TCP Port number for File Transfer Protocol (FTP) control channel

TCP Port number for Secure Shell (SSH)

TCP Port number for Telnet

TCP Port number for Simple Mail Transfer Protocol (SMTP)

TCP Port number for TACACS authentication service

TCP Port number for Hypertext Transfer Protocol (HTTP)

TCP Port for Post Office Protocol version 3 (POP3)

TCP Port for Network Basic Input/Output System (NetBIOS) session service

TCP Port for Internet Message Access Protocol version 4 (IMAPv4)

TCP Port for Lightweight Directory Access Protocol (LDAP)

TCP Port for HTTP-Secure (HTTPS)

TCP Port for Remote Desktop Protocol (RDP)

UDP Port Number for Domain Name Service (DNS)

UDP Port number for Trivial File Transfer Protocol (TFTP)

UDP Port number for NetBIOS name service

UDP Port number for NetBIOS datagram service

UDP Port number for Simple Network Management Protocol (SNMP)

In regards to IPv4, what is the First Octet Range for a class B Address?

In regards to IPv4, what is the First Octet Range for a class C Address?

In regards to IPv4, what is the First Octet Range for a class A Address?

What are the two resolutions that must be in operation for a network to function properly?

What Institute established the specifications for any kind of communication device?

What are the three advantages of Wireless?

What is Scalability?

What is the 3rd layer of the OSI model?

What are the two disadvantages of using wireless?

What are the four key phases of designing a wireless network

Data representation and code formatting are at this layer of the OSI Model

This is the layer on which routing takes place on the OSI Model

Under deployment of the wireless design, what keyword is defined by "overlapping coverage"

What does Dial-Up use?

Baseband uses

Name resolution translates ___ to ___ addresses via ___

Address resolution translates logical ___ addresses to physical ___ address via ___.

Speed and frequency for 802.11a

Speed and frequency for 802.11b

Speed and frequency for 802.11g

Speed and frequency for 802.11n

Speed and frequency for 802.11ac

When developing a wireless solution, you should pay close attention to _____ and ____

When installing access points, remember to consider [a] limitations and re-adjust access point locations to allow for [b].

Worked on only one frequency and had a range of 150 feet.

The first standard to become universal.

The first standard to offer backwards compatibility with 802.11b.

The first standard to operate on both frequencies.

The most recent standard developed.

Delivers data frames between devices on a LAN

•Upper Sublayer: Logical Link control

-Provides addressing and control of the data link

•Lower Sublayer: Media Access Control

-Determines what is allowed to access the physical media at any given time.

•This is the layer on which routing takes place.

•Defines the structure and use of logical addressing, as well as the processes used to route packets

The functions defined in this layer provide for the reliable transmission of data segments, as well as the disassembly and assembly of the data before and after transmission.

A connection-oriented protocol

____ creates data segments with addresses from IP

What helps to reduce congestion by allowing multiple nodes to share a single public IP address

Class A Ipv4 private addresses

Class B Ipv4 private addresses

Class c Ipv4 private addresses

________________ is a process of subdividing a network to provide logical distinctions between hosts

_________________ provides the translation between IP and MAC

The simplicity behind baseband signaling is that only three signal states need to be distinguished, __, __, and __.

All these methods provide bandwidth in excess of 300Kbps; current implementations are two-way services, permitting you to use your telephone while accessing the internet.

The user's _____ or router uses an attached modem connected to a telephone line to dial into an Internet Service Provider's (ISP) telecom node to establish a _____ -to- ______link.

Only one signal can be transmitted at a time through baseband transmission lines.

How many signals can be simultaneously transmitted over a baseband cable?

To better identify what kind of attack has occurred, the National Security Agency (NSA) Information Assurance Technical Framework (IATF) has identified five distinct classes of network attack, what are they?

_______ attacks include traffic analysis, monitoring of unprotected communications, decrypting weakly encrypted traffic, and capture of authentication information (e.g., passwords). ______ intercept of network operations can give adversaries indications and warnings of impending actions. ________ attacks can result in disclosure of information or data files to an attacker without the consent or knowledge of the user. Examples include the disclosure of personal information such as credit card numbers and medical files.

_____ attacks can result in the disclosure or dissemination of data files, denial of service, or modification of data.

______ attacks include attempts to circumvent or break protection features, introduce malicious code, or steal or modify information. These attacks may be mounted against a network backbone, exploit information in transit, electronically penetrate an enclave, or attack an authorized remote user during an attempt to connect to an enclave

________ attacks is where an unauthorized individual is in physical close proximity to networks, systems, or facilities for the purpose of modifying, gathering, or denying access to information

_____ attacks can be malicious or non-malicious. Malicious ______ intentionally eavesdrop, steal or damage information, use information in a fraudulent manner, or deny access to other authorized users.

________ attacks focus on the malicious modification of hardware or software at the factory or during distribution. These attacks can introduce malicious code into a product, such as a back door to gain unauthorized access to information or a system function at a later date.

Group inside a group, basically adding a group inside another group

_____________ of a hard drive is the information that tells a machine how to turn on and load an operating system. A virus that infects this _________ can replace the legitimate boot-up instructions with viral code. Because the virus will load into memory ahead of any operating system instructions, no system-level antivirus software can remove it.

A ______ is a set of user-generated list of computer instructions which can be executed at any time by the user

______ viruses attach themselves to executable files (.exe, .com, .sys, etc.) and copy themselves into memory whenever the host file is run. From memory, the virus attaches itself to other executable files. This process continues on and on, and can wind up infecting thousands of files on users’ hard drives. As if the rampant copying of viral code wasn’t enough, these viruses often contain instructions to permanently erase or overwrite data.

