Security+ Certification/Network Infrastructure

2.1 Differentiate between the different port & protocols, their respective threats and mitigation techniques

  • Antiquated protocols
  • TCP/IP hijacking
  • Null sessions
  • Spoofing
  • Man-in-the-middle
  • Replay
  • DoS (Denial of Service)
  • DDoS (Distributed DoS)
  • Domain Name Kiting
  • DNS poisioning
  • ARP poisioning

2.2 Distinguish between network design elements and components

  • DMZ
  • VLAN
  • NAT
  • Network interconnections
  • NAC
  • Subnetting
  • Telephony

2.3 Determine the appropriate use of network security tools to facilitate network security

  • NIDS (Network Based Intrusion Detection System)
  • NIPS (Network Based Intrusion Prevention System)
  • Firewalls
  • Proxy servers
  • Honeypot
  • Internet content filters
  • Protocol analyzers

2.4 Apply the appropriate network tools to facilitate network security

  • NIDS
  • Firewals
  • Proxy servers
  • Internet content filters
  • Protocol analyzers

2.5 Explain the vulnerabilities and mitigations associated with network devices

  • Privelege escalation
  • Weak passwords
  • Back doors
  • Default accounts
  • DOS

2.6 Explain the vulnerabilities and mitigations associated with various transmission media

  • Vampire taps

2.7 Explain the vulnerabilities and implement mitigations associated with wireless networking

  • Data emanation
  • War driving
  • SSID broadcast
  • Blue jacking
  • Bluesnarfing
  • Rogue access points
  • Weak encryption
Last modified on 28 December 2010, at 09:38