Guide to Network Security

Question 1

What are protocols

Answer 1

Forms of ceremony and etiquette

Question 2

Most common protocol used by LANs and internet

Answer 2

TCP /IP or Transmission Control Protocol / Internet Protocol

Question 3

What protocol is TCP/IP

Answer 3

TCP/IP comprises several protocol that function together. They are called protocol suite.

Question 4

Basics TCP/IP protocols that relate to Security

Answer 4

ICPM
SNMP
DNS
File transfer and storage 
Telnet

Question 5

What does ICMP do

Answer 5

ICMP : Internet Control Message Protocol
It handles communication between devices.

ICMP messages are divided into two classes

• • Informational and query messages
• • Error messages

Question 6

Informational and query messages

Answer 6

These messages are used for devices to exchange information and perform testing

Question 7

Error messages

Answer 7

provide feedback to another device about an error that has occurred

Question 8

Attack of ICMP

Answer 8

• *Network discovery - reconnaissance to discover information about host
• *Smurf attack - broadcast a ping request to all computers on the network causing crash
• *ICMP redirect attack - redirect packet is sent to the victim asking the host to send its to another router (malicious device)
• *Ping of death - Malformed ICMP sent to victim’s computer causing the host to crash

Question 9

What does SNMP do

Answer 9

A popular protocol used to manage network equipment

It allows network administrators to remotely monitor, manage, and configure devices on the network

Question 10

community string

Answer 10

protected password that agents that managed devices used

Question 11

Types of Community Strings

Answer 11

** A read -only string : which allows information from the agent to be viewed

** Read-Write String : Allows settings on the device to be changed

Question 12

Default SNMP community strings for read only and read-write

Answer 12

Public and Private

Question 13

What does DNS do

Answer 13

Domain Name System - It resolves a symbolic name with its corresponding IP address

Question 14

Attack toward DNS

Answer 14

• • DNS poisoning : Substitutes addresses so that computer is redirected to another device
• • DNS transfer : ask valid DNS server for zone transfer

Question 15

File Transfer Protocol FTP

Answer 15

Transferring files can be done using FTP; WHICH IS INSECURE.

Used to connect to an FTP server, much in the same way that HTTP links to a web server.

Question 16

How to use FTP on a local computer

Answer 16

• • From a command prompt - at the operating system
• • Using a web browser - by entering preface ftp://
• • Using a FTP client

Question 17

Security vulnerabilities associated with using FTP

Answer 17

FTP does not use encryption ; so usernames, password could be accessed by using protocol analyzer

Question 18

Secure transmission over FTP

Answer 18

**FTP secure (FTPS) uses SSL or TLS to encrypt commands sent over port 21

** Secure FTP(SFTP) - an entire protocol

Question 19

NetBIOS - Network Basics Input/output System

Answer 19

A transport protocol used by Microsoft Systems to allow applications on separate computers to communicate over a LAN

Question 20

Information to gather when NetBios

Answer 20

• *Computer Names
• *Contents of the remote name cache including IP addresses
• *List of local NetBios
• *List of resolved names

Question 21

a rule-based management approach,

Answer 21

The process of administration that relies on following procedural and technical rules, instead of creating security elements “on the fly.”

Question 22

What is included in a device security

Answer 22

Establishing a secure configuration and implementing safe guards

Question 23

Logs

Answer 23

**A log record of events that occur.

** Security logs : Reveals the types of attacks that are being directed at the network and if any of the attacks were successful.

** Security access log : can provide details regarding requests for specific files on a system.

**Audit log : used to record which user performed an action and what that action was.

**System event logs : document any unsuccessful events and the most significant successful events (some system event logs can be tailored to specify the types of events that are recorded).

Question 24

Network Design Management should consider what

Answer 24

Network separation to prevent bridging, loop protection, and VLAN management.

Question 25

Clouds

Answer 25

**Public cloud : services and infrastructure are offered to all users with access provided remotely through the Internet

**Community cloud open only to specific organizations that have common concerns

** Private cloud is created and maintained on a private network

**Hybrid cloud is a combination of public and private clouds.

**Cloud storage has no computational capabilities but only provides remote file storage