The destruction caused by worms is usually dealt in two methods: _______, and _________

__________are not technically viruses; rather, they are programs that run independently of users and travel between computers and across networks.

Like a worm, a _____________ is also not technically a virus; instead, it is a program that disguises itself as something useful but actually harms your system.

To close off avenues of attack is to eliminate vulnerabilities and reduce your overall risk. This concept is known as “_________” a system

______________ software is essential for all computer hosts; the software must remain updated and current in its virus definitions. With the rise of mobile computing, a strong MDM anti-virus policy is also vital to ensuring mobile availability

Both hardware- and software-based _________ are critical to filtering incoming and outgoing network traffic.

A type of hardening - Keeping an unnecessary service enabled on a computer is like keeping your back door open because you think no burglar will ever look there. Guess what? The burglar will find your open door, and hackers will find your open network ports. It’s only a matter of time. Remove any software that isn’t mission-oriented, and disable any services that aren’t needed.

Enforce WPA2- Enterprise on your corporate wireless networks. Enforce mandatory HTTPS through modern Transport Layer Security (TLS) on all internal web servers. Enforce data-at-rest and data-inmotion encryption for all sensitive files.

To prevent brute force password attacks against user accounts, force a lockout status after a pre-set number of invalid login attempts.

Unused accounts have no place on a network. They could be taken over by attackers with malicious intent. Disable network accounts that have not been accessed for 30 days, and plan to delete them soon thereafter.

You should disable _____ accounts, they have no place on a enterprise network. There's no way to trace who is on a ____ account, and it's hard to hold them accountable. Never ever have ____ accounts enable. This is a type of hardening by disabling ____ accounts.

A type of hardening- _________ is an OS which has been thoroughly evaluated, vetted, and ranked into one of seven Evaluation Assurance Levels (EALs) according to the Common Criteria for Information Technology Security Evaluation defined in ISO 15408.

The first wireless networks were based off of Packet Radio transmissions between ___ and __ radio base stations, and were not protected at all

The ____ is the broadcasted name of a wireless network

A WAP is a loudspeaker, constantly shouting to anyone who can listen. Increase security by decreasing your WAP’s _______, in effect, by reducing the volume on your loudspeaker. There’s no reason to broadcast at maximum power when all wireless clients are within 20 feet.

Public WLANs often use a _____ ______ technology to force all incoming users to a one-time “landing page” or Portal to assure that users are aware of terms and conditions of use. Users will acknowledge the rules, and then have access to the network. This is an administrator’s way of saying, “Hey, I’m watching you!” and forcing all users to register their consent.

Keep your WAP antennas centralized to prevent eavesdropping. Additionally, be aware of common sources of interference. WAPs that utilize the 2.4GHz spectrum (802.11b/g) are especially vulnerable to interference from such appliances as microwave ovens, generators, and baby monitors.

WAPs that utilize the 2.4GHz spectrum ____ and _____ are especially vulnerable to interference from such appliances as microwave ovens, generators, and baby monitors.

If a wireless network must remain unencrypted for matters of user convenience or connectivity, consider enforcing a VPN policy. Virtual Private Networks create encrypted “tunnels” through the internet from endpoint to endpoint, preventing even determined sniffers from reading data or metadata. T

___ encrypts all data packets using a stream cipher called RC4, which relies on a 40-bit key plus a 24-bit Initialization Vector (IV).

___ is not considered strong enough for modern use, and has been entirely superceded by newer security methods.

Rather than a specific protocol in its own right, ___ is an authentication framework that defines methods and mechanisms to verify the identity of users connecting to wired or wireless networks.

Extensible Authentication Protocol (EAP) defines three specific functions for user verification.

1. ___
2. ___
3. ____

(Protecting a Wireless Network through Encryption)

Because ___ was originally designed for physical, wired networks (Wi-Fi hadn’t been invented yet), there is no requirement for packet encryption.

__________ is a standard that defines how EAP should be applied across all IEEE 802 networks.

_______________ is a Cisco-proprietary method of EAP implementation that was designed to address the authentication flaws of WEP. As such, _______ is not a fullyformed security method.

________ is a method of encapsulating specific EAP methods within a securely encrypted TLS end-to-end tunnel. It does not define the use of SW E3AQR3D131 01AA 26 the authentication mechanisms, but rather provides the encrypted tunnel within which to send them. _____ is a strongly recommended, more modern alternative to LEAP.

WPA implements _________ to further scramble the root key and IV before being handled by RC4 during the data encryption process

___ is not secure, and has been replaced by the current standard, WPA2

A user is able to listen into weakly encrypted traffic.

A user is able to penetrate a firewall in order to force into the network through a denial of service attack.

A user captures wireless signal broadcasting outside the building and is able to gather information.

Replaces the legitimate boot-up instructions with viral code.

Replaces a set of user-generated list of computer instructions with viral code.

Attached to .exe, .com, .sys, or other executable files and can replicate very quickly.

Doesn't require activation by the user. Main goal is denial of service rather than data destruction.

This is the Air Force’s primary web-basedtool for CST administration of an Active Directory domain

CSTs primarily use two tools to manage Active Directory

Only one object is manipulated at a time

There are many directory systems in use for internetworking, and the original is the International Telecommunication Union’s ____ directory standard

What is the name for Microsoft’s implementation of a directory service?

What is the central authentication service implemented within MS Active Directory?