1
Q
Client Server network
A
Form of internet network that consists of a single central computer functioning as a server and directing several other computers, referred to as clients
2
Q
Peer-to-peer network
A
a group of computers or devices that share resources and access shared resources without centralized control.
3
Q
Local Area Network types
A
Home/Residential, Soho Network, SME Network, Enterprise, Datacenter
4
Q
Wide area network
A
a computer network in which the computers connected may be far apart, generally having a radius of half a mile or more.
5
Q
Topology
A
The physical or logical structure of the network in terms of nodes
6
Q
Types of network topology
A
Star, Mesh, Full Mesh, Partial Mesh
7
Q
Star Topology
A
Each endpoint node is connected to a central forwarding appliance, such as a switch or router.
8
Q
Mesh Topology
A
Requires that each device has a point to point link with every other device on the network
9
Q
Full Mesh Network
A
Commonly used in WANs especially public networks.
10
Q
Partial Mesh Network
A
Only most important devices interconnected in the mesh, perhaps with extra links for fault tolerance
11
Q
Simplex
A
Sender can send the data but the sender unable receive the data
12
Q
Full-duplex
A
Data is sent and received simultaneously. It is dual way communication where both directions of communication will happen at the same time.
13
Q
Half-duplex
A
Data is sequentially sent and received. It is a bidirectional communication that is limited to only one sender or reciever at a time.
14
Q
Logical topology
A
How data travels between nodes on a network. This topology emphasizes the data path that a message takes from one device to another, irrespective of the physical connections between them.
15
Q
Addressing
A
Unique identifier for a network node, such as a MAC address, IPv4 address, or IPv6 address.
16
Q
Encapsulation
A
A method by which protocols build data packets by adding headers and trailers to existing data.
17
Q
Ethernet
A
System for connecting a number of computer systems to form a local area network, with protocols to control the passing of information and to avoid simultaneous transmission by two or more systems.
18
Q
Media access control
A
Layer that controls the hardware responsible for interaction with the wired (electrical or optical) or wireless transmission medium.
19
Q
Collision domain
A
Network segment where simultaneous data transmissions collide with one another.
20
Q
Carrier-sense multiple access with collision detection (CSMA/CD)
A
Ethernet protocol that uses carrier sensing to defer transmissions when a collision is detected.
21
Q
Carrier-sense multiple access with collision avoidance (CSMA/CA)
A
Network multiple access method in which carrier sensing is used, but nodes attempt to avoid collisions by beginning transmission only after the channel is sensed to be idle. When they do transmit, nodes transmit their packet data in its entirety.
22
Q
The Protocol field in the IPv4 header
A
specifies the type of data encapsulated in the payload, allowing the receiving host to know how to process it
23
Q
Three tier architecture
A
The core Server, distribution switches, and access switches which server users
24
Q
Spine and leaf architechture
A
Two-layer architecture. Every leaf switch is connected to a spine switch in a full mesh topology. The leaf layer contains the access switches that connects to the servers and provide a connection for end users. Overcomes the limitations of three-layer hierarchical architecture
25
A hop
A packet passing through a router
26
Hop limit
"Time to live" for ipv6
27
default route
A route when no other route matches. Destination: 0.0.0.0/0
28
OSI Model
the Seven layers defined by the open systems interconnection reference model.
29
OSI Layers
“All People Seem To Need Data Processing” - Application, Presentation, Session, Transport, Network, Data Link, Physical.
30
Protocol Data Unit
Chunk of data with protocol-specific headers added at each OSI layer. The basic unit of exchange between entities that communicate using a specified networking protocol
31
Physical Layer
Responsible for transmission and reciept of signals that represent bits of data. Can be cabled or wireless
32
Data Link layer
Responsible for transferring data between nodes on the same logical segment.
33
Network Layer
Responsible for logical network addressing and forwarding, move data around an internetwork.
34
Transport Layer
Responsible for breaking upper-layer data into segments and ensuring reliable data control, error detection, and error correction.
35
Session Layer
Provides services for applications that need to exchange multiple messages (dialog control)
36
Presentation Layer
Transforms and translates data between the formats used by the network and applications, including data compression and encryption
37
Application Layer
Provides support to applications requiring network services (file transfer, printing, email, databases, and so on).
38
Bridge
Appliance or application that connects different networks as if they were one network. Inspects destination MAC addresses to decide if a packet should jump to other network segments.
39
Router
Intermediate system working at the Network layer capable of forwarding packets around logical networks of different layer 1 and layer 2 types
40
Firewall
Software or hardware device that protects a network segment or individual host by filtering packets to an access control list.
41
Access Control List
Collection of ACEs that determines which subjects are allowed or denied access to the object or privileges.
42
Access Control Entry
A particular security identifier that is associated with Access rights.
43
Physical layer devices
Tranciever, Repeater, Hub, media converter.
44
Data Link layer devices
NIC, Bridge, Switch, Wireless Access Point, VLANs
45
Header fields added by the Data Link layer
Source Hardware address, Destination hardware Address, checksum for basic error checking
46
Network Layer Devices
Router
47
Functions of the Transport Layer
Data segmentation and reassembly, reliable message delivery, end to end flow control.
48
Transport Layer Devices
Multilayer Switches, Security Appliances, IDSs
49
Function of the Session Layer
The exchange of multiple messages between the client and server. This exchange is called a session or dialog.
50
Registered Jack
Series of jack/plug types used with twisted pair cabling, such as RJ45 and RJ11.
