GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Application Layer Protocols

jeriel.juarbe2031 Protocol Analysis college English 67 cards

Cards in this deck (67)

  1. 1this is based on the Bootstrap Protocol and provides a framework for passing configuration info to hosts on TCPIP network. built on client serve model.Dynamic Host Configuration Protocol
    DHCP
  2. 2What ports are used when dealing with DCHP?UDP 68 (client)
    UDP 67 (Server)
  3. 3DHCP supports 2 mechanism for IP address allocation..What are they?1) Dynamic Allocation
    2) Manual Allocation
  4. 4How does Dynamic Allocation work?the server assigns an IP address to a client for a limited period of time or until client explicitly relinquishes the address.
  5. 5How does the Manual Allocation work?client's IP address is assigned by the admin and DCHP is simply used to convey the assigned address to the client
  6. 6Explain the first 2 steps in the communication process between DHCP client and server1) client broadcast DHCP Discover message on its local physical network
    client may suggest lease duration, host name, & network address
    2) Each DHCP server that receives the message broadcasts a DHCP Offer message which includes an available network address and other config info
  7. 7Explain the Last 2 steps in the communication process between DHCP client and server3) the client broadcasts a Request message requesting the offered parameters from one server and implicitly declining offers from all others
    4) the chosen server broadcast a DHCP Acknowledgement message repeating any network config info and committed IP address
  8. 8Match the DHCP Message with definition: -server to client indicating clients notion of network address is incorrect (eg: client has moved to a new subnet or client's lease has expired.NAK
  9. 9Match the DHCP Message with definition: client to server indicating network address is already in use.Decline
  10. 10Match the DHCP Message with definition: Client to server client relinquishing network address and cancelling remaining lease.Release
  11. 11Match the DHCP Message with definition: client to server asking only for local config parameters. client already has externally config network address. used by Microsoft to find rogue DHCP servers in AD networkInform
  12. 12What are the 2 main opcodes in DHCP Protocol Header in the OPCODE field?1 = BOOT Request
    2 = BOOT Reply
  13. 13Filtering DHCP Packets in Wireshark: show all DCHP traffic?bootp
  14. 14Filtering DHCP Packets in Wireshark: show all DCHP Traffic part 2?udp.port == 67
    or
    udp.port == 68
  15. 15Filtering DHCP Packets in Wireshark: show DCHP messages that have an entry for the clients host name.bootp.option.type == 12
  16. 16This protocol promotes reliable and efficient file sharing, use of remote computers and shield users from various in file storage in file storage systems among hosts.File Transfer Protocol
  17. 17T or F: FTP comms are sent in clear text allowing unauthorized capturing of data during transmission.True
  18. 18FTP supports what 2 modes of operation?Active
    &
    Passive
  19. 19What ports does Active FTP use?TCP 20 (data)
    TCP 21 (commands)
  20. 20For Active FTP, who initiates the first packet after the 3-way handshake?The Server
  21. 21T or F: In active FTP connection is made one port them switched to another port.True
  22. 22What are the first 2 steps in the Active FTP comms model?1) user initiates control connection tp the FTP server via TCP 21 using standard 3-way handshake.
    2) server responds with port command successful
  23. 23What are the last 2 steps in the Active FTP comms model?3) server initiates data connection via port 20 back to the client via TCP port greater than 1023.
    4) data is delivered
  24. 24This FTP is considered more secure due to client establishing data connection rather than server.Passive FTP
  25. 25What are the first 2 steps in Passive FTP?1) client connects to server via port 21
    the PASV command is sent instead of PORT
    2) server responds with IP address and port number it will be listening on for FTP data
  26. 26What are the last 2 steps in Passive FTP?3) client initiates data connection from a random high port to server using port number received from server
    4) Data is delivered
  27. 27T or F: Passive FTP is typically used to allow trusted hosts to gain access to an outside FTP server without the usual complications caused by router ACL or firewall rulesTrue
