Boot camp

Question 1

Port 20/21 *

Answer 1

• FTP (File Transfer Protocol)
• Control communication (Port 21)
• Transfer Files Port 20 (Active mode)
• Layer 7 application
• TCP port
• TCP does have security built in (can require user name password)
• often used to communicate across a network (unsecured, secured, probably using port 22)
• Provides full functionality to transfer files

Question 2

Port 22 *

Answer 2

• SSH (Secure Shell)
• Designed to transmit data through a remote connection
• allows you to interact at the command line level
• if console connection is encrypted most likely using port 22 (otherwise using unsecured telenet)
• OR SSH File Transfer Protocol
• A completely separate protocol from FTP (it is not compliant with FTP servers) that uses SSH to encrypt file transfers
• Layer 7 application

Question 3

Port 23

Answer 3

• Telnet
• Layer 7 application
• Communicates with another devices command line
• all communication in the clear

Question 4

Port 25 *

Answer 4

• SMTP (Simple Mail Transfer Protocol)
• Layer 7 application
• can be used to send email to mobile devices (or one server to another)
• If you’re receiving email messages, you’re probably using POP3 or IMAP. Whenever you’re sending email, it commonly uses SMTP.

Question 5

Port 53

Answer 5

• DNS (Domain Name System)
• Used to associate IP addresses with domain names
• Only UDP port need to know
• Layer 7 application
• when you type in a websites name needs to use DNS
• converts names to IP addresses

Question 6

Port 49

Answer 6

• TACACS+
• Cisco proprietary protocol used for authentication, authorization, and accounting (AAA) services
• Layer 7 application

Question 7

Port 67/68

Answer 7

• DHCP (Dynamic Host Configuration Protocol)
• This network management protocol is used to assign local IP addresses to devices on a network.
• It is used to create multiple private IP addresses from one public IPv4 address.
• Layer 7 application

Question 8

Port 80 *

Answer 8

• HTTP (Hypertext Transfer Protocol)
• Used for websites and most internet traffic. Web browser to web server traffic
• Layer 7 application

Question 9

Port 88

Answer 9

• Kerberos
• Network authenticated protocol that allows for communication over a non-secure network
• Layer 7 application

Question 10

Port 110 *

Answer 10

• POP (Post Office Protocol)
• basic Email protocol that allows e-mail clients to communicate with email servers.
• POP provides only one-way communication
• Layer 7 application

Question 11

Port 143/993 *

Answer 11

• IMAP (Internet Message Access Protocol)
• Email protocol used by email clients to communicate with email servers.
• Provides 2 way communication unlike POP (110)
• enhance feature over POP being able to access email from multiple devices and have multiple folders
• Layer 7 application

Question 12

Port 161/162

Answer 12

• SNMP (Simple Network Management Protocol)
• Used to monitor and manage network devices on IP networks.
• Layer 7 application

Question 13

Port 389

Answer 13

• LDAP (Lightweight Directory Access Protocol)
• Used to manage and communicate with directories.
• Layer 7 application

Question 14

Port 443 *

Answer 14

• HTTPS (Hypertext Transfer Protocol Secure)
• Secure version of HTTP that used TLS for encryption. Most websites use HTTPS instead of HTTP.
• Layer 7 application

Question 15

Port 636

Answer 15

• LDAPS (Lightweight Director Access Protocol Secure)
• Secure version of LDAP that uses TLS for encryption.
• Layer 7 application

Question 16

Port 989/990

Answer 16

• FTPS (Files Transfer Protocol Secure)
• FTPS uses TLS for encryption. It can run on ports 20/21 but is sometimes allocated to ports 989/990
• Layer 7 application

Question 17

Port 993

Answer 17

• IMAPS (Internet Message Access Protocol Secure)
• Secure version of IMAP that uses TLS for encryption
• Layer 7 application

Question 18

Port 1812/1813

Answer 18

• RADIUS (Remote Authentication Dial-In User Service)
• Used to provide AAA for network services.
• Layer 7 application

