Secure Protocols

Question 1

What is a TLS handshake?

Answer 1

The two communicating sides exchange messages to acknowledge each other, verify each other, establish the cryptographic algorithms they will use, and agree on session keys.

Question 2

What is SSH? What is its port number?

Answer 2

A protocol that allows an encrypted tunnel to a server or network device to be used. Port 22.

Question 3

What is LDAPS? What is its port number?

Answer 3

A protocol that is used for secure communication between a domain client and an LDAP server. Port 636.

Question 4

What is SFTP? What is its port number?

Answer 4

An SSH session between an FTP client and an FTP server. Port 22.

Question 5

What is FTPS? What is its port number?

Answer 5

A secure FTP session that is mostly overlooked. SFTP is more often used. Can be port 990 if implicit or 21 if explicit. If a client connects to an FTPS server on port 990, the assumption is that the client intends to perform SSL.

Question 6

What is HTTPS? What is its port number?

Answer 6

Secure HTTP. Now uses TLS. SSL is deprecated. Port 443.

Question 7

What is SRTP? What is its port number?

Answer 7

Secure Realtime Transfer Protocol. Used to secure VoIP. Port 5061.

Question 8

What is S/MIME? What is its port number?

Answer 8

Digitally signs and encrypts emails. Uses public key cryptography.

Question 9

What is POP3S? What is its port number?

Answer 9

Secure inbound email. SSL port 465 and TLS port 587.

Question 10

What is IMAPS? What is its port number?

Answer 10

Secure outbound email. Port 993.

Question 11

What is DNSSEC? What port number does it work on?

Answer 11

A set of specifications that extend the DNS protocol by adding cryptographic authentication for responses received from authoritative DNS servers. Its goal is to defend against techniques that hackers use to direct computers to rogue websites and servers. All DNS traffic is on port 53.

Question 12

What is SNMP? What is its port?

Answer 12

Simple Network Management Protocol. Collects information on managed devices. Network monitoring and configuration. Its components are managed devices, an agent, and a management station. Port 161.

Question 13

What are the different versions of SNMP, and what are some characteristics of them?

Answer 13

o SNMP
 Poor security
 Community string (ID or password)
o SNMPv2
 Poor Security
 Community string (ID or password)
o SNMPv3
 Enhanced security
 Adds Encryption
 Adds Authentication