Copyright © 2004 ProsoftTraining, All Rights Reserved. Network Technology Foundations © 2007...
-
Upload
myron-dalton -
Category
Documents
-
view
217 -
download
0
Transcript of Copyright © 2004 ProsoftTraining, All Rights Reserved. Network Technology Foundations © 2007...
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Network Technology Foundations
© 2007 Prosoft Learning Corporation
All Rights Reserved
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Lesson 1:Introduction to Networking
Objectives
• Identify and describe the functions of servers, workstations and hosts
• Identify major network operating systems and their respective clients
• Discuss packets and describe packet creation, and explain the OSI reference model
• Compare, contrast and describe the functions of network protocols, including TCP/IP
• Describe the basics of LANs and WANs
• Identify and describe the function of NAPs
• Describe transmission media and types, including cabling, asynchronous and synchronous, simplex, half duplex, full duplex, baseband and broadband
• Identify network architectures, and describe basic network topologies and carrier systems
Telephony Networking
• PSTN: one of the oldest existing networks• Voice transmissions, which were once carried
over the PSTN, are now delivered in digital form as packets of data using IP instead of the circuit-switched lines of the PSTN
• PSTN: still an integral part of the Internet infrastructure because it furnishes most of the long-distance connections
Mainframes
• Mainframe (centralized) computing provided the first practical network solution– Retrieving information from mainframes– Mainframe liabilities– The future of mainframes
Mainframe Networking Model
Client/Server Model
• Client/server model (distributed computing) divides processing tasks between the client and the server
Client/Server Model (cont’d)
• Client/server advantages• Two-tier and three-tier computing• Advantages of three-tier computing
Two-TierComputing Architecture
Three-TierComputing Architecture
PC
Database
Server
First TierSecond (Middle)
TierThird Tier
N-TierComputing Architecture
Network Operations Center (NOC)
• A specific location from which a network is managed, monitored and maintained
• Central point for network maintenance and troubleshooting
• Generally includes multiple, redundant network connections and redundant power supplies
• Many have dedicated phone lines from a separate provider and cell phones to ensure communication in an emergency
NetworkingCategories
• Peer-to-peer– Microsoft peer-to-peer– P2P– Centralized or decentralized
• Server-based– Novell NetWare– UNIX/Linux– Microsoft LAN manger– Microsoft Windows NT/2000/2003 Server
NetworkTopologies
• Bus• Star• Ring• Hybrid• Mesh
Network Operating Systems
• Interoperability– Microsoft Windows– UNIX/Linux– Novell NetWare
OSI Reference Model
• Defined by the International Organization for Standardization in 1983
• Gives developers universal concepts so they can develop and perfect protocols that can work with operating system and network products developed by other vendors
• Explains the framework used to connect heterogeneous systems
• Describes the process of packet creation (how the layers communicate)
OSI Model Layers
Packets
• Packets consist of:– Header (OSI/RM
layer information)– Actual data– Trailer (information
that validates the packet)
• CRC
Trailer
Data
Header
Packet Creation (Adding Headers)
OSI/RM Protocol Examples
• Application layer– SMTP, POP3, IMAP, HTTP, SMB, NCP, NFS
• Transport layer– TCP, SPX, NWLink, NetBEUI
• Network layer– IP, IPX, NWLink, NetBEUI
• Data link layer– Ethernet, Token Ring
MajorNetworking Protocols
• Connection-oriented (stateful)• Connectionless (stateless)• Routable• Nonroutable
TCP/IP
• A collection of protocols– TCP– UDP– IP
• An open standard
IPX/SPX
• Consists of:– IPX– SPX
• Frame types– Ethernet 802.2– Ethernet 802.3– Ethernet II– Token Ring – Token Ring SNAP
AdditionalNetworking Protocols
• NetBEUI– NetBIOS
• AppleTalk
Choosing andCombining Protocols
• Combining protocols• Binding protocols
– Binding order
Local AreaNetworks (LANs)
• A group of computers connected within a confined geographic area
• Commonly used for intraoffice communication
Wide AreaNetworks (WANs)
• A group of computers connected over an expansive geographic area
NetworkAccess Points (NAPs)
• Internet backbones• Backbone Network
Service• Segments Atlanta
New York
Chicago
SanFrancisco
Boston
Phoenix
Seattle
Backbone
Backbone
CommonNetwork Components
• NICs• Repeaters• Hubs• Bridges• Routers• Switches
