Network Services

What does DNS do?

Converts names to IP addresses and vice versa

What does it mean to say that DNS is a distributed naming system?

The load is balanced across many different servers

Who manages DNS?

ISP or enterprise IT department

Is it wise for an enterprise to have only one DHCP server?

No

Where is DHCP service hosted in a home environment?

Home router

What does AFP stand for?

Apple Filing Protocol

What protocols does a print server use?

• SMB

• IPP

• LPD

What does IPP stand for?

Internet Printing Protocol

What does LPD stand for?

Line Printer Daemon

What is the protocol that allows you to consolidate log files back to one central database?

Syslog

What is the central Syslog server called?

SIEM (Security Information and Event Manager)

What is a resource that your SIEM server will need a lot of?

Disk space

What does a web server do?

Responds to browser requests

What are pages/web files on a web server built with?

HTML or HTML5

What does a triple A server do?

Checks your username and password and provide access to whatever you may need

What does AAA stand for?

Authentication, Authorization, and Accounting

Is an authentication server required on a home network?

No

What does a database server do?

Stores tables that are connected in a relational database

What does SQL stand for?

Structured Query Language

What does NTP stand for?

Network Time Protocol

What are some things that require systems run with the correct date and time?

encryption, logs, etc.

What does the NTP client on your computer do?

Requests time updates from the NTP server (usually daily)

What does a spam gateway do?

Evaluates every email message and categorizes it as spam or legitimate

Where would an all-in-one security appliance be placed?

Outside the network, between the organization and the internet

What might be found in an all-in-one security appliance?

• URL filter/content inspection

• Malware inspection

• Spam filter

• CSU/DSU

• Router, Switch

• Firewall

• IDS/IPS

• Bandwidth shaper

• VPN endpoint

What are other terms for an all-in-one security appliance?

Next-generation firewall, Unified Threat Management (UTM), Web security gateway

How do organizations maintain the uptime and availability of their services?

Have them running on a load balancer

What is a proxy server used for?

• access control

• caching

• URL filtering

• content scanning

What does SCADA stand for?

Supervisory Control and Data Acquisition System

What does ICS stand for?

Industrial Control Systems

What is required for the security of a SCADA/ICS system?

Segmented network that is only accessible by physically accessing that part of the network or by accessing it through a very controlled system

What does a SCADA/ICS system allow you to do?

View, manage, control, access power generation, refining, and manufacturing equipment