Chapter 3 Basic Network Security

Front 1

ICMP

Back 1

Internet Control Message Protocol.

Used for testing connectivity for things like ping. Used in DDOS attacks so disabled frequently.

Front 2

ARP

Back 2

address resolution protocol.

Resolves IPv4 to MAC address.

ARP poisoning is tricking giving clients false MAC addresses.

Front 3

NDP

Back 3

neighborhood discovery protocol.

Used for IPv6 and does what ARP does.

Front 4

SSH

Back 4

encryption protocol on TCP port 22. (SCP, SFTP)

Front 5

SSL

Back 5

encryption protocol

TCP

Front 6

TLS

Back 6

encryption protocol,

designed to replace SSL

Front 7

IPsec

Back 7

internet protocol security.

Protects VPN traffic in tunneling.

Includes authentication header and ESP (encapsulating Security Payload) over port udp 500.

Front 8

FTPS

Back 8

File Transfer Protocol Secure.

Uses SSL over ports 989 and 990, uses ssl

Front 9

FTP

Back 9

uses TCP ports 20 and 21

Front 10

TFTP

Back 10

Trivial File Transfer Protocol. Uses UDP port 69.

Front 11

SNMP

Back 11

Simple network management protocol. Port 161 and 162 for SNMP trap

Front 12

LDAP

Back 12

port 389 (unencrypted)

port 636 via TLS

Front 13

NetBios

Back 13

ports 137, 138, 139

Mostly UDP

Front 14

Microsoft SQL Server

Back 14

TCP port 1433

Front 15

RDP

Back 15

Remote Desktop Protocol

TCP/UDP port 3389

Front 16

SMTP

Back 16

simple mail transfer protocol

TCP port 25 and port 465 via TLS

Front 17

POP3

Back 17

post office protocol v.3

TCP port 110 and 995 via TLS

Front 18

IMAP4

Back 18

internet message access protocol v4

TCP port 143 and 993 via TLS

Front 19

Subnetting

Back 19

dividing classful network into two or more smaller networks

Front 20

ACL

Back 20

Access control list.

Set on network level device and firewalls. Control based on networks, subnets, IP addresses, ports, and protocols.

Front 21

DNS

Back 21

port UDP 53 for resolution queries and TCP port 53 for zone transfers

Front 22

A

Back 22

host record. Used in DNS to resolve name to IPv4 address

Front 23

AAAA

Back 23

host record for IPv6

Front 24

PTR

Back 24

opposite of host record, resolves ip address to name

Front 25

Hub vs Switch

Back 25

Hubs are dumber, broadcast traffic to everyone. Switches are unicast and safer.

Front 26

STP and RSTP

Back 26

spanning tree protocol and Rapid STP

used to prevent switching loop problems

Front 27

VLAN

Back 27

vlans logically group different computer together

Front 28

802.1x

Back 28

port security protocol.

Used on both wireless and wired networks.

Can be used with Radius to ensure only authenticated users.

Protection against rogue access devices.

Front 29

WAF

Back 29

web application firewall.

Can inspect content for things like no operation commands (for buffer overflow attacks) and code for XSS attacks.

Used in addition to network firewall.

Front 30

DMZ

Back 30

buffer zone between intranet and internet.

Can host internet facing servers so access to internal network avoided.

Front 31

NAT, DNAT

Back 31

NAT is encompassing term for assigning public IP addresses to private IP addresses and vice versa.

DNAT is dynamic and assigns IP addresses based on availability (multiple public)

Front 32

proxy server

Back 32

Forwards client requests. Increases performance through caching and enhances security via URL filtering

Front 33

Secure Zone Transfers

Back 33

These are used to prevent the mapping of IP addresses of an internal network

Front 34

Security advantage of IPv6

Back 34

use of IPsec