Acronyms
ACE
Access Control Entry
Name for rogue WAP that has been put in place for malicious purposes
Evil Twin
The first choice selected by a router among routing protocol options for routing decisions (HINT: has the lowest Admin Distance)
Static route
Layer of OSI model where encryption occurs
Presentation (6)
Name for a packet that unexpectedly has a larger-than-average MTU size
Giant
PAM
Privileged Access Management
This type of Malware records the keystrokes of an individual and sends them to the attacker.
Keylogger
The step to perform in the Troubleshooting Methodology after Test the Theory
Establish a Plan of Action
Windows AD_DS Authentication and Security feature to provide network security
Kerberos
Protocol to configure if you are clustering routers together for redundancy
FHRP (First Hop Routing Protocol)
LLDP
Link-Layer Discovery Protocol
Type of attack that compromises an active session and allows a Threat Actor to impersonate one party back to the other
On-Path (MITM) attack
The step are you performing if you are determining if anything changed
Identify the Problem
Term for only the minimal amount of access that is needed to meet business needs should be granted
Principal of Least Privilege
Protocol used along with NIC Teaming to combine multiple NIC's into a single interface on a Trunk line
LACP Link Aggregation Control Protocol
SSE
Security Service Edge
Term for when a Threat Actor changes an IP address in a compromised DNS server to point to a fraudulent website
DNS Poisoning
Next step after you identify you have an issue, come up with a theory, put a plan together and make it happen
Verify Full System Functionality
Authentication Server that uses port 1812 and 1813
RADIUS
Resource used to break a Priority Value tie among switches when voting for a Root Bridge in Spanning Tree Protocol
MAC Address
VXLAN
Virtual Extensible Local Area Network
Malware that allows remote commands to be executed on your device
RAT (Remote Access Trojan)
Show command to display ARP table (resolution of IP to MAC addresses) on routers & switches
show ip arp (iparp)
IEEE standard for VLAN tagging and management
802.1q
Switch security feature that prevents rogue DHCP servers
DHCP snooping