CompTIA Network+ Definitive Study Guide

Module 1: Network Topologies

  • Definition of Topology:
     A layout describing how a network communicates with various devices categorized into wired and wireless types.

   - Star Topology:
     - Computers are connected to a central wiring point, such as a hub or switch.
     - All data passes through the central point before reaching its destination.
     - Benefit: If one computer or cable fails, other computers remain unaffected.
     - Disadvantage: Represents a single point of failure; if the central hub or switch fails, the entire network goes down.

   - Mesh Topology:
     - Each computer is connected to every other computer.
     - Redundancy: High redundancy; if one or more connections fail, communication continues.
     - Usage: Expensive due to cabling and network card requirements; rarely used on LANs but primarily used on WANs like the internet.

   - Point-to-Point Topology:
     - Direct connection between two hosts via a single cable.
     - Usage: Common in WAN connections, where dedicated communication lines are required for high-speed transmission.

   - Hybrid Topologies:
     - Combination of different topologies used within an organization.
     - Example: A mix of star and mesh connections to balance performance and cost.

   - Spine-Leaf Topology:
     - Creates a full mesh connection with two layers.
     - Spine Layer: Backbone switches connecting to every leaf switch.
     - Leaf Layer: Connects to every spine switch and to the servers, minimizing network latency and improving performance.

Module 2: Cisco Hierarchical and Data Flow Models

  • Three-Tier Hierarchical Model:
       - Core Layer:
         - The backbone of the network, consisting of high-speed routers and switches.
         - Responsible for handling traffic between different locations and ensuring fast data transfer.
       - Distribution Layer:
         - Acts as a middleman between core and access layers, providing intelligent switching and routing.
         - Is responsible for policy-based connectivity and route aggregation.
       - Access Layer:
         - Where users connect computers to switches to access network resources.
         - Facilitates user connectivity while enforcing security and access policies.

  • Collapsed Core Model:
       - Combines core and distribution layers to simplify the architecture for smaller networks.
       - Reduces costs and complexity but may limit scalability for larger setups.

  • Traffic Flow Terms:
       - East-West Traffic:
         - Network traffic within a data center; primarily between servers.
         - Important for services that require quick data exchanges or inter-server communications.
       - North-South Traffic:
         - Data traveling to or from a system outside the data center.
         - Includes communication between users and applications hosted in the data center.

Module 3: The OSI Model

  • Overview:
       - The OSI model consists of seven layers defining how data communicates in networks.
       - Provides a framework to understand and troubleshoot networking issues effectively.

  • Data Flow:
      - Data flows down through the layers on the sending computer and up through the layers on the receiving computer.

  • The Seven Layers:
       1. Physical Layer:
          - Transmits raw bits over a physical medium and defines the network topology.
          - Includes cables, switches, and other hardware components necessary for data transmission.
       2. Data Link Layer:
          - Organizes raw bits into frames; includes MAC addresses which help ensure that data is delivered to the correct device.
          - Provides error detection and correction to maintain data integrity.
       3. Network Layer:
          - Routes frames using IP addresses and defines logical addressing.
          - Ensures packets are forwarded along the most efficient path to their destination.
       4. Transport Layer:
          - Transfers data using TCP (Transmission Control Protocol) or UDP (User Datagram Protocol).
           - TCP: Connection-oriented, ensures reliable and ordered delivery of data segments.
           - UDP: Connectionless, allows faster transmissions but does not guarantee delivery or order.
       5. Session Layer:
          - Controls the dialogue or session between two devices, ensuring proper opening, closing, and management.
          - Responsible for maintaining connections and managing sessions across devices.
       6. Presentation Layer:
          - Translates data for the application layer and handles data formatting, encryption, and compression.
          - Ensures that data sent from the application layer of one system is readable by the application layer of another.
       7. Application Layer:
          - Interacts with user applications (e.g., Email, HTTP) and provides services to the end user.
          - Handles high-level protocols for data exchange and ensures users can communicate effectively with services.

Module 4: Networking Devices and Security

  • Network Devices:
       - Switch:
         - Connects devices within a LAN, learns MAC addresses to direct data to the correct device.
         - Operates mainly at the Data Link Layer.
       - Router:
         - Forwards data between different networks based on IP addresses, determining the best path for data packets.
         - Operates at the Network Layer.
       - Firewall:
         - Filters unauthorized access from the internet, monitoring incoming and outgoing traffic based on predetermined security rules.
         - Can be implemented as hardware, software, or a combination of both.
       - IDS/IPS (Intrusion Detection System/Intrusion Prevention System):
         - Monitors network and system activities for malicious activities or policy violations.
         - IDS identifies and alerts while IPS actively prevents detected threats.
       - Load Balancer:
         - Distributes data activity across multiple servers to ensure no single server becomes overwhelmed, increasing efficiency.
       - External Devices:
         - Include Proxy servers, Network Attached Storage (NAS), Storage Area Network (SAN), Wireless Access Points (WAP), Wireless LAN Controllers (WLC), and Content Delivery Network (CDN) for performance enhancement.

  • Security Threats:
       - Common Attacks:
         - DDoS (Distributed Denial of Service), VLAN hopping, MAC flooding, ARP spoofing, DNS poisoning, and social engineering tactics such as phishing.
       - Defense Mechanisms:
         - Honeypots that lure attackers, device hardening against breaches, Network Access Control (NAC) policies, and deployment of DMZs (Demilitarized Zones) to isolate and protect sensitive data.

Module 5: Modern Networking and Cloud Concepts

  • SDN (Software Defined Networking):
       - Centralized software management of networks that allows for automated network configuration and management, increasing flexibility and efficiency.
       - Separates the control plane from the data plane, enabling more efficient traffic management.

  • Zero Trust Architecture:
       - Security model requiring continuous verification of identities and trust levels for every access request, irrespective of where it originates.
       - Focuses on protecting resources by minimizing potential attack surfaces.

  • Infrastructure as Code:
       - Automates the provisioning and management of IT infrastructure using code and software development techniques, reducing human error and improving efficiency.
       - Enhances agility and consistency in setting up environments.

  • Cloud Deployment Models:
       - Public Cloud: Resources are owned and operated by a third-party provider, available to multiple organizations.
       - Private Cloud: Cloud infrastructure is exclusively used by one organization, providing enhanced security and control.
       - Hybrid Cloud: A combination of public and private clouds, allowing data and applications to be shared between them for optimal flexibility.

  • Cloud Service Models:
       - IaaS (Infrastructure as a Service): Provider manages the underlying hardware; users manage the operating system and applications (e.g., AWS EC2).
       - PaaS (Platform as a Service): Providers manage hardware and the operating system; users focus on applications and data (e.g., Google App Engine).
       - SaaS (Software as a Service): Everything is managed by the provider, and users access applications via the cloud (e.g., Microsoft 365, Google Workspace).