51
Shielded Twisted Pair
Copper twisted pair cabling with screening and shielding elements for individual wire pairs and/or the whole cable to reduce interference. Also referred to as a screened, shielded, or foiled twisted pair.
52
Digital Certificate
Identification and authentication information presented in the X.509 format and issued by a Certificate Authority
53
Certificate Authority
A server that guarantees subject identities by issuing signed digital certificate wrappers for their public keys.
54
Public Key
For Asymmetric encryption, is freely distributed and can be used to perform the reverse encryption ore decryption operation of the linked private key in the pair.
55
Network Time Protocol
Networking protocol for clock synchronization over packet-switched variable latency networks. Uses port 123.
56
Three types of Precision Time Protocols
Grandmaster is authoritative. Boundary has interfaces in PTP segments. Ordinary has a single interface.
57
Trunking
Connecting switches together
58
Port Bonding
Multiple ports are connected and perceived as a single whole by the switch
59
Port mirroring
Copies traffic from one interfaces
60
SPAN
Switch Port Analyzing Network
61
Ethernet frames payload
Frames support more than 1,500 bytes, up to 9216 in a jumbo frame
62
Jumbo Frames
Larger payload of an ethernet frame, and must be supported by the switch.
63
Ethernet flow control
As a non- deterministic form of communication, control is maintained by speed or IEEE.802.3x
64
Port Security
Prevents unauthorized use from a switch interface. Designed to restrict network access by filtering MAC addresses. It allows administrators to define which devices are permitted to connect to specific switch ports. Keeps a list of confirmed MAC sources.
65
Straight-through cables
Used for patch cables, and to connect workstations to network devices.
66
MDI
Media Dependant Interface
67
MDI-X
Media Dependant Crossover
68
10BASE-T and 100BASETX Straight Through cables
Won’t use pins 4,5,7,8. From the MDI, 1,2 are Transmitting. And 3,5 are receiving.
69
1000Base-T
For gigabyte cables, all four sets are transmitting and receiving data.
70
Ethernet crossover cables
For MDI to MDI, or MDI-X to MDI-X. Connects 1-3, 2-6, 3-1, 4-7, 5-8, 6-2, 7-4, 8-5
71
Auto-MDI-X
Automatically performs crossover on modern ethernet devices.
72
MIMO
Multiple Input Multiple Output
73
MU-MIMO
Multiple User MIMO
74
802.11A
5GHz MTT PS and total is 54 Mbit/s. No MIMO
75
802.11B
2.4GHz MTT PS and total is 11 Mbit/s. No MIMO
76
802.11G
2.4 GHz MTT PS and total is 54 MBits. No MIMO
77
802.11n
5GHz / 2.4 GHz and MTT PS is 150 MBits. Total is 600 MBits. 4xMIMO.
78
802.11ac
5GHz and MTT PS is 867 MBits, Total is 6.9 GBits. 8xDL MU-MIMO
79
802.11ax
5/2.4 GHz MTT PS is 1,201 MBits and total is 9.6 GBits. 8xDL and UL-MU-MIMO
80
Orthogonal Frequency-division multiple access
Similar to cellular communication, and improves high-density installations (OFDMA)
81
Channels
Groups of non overlapping frequencies numbered by the IEEE
82
Bandwidth
the width of a frequency defined in MHz. Defined by 802.11 standards
83
Extended Service Set
An ESS is a collection of multiple BSSs working together as a single network, typically managed by a controller. It allows for larger coverage areas and seamless roaming between different BSSs under the same network SSID.
84
Basic Service Set
BSSID is a unique identifier associated with a specific SSID within a BSS. It is formatted like a MAC address and serves to uniquely identify the network's access point and SSID combination
85
Independent basic service set
IBSS is a basic service set, ad hoc connection for temporary or long term communication
86
Physical network map
follows the physical wire and devices to simplify troubleshooting
87
Distribution frames
Passive cable termination, a series of punch down blocks or patch panels that can simplify network extensions or troubleshooting.
88
Main Distribution Frame
central hub of a network. Located at the primary entry point for internet connection, houses key equipment like routers, switches, and patch panels that manage and route the data to and from the external world to the internal network. Termination point for WAN links
89
Patch Panel
Allows for easy access and cable Identification,for troubleshooting and fault isolation in a server room.
90
Intermediate Distribution Frame
the IDF plays a supporting role to the MDF, acting as a relay point that extends the connectivity from the MDF to specific areas, floors, or sections of a building that the main distribution frame cannot reach directly due to distance limitations.
91
Severity levels
defined levels of events to force priority
92
Runt
frames that are less than 64 bytes
93
Giant frame
frames that are more than 1518
94
CRC error
failed the Frame Check sequence resulting from failed cable or port
95
Netflow
Gathers traffic statistics from all traffic flows, that is exported to a collector program
96
continuity of operations planning
The planning, coordination and performing of essential functions during a range of emergencies.
97
System Life Cycle
managing asset disposal, information disposal.
98
Standard operating procedures
Backup procedures that are planned for event outages
99
Password policy
Company policies regarding password setup, age, size, and lifecycle.
100
Remote access policy
External communications is difficult to control
101
Onboarding procedures
The process of integrating employees into an organization.
102
Offboarding procedures
The process of separating employees out of an organization.
103
Data Loss Prevention
involves multiple technologies that can catch sensitive data before it leaves the organization.
