Chapter 11 - It's A Network

Front 1

What are the four factors to consider when choosing a device?

Back 1

Cost (often determines the features and capacity)
Speeds and port types (today's needs versus tomorrows)
Expandability (Fixed versus modular configurations)
Operating system features and services

Front 2

How can redundancy be achieved?

Back 2

Duplicate equipment, duplicate network links, redundant switch connections, multiple NICs.

Front 3

How can you ensure consistent availability for network resources?

Back 3

Secure vital servers in a central location, protect that location from unauthorized access (both physically and logically), create redundancy in a server farm and configure redundant paths to those servers.

Front 4

What is a network application?

Back 4

Software programs used to communicate on the network (web browser, e-mail clients).

Front 5

What are application layer services?

Back 5

Interface with the network and prepare data for transfer (file transfers or printer spooling).

Front 6

What's the difference between VoIP and IP telephony?

Back 6

VoIP requires a voice enabled router to convert analog to IP packets while IP telephones do the analog to IP conversion themselves. IP telephony also uses a dedicated server for call control and signaling.

Front 7

What are RTP and RTCP?

Back 7

Real Time Protocol and Real Time Control Protocol. They enable the support of real time applications upon a network. It uses quality of service mechanisms.

Front 8

What does scaling a network include?

Back 8

Network documentation (logical and physical topology), device inventory, itemized IT budget and traffic analysis.

Front 9

How should you go about determining how to manage network traffic?

Back 9

Use a protocol analyzer during peak utilization on several network segments.

Front 10

What categories of attacks can occur to a network?

Back 10

Information theft, identity theft, data loss or manipulation and disruption of service.

Front 11

What are the four physical threats to a network?

Back 11

Hardware threats (physical damage)
Environmental threats (temperature and humidity)
Electrical threats
Maintenance threats (poor handling, insufficient replacement parts)

Front 12

What's a vulnerability

Back 12

The degree of weakness inherent to every device in a network.

Front 13

What kind of network security weaknesses must we be concerned with?

Back 13

TCP/IP protocol weaknesses (HTTP, FTP and ICMP are inherently insecure)
Operating System weaknesses
Network equipment weaknesses (throw passwords on things!)

Front 14

What kind of configuration vulnerabilities can you encounter?

Back 14

Unsecured user accounts (poor passwords, no passwords)
Default settings remaining on a device

Front 15

What is a virus?

Back 15

Malicious software attached to another program to execute a bad function. It requires user interaction and deployment.

Front 16

What is a Trojan Horse?

Back 16

A virus disguised as something else.

Front 17

What is a worm?

Back 17

A virus that self replicates across the network after successfully exploiting a system.

Front 18

What are the three categories of network attacks?

Back 18

Reconnaissance
Access Attacks
Denial of Service

Front 19

What is a reconnaissance attack?

Back 19

An unauthorized attempt to map or profile a network. This can include internet queries, ping sweeps, port scans and packet sniffing.

Front 20

What is an access attack?

Back 20

Exploits known vulnerabilities in authentication services, FTP and web services to gain access to databases. Includes password attacks, trust exploitation, port redirection and man in the middle attacks.

Front 21

What is port redirection?

Back 21

Uses a compromised host to pass traffic through a firewall that would otherwise be filtered.

Front 22

What is a denial of service attack?

Back 22

It is the most publicized type of attack and the most difficult to eliminate. Its ultimate aim is the prevent unauthorized access by consuming resources.

Front 23

How does one mitigate a worm infestation?

Back 23

Containment, inoculation, quarantine and treatment.

Front 24

Why are firewalls good?

Back 24

They perform packet filtering, application filtering and URL filtering.

Front 25

What are different kinds of firewalls?

Back 25

Appliance based (dedicated hardware)
Server based (runs on the OS)
Integrated (adding firewall capabilities to an existing device)
Personal (resides in the host operating system as an application)

Front 26

What is Cisco AutoSecure?

Back 26

Secures a router by using a single command to disable common IP configurations that can be exploited. AKA Cisco routers for n00bs.

Front 27

What's the guideline with patches?

Back 27

Some patches can wait, security patches CANNOT.

Front 28

Name some password guidelines.

Back 28

No less than 8 characters (10+ preferred)
Make them complex (upper/lower case, numbers, symbols)
Avoid dictionary words
Change passwords often
Never write down a password

Front 29

What is a pass phrase?