Question 19

Port 3868

Answer 19

• Diameter
• Developed as an upgrade to RADIUS
• Layer 7 application

Question 20

Port 5004

Answer 20

• SRTP (Secure Real Time Protocol)
• SRTP replaced RTP and is a protocol used to stream audio and video communication using UDP
• Layer 7 application

Question 21

Port 1701

Answer 21

• L2TP (Layer 2 Tunneling Protocol)
• Used to create point to point connections like VPNs over a UDP connection.
• Needs IPSec for encryption
• Designed as an extension to PPTP
• Operates at the data link layer but encapsulates packets at the session layer
• Layer 5 Session Layer

Question 22

TCP

Answer 22

• Transmission Control Protocol
• Port N/A
• One of two main protocols of the IP (Internet Protocol) suite used to transfer data over an IP network. TCP provides error checking to ensure packets are not lost in transit (expects a response unlike UDP)
• Layer 4 Transport

Question 23

UDP

Answer 23

• User Datagram Protocol
• Port N/A
• The second main protocol in the IP suite that transmits datagrams in a best effort method.
• UDP does not include error checking.
• Layer 4 Transport

Question 24

Port 1723

Answer 24

• PPTP (Point to Point Tunneling Protocol)
• Based on PPP.
• Deprecated protocol for VPNs.
• Layer 4 Transport
• Layer 2 Data Link Layer

Question 25

Port 3389 *

Answer 25

- Remote Desktop Protocol - Windows proprietary protocol that provides a remote connection between two computers - Layer 4 Transport

Question 26

OSI Model

Answer 26

- From bottom to top 1. Signaling - physical layer that is really dealing with connectivity. (Ex: cables, interfaces, network interface cards, hubs) 2. Data Link - Frames are created and put on the network. (Ex: MAC addresses, switches, Extended Unique Identifier (IEEE term), EUI-48 or EUI-64 (these are the bit formats of a physical address) 3. Network - Expects IP addresses to be here. (Also routers, this frame often called a "packet". Everything at this Layer 3 and above is inside a packet) 4. Transport - Protocols for transporting information from one side of the network to the other. Except to see TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) 5. Session - May see control protocols being used to set up / tear down a session . Protocols here might be used to set up tunnels b/n stations. They are tunneled into the next layer 6. 6. Presentation - Encryption data sent back and forth happens here and gets ready to present to us in layer 7. 7. Email level (application) - See the decrypted information that we were requesting. (Every time we send information it starts at level 7, works back to layer 1, goes across the network, and then reverses)

Question 27

TCP Port Range

Answer 27

- 1 -> 65,535 | - Remember TCP Port 80 and UDP Port 80 are totally different

Question 28

Port 139

Answer 28

- NetBIOS (if you have it on your network) Network Basic Input/Output Systems - Very common in Windows environments - may use this port

Question 29

WEP vs WPA

Answer 29

- Wired Equivalent Protocol (used when 802.11 first came out. - Encryption methodology - Significant vulnerabilities - WPA - Uses 802.1x for authentication - WPA initially used TKIP

Question 30

TKIP

Answer 30

- Used with WPA when it first came out - which encrypted the data that went by (TKIP was a stop gap method, big improvement over WEP and allowed us to use older hardware and maintain an encryption connection)

Question 31

WPA2

Answer 31

- Should now be the standard - Allow AES level encryption (advanced encryption standard algorithm) - Used a protocol called CCMP - Ideally you want to use WPA2 with CCMP (not TKIP)

Question 32

MAC

Answer 32

- Mandatory Access Control - Often used in highly secure environments / government - Requires you to configure separate security clearance levels and associate objects in the OS with one of those security levels - Then assign user with a minimum level of access

Question 33

MAC

Answer 33

- Mandatory Access Control - Often used in highly secure environments / government - Uses classification levels (top secret, secret etc) - Requires you to configure separate security clearance levels and associate objects in the OS with one of those security levels - Then assign user with a minimum level of access

Question 34

RBAC

Answer 34

- Role-Based Access Control - Associated with the type of role an individual has in a company - System or network admin would assign particular access control rights

Question 35

Attribute-Based Access Control

Answer 35

-

Question 36

Attribute-Based Access Control

Answer 36

- Can define a number of different criteria that have to be evaluated that would then allow someone access to a resource - Allows a system administrator to define many different parameters - Ex: If a user wants to access a spreadsheet, the system will evaluate what type of resource, time of the day, what action they want to perform, etc.

