Section 9 & 10 Flashcards

1
Q

Protocol Data Units (PDU)

A

the info used by the different protocols provided in frame segments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Ethernet Frame

A

FCS, Data, ACK, Sequence, Source Port, Dest Port, Source IP address, Destination IP address, source MAC, Destination MAC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IP Packet

A

Data, ACK, Sequence, Source Port, Dest Port, Source IP address, Destination IP Address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

TCP & UDP

A

Data, ACK, Sequence, Source Port, Dest Port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

TCP

A

connection Oriented. Internet uses TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

UDP

A

Connectionless oriented. One-way communication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

TCP 3-way handshake

A

clients initiate contact with servers with a SYN. Servers send back a SYN/ACK. Then Client sends an ACK to the server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

ICMP (Internet Control Message protocol)

A

works at the IP layer. No port numbers or data. Ex: Ping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

IGMP (Internet Group Message Protocol)

A

Internet layer of TCP/IP model. Provides multicast support. Multicast address always start with 224

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Both tracert (Windows) and traceroute (Linux) commands

A

display the hops through a router to reach a destination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Using the alternative command “pathping”

A

can get a quick ping response from the routers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Bandwidth speed testing

A

helps verify the upload and download speeds to an individual computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Wireshark

A

protocol analyzer. Allows us to dismantle everything going on in the system. Display the traffic flow of Ethernet frames and can drill down into the frame-viewing various protocols, ports, timelines, and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Netstat

A

lists all the open ports and connections on your computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Netstat commands

A

netstat -n presents the results numerically, netstat -b shows the executable for every connection, netstat -a shows all the open ports, netstat -r shows the local routing table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

HTTP

A

port 80, HTTPS uses TCP port 443 by default
Web sites host web servers: Web clients access Web servers
Anonymous accounts enable public access to FTP servers
FTP is not an encrypted protocol. SFTP is a more secure FTP. FTP servers listen on port 21 and send data back to the clients on port 20

17
Q

Traditional email

A

SMTP (Simple Mail Transfer Protocol) - port 25
IMAP (Internet Message Access Protocol v4) - port 143
POP3 uses port 110
All 3 port numbers are not encrypted
Implementing TLS
IMAP 143 -> 993 encrypted
POP3 110 -> 995 encrypted
SMTP 25 -> 465 encrypted
STARTTLS
IMAP, POP3, SMTP - Port 465
TLS/STARTTLS conflicted with Port 465
STARTTLS changed to port 587

18
Q

Telnet enables you to access a remote computer.

A

Telnet runs on TCP port 23
Telnet (unsecure) and SSH (secure) are both terminal emulators
SSH runs on TCP port 22
SSH uses an authentication key
Rlogin is not secure uses port 513 - replaced with SSH

19
Q

Network Time protocol

A

NTP runs on port 123
Hundreds of protocols rely on NTP
A system with incorrect time can cause trouble on a network

20
Q

DHCP Issues

A

IP reservation- reserve ip addresses for stuff that you dont want to change
Reduce your DHCP scope as much as possible
MAC reservation- can be used to define devices that have top priority for address assignment
Exhausted DHCP Scope- not set enough ip addresses aside for the scope. Coffee shop example

21
Q

IPAM

A

keep track of all IP addresses. Automatically create new DHCP scopes, set reservations, generate new blocks of addresses, and can keep your systems running no matter what happens

22
Q

Domain Name System (DNS)

A

resolve IP addresses from Fully Qualified Domain Name (FQDN) ex: www.totalsem.com
Typing ipconfig /all will show DNS server information
Computers and DNS servers cache IP address information for a time to enable faster resolution.

23
Q

Interior DNS

A

.local to show it’s an internal domain

24
Q

Authoritative DNS server

A

lookup zones

25
Q

SOA (start of authority)

A

the DNS that is the primary DNS server for the zone

26
Q

A record, AAAA record

A

A record= IPv4
AAAA record=IPv6

27
Q

Canonical name (CNAME)

A

makes an alias name, or “known name”, often created for user interfacing

28
Q

Reverse lookup zone

A

resolve an ip address to a fully qualified domain name

29
Q

Forward lookup zone

A

fully qualified domain name to ip address

30
Q

SRV record

A

VOIP systems. Instead of making a unique type for every possible system you have a SRV record

31
Q

TXT record

A

DKIM and SPF. SPF record looks and accepts any email that comes from this specific IP. DKIM allows us to authenticate any individual person trying to use the e-mail as a legitimate user. Used to reduce spam

32
Q

NET Command

A

net view- great way to make a quick and dirty look of what computers can my system see within my work group
net user- a quick i forgot who I logged in as are what am I right now.
net use- when you map a drive what you’re doing is you’re assigning a drive
letter to that particular shared folder.
net share-
net accounts- Net accounts is a pretty handy way to get an idea of what type
of settings you have for all of your accounts.
net start- showing you right here are all of the different services that are network based that are running on this particular system.
net stop-

33
Q

Netbios

A

is an old protocol that manages the connections based on the names of the computers within a LAN

34
Q

Link Local Multicast Name Resolution (LLMNR)

A

runs on UDP port 5355 and is a vastly improved name resolving server much better than NetB10S
nbtstat- diagnostic command that can be useful, but has some issues with LLMNR

35
Q

Registered names

A

names sent out into the world and confirms who you are

36
Q

Dynamic DNS (DDNS)

A

will go out onto the Internet and it will talk to a DNS service and there are companies out there that provide dynamic DNS as a service and they will talk and they’ll grab the WAN IP address. And these dynamic DNS service companies have their own DNS servers and my WAN IP address will be placed onto a domain name of my choosing.

37
Q

Dynamic DNS

A

enables you to use a DHCP-assigned IP address for connection. DDNS providers can update IP information.

38
Q

DNS troubleshooting

A

Try an IP address to test without DNS. Check for misconfiguration. Type “ipconfig /displaydns” in the command prompt. Type “nslookup” in the command prompt. Run nslookup to see default DNS server information. Use ping to check connectivity to an FQDN.
Run ipconfig /flushdns to clear the DNS resolver cache