CompTIA Network+ Ch11 Securing TCP/IP Corrections

SNMP uses which ports?

161 & 162

HTTPS uses what port?

443

802.1x is used for?

Authentication

A user is using a PKI authentication method. Which of the following will the user need to implement PKI?

Certificate Services - Public Key Infrastructure (PKI) is a methodology for using various pieces to manage and distributes certificates.

A user is concerned that his password is being sent in clear text when he connects to the RADIUS server using PAP. Which of the following is true about security using RADIUS>

It uses a shared secret to encrypt messages between the client and server. RADIUS servers used a shared secret along with MD5 hashing for authentication.

TCP/UDP port 88 is the default for which of the following services?

Kerberos - Used for network security and utilizes port 88.

Which of the following services is most likely to need an NTP server?

Kerberos. Kerberos is very time sensitive. For a user to gain access to the network, Kerberos requires that a token be passed between the user, the Authentication Server, and the Ticket Granting Server. If the time isn't synced up correctly using NTP, your network may experience problems.

What kind of authentication method uses two keys to verify a sender's identity, a public and a private key?

PKI. The Public Key Infrastructure authentication method uses a public and private key to verify a sender's identity.

Which method of authentication also provides AAA and uses UDP?

RADIUS - RADIUS is a networking protocol used to provide centralized AAA. It runs at the Application Layer (Layer 7) of the OSI model and uses UDP port numbers 1812 and 1813 to transport packets.

Which tech would you set up for a wireless network that utilizes 802.1x for wireless authentication?

RADIUS. Although TACAS+ is great, unlike RADIUS, it doesn't use EAP, which is needed to meet the 802.1x standard.

Which two protocols transfer files between two computers while being secure.

SCP - Secure Copy Protocol. It is used to securely copy files between Linux machines. It is based on SSH. SFTP - Secure FIle Transfer Protocol. Uses FTP in conjunction with SSH.

Which of the following is a type of remote access that supports encryption?

SSH has replaced the unencrypted Telnet and RSH as the standard remote access terminal application due to its robust encryption.

Which technology solution uses TCP and also provides AAA?

TACAS+

What is being encrypted when using tunnel mode in IPSec?

The Payload & The Header

A wireless network is secured with WPA2 and clients are unable to connect to the network. What is most likely the problem?

The RADIUS server is down

Why would someone want to use SNMP?

To check the amount of TCP/IP traffic on remote PCs

Extensible Authentication Protocol, or EAP is a type of authentication/security protocol used in _____ networks.

Wireless