software

4 functional area of CANES hardware components

-Data processing: usinf data

-data storage : longevity and archiving

- data transfer: transfer

- power distribution: delivery of power

software used to manage HP DC380 G10

HP integrated lights out (ILO v5)

2 types of filter configuration

DPE ( controller)and DAE (expansion)

server used for time- reference in CANES

microsemi (syncserver) S650/ microchip

interface used to control UPS over LAN

NetAgent IX

compnent server la as the physical care of the network

backbone equipment housed in the backbone switch rack

purpose of PDU

distributes reliable network power to multiple devices

primary function of Data center racks

data processing and storage; provides the system components and configurations that provide system oversight legacy services, the domain controller's infrastructure and security postures

rack used to support end user connections

edge switch racks

shock elactometric isolators

designed to isolate vibration

purpose of thermal sensors

provide over-temp alerts for cabinets internal components

servers functions as the Unclas, secret, and SR enclave server

crystal server CMS-00808

device that connects to workstations and a pair of high-bandwidth fiber-optic backbone switches

edge switches

how many ASA firewalls in secret

2 other enclaves only have 1

2 CANES rack features to prevent damage from power fluctuations

PDUs and power regulators

dual bus power distribution unit

1RU soild-state PDU

where are wire rope insulators mounted

bottom of each rack enclosure

purpose of rack locking doors

security locks equipment inside the rack and maintains proper airflow b/t equipment

provides backup power when regular power source fails

interruptible power supply (UPS)

what is installed on racks to decrease amplitude of broadband EMI( electronic and auxiliary fresh water)

EMI (electromagnetic interference) filter

what cools equipment rack through use of EAFW

heat-exchangers

the first step

often to determine interface status

RADIUS

uses LDAP to query for CANES ACTIVE DIRECTORY membership

CISCO default privilege levels

level 15: full router or switch control

authentication, authorization, profiling, and posturing

the appliance can determine what type of network access devices require and provide the access needed

authorization

granting or denying resource on network

2 key aspects of TrustSec

enhanced security and reduced complexity; reduced operational expenses

RADUIS protocol

a standard of AAA that is used to carry authentication traffic over the CANES network for Network AAA

MAC Authentication Bypass (MAB)

used to authenticate non-802.1X devices

ISEO1

primary server where all administrative tasks and configurations changes will be made; host primary administration node persona; secondary monitoring node persona; policy services node persona

ISE02

handle must logging functions; primary monitoring node persona;secondary admin;policy services node

cisco ASA comes deployed with

firepower software module for additional security

ASDM lets network Admin manage

CISCO ASA firewalls through a local java-based interface

Sw2

ASDM

Sw4

FMC

ASA implements

object grouping configuration to group similar terms together to reduce the # access control entities

ASDM packet tracer feature allows

to stimulate packers traversing the ASA

threat event monitoring and reporting

conducting in the analysis section of FMC

2 protocols CANES wireless client configuration protocols

-institution of electrical and electronics engineers (IEEE 802.1X) (Raduis)

-EAP over LAN

active directory group policy used to

configure group policy objects for wireless authentication (WAP) and wireless encryption (AES)

canes wlc provides

centralized management device for wireless network

Cisco Prime Infrastructure

provides a web console for managing and monitoring CANES wireless components

2 types of VDIs

privileged access workstation (PAw(

production workstation

CDSA server

provides ability for users to access multiple classified enclaves

AP templates are deployed on

conjunction with emissions control (EMCOW) operation ship conditions

CANES sub WLAN uses

aruba wireless control system

aruba ensures

integrity for the end users using cisco (ISE)

sub unclan is only permitted on

AN/USQ-208B (v) los angeles class and AN/USQ-208(v) b virgins clsss

sub unclas WLAN

wireless controller

6 access points (APs)

red network contains

clear text classifies data and is also handled as SECRET

certified authority admin (CAA)

admin the certificate authority (CA)

fore point software is the distribution consul server application that

cross domain solutions server component

gray network is compromised of

wlan controller

aruba

aruba clear pass policy manager

gray certificate authority

management platform

RDSOL and RO202 provides a workstation environment to TTC

unclas

secret

SR

MRDSO1 or MRDSO2 provides

admin access to the management workstation

Hp DL380 G9/G10 CDSA server (secret only) provides

crops domain access to all enclaves but SCI