• Gateways• CSU/DSU• Modems• Patch panels• Firewalls
TransmissionMedia
• Twisted pair cable• Coaxial cable• Fiber-optic cable• Wireless media
Wireless Network Technologies
• Wireless communications use spread spectrum technologies– OFDM– DSSS– FHSS
• Wireless networking modes– Ad-hoc– Infrastructure
• WAP• WAP security features
– WEP– MAC address filtering
TransmissionTypes
• Synchronous transmission• Asynchronous transmission• Data transmission flow• Baseband/broadband transmission• Logical/physical topologies
IEEE LAN Standards
• IEEE 802.2• Ethernet/IEEE 802.3• IEEE 802.3u — fast Ethernet• IEEE 802.3z and 802.3ab — gigabit Ethernet• IEEE 802.3ae — 10-gigabit Ethernet• IEEE 802.5 — Token Ring• IEEE 802-12 — 100VG-AnyLAN
AdditionalLAN Standards
• Apple LocalTalk• FDDI
WANStandards
• X.25• Fast packet switching
– Frame relay– ATM
T-Carrier System
T-Carrier Data Transfer Rate
T1 1.544 Mbps
T2 6.312 Mbps
T3 44.736 Mbps
T4 274.176 Mbps
E-Carrier System
E-Carrier Data Transfer Rate
E1 2.048 Mbps
E2 8.448 Mbps
E3 34.368 Mbps
E4 139.264 Mbps
E5 565.148 Mbps
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Lesson 2:TCP/IP Suite and
Internet Addressing
Objectives
• Define and describe the Internet architecture model and various Internet protocols
• Describe the purpose of RFCs• Explain the routing process• Compare and contrast RIP with OSPF• Describe port numbers and their functions• Explain IP addressing, address classes, default
subnet masks and the use of private IP addresses• Define the TCP/IP properties needed to configure a
typical workstation• Describe various diagnostic tools for
troubleshooting TCP/IP networks
Internet Architecture
Application Layer
Transport Layer
Internet Layer
Network Access Layer
Requests forComments (RFCs)
• Protocol states– Maturity level– Additional
Internet Protocols
• Network access layer• Internet layer• Transport layer• Application layer
Demultiplexing
ETHERNET
RARP
IP
ARP
IGMP
TCP
ICMP
Telnet FTP
UDP
TFTP SNMP
Introduction to Routing
• Direct routing• Indirect routing• Routing process• Routing information tables• Static versus dynamic routing
Routing Protocols
• Interior versus exterior protocols• RIP• OSPF
Port Numbers
• Classifying port numbers• Well-known port numbers• Registered port numbers
Internet Addressing
field1.field2.field3.field4
Each field represents one byte of data
Subnet Mask
• Distinguishes the network and host portions of an IP address
• Specifies whether a destination address is local or remote
• Network portion of an Internet address can be determined using the TCP/IP ANDing function
Internet Address Classes
• Class A• Class B• Class C• Class D• Class E
Default Subnet Masks for IP Address Classes
Private IP Addresses
Internet Protocol Version 6 (IPv6)
• Shortcomings of IPv4– Limited address space– Lack of security– Speed problems– Configuration problems
• Strengths of IPv6– More efficient and requires less
administrative overhead than IPv4– Provides a practically unlimited number of
IP addresses– Less dependent on routers
System Configuration and IP Addresses
• Default gateway• Loopback address• Broadcast address• Network and special-case source addresses• Normal TCP/IP workstation configuration
Diagnostic Toolsfor Internet Troubleshooting
• ping• tracert and traceroute• route• netstat• nbtstat• ipconfig — Windows NT/2000/XP• ifconfig — UNIX/Linux • winipcfg — Windows 95/98/Me• arp• Network analyzers
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Lesson 3:Internetworking Servers
Objectives
• Identify and describe the functions and features of various internetworking servers
• Describe how each type of internetworking server use TCP/IP suite protocols
• Describe access-security features of an HTTP server
• Define MIME, and explain how MIME types are used by HTTP and mail servers
• Describe the functions of DNS• Define “daemon” and identify the functions of the
Internet-related daemons
File and Print Servers
• File servers — network servers that store data files and programs that can be shared by network users
• Print servers — network servers that allow multiple users to send print jobs to the same physical printer
• Line Printer/Line Printer Daemon (LPR/LPD) — printing protocol in UNIX that allows users to submit print jobs to network printers
HTTP Server Essentials
• The Web — a collection of computer systems running the HTTP service
• Web server — has access to HTML documents that are returned to a client in response to a request
• Web gateway — a program on a server that is activated based on a client request:– Server passes the request to the program– Program processes the request– Server returns the program output to the client
