying to limit overhead.
UDP: repetitive data (if sending same info over and over every 10 seconds and one gets dropped just wait another 10 seconds e.g. NTP), one-way transfer (e.g. nuclear powerplant has one-way connection towards internet-connected business network so it’s not exposed to incoming traffic), real-time (voice/video)
You would use a __ NAT for DMZs with public accessible systems.
one-to-one
TCP header is __ bytes.
20 bytes
UDP header is __ bytes.
8 bytes
__ is a lightweight signaling protocol that only operates at the application layer.
SIP
__ is a signaling protocol that operates at layers 4,5,6,7 since it is more complex.
H.323
__ and __ are VoIP signaling protocols. __ is the packetization of your voice.
SIP and H.323 (can be by itself or wrapped around SIP for security), RTP (Real-time protocol)
For the protocol field a value of 1 is __. 2 is __. 6 is __. 17 is __.
1=ICMP, 2=IGMP, 6=TCP, 17=UDP
Which IPSec operational mode encrypts the entire data packet (including header and data) into an IPSec packet?
tunnel mode
In IPSec __ mode, only the datagram (payload) is enrypted, leaving the IP address visible within the IP header.
transport mode
In IPSec __ mode, the entire packed is encrypted and encased into an IPSec packet.
tunnel mode
SSL and TLS protect packet data above the __ layer.
transport
Be familiar with SSL Crypto Illustration
SSL Crypto Illustration - D3 pg 180’
Taken as a pair of both source and destination, an address and a port number are referred to as a __.
socket pair. The socket tells a host’s IP stack where to plug in a data stream so that it connects to the right application. D4 pg 46
__ is a packet-switching WAN protocol that is a precursor to Frame Relay. A main difference is that this protocol provides error checking, windowing and retransmission services that are not available in Frame Relay.
X.25
