Wide Area Network (WAN)

Metropolitan Area Network (MAN)

Personal Area Network (PAN)

Local Area Network (LAN)

Connecting Bluetooth device networks

Extending over large geographical areas, connecting multiple LANs

Providing connectivity in a larger area than LAN but smaller than WAN

Moving data between servers and storage devices

Operated by an individual for personal devices

Uses Fiber Channel over Ethernet for data transfer

Covers cities, countries, and continents

Typically operated by a single entity such as a large corporation or a municipal government

Within a city or campus

Over large geographical areas

Within 10 meters

Between servers and storage devices

Local Area Network (LAN)

Wide Area Network (WAN)

Metropolitan Area Network (MAN)

Storage Area Network (SAN)

All nodes are connected to a central device (hub or switch)

All nodes are connected in a ring without a central device

Each node is connected to every other node

Nodes are connected in a hierarchical manner

Star Topology

Bus Topology

Ring Topology

Mesh Topology

Easy to install and manage

Data is quickly passed through the network

Provides redundancy

Requires less cable than star topology

Translates human-readable domain names into IP addresses

Modifies IP address information in IP packet headers

Automatically assigns IP addresses and other network configuration parameters

Combines two or more different topologies

Reduces administrative overhead by managing IP address allocation

Simplifies the configuration and connection process to network resources

Provides redundancy in network connections

Modifies IP address information in IP packet headers

Assigns IP addresses and other network configuration parameters

Translates human-readable domain names into IP addresses

Combines two or more different topologies

Modifies IP address information in IP packet headers while in transit across a traffic routing device

It allows multiple devices on a private network to share a single public IP address.

It synchronizes clocks of computer systems over packet-switched, variable-latency data networks.

It acts as a repeater for data flow in a network.

It controls which node can send data in ring networks.

The central node's importance means its failure can take down the entire network.

Data travels in a single direction from one node to another.

Every node is directly connected to each other.

A token is passed around the network to control which node can send data.

Ring Topology

Mesh Topology

Star Topology

Dual Ring Topology

It is optimal for handling high volumes of traffic.

It allows multiple devices on a private network to share a single public IP address.

It ensures that time-sensitive applications are synchronized.

It provides excellent disaster recovery as multiple paths ensure the network remains operational even if one or several nodes fail.

Dynamic Host Configuration Protocol

Direct Host Connection Protocol

Dynamic Host Control Panel

Data Handling Communication Process

To allow DHCP communication across different subnets or networks handled by a single DHCP server.

To block DHCP communication between different networks.

To encrypt DHCP messages for security purposes.

To assign static IP addresses to devices on the network.

A (address)

MX (mail exchange)

NAT (Network Address Translation)

CNAME (canonical name)

To increase DNS traffic on the network.

To temporarily store data about recent lookups to reduce DNS traffic on the network.

To permanently store user data.

To authenticate user logins.

DNS Security Extensions; to provide security for responding to DNS lookups which include data integrity and authentication.

DNS Server Encryption Code; to encrypt DNS traffic.

DNS Signal Emission Control; to regulate DNS signal strength.

DNS Service Execution Command; to execute DNS-related services.

To assign static IP addresses to all devices on a network.

To conserve legally registered IP addresses and increase the difficulty for external attackers to make direct connections to internal hosts.

To translate network addresses into physical addresses.

To provide a direct connection between local and global networks without any address mapping.

Static NAT

Dynamic NAT

PAT (Port Address Translation)

CAT (Connection Address Translation)

It acts as a secondary reference for time synchronization.

It directly connects to a computing system within the network.

It directly connects to an authoritative time source like a GPS.

It is the lowest level of time server in the NTP hierarchy.

To ensure all computing systems within the network have different time settings.

To provide a standard time format for network devices.

To ensure all computing systems within the network agree on the time to a very precise degree.

To allow users to manually set the time on their devices.

Up to 1 Gbps at 100 MHz over 100 meters

Up to 10 Gbps at 250 MHz over 100 meters

Up to 10 Gbps over 100 meters with frequencies up to 600 MHz

Up to 100 Gbps at 100 MHz over 100 meters

Single-Mode Fiber

Multi-Mode Fiber

Cat 6a

Cat 7

To perform routing functions in addition to switching

To deliver power to devices over the Ethernet cables themselves

To operate within the internet backbone

To connect to external networks and handle firewall duties

They can deliver power to devices over Ethernet cables

They are designed to operate within the internet backbone

They can perform routing functions in addition to switching

They are positioned at the edge of the network

Core Routers

Edge Routers

Layer 3 Switches

PoE Switches

High-speed Fiber Channel protocols

User authentication and redundancy

Backup of current network device configurations

Guides on standard operating procedures

NAS (Network Attached Storage)

SAN (Storage Area Network)

Cloud Storage

NGFW (Next-Generation Firewalls)

Data Sovereignty

Hybrid Solutions

Network Documentation

Configuration Files

Wiring Schematics

Configuration Files

Network Topology Diagrams

Policy and Procedure Manuals

It provides a reference for troubleshooting, maintenance, and scaling of the network.

It is used to connect SAN devices to servers.

It combines on-premises infrastructure with cloud storage.

It goes beyond traditional firewall functions.

