Secure Protocols

Question 1

What do secure protocols do

Answer 1

Provide security services for communications channels as well as secure authentication services

Question 2

Secure Shell (SSH)

Answer 2

Remote management protocol which replaced Telnet. It operates over TCP/IP. All communications are encrypted. Primarily used by IT administrators to manage devices such as servers and network devices.

Question 3

What does SSH protect against

Answer 3

Eavesdropping
DNS and IP spoofing
MITM attacks

Question 4

Transport Layer Security (TLS)

Answer 4

Data protection used for protecting website transactions (banking, ecommerce

Question 5

Secure Socket Layer (SSL)

Answer 5

Legacy data protection protocol used for protecting website transactions (banking, ecommerce). Replaced by TLS

Question 6

What are some SSL and TLS features

Answer 6

Both offer data encryption, integrity, and authentication.
Prevent tampering, spoofing, and eavesdropping
Support one and two way authentication using digital certificates
Can be implemented at lower layers such as network layer to operate as a VPN.

Question 7

Kerberos

Answer 7

Standard based network authentication protocol used in many products (Microsoft Active Directory Domain Services AD DS)
Mostly used in LANs for organization wide authentication, single sign on and authorization

Question 8

Internet Protocol Security (IPSec)

Answer 8

standard suite of protocols that is used to connect nodes (computers or office location) together.
It provides confidentiality, integrity, and authentication. Widely used in VPNs

Question 9

Authentication Header (AH)

Answer 9

A part of IPSec that provides assurance of message integrity and nonrepudiation. Also provides authentication and access control preventing replay attacks

Question 10

Encapsulating Security Payload (ESP)

Answer 10

A part of IPSec that performs authentication for the sender, also it encrypts the data being sent. Can also prevent replay attacks but not to the degree of AH

Question 11

Security Association (SA)

Answer 11

A part of IPSec that provides the bundle of shared security attributes or keys and data that provide the parameters for AH and or ESP operations

Question 12

Transport Mode

Answer 12

A IPSec mode that only encrypts and authenticates the IP payload (data)

Question 13

Tunnel Mode

Answer 13

A IPSec mode that will encrypt and authenticate the whole IP packet including the data and routing information (header)

Question 14

Internet Key Exchange (IKE)

Answer 14

Is a part of IPSec suite and used to establish a secure authenticated communications channel between 2 entities. Uses X.509 PKI certificates for Diffe-Hellman-Merkle key exchange protocol to establish a shared session secret.