Lesson 12: Ensuring Network Availability Flashcards
Define SSH (Secure Shell)
Application protocol supporting secure tunneling and remote terminal emulation and file copy (SFTP). SSH runs over TCP port 22.
What is a SSH host key?
A public/private key pair used to identify an SSH server
What purpose does an SSH host key serve?
To identify the SSH server and set up a secure channel for the client to submit authentication credentials
What are the various methods to authenticate with an SSH server?
- Username/password
- Public key authentication
- Kerberos
What commands starts the SSH server on a device?
sshd
What command creates a host key?
ssh-keygen
What command is used to store private keys?
ssh-agent
What command is used to connect a ssh client to a host?
ssh hostname or IP
What command is used to transfer a file using ssh?
scp Username@Host:RemoteFile /Local/Destination
What is Telnet?
Application protocol supporting unsecure terminal emulation for remote host management. Telnet runs over TCP port 23.
Why is Telnet unsecure?
Telnet connections are not encrypted and are vulnerable to packet sniffing and replay
What port does RDP use?
TCP port 3389
Define Network Time Protocol (NTP)
Application protocol allowing machines to synchronize to the same time clock that runs over UDP port 123
How do client hosts receive time?
Using Simple NTP (SNTP) over UDP port 123; can’t act as a time source
What windows command is used to configure NTP?
w32tm
What is the file to configure for NTP in linux?
/etc/ntp.conf
Define a bottleneck
Troubleshooting issue where performance for a whole network or system is constrained by the performance of a single link, device, or subsystem
Define Simple Network Management Protocol (SNMP)
Application protocol used for monitoring and managing network devices. SNMP works over UDP ports 161 and 162 by default
What is needed for SNMP?
SNMP Agents and a SNMP monitor
What is the purpose of an SNMP agent?
Installed on a device for monitoring/management, maintains a Management Information Database (MIB) that holds device statistics referred to by a numeric object identifier (OID)
What is a Object Identifiers (OID)
A unique numeric value assigned to each statistic stored in a management information database (MIB)
How is an SNMP agent configured?
With the community name of the computers allowed to manage the agent and the IP address or hostname of the server running the management system
What is the function of a community name?
Acts as a password
Define an SNMP monitor
A management software that allows to oversee network activity by polling agents for data for their management information databases (MIB)
What are the two ways an SNMP monitor can poll data from a SNMP agent?
- Get
- Trap
What is the get function in a SNMP monitor?
The software queries the agent for a single object identifier (OID) at regular intervals
What is the trap function in a SNMP monitor?
The agent informs the monitor of a notable event once a set threshold is reached
What port does the SNMP monitor use for the get functnction?
UDP port 161
What port does the trap function use for a SNMP monitor?
UDP port 162
What do system logs typically contain?
Records startup events, changes to the OS, kernel processes, and driver