4.5 Secure Protocols

Question 1

Unencrypted network data

Answer 1

Network traffic is important data– Everything must be protected
* Some protocols aren’t encrypted– All traffic sent in the clear– Telnet, FTP, SMTP, IMAP
* Verify with a packet capture– View everything sent over the network

Question 2

Protocol selection

Answer 2

• Use a secure application protocol– Built-in encryption
• A secure protocol may not be available. This may be a dealbreaker.

Question 3

Port Selection (see example in notes)

Answer 3

• Secure and insecure application connections may be
  available– It’s common to run secure and insecure on different ports
• HTTP and HTTPS– In-the-clear and encrypted web browsing– HTTP: Port 80– HTTPS: Port 443
• The port number does not guarantee security– Confirm the security features are enabled– Packet captures may be necessary.

Question 4

Transport method

Answer 4

• Don’t rely on the application– Encrypt everything over the current
  network transport
• 802.11 Wireless– Open access point: No transport-level encryption– WPA3: All user data is encryp

Question 5

Virtual private network (VPN)

Answer 5

– Create an encrypted tunnel– All traffic is encrypted and protected– Often requires third-party services and software