HTTP Server Essentials (cont’d)
• HTTP Servers and MIME– Multipurpose Internet Mail Extensions
(MIME) — allow HTTP and e-mail attachments to identify the files they must use
– MIME types — identify the contents of a file so browsers can display the contents properly
HTTP Server Essentials (cont’d)
• Additional HTTP server considerations:– HTTP servers work with a variety of
operating systems– Permissions — restrict or allow access to
system resources• Operating system permissions usually
override HTTP server permissions– Access control — specifies who has access
to system resources
HTTP Server Essentials (cont’d)
• Additional HTTP server considerations:– Aliases (or virtual directories)
• Flexible mapping of URL path names to file names
– Logging — a log of requests handled by the server
• Access data• Referrer data• Error data
HTTP Server Essentials (cont’d)
• Additional HTTP server considerations:– Monitor server and network bandwidth use
• Helps maintain consistent performance• Helps to identify bottlenecks• Helps to create a baseline against which
future network activity can be compared
Database Server
• Database — a file that stores information in a series of tables and columns
• Relational database — a database consisting of two or more tables related by a common field
• Database server — a server that presents relational databases and makes it possible for remote individuals to access the data
• All database servers use SQL to create, maintain and query databases
Proxy Server
• Proxy server — an intermediary between a network host and other hosts outside the network
• Proxy servers:– Provide enhanced security– Manage TCP/IP addresses– Speed Internet access by caching Web
documents– Replace network IP address with another,
contingent address
Mail Server
• Mail servers store/forward e-mail messages using several protocols:– SMTP — used to send messages– POP3 — used to store and forward
messages (forces a user to download messages before managing them)
– IMAP — used to store and forward messages (allows a user to browse and manage messages remotely)
• MIME is used to transmit files with e-mail
Instant Messaging (IM)
• Instant messaging runs on a mail server• Use instant messaging to:
– Type and view messages sent to one or more recipients
– View the responses immediately• Instant messages can be sent only to contacts
who are currently online
Mailing List Server
• Forwards an e-mail message to every member on a distribution list
• Mailing List Manager (MLM) — the interface that allows you to configure a mailing list server
• Public versus private mailing lists• Examples of public mailing lists:
– LISTSERV– Majordomo
Mailing List Server (cont’d)
Mailing List [email protected]
Distribution List
[email protected] [email protected]
[email protected]@fender.com
Copy of Jill's originalmessage
Copy of Jill's originalmessage
Copy of Jill's originalmessage
Copy of Jill's originalmessage
Copy of Jill'soriginal message
Jill's original message
Media Server
• Provides streaming audio and video over a network
• Uses UDP ports and buffers to achieve the effect of a real-time connection– UDP is a connectionless protocol– Buffer — cache of memory that stores
frequently-used data to allow for faster access times
DNS Server
• DNS — mechanism used on the Internet to translate host computer names into IP addresses– www.ciw-certified.com = http://64.128.206.9
• Hosts file — file referenced locally by applications and commands for name-to-address resolution
DNS Server (cont’d)
• DNS hierarchy:– Root-level domain — the top of the
hierarchy that contains entries for each top-level domain
– Top-level domain — consists of categories found at the end of domain names
– Second-level domain — includes the businesses and institutions that register their domain names with the top-level domains
DNS Server (cont’d)
• DNS components:– Name server — server that supports name-
to-address translation and runs the DNS service
– Name resolver — software that uses the services of one or more DNS servers to resolve an unknown request
• DSN server types: root, primary, secondary, caching-only, forwarding
• DNS records — entries in DNS database that provide additional routing and resolution information
DNS Server (cont’d)
Domain name space .(root)
se com mx
user1
xyz
net chie
ftp
iso
user2 www
DNS Server (cont’d)
• nslookup– Used to query Internet domain name
servers to learn name-to-IP-address mappings
– Example of nslookup one-time command:• nslookup www.ciw-certified.com