104
Fault Tolerance
Maintain uptime in the case of failure. It adds complexity. Single device fault tolerance is built on RAID, UPS, and NICs
105
Redundant Array of Inexpensive Disks
Data storage virtualization technology that combines multiple physical disk drive components into one or more logical units for the purposes of data redundancy, performance improvement, or both.
106
Load balancer
A device with a Virtual IP, and connects users to servers as they are online. Can switch traffic to alternative nodes, reduce bottlenecks, and allow for failover services.
107
Port Aggregation
Multiple links to a single switch to use 2gigs from the connection.
108
Fire suppression
The amount of electronics used in a data center complicate fire suppression which uses and prefers modern liquids and gasses
109
Cold Site
no hardware, no data, no people
110
Hot Site
Duplicate site, architecture, and hardware meant to speed
111
Warm Site
Might have hardware, racks, or HVAC. Not hot or cold.
112
Cloud site
use an established cloud provider
113
Active-Passive
two devices are installed and configured, only one operating at a single time.
114
Active-Active devices
two devices are installed and configured, with both cooperating at the same time.
115
Diverse paths
multiple redundant paths across a network, from ISPS, firewalls, routers, switches, load balancers, and web servers. To maintain redundancy and fault tolerance
116
FHRP - First hop redundancy protocol
A computer setting to use a different gateway should the default gateway fail.
117
CIA Triad
Confidentiality, Availability, Integrity. The fundamentals of security.
118
Confidentiality
Certain information should be limited. Encryption and access controls help restrict access to resources.
119
Integrity
That the data is stored and transferred as intended and that any modification is authorized
120
Availability
That information is accessible to those authorized to view or modify it.
121
Vulnerability
A weakness that could be accidentally triggered or intentionally exploited to cause a security breach.
122
Threat
The potential for someone or something to exploit a vulnerability and breach security. A threat may be intentional or unintentional. The person or
123
Risk
The likelihood and impact of a threat actor exercising a vulnerability. Assessing Risk helps you decide which vulnerabilities to prioritize patching and what additional security measures to implement.
124
Data At rest
The state in which data is in some sort of persistent storage media.
125
Data in use
The state in which data is present in volatile memory such as system ram, cpu registers, and cache.
126
Data In Transit
The state in which data is transmitted over a network.
127
Encryption
Encoded messages so only proper recipients can read them.
128
Access controls
Programs that specify roles to limit access or controls to users.
129
Steganography
Conceal information within another piece of information. Associated with hiding information within an image.
130
Hashing
mapped data of an arbitrary length to a fixed length. If it’s modified it will be a different hash.
131
Digital Signature
Mathematical scheme to verify the integrity of data.
132
Non-Repudiation
Authentication that with high assurance can be asserted to be genuine, and that can not subsequently be refuted.
133
Zero day attacks
vulnerability that has never been identified or published in a new or unreleased product or application.
134
Threat
A vulnerability that can be exploited. Could be intentional or accidental. Most are external to the organization
135
Insider threat
A threat actor that has access to the internal processes or procedures. Ameliorated by Least Privilege.
136
Physical Controls
Keep people away from technology. Door locks, fences, rack locks, cameras
137
Technical controls
Hardware and software safety measures. Firewalls, AD authentication, Disk encryption.
138
Vulnerability assessment
an evaluation of a system’s security and ability to meet compliance requirements based on the configuration state of the system.
139
Honeypot
A host, network, or file set up with the purpose of luring attackers away from assets of actual value and/or discovering attack strategies and weaknesses in the security configuration. Also called a honeynet or honeyfile.
140
Cybersecurity audit
Ensure a security posture aligns with established standards
141
Data Locality
Establishing policies and tools that ensure data is stored within a specific national or state border.This is often required to comply with data sovereignty and protect data privacy.
142
Physical segmentation
separate devices to prevent users from accessing another customer's resources.
143
Logical segmentation
VLANs to force a customer to only be able to interact with their own resources
144
Screened Subnet/demilitarized zone
Public access to resources, but no access to the org’s internal network. A physical or logical subnetwork that contains and exposes an organization's external-facing (public-facing) services to an untrusted, usually larger, network such as the Internet.
145
Separation of Duties
Split knowledge, no individual has complete knowledge of a function or resource.
146
Network Access Control
Security solutions whose primary function is to authenticate and authorize devices before they gain full access to the network. Supports network visibility and access management through policy enforcement on devices and users of corporate networks.
147
IEE 802.1x
port based NAC. Physical interface authentication. Individual ports can be disabled. Addresses communication between a supplicant to an authenticator, and the auth server.
148
Supplicant
A user who is trying to log into a IEE 802.1x server
149
Authenticator
Passes a supplicant’s credentials against an authentication server
150
Local Authentication
A manual process where passwords are kept on the local device. Not impacted by server downtime.
151
Multi-factor authentication
Can be expensive. More than one factor, could be a token, biometric, codes, or smartphone application
152
Remote authentication Dial-in User Service
AAA protocol that is widely supported and offers centralized authentication for users.
153
Terminal Access Controller Access-Control System
Created to control dialup lines in ARPANET. TACACS+ released in 1993.
154
Lightweight Directory access protocol
protocol for reading and writing directories over an IP network.
155
Kerberos
Network authentication protocol, no need to reauth for subsystems. Manual and protected against on-path or replay attacks.
156
SSO with Kerberos
single auth without username or password using backend ticketing. Complicated as a result of its cryptography
157
Address Resolution Protocol
Communication protocol used for discovering the link layer addresses, such as MAC address, or IPv4 address. Critical function in TCP/IP.