Question 37

Rule-based access control

Answer 37

- More generic term that can be applied across differ OS or in different ways to provide access - The system admin sets the rules, usually the rule is based on the object a user is trying to access. - Users can't define whether someone else might have access

Question 38

PAM

Answer 38

- Priveledge Access Management - Centralized way to handle elevated access to resources (still need to be concerned about the system admins) - Often used in large organizations, with many different administrators, you don't automatically have administrator rights - They need to log into a centralized DB and then that is checked against their elevated access to confirm / deny - Priveledge often only lasts for a short duration

Question 39

MDM

Answer 39

- Mobile Device Management - Allows us to keep track of where all these systems are, what data is on them and managing different aspects of mobile devices

Question 40

FDE

Answer 40

- Full-Disk Encryption

Question 41

SED

Answer 41

- Self encrypting Drives

Question 42

DLP

Answer 42

- Data Loss Prevention

Question 43

OWASP

Answer 43

- Application Security Verification Standard | - Great way to ensure company is deploying secure code

Question 44

CIS

Answer 44

- Focuses more on systems and networks than on internally developed code

Question 45

Thin clients

Answer 45

- Main benefit, you can eliminate local storage, forcing storage on the server which enables you to easily monitor for changes to programs / files

Question 46

ISO 27001 vs ISO 27002

Answer 46

- 27001 document is a standard that you can have your organization certified against - 27002 list of security controls and best practices you can implement to meet the afore mentioned requirements - 27002 provides a guideline and can be used by any organization looking to improve its security posture

Question 47

Privacy Threshold Assessment vs Privacy Impact Assessment

Answer 47

- PTA: Simply used to determine whether there are any information privacy risks associated with a program performing while in use and if it needs to comply with privacy protection regulations - PIA: enumerates the PII collected by a company and demonstrates the maintenance, security, and sharing techniques that will be used to ensure compliance and avoid risk.

Question 48

Site to Site VPN

Answer 48

- Allows both sites to always remain visible to each other - The connection b/n the two offices would be secure and seamless to end users - good for remote works

Question 49

SSL VPN

Answer 49

- Requires that each computer have a VPN client installed and all users have their own VPN username and password

Question 50

Round robin

Answer 50

- A way to configure a load balancer - each request goes to the next sever - ensures all servers getting the same load across everyone communicating on the network - Also weight and dynamic round robin - Type of active/ active - Not good if a user requires the same server each time

Question 51

PEAP

Answer 51

- The Protected Extensible Authentication Protocol (PEAP) encapsulates Extensible Authentication Protocol (EAP) within a TLS tunnel and uses certificates for authentication.

Question 52

EAP FAST

Answer 52

Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling (EAP-FAST) is a Cisco proprietary extension of EAP that uses Protected Access Credentials (PACs) to establish a TLS tunnel. Certificates are optional with EAP-FAST.

Question 53

EAP TLS

Answer 53

Extensible Authentication Protocol - Transport Layer Security (EAP-TLS), supports certificate-based mutual authentication and key derivation. EAP-TLS requires both a server and client-side certificate.

Question 54

EAP TTLS

Answer 54

Extensible Authentication Protocol - Tunneled Transport Layer Security (EAP-TTLS) is an extension to EAP-TLS. In EAP-TTLS the client does not have to be initially authenticated by a certificate to the server, simplifying setup. After initial authentication the server can authenticate the client using existing and legacy authentication protocols through the secure certificate-based TLS tunnel.