Lesson 9: Explaining Transport Layer Protocols Flashcards

1
Q

What is the purpose of the transport layer protocols (Layer 4)?

A

Establishes end-end connections by linking the application layer to the network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a port?

A

A unique number assigned to a particular application protocol used to identify the service once the packet has been routed to the destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a well known port?

A

Port numbers 0-1023

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the highest port number available?

A

65,535

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Define a socket

A

The combination of a ip address and port number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the difference between a server socket and a client socket?

A

A server socket can support multiple connections from multiple client sockets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Define TCP (Transmission Control Protocol)

A

Transport layer protocol providing connection-oriented guaranteed communication using acknowledges to ensure delivery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does TCP (Transmission Control Protocol) function?

A

TCP divides data from an application into segments (based on MTU) each with its own header while providing acknowledgements of receipt, sequencing, and retransmissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the fields in a TCP datagram?

A
  1. Source/Destination port
  2. Sequence number
  3. Ack number
  4. Data length
  5. Flags
  6. Window
  7. Checksum
  8. Options
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the purpose of the sequence number field in a TCP datagram?

A

The seq number is sent by the TCP initiator identifying the current segment of data allowing the receiver to rebuild the message with out of order packets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the purpose of the ack number field in a TCP datagram?

A

The seq number is sent by the TCP server/recipient, which is the sequence number of the previous segment with an increment of 1 (+1), and lets the original sender know if retransmission of the data is necessary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the purpose of the data length field in a TCP header?

A

Defines length of TCP segment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the purpose of the flags field in a TCP header?

A

Identifies type of content in the segment (ACK, SYN, FIN, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the purpose of the window field in a TCP header?

A

The amount of data the host is willing to receive before sending another acknowledgement allowing one side of the communication to tell the other side to slow the sending rate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the purpose of the urgent pointer field in a TCP header?

A

Identifies if urgent data is being sent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What process takes place to establish a TCP connection?

A

Three-way handshake

17
Q

What is the first step in a 3-way handshake?

A

The client enters SYN-SENT state and sends a segment with the TCP flag “SYN” to the server

18
Q

What is the second step in a 3-way handshake?

A

The server responds with a SYN/ACK segment and enters the SYN-RECEIVED state

19
Q

What is the third step in a 3-way handshake?

A

The client responds with an ACK segment, creating a connection between client and server

20
Q

What causes a client to retransmit data?

A
  1. A period of time passes without the sender receiving an acknowledgement
  2. The client receives a failed transmission flag
21
Q

What process takes place to close a TCP connection?

A

TCP connection teardown

22
Q

Define UDP (User Datagram Protocol)

A

Transport layer protocol that is connectionless and is a non-guaranteed communication method with no flow control or retransmission

23
Q

What are the fields in a UDP (User Datagram Protocol) header?

A
  1. Source/Destination Port
  2. Message length
  3. Checksum
24
Q

What is the size of a UDP header and TCP header?

A

UDP header is 8 bytes (64 bits) max; TCP header is 20+ bytes (160+ bits)

25
Q

Define network visibility

A

The ability to verify what exactly is connected to a network and what is being communicated over it

26
Q

What is an IP scanner?

A

Tool that performs host discover

27
Q

What is Nmap?

A

A security scanner program used for IP scanning, auditing, and a pen test tool

28
Q

What is netstat command in windows/Linux?

A

Command to check state of ports on local hosts and which services are configured for the open ports

29
Q

What is a fingerprint scan?

A

Compares specific responses to known information about hardware platforms, OS types and versions, and application/service types and versions