158
On-path network attack
Man in the middle attack, traffic redirection, ARP poisoning.
159
Wireless evil twins
looks legitimate
160
Malware
Software of many forms that are malicious in purpose.
161
Types of malware
Virus, ransomware, worm, trojan horse, rootkit, keylogger.
162
Ransomware
Your data is unavailable until the hijackers are paid and release the files.
163
Hashing a password
Hashes as fixed length strings are not convertible, and will not have collisions
164
VLAN Hopping
An attack where the attacker is able to send traffic from one VLAN to another by either double tagging the traffic, or conducting switch spoofing.
165
DNS poisoning
Corrupting the DNS cache to redirect users to malicious websites.
166
ARP spoofing
Targets the local network to redirect traffic to malicious websites.
167
SSL stripping
Downgrades HTTPS connections to HTTP.
168
DNS spoofing
Typically involves creating fake DNS records rather than corrupting the DNS cache.
169
Dictionary attack
Use a dictionary to find common words within a password.
170
Virtual Private Network
Encrypted data traversing a private network
171
Concentrator
Encryption/decryption access device. Often integrated into a firewall.
172
Client-To-Site VPN
ON demand VPN from a remote device.
173
Site-to-site VPN
Always-on. Firewalls on both sides act as concentrators.
174
Clientless VPN
VPN tunnel within HTML5 browser.
175
Full Tunnel
All data is from a user is kept inside the organizations network.
176
Split tunnel
Users are able to access sites or resources that are not on the organizations network.
177
RDP
Remote Desktop Protocol.
178
Asset tracking tabs
Records of every asset within an organisation.
179
Troubleshooting
Identify, Establish Theory, Test theory, Evaluate.
180
Speed/bandwidth
theoretical maximum data rate. Measured in bits per second.
181
The threat types
Footprinting, spoofing, DoS, Botnets
182
Footprinting
Enumeration of resources on a network to identify potential targets for further attack, spoofing, DoS
183
The attack types
Data theft, insider threat, malware attack, password attack, social engineering
184
Identity Access Management
Framework of policies and technologies to ensure correct access to correct users.
185
Identification
Creating an account or ID that uniquely represents the user, device, or process on the network.
186
Authentication
Proving that a subject is who or what it claims to be when it attempts to access the resource. An authentication factor determines what sort of credential the subject can use.
187
Authorization
Determining what rights subjects should have on each resource, and enforcing those rights. An authorization model determines how these rights are granted.
188
Accounting
Tracking authorized usage of a resource or use of rights by a subject and alerting when unauthorized use is detected or attempted.
189
Six factors used in Authentication
Knowledge, Ownership, Biometric, Behavior, Location, Time.
190
Knowledge factor
Something you know (such as a password).
191
Ownership factor
Something you have (such as a smart card).
192
Route poisoning
Prevents a router from sending packets through a route that has become invalid within computer networks.
193
Human factor
Something you are (such as a fingerprint).
194
Behavior factor
Something you do (such as making a signature).
195
Location factor
Somewhere you are, such as only being able to log into an account from a specific location, known as geofencing.
196
Time factor
Somewhen you are (such as only being permitted to start a session during work hours or using an access token before it expires).
197
Multifactor
Authentication scheme that requires the user to present at least two different factors as credentials. Specifying two factors is known as 2FA.
198
Public Key Infrastructure
Framework of certificate authorities, digital certificates, software, services, and other cryptographic components deployed for the purpose of validating subject identities.
199
Five stages of a Key’s Life Cycle
Generation, Storage, Revocation, Expiration and Renewal.
200
Key Generation
The creation an asymmetric key pair or symmetric secret key of the required strength, using the chosen cipher.
201
Storage
Prevents unauthorized access to a private or secret key and protects against loss or damage.
202
Revocation
Prevents use of the key if it is compromised. If a key is revoked, any data that was encrypted using it should be re-encrypted using a new key.
203
Expiration and Renewal
Gives the certificate that validates the key a "shelf-life" to increase security. Every certificate expires after a certain period. Certificates can be renewed with the same key pair or with a new key pair.
204
Federated Identity
The means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.
205
Security Assertion Markup Language
An XML-based data format used to exchange authentication information between a client and a service.
206
Supplicant
The device requesting access in a 802.11x standard connection, such as a user's PC or laptop.
207
AAA Server
The authentication server, positioned within the local network. This server either holds a database of accounts and credentials or has access to a directory server that can authenticate requests and issue SSO authorizations.
208
Remote Authentication Dial-In User Service
AAA protocol used to manage remote and wireless authentication infrastructures.
209
Terminal Access Controller Access Control System
Networking protocol that provides centralized AAA management for users, and admins who connect and use a network service.
210
Network Segmentation Enforcement
Enforcing a security zone by separating a segment of the network. Could be accomplished using firewalls, VPNs, VLANs. A physically separate network or host (with no cabling or wireless links to other networks) is referred to as air-gapped. Also referred to as segmentation or network segmentation enforcement.
211
Private Server Administrative Networks
Devices are subject to strict hardening and configuration management policies. Hosts, user accounts, and traffic with permission to operate in the zone are continually monitored to ensure compliance with security policies.
212
Private Client Network
Devices are subject to security policies and monitoring, but the diverse range of technologies and permissions to use public networks make the zone less than fully trusted.
