-Security+ Sy-401: Protocols

Front 1

LT2P

Back 1

Layer 2 tunneling protocol

uses IPSEC for encryption

Front 2

SSH

Back 2

Secure Shell

TCP 22

Front 3

SCP

Back 3

Secure copy

TCP 22

Front 4

SFTP

Back 4

Secure File Transfer Protocol

FTP over SSH

An extension of SSH for transferring files

TCP 22

Easier to work across firewalls than FTPS

Front 5

FTPS

Back 5

FTP over SSL

TCP 989 (data)

TCP 990 (control)

Uses SSL and requires a certificate and FTP server.

Not supported by all FTP servers

More problematic with firewalls because it requires multiple open ports.

Front 6

TFTP

Back 6

Trivial File Transfer Protocol

UDP 69

Front 7

HTTPS

Back 7

HTTP encrypted with SSL/TLS

TCP 443

Front 8

IPSEC

Back 8

IP Security

Encrypted tunnel at IP level

Used for VPN's Firewalls, etc.

TCP & UDP 1293

Front 9

ICMP

Back 9

Internet Control Message protocol

Used by PING. Usually blocked by firewalls

Front 10

SNMP

Back 10

Simple Network Management Protocol

V1 in the clear

V2 Data enhancements, still in the clear

V3 Integrity, authentication & encryption

Front 11

Kerberos

Back 11

Mutual authentication prevents man in the middle attacks.

TCP & UDP 88

3 "heads":

KDC Key Distribution Center

Authentication Service

Ticket Granting Service

Front 12

EAP

Back 12

Extensible Authentication Protocol

Front 13

PEAP

Back 13

Protected Extensible Authenticaton Protocol

Encapsulates EAP in a TLS tunnel

Front 14

LEAP

Back 14

Lightweight Extensible Authentication Protocol

Cisco proprietary

No certificates

Based on MS-CHAP, including it's shortcomings

Front 15

WPA

Back 15

WIFI Protected Access

Front 16

WPA2

Back 16

WIFI Protected Access v2

AES with CCMP

Front 17

WPA2-Enterprise

Back 17

Built on TKIP

Authentication servers

Front 18

TKIP

Back 18

Temporal Key Integrity Protocol

Superseded by AES

Every packet gets a unique encryption key

Sequence counters protect from replay attacks

Front 19

CCMP

Back 19

Counter mode Cipher block chaining Message authentication Protocol

Newer and preferable to TKIP

128 bit key

Front 20

FCOE

Back 20

Fiber Channel Over Ethernet

Not routable

Front 21

FCIP

Back 21

Fiber channel over IP

Fiber channel tunneling

Routable

Front 22

LDAP

Back 22

Lightweight Directory Access Protocol

Based on x.500 spec

Uses TLS for encryption

Front 23

ISCSI

Back 23

Internet Small Computer Systems Interface

SCSI commands over IP

Makes a remote disk look and act like a local drive

Front 24

TOTP

Back 24

Time bases One Time Password

Expires after 30 seconds

Front 25

SAML

Back 25

Security Assertion Markup Language

XML standard for exchange of authentication & authorization info

Used in single sign on solutions

Front 26

PAP

Back 26

Password Authentication Protocol

Insecure, clear text

Front 27

IKE

Back 27

Internet Key Exchange

UDP 500

a.k.a ISAKMP

Front 28

CHAP

Back 28

Challenge Handshake Authentication Protocol
3 way handshake

Front 29

LANMAN

Back 29

Similar to CHAP

Somewhat insecure

ASCII

Front 30

NTLM

Back 30

NT LANMAN

Updated with windows NT

Unicode

14 characters maximum

Stored as 128 bit MD4 hash

Front 31

NTLM V2

Back 31

NT LANMAN Updated with NT service pack 4

Front 32

ISAKMP

Back 32

Internet Security And Key Management Protocol

UDP 500

a.k.a. IKE Internet Key Exchange

Front 33

ESP

Back 33

Encapsualtion Security Payload

Front 34

OCSP

Back 34

Online Certificate Status Protocol

Front 35

AES

Back 35

Advanced Encryption Standard

Front 36

NDP

Back 36

Neighbor Discovery Protocol

Used by IPV6 for mac to IP address resolution

Front 37

S/MIME

Back 37

A protocol for sending digitally signed and encrypted messages. Uses public key encryption.

Front 38

ESP

Back 38

Encapsulating Security Payload.

Part of the IPSec suite. Provides both authentication and encryption of data.

Front 39

What is a weakness of MS-CHAP and MS-CHAPv2?

Back 39

Weak 56 bit DES encryption