Module 4: Protocols (INCOMPLETE)

When surfing online, you get some strange data on an apparently secure website, and you realize you need to check the legitimacy of the site. What kind of organization issues digital certificates for websites?

Certificate Authority

What field in a TCP segment is used to determine if an arriving data unit exactly matches the data unit sent by the source?

Checksum

Which IPsec encryption type encrypts the IP header?

ESP

Which protocol's header includes the source MAC address?

Ethernet

What protocol must be allowed through a firewall for tracert to work correctly?

ICMP

Which encryption protocol does GRE use to increase the security of its transmissions?

IPsec

What OSI layer does IP operate?

Network Layer

What is one advantage offered by VDI over RDS and VNC?

Offers access to multiple OSs in VMs

Which secured tunneling protocol might be able to cross firewalls where IPsec is blocked?

OpenVPN

You need to determine which device on your network is sending excessive messages to your Ubuntu Server. Which utility will give you this information?

Tcpdump

What process is used to establish a TCP connection?

TCP Three-Way Handshake

What is the Internet standard MTU?

1,500 bytes

An ARP table maps MAC addresses to what information?

IPv4 addresses

Which encryption benchmark ensures data is not modified after it's transmitted and before it's received?

Integrity

Which port must be open for RDP traffic to cross a firewall?

Port 3389

Which remote file access protocol is an extension of SSH?

SFTP

Which remote file access protocol uses port 22?

SFTP

You need to remote into a Linux server in another building on your network. Which protocol should you use?

SSH

You're working from home and need to access a file server at the office while working in an application from your work desktop. At the same time, you often stream music in your browser. Which VPN type will be most efficient while still meeting your needs?

Split tunnel VPN

What OSI layer does TCP operate?

Transport Layer

Which terminal emulation protocol is similar to RDP but is open source?

VNC

You're getting a duplicate IP address error on your computer and need to figure out what other device on your network is using the IP address 192.168.1.56. What command will show you which MAC address is mapped to that IP address?

arp -a

List all active TCP/IP connections on the local machine, including the transport layer protocol used (usually just TCP), messages sent and received, IP address, and state of those connections.

netstat

List all current TCP connections and all listening TCP and UDP ports.

netstat -a

List the name of each process using a connection and information about the connection. Requires elevated permissions

netstat -b

Display statistics about messages sent over a network interface, including errors and discards

netstat -e

List current connections, including IP addresses, ports, and FQDNs.

netstat -f

List current connections, including IP addresses and ports

netstat -n

List the PID (process identifier) for each process using a connection and information about the connection.

netstat -o

Display routing table information.

netstat -r

Display statistics about each message transmitted by a host, separated according to protocol type (TCP, UDP, IP, or ICMP).

netstat -s