213
Guest
Unmanaged devices are allowed to connect, subject to some restrictions and monitoring. This zone is typically untrusted and would not be allowed access to trusted networks.
214
Public Server Network
Devices are fully managed but accept connections from unmanaged public clients. Consequently, hosts within this zone are only partially trusted.
215
Public
The zone is unmanaged and therefore untrusted.
216
Screened Subnet
Segment isolated from the rest of a private network by one or more firewalls that accepts connections from the Internet over designated ports. Formerly referred to as a demilitarized zone (DMZ), this usage is now deprecated.
217
Intrusion detection system
Security appliance or software that uses passive hardware sensors to monitor traffic on a specific segment of the network. Also called a network intrusion detection system (NIDS).
218
Intrusion prevention system
Security appliance or software that combines detection capabilities with functions that can block attack in an active configuration.
219
Multicast
A TCP/IP Technology that sends out packets to devices when streaming to multiple workstations from a single media server. It only sends those to devices that specifically requested the stream rather than the entire network.
220
AAAA records
Maps a domain name to IPv6.
221
"A" Records
Maps a domain name to IPV4
222
TXT records
Are used to store SPF details, which defines which mail servers are authorized to send email on behalf of a domain, helping to prevent email spoofing. And textual information related to the domain, not DNS server details.
223
Mail Exchange Records
MX Records specify mail servers for the domain.
224
Name Server Records
NS records specify DNS servers for the domain. Used to specify the authoritative DNS servers for a domain or subdomain, guiding external queries to the correct servers for DNS resolution.
225
PTR Records
PTR records are used for reverse DNS lookups, not for specifying DNS servers for subdomains.
226
Canonical Name
CNAME records alias one domain name to another.
227
Cable Certifier
Tests the continuity of a cable and verify that a cable meets its specifications such as the bandwidth, frequency, and length.
228
SYN flag
Synchronization: The first packet sent from the sender to a receiver as a means of establishing a TCP connection and initiating a three-way handshake.
229
Simple Mail Transfer Protocol
Internet standard communication protocol for electronic mail transmission.
230
Simple Mail Transport Protocol Secure
a method for securing the SMTP using transport layer security.
231
Link Aggregation Control Protocol
allows the user to combine numerous physical Ethernet links into one logical link, which helps create load balancing in the interfaces
232
Digital Subscriber Line
technology for transferring data over voice-grade telephone lines, often referred to as the local loop.
233
Cable Internet
usually available along with Cable Access TV (CATV). These networks are sometimes described as hybrid fiber coax (HFC) because they combine a fiber optic core network with coax links to CPE, but are more simply just described as cable broadband.
234
Asymmetric digital subscriber line
Enables faster data transmission over coper than conventional modems.
235
Very high-speed digital subscriber line
Provides faster transmission over a single copper line.
236
Customer Edge
The router that interfaces a WAN. From a customer to the provider's network.
237
At which OSI layer do WANs use simpler protocols than LANs
At the Data Link Layer Wan's use simpler protocols due to their point-to-point connections.
238
Why use public networks for WAN services?
The cost is less than implementing a private solution.
239
Cable Modem Termination System
connects all the premises in a street via coaxial cables and routes data traffic through the fiber optic backbone to the Internet Service Provider's (ISP's) Point of Presence (PoP), facilitating internet access.
240
Filter in a DSL setup
Prevents Noise from affecting voice calls.
241
the primary function of a T-carrier system
To enable voice traffic digitization
242
primary advantage of TDM in T-carrier systems
It enables the simultaneous transmission of multiple signals over a single transmission path.
243
Very High-Speed DSL2
100 MBPS bi-directional
244
Fiber To the curb
Service providers use VDSL to achieve higher bit rates at the expense of range, to achieve FTTC.
245
Point to Point Protocol
Encapsulation protocol at the Data Link Layer. Encapsulates IP packets for transmission over serial digital lines. Has no security mechanisms, uses other protocols to provision a secure tunnel.
246
Internet Protocol Security
Used to secure IPv4 and/or IPv6 communications on local networks and as a remote access VPN protocol. IPSec operates at the Network layer.
247
Transport Mode
Mode of IPSec. used to secure communications between hosts on a private network.
248
Tunnel Mode
Mode of IPSec. used for communications between VPN gateways across an insecure network. Router configuration.
249
Authentification Header
IPSec protocol that provides authentication for the origin of transmitted data as well as integrity and protection against replay attacks.
250
Encapsulating Security Payload
IPSec sub-protocol that enables encryption and authentication of the header and payload of a data packet.
251
Integrity Check Value
Small piece of data from a larger set, often a packet or frame, can verify that the data has not been tampered with.
252
Internet Key Exchange
Framework for creating a security association (SA) used with IPSec. An SA establishes that two hosts trust one another (authenticate) and agree on secure protocols and cipher suites to use to exchange data.
253
Digital Certificates
Are issued to each peer by a mutually trusted certificate authority to identify one another.
254
Pre-shared key
when the same passphrase is configured on both peers.
255
Split Tunnel
VPN configuration where only traffic for the private network is routed via the VPN gateway.
256
Full Tunnel
VPN configuration where all traffic is routed via the VPN gateway
257
TCP flags
SYN, PSH, RST, FIN
258
Maximum Transmission Unit
Maximum IP Packet to transmit. Not a fragment
259
media converter
Layer 1 device that changes one type of connection to another.
