Domain 6 - Network and Communications Security
Goals
- [ ]
- [ ]
- [ ]
TCP/IP Networking
- TCP-IP
- Open Systems Interconnection (OSI) Model
- IPv4 Address
- IPv6 Address
- Dynamic Host Configuration Protocol (DHCP)
- Domain Name System (DNS)
- Common TCP and UDP Ports
- ping command
- tracert and traceroute
- Network Topology
- Networking Concepts
Network Security Devices
- Switches
- Routers
- Bridge
- Firewall
- Demilitarized Zone (DMZ)
- Next-Generation Firewall (NGFW)
- Proxy Server
- Load Balancers
- Virtual Private Network (VPN)
- Site-to-Site VPNs
- Internet Protocol Security (IPSec)
- Intrusion Detection Systems (IDS)
- Intrusion Prevention System (IPS)
- Protocol Analyzer
- Content Delivery Network (CDN)
- Traffic Shaping
- Unified Threat Management (UTM)
Secure Network Design
- Public and Private IP Addressing
- Network Address Translation (NAT)
- Port Address Translation (PAT)
- Subnetting
- Subnet Masks
- Security Zones
- North-South Traffic and East-West Traffic
- Virtual LAN (VLAN)
- Security Appliance Placement
- Software-Defined Networking (SDN)
- Overlay Network
- Software-Defined WAN (SD-WAN)
Network Security Technologies
- Rule-Based Access Control (RuBAC)
- Role-Based Access Control (RBAC)
- Network Access Control (NAC)
- Remote Authentication Dial-In User Service (RADIUS)
- Terminal Access Controller Access Control System (TACACS+)
- Security Rules and ACL Configuration
- Switch Security
- Spanning Tree Protocol (STP)
- Port Guards
- BDPU Guard
- Networking Monitoring
- Simple Network Management Protocol (SNMP)
- Jump Box
Remote Network Access
Wireless Networking
- 802.11n (Wi-Fi 4)
- Wi-Fi 5 (802.11ac)
- Wi-Fi 6 (802.11ax)
- Wi-Fi Protected Access (WPA)
- Wi-Fi Personal Authentication
- Wi-Fi Enterprise Authentication
- Extensible Authentication Protocol (EAP)
- EAP variants:
- LEAP
- EAP
- EAP-TLS
- EAP-TTLS
- EAP-FAST
- EAP-MD5
- PEAP
- EAP variants:
- Guest Networks and Captive Portal
- Antenna Types
- Multiuser MIMO (MU-MIMO)
- Wireless Surveys and Heat Maps
- Wireless Access Point (WAP)
- Wireless Controllers
- Wi-Fi Analyzers
Network Attacks
- Denial of Service (DoS) Attack
- Distributed DoS (DDoS) Attack
- Smurfing
- Eavesdropping Attack
- Man-in-the-Middle Attack (On-Path)
- Replay Attack
- SSL Stripping
- Fraggle
- DNS Attacks
- Typosquatting
- Domain Hijacking
- URL redirection
- ARP Attacks
- MAC Spoofing and IP Spoofing
- Wireless Attacks
- War Driving
- Rogue Access Point
- Deauthentication Attack
- aka disassociation attack
- Bluejacking and Bluesnarfing