-
Many protocols store data in cache for temporary access. What type of attack attempts to corrupt the cache with different data?
poisoning attack
-
What does TCP/IP stand for?
Transmission Control Protocol/Internet Protocol
-
What is the default port for HTTP?
80
-
What type of connection protocol uses a three-way handshake?
TCP (Transmission Control Protocol)
-
What does UDP stand for?
User Datagram Protocol
-
What type of protocol does ICMP traffic and audio/video streaming use?
UDP(User Datagram Protocol)
-
How many bits in an IPv6 address?
- 128-bit
- ex: FE80:0000:0000:0000:20D4:3FF7:003F:DE62
-
How many bits in a IPv4 address?
-
What does ICMP stand for and what is it used for?
Internet Control Message Protocol is used for testing basic connectivity including tools such as ping, pathping, and tracert.
-
What does ARP stand for and what does it do?
Address Resolution Protocol resolves IPv4 addresses to media access control (MAC) addresses.
-
What is referred to as a physical address or hardware address?
MAC (Media access control address)
-
What happens during an ARP poisoning attack?
ARP poisoning attacks use ARP packets to give clients false hardware address updates and attackers use it to redirect or interrupt network traffic.
-
What does NDP stand for and what does it do?
Neighbor Discovery Protocol and it performs functions such as autoconfiguration of device IPv6 addresses and discovers other IPv6 devices on the network.
-
What does RTP stand for and what does it do?
The Real-time Transport Protocol delivers audio and video over IP networks. (VOIP devices, streaming media, video teleconferencing apps)
-
What does SRTP stand for?
Secure Real-time Transport Protocol
-
What does FTP stand for and what does it do?
File Transfer Protocol uploads and downloads large files to and from an FTP server. By default, FTP transmits data in cleartext
-
What is port 20 used for?
FTP control signals
-
What is TCP port 20 used for?
FTP data
-
What does TFTP stand for and which port does it use?
Trivial File Transfer Protocol uses UDP port 69.
-
What service uses TCP port 22?
SSH
-
What does SSL stand for and what does it do?
The Secure Sockets Layer protocol was the primary method used to secure HTTP traffic as HTTPS. SSL can encrypt other types of traffic such as SMTP and LDAP
-
What does TLS stand for and what does it replace?
The Transport layer Security protocol is the designated replacement for ssl.
-
What does STARTTLS do?
a command used to upgrade an unencrypted connection to an encrypted connection on the same port.
-
What does IPsec stand for and what does it do?
Internet Protocol Security is used to encrypt IP traffic.
-
What are the two main components of IPsec?
Authentication Header (AH) identified by protocol ID number 51 and Encapsulating Security Payload (ESP) identified by protocol ID number 50.
-
What uses the Internet Key Exchange (IKE) over UDP port 500 to create a security association for the VPN?
IPsec (Internet Protocol Security)
-
What does SFTP stand for and what is it?
Secure File Transfer Protocol. It is an extension of SSH to transmit files.
-
What port does SFTP transmit data using?
TCP port 22
-
What does FTPS stand for and what is it?
File Transfer Protocol Secure is an extension of FTP and uses TLS to encrypt FTP traffic.
-
What ports do some implementations of FTPS use?
TCP ports 989 and 990.
-
What is the Poodle attack?
Short for Padding Oracle on Downgraded Legacy Encryption. A vulnerable that is found in SSL which is why it is prohibited by NIST To be used to protect sensitive data.
-
What does SMTP stand for and what port does it use?
Simple mail transfer protocol. Port 25
-
What does POP3 stand for and what does it do? Port?
Post Office Protocol v3 transfers emails from servers down to clients. TCP port 110
-
What port does Secure POP use?
TCP port 995. However, STARTTLS is now recommended to create secure connections on port 110 (POP3)
-
What does IMAP4 stand for and what does it do? Port?
Internet Message Access Protocol version 4 is used to store email on an email server. It allows users to organize and manage emails in folders. TCP port 143.
-
What port does Secure IMAP use?
TCP port 993 - However STARTTLS is recommended to use TCP 143
-
What port does HTTPS use?
443
-
What does GPO stand for in Active Directory?
Group Policy Objects
-
What does RDP stand for? What ports does it use?
- Remote Desktop Protocol
- TCP 3389 or UDP 3389
-
What does NTP stand for and what does it do?
Network Time Protocol(NTP) is the most commonly used protocol for time synchronization, allowing systems to synch their time to within tens of milliseconds.
-
What do unique local addresses start with?
fc00
-
What makes up an IPv6 IP address?
eight groups of four hexadecimal characters, separated by colons. Each hexadecimal character is composed of 4 bits.
-
What does the "A" zone aka host record hold?
Hostname, IPv4 address
-
What does the AAAA record hold?
Hostname and IPv6 address.
-
What is PTR record also known as and what does it hold?
Pointer Record. It is the opposite of an A record. Instead of querying with the name of the website, it queries the DNS with the IP address.PTR records are optional so it doesn't always work.
-
What is the MX record also called and what does it hold?
Also called mail exchange or mail exchanger. An MX record identifies a mail server used for email. The MX record is linked to the A record or AAAA record of a mail server.
-
What is the CNAME record also called and what does it hold?
A canonical name, or alias, allows a single system to have multiple names associated with a single IP address.
-
What is the SOA record also called and what does it hold?
The start of authority (SOA) record includes information about the DNS zone and some of its settings. TTL(Time to Live)
-
What port do DNS servers use for zone transfers?
TCP port 53. In contrast, name resolution queries use UDP port 53
-
What does DNSSEC standf or and what does it do?
Domain Name System Security Extensions is a suite of extensions to DNS that provides validation for DNS responses. It adds a digital signature to each record that provides data integrity. If a DNS server receives a DNSSEC-enabled response with digitally signed records, the DNS server knows that the response is valid.
-
What are the Well known ports?
0 - 1023
-
What are the registered ports?
1024 - 49,151
-
What are the Dynamic and Private Ports?
49,152 - 65,535
-
What is implicit deny?
auto block everything unless you explicitly tell it to allow something.
-
What is a stateful firewall?
A stateful firewall inspects traffic and makes decisions based on the context, or state, of the traffic. It keeps track of established sessions and inspects traffic based on its state within a session. It blocks traffic that isn't' part of an established session.
-
What does WAF stand for?
Web Application Firewall
-
What does NAT stand for and what does it do?
Network Address Translation (NAT) is a protocol that translates public IP addresses to private IP addresses and private addresses back to public.
-
What does Pat stand for?
Port Address Translation
-
According to CompTIA, what is the objectives list for network separation?
Segregation, segmentation, and isolation.
-
Because a Layer 3 switch forwards traffic based on the destination IP address instead of the MAC address, it is not susceptible to what type of attack?
ARP-based attacks
-
What is a Media Gate way?
A device that converts data from the format used on one network to the format used on another network. Ex. VoIP gateway allows phone calls to be received by VoIP equipment.
-
What does UTM stand for?
Unified threat management is a single solution that combines multiple security controls.
-
What is a mail gateway?
A server that examines all incoming and outgoing emails and attempts to reduce risks associated with email.
-
What does DLP stand for?
Data Loss Prevention
-
What does SNMPv3 stand for and what does it do?
Simple network management protocol version 3 (SNMPv3) monitors and manages network devices, such as routers or switches.
-
What port does SNMPv3 use?
UDP port 161. It sends traps (error messages and notifications) on UDP 162.
|
|
