-
What is the main purpose of a file and print server in a network?
-
To share disk space (fileshares) and printers with clients over the network.
-
What is Server Message Block (SMB) used for?
-
SMB is the protocol used for file and printer sharing in Windows networks, typically running over TCP port 445.
-
What is a key security issue with SMB version 1?
-
SMB version 1 has serious security vulnerabilities and is disabled by default in modern Windows systems.
-
What was NetBIOS originally used for?
-
It was used in early Windows networks to address computers by name and establish sessions for protocols like SMB.
-
What are the key ports used by FTP for file transfer?
-
TCP port 21 is used to establish the connection, and TCP port 20 is used for active mode data transfer or a server-assigned port for passive mode.
-
Why is FTP considered insecure, and what are its secure alternatives?
-
FTP sends passwords in plaintext, making it vulnerable. Secure alternatives include FTPS (FTP-Secure) and SFTP (FTP over SSH).
-
What does HTTP stand for, and what is it used for?
-
HTTP (HyperText Transfer Protocol) is used for web browsers to request and receive resources (like web pages) from servers.
-
What is HTTPS, and which port does it use?
-
HTTPS (HyperText Transfer Protocol Secure) encrypts web traffic and uses TCP port 443.
-
What are the key components of a URL?
-
Protocol (e.g., HTTP/HTTPS), host location (FQDN or IP address), and file path (directory and file name).
-
What does SMTP do, and what ports are commonly used?
-
SMTP (Simple Mail Transfer Protocol) is used to send emails. It uses TCP port 25 for message relay and TCP port 587 for secure client submission.
-
What are the two parts of an email address?
-
The username (local part) and the domain name, separated by the '@' symbol.
-
What is POP3 used for, and which ports does it use?
-
POP3 downloads emails from the server to a local device and typically deletes them afterward. It uses TCP port 110 or secure port 995 (POP3S).
-
How does IMAP differ from POP3?
-
IMAP allows users to manage emails directly on the server, supports multiple devices, and organizes messages into folders. It uses TCP ports 143 (unsecure) and 993 (secure).
-
What does LDAP stand for, and what is its purpose?
-
LDAP (Lightweight Directory Access Protocol) is used to query and update directories, like Windows Active Directory. It typically uses TCP/UDP port 389.
-
What is AAA, and what components does it involve?
-
AAA centralizes network authentication, authorization, and accounting. It involves the supplicant (device), NAS/NAP (access point), and AAA server (for authentication).
-
Which protocol is commonly used to implement AAA?
-
RADIUS (Remote Authentication Dial-In User Service).
-
What is SSH used for, and what port does it use?
-
SSH provides secure remote access to UNIX/Linux servers and network devices. It uses TCP port 22.
-
What is Telnet, and why is it not secure?
-
Telnet is a protocol for remote shell access, but it does not encrypt communications, making it vulnerable to eavesdropping.
-
What is RDP, and which port does it use?
-
RDP is used for remote graphical desktop connections to Windows systems, using TCP port 3389.
-
What is SNMP used for, and what components does it have?
-
SNMP (Simple Network Management Protocol) is used to manage and monitor network devices. It consists of an agent (device) and a management system (monitoring tool).
-
Which ports are used by SNMP?
-
SNMP queries use UDP port 161, and traps are communicated over UDP port 162.
-
What is syslog, and what is it used for?
-
Syslog is a protocol and system for centralizing event logs from various network devices, using UDP port 514.
-
What are the key components of a syslog message?
-
PRI code (facility and severity), header (timestamp and host name), and message content (source process and details).