Comptia security soft

SSH (Secure Shell)

creates a tunnel to shield communications packets

SSH port number

Port 22

SSL (Secure Circuit Layer)

provides end to end security across the internet

SSL port number

Port 443

What is FTP

Protocol that we transfer files on the internet with it is not that secure as it transmits with plain text so to make it secure we add SFTP.

FTP port number

Port 21

STFP port number

Port 22

What is HTTP

Hyper Text Transfer Protocol

HTTP port number

Port 80

HTTPS port number

Port 443

What is TFTP

protocol in which we send and receive files across the internet

TFTP port number

Port 69

What is RDP

propriety protocol from microsoft that provides users a graphical interface to connect another computer over a network connection. it has 4 digits

RDP port number

Port 3389

What is TELNET

Protocol connections across other computers on the internet

TELNET port number

Port 23

What is SNMP

protocol that gathers configurations parameters from devices on the network. You can monitor and push configurations onto devices using this protocol port 160,161,162

SNMP port number

Port 161

What is SMTP

allows email to move from one server to another server

SMTP port number

Port 25

What is DNS

It translates the www.gwen.com to find the ip. name resolution for our network traffic.

DNS port number

Port 53

What is POP3

a protocol for receiving email by downloading it to your computer from a mailbox on the server of an Internet service provider.

POP3 port number

port 110

What is IMAP

Internet Message Access Protocol

IMAP port number

port 143

What is ICMP?

Internet Control Message Protocol

What is a Firewall

any hardware or software designed to prevent unwanted network traffic.

Packet Filtering Firewall

polices traffic on the basis of packet headers.

What is a ACL

Access Control List

Circuit-Level Gateway

operates on the Session layer of the OSI model. Instead of inspecting packets by header/source or port information, it instead maintains a connection between two hosts that is approved to be safe.

Application-Level Gateway

actively inspects the contents of packets

a server that serves as the "middle man" between two hosts that wish to communicate.

Proxy Server

what is MAC

A system in which a central administrator or administration dictates all of the access to information in a network or system

what is DAC

A system in which the owners of files actually determine who gets access to the information.

what is RBAC

A system in which the roles of users determine their access to files.

what is NAT

a gateway can allow multiple private hosts to operate under the guise of a single public IP address.

what is port security

logical security and physical security.lock down the systems to be prevented from accessing ports etc.

what is 802.1x

implement this so that all ports must be authenticated prior to accessing the switch.

what are Flood guards

prevent the sever from being overwhelmed.

what is SPoF

If the system goes down in it's unification then your entire system goes down. Then all of your threat management devices are compromised.

what is DMZ

Demilitarized Zone

what is TCP/IP

Transmission Protocol/ Internet Protocol:

what is MAC address

A unique set of numbers for every device that can connect to your wireless access point or a network.

what is a switch

is a computer networking device that connects devices together on a computer network by using packet switching to receive, process, and forward data to the destination device.

2 ICMP variants

ipv4 and ipv6

ICMP is used to what

To implement ping

What is a subnet

A logical subdivision of an IP network.

What is subnetting

The practice of dividing a network into two or more networks is called

Technical control

passwords/encryption

Administrative controls

Policies, procedures put in place by management as to how work will be carried out.

Operational controls

Procedures/standards

False Positive

When the system says there's a problem when there isn't one

False Negative

When the system says there is no problem when there is one

acceptable use policy

a policy to dictate what is allowed or not allowed when we use resources made available by the organization

privacy policies

policies that dictate how privacy should be carried out within the organization.

mandatory vacation

dictates that our users should go on periodic vacation, this way their activities can also be investigated.

Job rotation

rotating staff amongst jobs as a form of cross training for them to learn other people's roles.

principle of separation of duties

this principle dictates that critical job functions be broken down into multiple roles

what is CIA

Confidentiality Integrity Availability

Least privilege

dictates that users be given only the permission they need to do their work no more no less.

MTTR

Mean time to repair (includes time to fix and test device)

MTBF

Mean Time Between Failure (how long will i use this device before it fails, this is for devices that can fail and then be repaired).

MTTF

Mean Time to Failure (devices that you don't plan to return to the network.

ALE

Annualized Loss Expectancy (divide what ever you have by 2 year span review to determine annual loss in cost per year.)

SLE

Single Loss Expectancy (how much money did we lose for each single loss incurred if the threat exploits the vunerability).

ARO

Annualized Rate of Occurrence (what is the rate of occurrence annually?)

Quantitative Analysis

numeric values (how much did we loose did we use $4mil, etc.)

Qualitative Analysis

Experience and Subjective and based upon the users experience and their own personal measurement.

Threat Factors

any entity that can exploit vulnerabilities

Risk/Probability

likelihood of a threat occurring

Preventative controls

avoid incident from occurring

Deterrence Controls

discourage potential attackers

Compensating controls

alternative controls

Orphan VM

a machine that is not being maintained and updated and now vulnerable for attach in the network.

VM Escape

an exploit in which the attacker runs code on a VM that allows an operating system running within it to break out and interact directly with the hypervisor

RTO

Recovery Time Objective is a measure of time in which we can recover a machine that is down.

RPO

Recovery Point objective must give a point at which they want to recover

what is MITM

Is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other.

Spoofing

Stealing a ip or ac address to gain access

What is the PDU of layer 1 of the OSI model

bit

what layer is the data link layer

layer 2

what layer uses IP addressing

Layer 3

what is the pdu of layer 4

segment

what is the pdu of layer 3

packet

how many layers in the OSI model

7

Which layer uses either a connection-less or connect-oriented protocol?

Transport layer

ARP operates at which layer of the OSI Model

data link

Which two layers utilize physical addressing

Data Link 2 and Network 3

At what layer of the OSI model does a router operate

Network layer

What layer of the OSI model is the Physical Layer

layer 1

On which layer of the OSI model would a frame be located

data link layer

Layer 6 of the OSI model is known as what?

Presentation layer

Which device operates exclusively on the Physical layer of the OSI model?

the hub

What protocol operates on the Transport layer of the OSI model?

TCP

Which device operates on the same level as a packet

router

HTTP operates on what layer of the OSI model

application layer

Which protocol operates on the Session layer of the OSI model?

SSL/TLS

TACACS+

Supports Multi factor authenication

Kerberos

Authentication standard (KDC, TAS, Tickets)