Back 29

Literally a password phrase. Uses spaces between words for a more complex password.

Front 30

How can you set a minimum password length on a Cisco device?

Back 30

In global config, type "security passwords min-length".

Front 31

How can you block login after a certain number of unsuccessful attempts?

Back 31

In global config, type "login block-for ___ (time in sec) attempts ___ (number of failed attempts) within ___ (time in seconds)".

Front 32

How can you configure an exec time out?

Back 32

In global config, type "exec-timeout ___ (time in mins)".

Front 33

How do you enable SSH on a Cisco router?

Back 33

1. Enter in domain name "ip domain-name _____"
2. Generate a key "crypto key generate rsa general-keys modulus ___ (size of bits)"
3. Create a username "username ____ secret ____"
4. Enable line inbound SSH with "login local" and "transport input SSH".

Front 34

When you ping a node in IOS, what does "!" indicate?

Back 34

A successful ping.

Front 35

When you ping a node in IOS, what does "." indicate?

Back 35

Time expired while waiting for a response.

Front 36

When you ping a node in IOS, what does "U" indicate?

Back 36

ICMP message unreachable.

Front 37

What does the "show interfaces" command display?

Back 37

Displays device status including IP addresses, link status, etc.

Front 38

What does the "show arp" command do?

Back 38

Displays the arp cache (MAKE SURE I SAY ARP CACHE, NOT ARP TABLE).

Front 39

What does "show ip route" command do?

Back 39

Corresponds an IP address to an interface.

Front 40

What does the "show protocols" command display?

Back 40

Enabled protocols

Front 41

What command displays the arp cache on a Windows machine?

Back 41

arp -a

Front 42

What command deletes the arp cache?

Back 42

arp -d

Front 43

What is CDP?

Back 43

It's a Cisco proprietary protocol running at the data link layer. It automatically discovers and obtains information about neighboring Cisco device's hardware and software info.

Front 44

What does the "show cdp neighbor detail" display?

Back 44

Reveals the IP of neighboring devices, regardless of your ability to ping it. This helps determine if there are IP addressing errors.

Front 45

CDP is enabled by default and can be dangerous. How do you disable it?

Back 45

"no cdp run" in global config. To disable it on an interface, use "no cdp enable" in that line's config.

Front 46

What does the "show file systems" command do?

Back 46

Shows a list of available file systems on a Cisco device. Comes in read only, write only and read/write flavors.

Front 47

What does an asterisk mean when it precedes a line when running "show files systems"?

Back 47

Indicates the file system is in use.

Front 48

What does a pound sign after a file system listing indicate when running "show files systems"?

Back 48

Indicates that it is the currently active bootable file system.

Front 49

How do you back up a configuration with TFTP?

Back 49

1. "copy running-config tftp"
2. Enter the IP address to the FTP server
3. Enter the name you desire for the file

Front 50

How do you restore a configuration from an FTP server to a router?

Back 50

1. "copy tftp running-config"
2. Enter the IP address to the FTP server
3. Enter the config's file name

Front 51

What can Cisco devices use USBs for?

Back 51

Secondary storage (multiple configs, versions, etc) and an additional boot device.

Front 52

What sizes can Cisco compatible USBs be?

Back 52

24, 128 and 256 MBs.

Front 53

What file system must Cisco compatible USBs use?

Back 53

FAT16

Front 54

How do you back up a router config onto a USB?

Back 54

1. Run "show file systems to ensure the USB is seen".
2. Run "copy run ____ (USB's name)
3. IOS prompts for file name

Front 55

How do you restore a configuration from a USB to a router?

Back 55

"copy ____ (USB's name) ___ (router's name)-config running config

Front 56

Explain WEP properties.

Back 56

Supports 64, 128 and 256 keys. They are static only.

Front 57

Explain WPA properties

Back 57

Supports 64, 128 and 156 keys. Keys are dynamic and therefore are more secure than WEP.

Front 58

What is the difference between show cdp neighbors and show cdp neighbors detail?

Back 58

While show cdp neighbors displays device ID, address list, port ID, capabilities and platform, it does NOT display the IP address of the device. Adding detail displays the device's IP address as well.

Front 59

DHCP port?

Back 59

67 & 68 UDP