– Used interactively by typing:• nslookup
FTP Server
• Allows the transfer of large files between file servers in real time
• Files of 2 MB or greater should be transferred by means of FTP
• Sending files by means of FTP is faster than with e-mail and HTTP
News Server
• Uses NNTP• Written text output• Multiperson input• Allows users to post information any time• Can be used to create secure newsgroups by
enabling user-specific password protection or through an SSL session
Certificate Server
• Validates, or certifies, encryption keys– Keys — strings of text generated from
encryption algorithms that allow you to secure communications for a company or group of users
Directory Server
• Identifies all resources on a network, then makes them available to authenticated users
• Enables a company to reuse information in its directory• Avoids re-entry of user information for applications that
require it• Helps administrators manage applications and users• Helps users locate other users or e-mail addresses• Locates and manages all company accounts• Allows users inside and outside the network to use the
service• Maintains a single database of e-mail contacts
Directory Server (cont’d)
• Directory server protocols:
– X.500 — used to manage user and resource directories
– X.500 offers:
• Scalability
• Synchronization
• Replication
– LDAP — TCP/IP protocol that allows communication on both intranets and the Internet
Catalog, Fax and Transaction Servers
• Catalog servers:– Index databases, files and information and allow
keyword, Boolean and other searches– Use robots to automate indexing process
• Fax servers:– Provide a centrally located fax system– Consist of a bank of fax/modems
• Transaction servers:– Guarantee that all required databases are
updated when a transaction takes place
The Internet Daemon:inetd and xinetd
• Daemon — UNIX program initiated at startup; runs in the background until required
• inetd — daemon that listens on specified TCP and UDP ports (0 to 1023) and launches services to support requests it receives
• xinetd — modified form of inetd that is more secure; provides more control over how daemons are run and which remote systems can use a particular daemon
• inetd and xinetd can create security problems because they have root permission; they can also deplete system resources because they spawn new processes each time they are used
Mirrored Server
• Provides data redundancy by writing to two physical hard drives each time a write operation occurs
• When a write request is issued:– Data is written to the primary drive– Data is copied to the mirrored drive
• If one drive fails, all data is protected from loss
Mirrored Server (cont’d)
Main Server'sHard Drive
Mirrored Server'sHard Drive
File 1
File 2
File 3
Choosing Web Server Products
• Apache Web server– Used by more than half of all Web sites– Supports UNIX and Windows XP– Available free of charge
• Microsoft IIS– Includes HTTP, FTP, NNTP, SMTP, certificate,
ASP, index (catalog) and transaction services– Allows you to use a remote server to store and
retrieve files
Choosing Web Server Products (cont’d)
• Sun ONE servers– Support many platforms, including OS/2,
Windows NT and 2000, Solaris, AIX, HP-UX, AS/400 and S/390
– Include servers with Server-Side JavaScript interpreters
– Can use JavaScript to connect to databases– Can implement other server-side scripting
applications
Choosing Web Server Products (cont’d)
• Java software and Web servers:– Java servlet — Java code that is compiled
and runs solely on Web servers– Servlets allow:
• Chaining• Connections to databases• Near-universal support on systems
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Lesson 4:Hardware and
Operating System Maintenance
Objectives
• Identify the characteristics of motherboards
• Identify common IRQ, I/O address and DMA settings
• Identify IDE/ATA, EIDE/ATA-2, SATA and SCSI traits
• Identify NICs and common peripheral ports
• Identify the characteristics of CD-ROMs and DVDs
• Describe the characteristics of file system types
• Describe the uses of file system management tools
• Identify and suggest corrective measures for operating system boot problems and application failures
• Identify methods to remotely manage and troubleshoot workstations
Basic Hardware and System Maintenance
• Fix hardware problems by ensuring: – Components are plugged in– Components are turned on– Components are connected properly in
order to operate (such as connecting the keyboard to the computer)
• Periodically clean hardware components• Establish a preventive maintenance plan
Motherboard
• