Cnna Final Exam Review Edition 7 Chapter 7

Front 1

802.11i

Back 1

TheIEEE standard for wireless network encryption and authentication thatuses the EAP authentication method, strong encryption, anddynamically assigned keys, which are different for everytransmission. 802.11i specifies AES encryption and weaves a key intoeach packet.

Front 2

802.1x

Back 2

Avendor-independent IEEE standard for securing transmission betweennodes according to the transmission’s port, whether physical orlogical. 802.1X, also known as EAPoL, is commonly used with RADIUSauthentication and is the authentication standard followed bywireless networks using 802.111

Front 3

AAAservices

Back 3

(authentication,authorization, and accounting) A category of protocols that establisha client’s identity, authorize a user for certain privileges on asystem or network, and keep an account of the client’s system ornetwork usage.

Front 4

AES

Back 4

(AdvancedEncryption Standard) A private key encryption algorithm that uses asophisticated family of ciphers along with multiple stages of datatransformation

Front 5

Cipher

Back 5

Amathematical code used to scramble data into a format that can beread only by reversing the cipher—that is, by deciphering, ordecrypting, the data

Front 6

CommunityCloud

Back 6

Adeployment model in which shared and flexible data storage,applications, or services are shared between multiple organizations,but not available publicly. Organizations with common interests, suchas regulatory requirements, performance requirements, or data accessneeds might share resources in this way.

Front 7

DNSSpoofing

Back 7

Anattack in which an outsider forges name server records to falsify hishost’s identity

Front 8

EAP

Back 8

(ExtensibleAuthentication Protocol) An extension to the PPP protocol suite thatprovides the framework for authenticating clients and servers. Itdoes not perform encryption or authentication on its own, but ratherworks with other encryption and authentication schemes to verify thecredentials of clients and servers.

Front 9

EAPoL

Back 9

Avendor-independent IEEE standard for securing transmission betweennodes according to the transmission’s port, whether physical orlogical. 802.1X, also known as EAPoL, is commonly used with RADIUSauthentication and is the authentication standard followed bywireless networks using 802.111.

Front 10

Hashing

Back 10

Datathat has been transformed through a particular algorithm thatgenerally reduces the amount of space needed for the data. Hashingdata is nearly impossible, mathematically, to reverse.

Front 11

Host-to-HostVPN

Back 11

Atype of VPN in which two computers create a VPN tunnel directlybetween them. Both computers must have the appropriate softwareinstalled, and they can’t serve as a gateway to other hosts ontheir respective networks

Front 12

Hybridcloud

Back 12

Adeployment model in which shared and flexible data storage,applications, or services are made available through a combination ofother service models into a single deployment, or a collection ofservices connected within the cloud. In the real world, the hybridcloud infrastructure is a common result of transitory solutions.

Front 13

IaaS

Back 13

(Infrastructureas a Service) A service model in which hardware services are providedvirtually, including network infrastructure devices such as virtualservers

Front 14

IETF

Back 14

InternetEngineering Task Force) An organization that sets standards for howsystems communicate over the Internet (for example, how protocolsoperate and interact).

Front 15

IPSec

Back 15

(InternetProtocol Security) A Layer 3 protocol that defines encryption,authentication, and key management for TCP/IP transmissions. IPsec isan enhancement to IPv4 and is native to IPv6. IPsec is unique amongauthentication methods in that it adds security information to theheader of all IP packets

Front 16

Kerberos

Back 16

Across-platform authentication protocol that uses key encryption toverify the identity of clients and to securely exchange informationafter a client logs on to a system. It is an example of a private keyencryption service.

Front 17

MSChap

Back 17

(MicrosoftChallenge Handshake Authentication Protocol) An authenticationprotocol provided with Windows operating systems that uses athree-way handshake to verify a client’s credentials and encryptspasswords with a challenge text.

Front 18

OpenSSH

Back 18

Anopen source version of the SSH suite of protocols.

Front 19

PaaS

Back 19

(Platformas a Service) A service model in which various platforms are providedvirtually, enabling developers to build and test applications withinvirtual, online environments tailored to the specific needs of aproject.

