Transport Layer Security (TLS)
Mod 7.1 Application Security and Time Synchronization
Objective 1.4 | 3.4
TLS: A security protocol that uses certificates for authentication and encryption that provides end-to-end security to protect web communications and other application protocols
Transport Layer Security (TLS)
Mod 7.1 Application Security and Time Synchronization
Objective 1.4 | 3.4
Digital Certificate: implement TLS,
- Identification and authentication information presented in the X.509 format and issued by a certificate authority (CA) as a guarantee that a key pair (as identified by the public key embedded in the certificate) is valid for a particular subject (user or host)
Public Key: freely distributed and is used to encrypt data, which can only be decrypted by the linked private key in the pair.
Private Key: known only to the holder and is linked to, but not derivable from, a public key distributed to those with whom the holder wants to communicate securely
Cipher Suite: Lists of cryptographic algorithms that a server and client can use to negotiate a secure connection
Network Time Protocol
Mod 7.1 Application Security and Time Synchronization
Objective 1.4 | 3.4
NTP: enables the synchronization of these time-dependent applications, UDP port 123
GPS: A means of determining a receiver’s position on Earth based on information received from orbital satellites
Time drift is when a system’s clock begins to deviate from the source clock
- Slow Method: If the time is off by only a few seconds, adjusts the time a few milliseconds
- Slam Method: hard reset the time
NTS: Network Time Security (NTS) works on TCP port 4460
Precision Time Protocol
Mod 7.1 Application Security and Time Synchronization
Objective 1.4 | 3.4
Precision Time Protocol: Provides clock synchronization to network devices to a higher degree of accuracy than Network Time Protocol (NTP), nanosecond precision
Hyper Text Transfer Protocol
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
Web Servers
- Dedicated Server: ISP allocates your own private server computer, unmanaged (or additional cost)
Main Web Server: Apache, Microsoft Internet Information Services (IIS), NGINX
HTTP Secure
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
HTTPS port 443
File Transfer Protocol
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
FTP port 20/21: administrative upload/download of files to and from servers and appliances
Trivial File Transfer Protocol (TFTP) is a connectionless protocol running over UDP port 69.
Secure File Transfer Protocol
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
SFTP port 22: addresses the privacy and integrity issues of FTP by encrypting the authentication and data transfer between client and server
Server Message Block
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
SMB port 445: requesting files from Windows servers and delivering them to clients, share files and printers
Network Attached Storage
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
NAS: device dedicated to performing a file server role, uses a bespoke operating system LINUX
- support RAID
Database Services
Mod 7.2 Web, File, Print, and Database Services
Objective 1.2 | 1.4
Structured Query Language (SQL): Programming and query language common to many relational database management systems
Simple Mail Transfer Protocol
Mod 7.3 Email and Voice Services
Objective 1.4
SMTP: Electronic mail enables a person to compose a message and send it to another user on their own network
Delivery / Mail protocol
- Local Mail Client
- Local SMTP Server
- Remote SMTP Server
- Remote Mail Client
STARTTLS: Deprecated, explicit TLS or opportunistic TLS
Implicit TLS: establishes the secure connection before any SMTP commands
Port 25: message relay between SMTP servers, or message transfer agents (MTAs)
Port 465: SMTP Submission with implicit TLS
Port 587: SMTP Submission with explicit TLS
Internet Message Access Protocol
Mod 7.3 Email and Voice Services
Objective 1.4
IMAP Port 143: used mail retrieval protocol, insecure
IMAPs Port 993: secure IMAP
Voice and Video Services
Mod 7.3 Email and Voice Services
Objective 1.4
VoIP
- Private branch exchange (PBX): automated switchboard providing a single connection point for an organization’s voice lines
Software VoIP: (3cx.com) and Asterisk (asterisk.org)
VoIP Protocols
Mod 7.3 Email and Voice Services
Objective 1.4
Session control: Used to establish, manage, and disestablish communications sessions, discovery, availability, negotiating, session management/termination
Data Transport: Handles the delivery of the actual video or voice information
QoS (Quality of Service): Provides information about the connection to a QoS system, ensures that voice or video communications are free from problems, dropped packets, delay, or jitter
Session Initiation Protocol (SIP)
Mod 7.3 Email and Voice Services
Objective 1.4
Used to establish, disestablish, and manage VoIP and conferencing communications sessions. It handles user discovery (locating a user on the network), availability advertising (whether a user is prepared to receive calls), negotiating session parameters (such as use of audio/ video), and session management and termination
Real-time Transport Protocol (RTP) - actual delivery of real-time data uses different protocols
Mod 7.4 Disaster Recovery and High Availability
Objective 1.2 | 2.1 | 3.3
Mod 7.4 Disaster Recovery and High Availability
Objective 1.2 | 2.1 | 3.3
Mod 7.4 Disaster Recovery and High Availability
Objective 1.2 | 2.1 | 3.3