260
Jitter
network condition that occurs when a time delay in the sending of data packets over a network connection occurs. A variation in the delay of the packets, and can cause some strange side effects, especially for voice and video calls
261
UDP scan
is activated with the -sU option on Nmap. Shows A list of open UDP ports on the target device.
262
End systems
also referred to as hosts, are the nodes that send and receive data traffic in a network.
263
Emergency Severity levels
range from zero to seven, with zero being the most severe and seven being the least severe.
264
Level 0 Emergency
is used for an emergency and is considered the most severe condition because the system has become unstable.
265
Level 1 Emergency
is used for an alert condition and means that there is a condition that should be corrected immediately.
266
Level 2 Emergency
is used for a critical condition, and it means that there is a failure in the system’s primary application and it requires immediate attention.
267
Level 3 Emergency
is used for an error condition, and it means that something is happening to the system that is preventing the proper function.
268
Level 4 Emergency
is used for warning conditions and it may indicate that an error will occur if action is not taken soon.
269
Level 5 Emergency
is used for notice conditions and it means that the events are unusual, but they are not error conditions.
270
Level 6 Emergency
is used for information conditions and it is a normal operational message that requires no action.
271
Level 7 Emergency
is used for debugging conditions and is just information that is useful to developers as they are debugging their networks and applications.
272
Data Center Interconnect (DCI)
best utilizes VXLAN technology between dispersed data centers
273
Ad Hoc networks
Enable devices to connect directly, promoting peer-to-peer communication without relying on a centralized access point
274
End systems
Also referred to as hosts, are the nodes that send and receive data traffic in a network. They consume the services provided by servers in a client-server network
275
Precision Time Protocol
Protocol for clock synchronization throughout a computer network with relatively high precision and therefore potentially high accuracy
276
Autonegotiation
Allows devices to automatically select the highest supported connection parameters, including speed, and mode, ensuring compatibility between devices with different Ethernet capabilities. This feature is crucial for maintaining compatibility with older devices that only support 10 Mbps Ethernet interfaces.
277
Three modes of Sessions
Simplex, Half-Duplex, or Duplex.
278
supervisory control and data acquisition
runs as software on ordinary computers to gather data and manage plant devices and equipment with embedded PLCs, called field devices
279
TTL output field
Is in the ping command and shows the value of the counter when the packet arrives at its destination.
280
Link State algorithm
Allows a router to store the complete network topology and assess the least-cost paths from this topology database.
281
reverse proxy server
provides for protocol-specific inbound traffic. This type of proxy can listen for client requests from the Internet and create the appropriate request to the internal server.
282
Stateful Firewall
operates at Layer 5 (Session) of the Open Systems Interconnection (OSI) model. This type of firewall performs circuit-level stateful inspection by maintaining stateful information about the session between two hosts.
283
storage area network
Provisions access to storage devices at the block level. A SAN is isolated from the main network. It is only accessed by servers, not by client PCs and laptops
284
Software-defined wide area network
An overlay network that provisions a corporate WAN across multiple locations and facilitates secure access to the cloud directly from a remote location.
285
Anycast
This form of addressing allows multiple servers to share the same IP address, and when a user attempts to access the service, the network routes the request to the nearest server based on routing protocols like Border Gateway Protocol (BGP). This approach is ideal for achieving high availability and low latency for a global web application, as it automatically directs users to the geographically closest server, improving response times and load distribution across multiple servers.
286
Unicast
This form of addressing is used for one-to-one communication between a single sender and a single receiver. While it is the most common form of IP addressing for general internet communication, it does not inherently provide the mechanism for directing users to the nearest server based on geographic location or network latency. Unicast alone would not meet the requirements for high availability and low latency on a global scale without additional routing logic.
287
Broadcast
Broadcast addressing is used to send data to all possible destinations within a network segment. This method is not suitable for internet-based applications, as it is limited to local network segments and does not allow for selective routing to the nearest server. Broadcasting would not achieve the goal of directing users to their nearest server for the web application.
288
Multicast
Multicast addressing is designed for one-to-many communication, where data is sent from a single source to multiple recipients who have expressed interest in receiving the data. While multicast is efficient for distributing data to multiple recipients simultaneously, it does not provide a solution for directing users to the nearest server based on their geographic location or network latency.
289
Generic Routing Encapsulation
Tunneling protocol allows the transmission of encapsulated frames or packets from different types of network protocol over an IPv4 network.
290
Internet Control Message Protocol
This protocol reports errors and sends messages about the delivery of a packet.
291
Trivial File Transfer Protocol
a connectionless protocol that runs over User Datagram Port (UDP) port 69
292
Secure FTP
Raddresses the privacy and integrity issues of FTP by encrypting the authentication and data transfer. Runs over Transmission Control Protocol (TCP) port 22.
293
FTP over Secure Sockets Layer
uses either Explicit Transport Layer Security (FTPES) or Implicit Transport Layer Security (FTPS) for secure communication.
294
HTTPS
a subset of Hypertext Transfer Protocol (HTTP) that allows for a secure dialog between the client and server using Secure Sockets Layer/Transport Layer Security (SSL/TLS)
295
Remote Desktop Protocol
Microsoft's protocol for operating remote Graphical User Interface (GUI) connections to a Windows machine. RDP uses Network Level Authentication (NLA) which requires the client to authenticate before a full remote session is started.
296
SSH
Is a cryptographic network protocol for operating network services securely over an unsecured network. Operates over port 22
297
Telnet
Telnet commonly provides remote access to a variety of communications systems. Telnet is often used for remote maintenance of network communications devices. Telnet provides access to a command-line interface on a remote computer using TCP port 23.