Front 20

PPP

Back 20

(Point-to-PointProtocol) A Layer 2 communications protocol that enables aworkstation to connect to a server using a serial connection such asdial-up or DSL. PPP can support multiple Network layer protocols, canencrypt transmissions (although PPP encryption is considered weak bytoday’s standards), and can use an authentication protocol such asPAP or CHAP to authenticate a client to the remote system

Front 21

PPPoE

Back 21

PPPrunning over an Ethernet network

Front 22

Radius

Back 22

(RemoteAuthentication Dial-In User Service) A popular protocol for providingcentralized AAA (authentication, authorization, and accounting) formultiple users. RADIUS runs over UDP and can use one of severalauthentication protocols.

Front 23

RRAS

Back 23

(Routingand Remote Access Service) The software included with Windowsoperating systems that enables a server to act as a router, firewall,and remote access server. Using RRAS, a server can provide networkaccess to multiple remote clients. Beginning with Windows Server 2008R2 and Windows 7 (Enterprise or Ultimate), RRAS now works inconjunction with DirectAccess to enable always-on remote connectionswhile also allowing VPN connections to the network.

Front 24

Sessionkey

Back 24

Inthe context of Kerberos authentication, a key issued to both theclient and the server by the authentication service that uniquelyidentifies their session.

Front 25

SHA-2hashing algorithm

Back 25

Thesecond revision of SHA, also designed by the NSA, which supports avariety of hash sizes, the most popular of which are SHA-256 andSHA-512.

Front 26

SLIP

Back 26

(SerialLine Internet Protocol) An obsolete Layer 2 communications protocolthat enabled a workstation to connect to a server using a serialconnection such as dial-up or DSL. SLIP did not support encryptionand could carry only IP traffic. SLIP was replaced by PPP.

Front 27

SSH

Back 27

(SecureShell) A connection utility that provides authentication andencryption. With SSH, you can securely log on to a host, executecommands on that host, and copy files to or from that host. SSHencrypts data exchanged throughout the session.

Front 28

SSL

Back 28

(SecureSockets Layer) A method of encrypting TCP/IP transmissions—includingWeb pages and data entered into Web forms—en route between theclient and server using public key encryption technology.

Front 29

SSTP

Back 29

(SecureSocket Tunneling Protocol) A proprietary Microsoft protocol, firstavailable with Windows Vista, though it is also available for Linuxand some other operating systems (but not Apple products).

Front 30

TACACS+

Back 30

(TerminalAccess Controller Access Control System Plus) A Cisco proprietaryprotocol for AAA (access, authentication, and authorization). LikeRADIUS, TACACS+ may use one of many authentication protocols. UnlikeRADIUS, TACACS+ relies on TCP at the Transport layer instead of UDP,allows for separation of the AAA services, encrypts all informationtransmitted for AAA, and is typically installed on a router or switchrather than on a server

Front 31

Telnet

Back 31

Aterminal emulation protocol used to log on to remote hosts using theTCP/IP protocol

Front 32

TGS

Back 32

(Ticket-GrantingService) In Kerberos terminology, an application separate from the AS(authentication service) that runs on the KDC and issuesTicket-Granting Tickets to clients so that they need not request anew ticket for each new service they want to access.

Front 33

TGT

Back 33

(Ticket-GrantingTicket) In Kerberos terminology, a ticket that enables a user to beaccepted as a validated principal by multiple services.

Front 34

TKIP

Back 34

(TemporalKey Integrity Protocol) An encryption key generation and managementscheme used by 802.11i.

Front 35

Twofactor authentication

Back 35

Anauthentication process in which clients must supply two pieces ofinformation to verify their identity and gain access to a system.

Front 36

VPN

Back 36

(virtualprivate network) A virtual connection between a client and a remotenetwork, two remote networks, or two remote hosts over the Internetor other types of networks, to remotely provide network resources.VPNs can be created through the use of software or combined softwareand hardware solutions.

Front 37

Whatimprovements have they made on TLS?

Back 37

MorePrivacy, Less Latency, Improved Handshakes

Front 38

WhichVPN protocols exist? What are their features?

Back 38

PointTneunling Protocol (PPTP), Layer Two Tunneling Protocol (L2TP), orSecure Socket Tunneling Protocol (SSTP)

Front 39

Xaas

Back 39

(Anythingas a Service, or Everything as a Service) A type of cloud computingin which the cloud can provide any combination of functions dependingon a client’s exact needs, or assumes functions beyond networkingincluding, for example, monitoring, storage, applications, andvirtual desktops