Network Applications Flashcards
1
Q
HTTP
A
Hypertext Transfer Protocol
- Enables clients (typically browsers) to request resources from HTTP server on port 80 by default
- Requests resource with URL (uniform resource locator)
- Server responds with either datea or error message
- Data sent unencrypted and no authentication from client or server
2
Q
HTTP Header
A
- Defines the formats of the responses and requests to and from HTTP servers
- Payload is usually HTML (Hypertext Markup Language).
3
Q
Web Servers
A
- HTTP Servers connected to the internet and hosting websites
- Main platforms are Microsoft Internet Information Server (IIS), Apache and nginx
4
Q
Dedicated Server
A
- Private HTTP server allocated by rented as service from ISP
- Typically unmanaged or management has an additional cost
5
Q
VPS
A
Virtual Private Server
- ISP Allocated VM within a physical server
- Isolated by a hypervisor
6
Q
Cloud Hosting (HTTP Server)
A
- Website runs on cloud on several hardware computers, allowing more scalability if needed
7
Q
Shared Hosting (HTTP Server)
A
- Website is hosted within private directory on shared server
- Performance can be affected by other sites hosted on server because they all share resources
8
Q
SSL/TLS
A
Secure Sockets Layer/ Transport Layer Security
- Developed to address security problems with HTTP
- Encrypts TCP connections
- When used with HTTP is called HTTP Secure (HTTPS)
9
Q
HTTPS
A
HTTP Secure
- Web server is installed with digital certificate from certificate authority (CA)
- Proves identity of server, assuming client also trusts CA
- Certificate is wrapper for public/private encryption key pair
- Server and client use certificate to set up an encrypted tunnel
- Sent of port 443
10
Q
FTP
A
File Transfer Protocol
- Used to perform administrative upload/downloads for servers and appliances
- Port 21 used for commands and status, but not to transfer data
11
Q
Active FTP
A
- Client sends PORT command specifying chosen data connection port
- Server opens a connection between client port and port 20 on the server
- Poses issues for some firewalls, as the server is initiating inbound connection
12
Q
Passive FTP
A
- Client opens data port
- Sends PASV command to server control port
- Server opens random high number port and sends to the client with PORT command
13
Q
TFTP
A
Trivial File Transfer Protocol
- Connectionless, running over UDP port 69
- Not guaranteed delivery
- Only suitable for small files
- Only supports reading (GET) and writing(PUT) files.
- Most commonly used by legacy network applications.
- No security mechanisms
14
Q
SFTP
A
Secure FTP
- Encrypted authentication and data transfer between client and server
- Secure link is created using SSH over TCP port 22
- Command and data can then be sent over link without risk
- Requires an SSH server that support SFTPs
15
Q
Explicit TLS (FTPES)
A
- Means of securing FTP over SSL/TLS
- Use AUTH TLS to upgrade insecure connection over port 21 to secure one.
- This protects authentication credentials
- Data connection can be encrypted using PROT command