Commands
Routing IP Packets
Cables and Devices
Security
Network Security
100
Verifies Layer 3 connectivity to a remote host.
What is Ping? The syntax for ping is: ex. c:\> ping -t NOTE: -t=ping until stopped with Ctrl+C; -n=number of pings to send; -i TTL= set the TTL value in a packet's header; -S scraddr- specifies the source IP address from which the ICMP echo messages should be sent; target_name= specfies the name or the IP address of the device to which you are sending ICMP echo messages.
100
Sends a full copy of its routing table to its directly attached neighbors. In other words, this protocol will readvertise its full routing tabled to its neighbors at regular intervals.
What is distance vector?
100
Another name for 10BASE2 cabling
What is thinnet or cheapernet?
100
Nessus, Nmap, honeypots and honeynets, Access Control Lists (ACLs)
What are Vulnerability scanners
100
DES (Data Encryption Standard), 3DES (Triple DES), AES (Advanced Encryption Standard)
What are types of Symmetric Encryption Note: Symmetrical encryption is fast in comparison to asymmetrical encryption. The word symmetrical implies that the same key is used by both the sender and the receiver to encrypt or decrypt a packet.
200
Displays a PC's current IP routing table. Allow use to add or delete entries to or from that routing table.
What is route? The syntax is: ex. c:\>route -f, NOTE: -f=clears gateway entries from the routing table; -p=used with the add command to make a statistically configured route persistent; command= commands include print, add, delete, change; destination= specifies the destination host or subnet to add to a PCs routing table; mask netmask= used in conjunction with the destination option to specify the subnet mask of the destination; gateway= specifies the IP of the next hop router used to reach the specified destination; metric metric= specifies the cost to reach a specified destination; if interface= use to forward traffic to a specified destination out of a specific interface. The syntax is route + command. For ex. c:\>route -f,
200
Rather than having neighboring routers exchange their full routing tables with one another, this protocol allows routers to build a topological map of the network additionally allowing routers to execute an algorithm to calculate an optimal path (or paths) to a destination network.
What is Link State?
200
MMF (multimode fiber)/SMF (singlemode fiber) media type, 1 Gbps/1Gbps bandwidth capacity, 5 km distance limitation.
What is 1000BASE-LX cable?
200
This feature allows a firewall to permit traffic to flow for a trusted network to and untrusted network and then allows return traffic for that session, while blocking sessions initiated on the untrusted network
What is Stateful Inspection?
200
Commonly used as part of a public key infrastructure (PKI) system. (Specifically, PKI uses digital certificates and a certificate authority [CA] to authenticate and encrypt services)
What is RSA (its name comes from the last initials of the its inventors: Ronald L. Rivest, Adi Shamir, and Leonard M. Adelman)? NOTE: RSA, is asymmetrical encryption, and AE is slower in comparison to symmetrical encryption, but, it balances its slowness with higher security
300
Pings every router hop from the source to the destination and reports the round-trip time for each router hop. Uses ICMP messages.
What is Tracert? Syntax for tracert is: c:\> tracert www.perscholas.org
300
This distance-vector routing protocol uses a metric of hop count. The maximum hop count between two routers on this type of based network is 15. Therefore a hop count of 16 is considered to be infinite.
What is RIP (Routing Information Protocol)?
300
This procedure is used by Ethernet to determine whether it is safe to transmit, detect collisions, and retransmit if necessary.
What is carrier sense multiple access collision detect (CSMA/CD)?
300
This type continually changing document dictates a set of guidelines for network use?
What is Security Policy?
300
Packet capture, ping sweep and port scan, dumpster diving, EMI, wiretapping, Man-in-the-middle, social engineering, sending information over overt channels, sending information over covert channels, malware, FTP bounce
What are examples of confidentiality attack tactics? Note: CA attempts to make confidential data viewable by an attacker. Because an attacker often makes a copy of the data, rather than trying to manipulate the data or crash a system, confidentiality attacks often go undetected. Even if auditing software to track file access were in place, if no one suspected an issue, the audit log might never be examined.
400
Windows tool that combines the features of Ping and Tracert over a period of time.
What is PathPing NOTE: PathPing shows the amount of packet loss at any given router so you can identify the routers that might be causing problems in the path.
400
This link-state routing protocol uses a metric of cost, which is based on the link speed between two routers. It is a popular IGP because of its scalability, fast convergence and vendor-interoperability.
What is OSPF (Open Shortest Path First)
400
All ports on a switch belong to this basic switch configuration and have the same network address.
What is the same broadcast domain?
400
This type of attack compromises multiple systems and then instructs those compromised systems, called zombies, to simultaneously flood a target system with traffic.
What DDoS (Distributed Denial of Service)
400
Salami attack, data diddling, trust relationship exploitation, password attack, Trojan horse, packet capture, keylogger, brute force, dictionary attack, botnet, hijacking a session.
What are integrity attacks? Note: IA attempt to alter data (compromise the integrity of the data). Also, man-in-the-middle attacks can compromise both confidentiality and data integrity.
500
Ping -c 5 10.1.1.1
What is the Unix command to sent 5 ICMP echo messages to a device with an IP address 10.1.1.1?
500
IGMP (Internet Group Management Protocol), PIM (Protocol Independent Multicast), PIM-DM (PIM-Dense Mode), PM-SM (Sparse Mode).
What are Multicast Routing?
500
Allows ports on a switch to be logically divided into more than one broadcast domain (that is, more than one subnet). The devices that need to connect can connect to the same physical switch, yet logically be separate from one another
What is VLAN (Virtual LAN)?
500
This solution can inspect traffic flowing through the network (with the exception of malicious traffic)
What is NIPs (Network Intrusion Protection System)
500
Denial of service (DOS), distributed denial of service (DDoS), TCP SYN flood, buffer overflow, ICMP attacks, electrical disturbances (power spikes, electrical surges, power failure, blackouts, power sags, brownouts), system's physical environment attacks (temp, humidity, gas, etc)
What are Availability attacks? NOTE: Availability attacks attempt to limit the accessibility and usability of a system. For example, if a attacker were able to consume the processor or memory resources on a target system, that system might be unavailable to legitimate users.
M
e
n
u