To monitor traffic and analyze network performance

For collecting information from, and configuring, network devices

To automate the deployment and management of network devices

For regularly scheduled backups of data and configurations

Security breaches

Bottlenecks or failures

Unauthorized access attempts

Virus infections

Latency

Packet Loss

Bandwidth Utilization

Error Rate

To collect and store logs for security policy enforcement

To automate network configuration management

To aid in troubleshooting and historical analysis of the network

To ensure continuous network availability

To protect the integrity of network data

To prevent unauthorized access

To implement security policies

To ensure continuous network availability

Schedule regular backups

Switch to a redundant or standby network device when the main system fails

Protect against data loss due to disasters

Manage network configurations automatically

Log Management

Security Policies

Bandwidth Utilization

Automated Configuration Tools

To automate routine network configuration tasks

To store information related to all components of an information system

To implement version control for network configurations

To monitor network performance in real-time

Wireshark

SolarWinds Network Performance Monitor

Python with libraries such as Netmiko and Paramiko

Real-Time Performance Monitoring tools

To predict future network failures

To prioritize traffic based on the type of service

To track changes and roll back to previous versions if a new configuration causes issues

To reduce errors in network configuration management

CMDBs

Automated Scripting

Wireshark

Predictive Analytics

By storing information related to all components of an information system

By using AI to predict future network failures

By configuring network devices to prioritize traffic to ensure bandwidth and latency requirements are met

By implementing version control for network configurations

Confidentiality, Integrity, Authentication

Confidentiality, Integrity, Availability

Confidentiality, Insurance, Availability

Control, Integrity, Availability

Malware

Phishing

Man-in-the-Middle Attacks

SQL Injection

To ensure that all sites have the same data for consistency

To provide a backup operation in case the primary site fails

To reduce the cost of data storage

To increase the speed of the network

To comply with international standards

To ensure effective recovery and minimize downtime

To provide training material for new employees

To maintain a log of employee activities

To keep the IT department busy

To ensure the plan is cost-effective

To ensure the plan is effective and staff are familiar with procedures

To comply with software licensing agreements

To secure a system's resources

To improve system performance

To overwhelm a system's resources so it cannot respond to service requests

To protect against unauthorized access

A method to backup SQL databases

An attack that involves deletion of SQL statements

A technique to optimize SQL queries

An attack that involves insertion of malicious SQL statements into an entry field for execution

Firewalls

Antivirus and Anti-malware Software

Public Key Infrastructure (PKI)

Intrusion Detection Systems (IDS)

Secure Sockets Layer / Transport Layer Security

Simple Secure Layer / Transmission Layer Security

Secure Socket Link / Traffic Layer Security

Secure System Login / Transport Layering System

To provide a public database of all users' keys

To support the distribution and identification of public encryption keys

To encrypt all public communications on the internet

To authenticate users based on their public profile information

A single password for multiple systems

Two or more verification factors to gain access to a resource

A single verification factor to gain access to multiple resources

Multiple passwords for a single system

To allow users to log in with a single ID and password to gain access to a suite of systems

To provide individual logins for each system a user accesses

To encrypt user passwords for a single system

To require users to sign in multiple times for security purposes

Symmetric encryption

Asymmetric encryption

Certificate Authorities (CA)

Handshake Process

Handshake Process

Security Associations (SA)

Encapsulating Security Payload (ESP)

Signature-Based Detection

To monitor the entire network for suspicious activity

To authenticate the identity of the certificate holder

To establish a secure connection between a server and a client

To bundle algorithms and data for IPsec operation

Symmetric encryption only

Asymmetric encryption only

Both symmetric and asymmetric encryption

Signature-Based encryption

Network-Based IDPS uses signature-based detection, while Host-Based IDPS uses anomaly-based detection

Network-Based IDPS monitors the entire network for suspicious activity, while Host-Based IDPS protects individual hosts

Network-Based IDPS protects individual hosts, while Host-Based IDPS monitors the entire network for suspicious activity

Network-Based IDPS uses anomaly-based detection, while Host-Based IDPS uses signature-based detection

Random and intermittent attacks

Targeted, stealthy, and continuous nature

Easily detectable and singular events

Attacks that require minimal technical skill

Single-layer security measures

Reactive threat hunting only

Use of basic antivirus software

Layered security measures and sophisticated endpoint detection and response (EDR) systems

To provide regular workshops and simulations for recognizing and responding to phishing attempts

To train users on how to create phishing attacks

To educate users on the best gaming strategies

To inform users about the latest social media trends

It is a type of computer virus

It is a social media platform

It is a domain authentication method that detects and blocks malicious websites

It is a programming language used for creating websites

Ignoring technology standards and regulatory requirements

Covering only selected parts of the organization's IT infrastructure

Constructing comprehensive security policies that cover every aspect of the organization's IT infrastructure

Conducting audits and revisions once every few years

Disregarding data privacy laws in different jurisdictions

Understanding the complexities of data privacy laws in different jurisdictions

Implementing non-compliant data handling procedures

Focusing solely on local data privacy laws

A hub can store data, while a switch cannot

A switch can assign IP addresses, while a hub cannot

A hub broadcasts data to all connected devices, while a switch sends data only to the intended recipient

There is no difference; they are the same device

Physical Layer

Data Link Layer

Transport Layer

Application Layer

802.11a

802.11b

802.11g

802.11ax

To encrypt data

To assign IP addresses to devices

To translate domain names into IP addresses

To route emails to their destination

HTTP

FTP

SSH

SMTP

To identify the network and host portions of an IP address

To encrypt data packets for secure transmission

To increase the speed of network connections

To connect multiple devices wirelessly

The amount of data that can be stored on a network

The maximum rate of data transfer across a given path

The security level of a network

The physical width of the network cables

192.300.1.1

256.100.50.25

192.168.1.1

172.16.500.1