298
Multipoint Generic Routing Encapsulation
MGRE is a protocol used for connecting multiple remote sites through a Virtual Private Network (VPN). It employs a hub and spoke topology to encapsulate and forward data packets from one remote site to another, making VPN management simpler and more scalable.
299
Multiprotocol Label Switching
MPLS is a networking technology that routes traffic using the shortest path based on “labels,” rather than network addresses, to handle forwarding over private wide area networks. As a scalable and protocol-independent solution, MPLS assigns labels to each data packet, controlling the path the packet follows.
300
Encapsulating security payload
Provides confidentiality and/or authentication and integrity. It can be used to encrypt the packet rather than simply calculating a hash.
301
North-South traffic
traffic going into the data center from the outside.
302
East-West traffic
traffic traveling within a data center but not traveling into a data center
303
Point-to-point protocol
encapsulation protocol that works at the Data Link layer (layer 2). PPP has no security mechanisms, so must be used with other protocols to provision a secure tunnel.
304
Classless Inter-Domain Routing
CIDR uses bits normally assigned to the network ID to mask the complexity of the subnet and host addressing scheme within the network. This allows CIDR to collapse the company's three routing entries into one single entry.
305
Variable Length Subnet Masking
(VLSM) allows a network designer to allocate ranges of Internet Protocol (IP) addresses to subnets that match the predicted need for numbers of subnets and hosts per subnet.
306
localhost
Hostname that refers to the current device being used. It is associated with the loopback address, typically 127.0.0.1, which is used for internal testing and communication within the host. This allows software and services on the same device to communicate with each other using the TCP/IP protocol stack without sending packets over the network.
307
Routing Information Protocol
distance vector-based routing protocol. It uses a hop count metric to determine the distance to the destination network. To help prevent looping, the maximum hop count allowed is 15.
308
static route
manually added to the routing table and only changes if edited by the administrator. This is ideal for temporary solutions to rapidly set up a route for network testing or quick troubleshooting. Has an AD value of 1 for routing.
309
default route
type of static route that identifies the next hop router for a destination and cannot match another routing table entry.
310
Open Shortest Path First
OSPF is a link state type of routing protocol ideal for hierarchical systems and networks. OSPF is suitable for organizations with multiple redundant paths between networks. Has a default AD value of 110
311
Interior Gateway Protocol
IGP is the protocol that identifies routes within an Autonomous System (AS).
312
Neighbor Discovery (ND) protocol
Is responsible for gathering various information required for network communication, including the configuration of local connections and the domain name servers and gateways. A main function is redirection, which enables a router to inform a host of a better route to a particular destination.
313
Enhanced Interior Gateway Routing Protocol
EIGRP is an advanced distance-vector routing protocol that is used on a computer network for automating routing decisions and configuration. Rapid convergence, facilitated by its use of a composite metric (combining bandwidth, delay, load, and reliability) for routing decisions, making it efficient and flexible for network changes . Is proprietary to Cisco devices.
314
Effective Isotropic Radiated Power
The power at which an access point transmits is configurable. is calculated as the sum of transmit power, antenna cable/connector loss, and antenna gain.
315
Received Signal Strength Indicator
RSSI is the strength of the signal from the transmitter at the client end. Most captive portal issues arise because the redirect does not work.
316
Captive Portal
Web page accessed with a web browser that is displayed to newly connected users of a Wi-Fi or wired network before they are granted broader access to network resources. Uses RADIUS servers to confirm users.
317
independent basic service set
IBSS is an ad hoc topology where the wireless adapter allows connections to and from other wireless devices.
318
PTR record
found in reverse lookup zones and is used to resolve an IP address to an associated host name.
319
Mean time between Failures
(MTBF) represents the expected lifetime of a product. The calculation for MTBF is the total operational time divided by the number of failures.
320
forward lookup zone
used to translate a given a name record and return a related Internet protocol (IP) address.
321
Third-party domain name system
another organization is responsible for hosting records. Typically, this would be for external domains.
322
Audit log
records the use of authentication and authorization privileges. It will generally record success/fail type events. An audit log might also be described as an access log or security log.
323
forwarder
transmits a client query to find a host to another domain name system (DNS) server and routes the replies it gets back to the client.
324
Syslog
example of a protocol and supporting software that facilitates log collection. It has become a de-facto standard for logging events from distributed systems.
325
vulnerability
a weakness triggered or exploited to cause a security breach; an exploit is a means of using a vulnerability to gain control or damage a system.
326
Single mode cables
support data rates up to 10 Gbps or better and cable runs of many kilometers, depending on the quality of the cable and optics.
327
jump box
serves as a single administration server, or jump host/server, added to the secure zone to simplify and secure administrative access to servers and appliances exposed to the Internet. It centralizes administrative tasks, reducing complexity and enhancing security by limiting access points.
328
Multimode fiber cables
inexpensive to deploy compared to single mode fiber. As such, it does not support high signaling speeds or long distances as single mode and is more suitable for Local Area Networks (LANs) than Wide Area Networks (WANs).
329
Multi-fiber push on connectors
MPOs are fiber connectors incorporating multiple optical fibers. These connectors are found primarily in data center environments for consolidating multiple fibers in backbone cabling and supporting parallel optics applications that transmit and receive signals over multiple fibers to achieve higher speeds.