  28. 28FTP Console command translates to what FTP Protocol Command? byequit
    terminates the FTP session
  29. 29FTP Console command translates to what FTP Protocol Command? dirlist
    detailed version of the list command ls -al
  30. 30FTP Console command translates to what FTP Protocol Command? lsnlst
    list contents of specified directory, files only
  31. 31FTP Console command translates to what FTP Protocol Command? mkdirmkd
    allows the user to create a directory on the FTP server
  32. 32FTP Console command translates to what FTP Protocol Command? putstor
    server store data sent to it as a file. it overwrites files with the same name
  33. 33When filtering in Wireshark for FTP...what is the syntax shows packets associated with all FTP sessionsftp
    or
    ftp-data
  34. 34this is an application-level protocol over TCP port 80. used for distributing and collaborating HTML documents.Hypertext Transfer Protocol
    HTTP
  35. 35What are the 5 client request commands categories we care about in HTTP?1) Options
    2) GET
    3) HEAD
    4) POST
    5) PUT
  36. 36match the definition with a client request category: request info about comm options available on the request/response chainOPTIONS
  37. 37match the definition with a client request category: request to retrieve whatever info is identified by the requestGET
  38. 38match the definition with a client request category: identical to get, except the server MUST NOT return a message body in the response.HEAD
  39. 39match the definition with a client request category: post short messages or charactersPOST
  40. 40match the definition with a client request category: Put large documents on the serverPUT
  41. 41HTTP Response Codes: 1xxxInformation
  42. 42HTTP Response Codes: 2xxxSuccess
  43. 43HTTP Response Codes: 3xxxRedirect
  44. 44HTTP Response Codes: 4xxxClient Error
  45. 45HTTP Response Codes: 5xxxServer Error
  46. 46HTTP Wireshark syntax bullshit: show all web browser GET messageshttp.request.method == "GET"
  47. 47HTTP Wireshark syntax bullshit: show all error messageshttp.response.code > 399
  48. 48this is secure method of accessing web page info and/or sending info across the internet/network.HTTPS
    Hypertext Transfer Protocol over Secure Socket Layer (SSL)
  49. 49SSL uses what certificate?x.509 certificate
  50. 50What does SSL provide in short?CIA
    Confidentiality Integrity Authentication
  51. 51What do Domain Name Service provide the means for client computers to do?Request IP to FQDN (Reverse)
    or
    FQDN to IP
  52. 52DNS is composed what 3 standard types messages?DNS queries (UDP 53)
    DNS Responses (UDP 53)
    Zone Transfers (TCP 53)
  53. 53What are the fields on the DNS Header we care about and by the numbers?Transaction ID, Flags, Questions, Answers
    2 2 2 2
  54. 54what is the ranges in the Flags field of the DNS header?0000-7FFF = Request
    8000-8FFFF = Response
  55. 55What are the 5 DNS Records we care about?A = Mapping
    CNAME = Mapping, ALIAS
    MX = Mail records
    AXFR = Zone Transfers
    PTR = Reverse Query Pointer
  56. 56A =Mapping
  57. 57CNAME =canonical Name, Mapping, ALIAS
  58. 58MX =Mail Records
  59. 59AXFR =Zone transfers
  60. 60PTR =Reverse Query Pointer
  61. 61Iterative queries are from ______ to ______.DNS Server to DNS Server
  62. 62Recursive queries are from ______ to ______ and back to _____.client to DNS server and back to client
    C -> S -> C
    By Default
  63. 63This is used between DNS servers to provide a means of keeping their respective DNS tables up date.DNS Zone Transfers
  64. 64What are the 3 scenarios that a zone transfer will normally occur?1) when starting DNS service on a secondary service
    2) When refresh time expires
    3) When changes are saved to Primary zone
  65. 65Who initiates a zone transfer?Secondary DNS Servers
    Primary simply answers the request
  66. 66Wireshark Filtering Bullshit: show all DNS Trafficdns
  67. 67Wireshark Filtering Bullshit: show all DNS responsesdns.flags.response == 1
    1 means the first bit turned on ... 8 for the 8000-8FFF range

Information

Description
college Protocol Analysis (Application Layer Protocols) Flashcards on Application Layer Protocols, created by jeriel.juarbe2031 on 28/09/2014.
Views
10
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?