330
Session Initiation Protocol
SIP is a signaling protocol for initiating, maintaining, and terminating real-time sessions that include voice, video, and messaging applications
331
Spanning Tree Protocol
STP is a network protocol that builds a logical loop-free topology for Ethernet networks. Basic function is to prevent bridge loops and the broadcast radiation that results from them. If you have redundant links set up, it is important to utilize STP to prevent loops within the network. If a loop occurs, the performance of the entire network can be degraded due to broadcast storms
332
Collapsed Core
Two-tier hierarchical network topology where access layer switches connect directly to a full mesh core layer. This is impractical if there are large numbers of core switches, making the design less scalable.
333
Single mode fiber
Fiber optic cable type using LED or vertical cavity surface emitting laser optics and graded using optical multimode types for core size and bandwidth. has a larger core (62.5 or 50 microns) and shorter wavelength light (850 nm or 1,300 nm) transmitted in multiple waves of varying length.
334
Multi mode fiber
Fiber optic cable type that uses laser diodes and narrow core construction to support high bandwidths over distances of over 5 km. has a small core (8 to 10 microns) and a long wavelength.
335
Internet Key Exchange version 2
IKEv2 is a tunneling protocol within the IPSec protocol suite. It is responsible for setting up Security Association (SA) for secure communication between VPN clients and VPN servers within IPSec.
336
MOBIKE multihoming
Mobility and Multihoming Protocol is a feature of IKEv2 that allows a VPN client to maintain an active VPN connection while switching between different network interfaces, such as moving from a Wi-Fi connection to cellular data.
337
top-of-rack switch models
ToR switch models designed to provide high-speed connectivity to a rack of server appliances. Used as leaf layer access switches.
338
First Hop Redundancy Protocol
FHRP is a protocol used to provide redundancy for the default gateway in a LAN environment.
339
Fibre Channel
FC is specifically designed for high-speed data transfer in storage area networks, making it the ideal choice for connecting servers to storage devices.
340
Straight Tip
ST fiber connections are commonly used in fiber optic connections in LAN networking applications. Uses a bayonet plug and socket connector that was the de facto standard for most fiber optic commercial installations.
341
Mechanical Transfer Registered Jack
MTRJ is a small form factor fiber-optic cable connector which resembles the RJ-45. Commonly used to connect fiber optic cables to a switch or router, but it uses a single connector that houses the Tx and Rx connections.
342
Subscriber Connector
SC popular fiber-optic connector due to its low cost, durability, and simple installation for both point-to-point and passive optical networking.
343
Lucent Connector
LC is a miniaturized version of the SC connector but is still larger than an MTRJ connector.
344
RJ-45
Used by twisted-pair copper cables for local area network and ethernet connections.
345
RJ-11
Used by twisted-pair copper cables for telephone applications.
346
Application-aware firewall
WAF or application-aware firewall would detect both the accessing of random ports and TLS encryption and identify it as suspicious. An application-aware firewall can make decisions about what applications are allowed or blocked by a firewall, and TLS connections are created and maintained by applications.
347
Verbose trap
A verbose trap may contain all the information about a given alert or event as its payload. Requires more bandwidth to send over the network
348
Granular trap
A granular trap contains a unique object identifier (OID) number and a value for that OID.
349
Internet Protocol Security
IPsec is a network protocol that encrypts and authenticates data sent over a network.
350
Anycast
An IPv6 anycast address is an address that can be assigned to more than one interface (typically different devices). In other words, multiple devices can have the same anycast address. A packet sent to an anycast address is routed to the “nearest” interface having that address, according to the router’s routing table.
351
Multicast
can be used with both IPv4 and IPv6.
352
Broadcast
Broadcast communication has one sender, but it sends the traffic to every device on the network. Broadcast only works with IPv4.
353
Unicast
Unicast communication only has one sender and one receiver. Unicast works with IPv4 or IPv6.
354
Differentiated services
Diffserv is a computer networking architecture that specifies a mechanism for classifying and managing network traffic and providing quality of service (QoS) on modern IP networks. Can offer low-latency to VOIP, media streaming, web traffic, or file transfers.
355
Differentiated Services Code Point
DSCP is a 6-bit IP header for packet classification purposes. Used on layer 3 for QoS and Diffserv.
356
Class of Service
A parameter used in data and voice protocols to differentiate the types of payloads contained in the packet being transmitted. To assign priorities for Diffserv.
357
Data center interconnect
Cconnection between data centers and between the components within them. Provide high bandwidth in order to maximize the utility of the data center. Utilizes VXLAN
358
clientless VPN
remote users can securely access corporate resources through a web browser without installing dedicated VPN client software
359
WiFi analyzer
WiFi analyzer can determine the wireless network's signal strength, the frequencies in use, and any possible radio frequency interference.
360
forward zone
Maps domain names to their corresponding IP addresses, which is essential for resolving internal domain names efficiently.
361
Data Over Cable Service Interface Specification
DOCSIS is an international telecommunications standard that permits the addition of high-bandwidth data transfer to an existing cable television (CATV) system. It is used by many cable television operators to provide cable Internet access over their existing hybrid fiber-coaxial (HFC) infrastructure.
362
Network Time Security
NTS is a time synchronization protocol designed to address security vulnerabilities inherent in traditional time synchronization protocols such as NTP and SNTP.
363
Secure Access Service Edge
network architecture that combines network security functions with wide-area networking (WAN) capabilities to provide secure access to applications and data for remote users and branch offices.
364
325
flashcards
Decks in class (2)
# Cards
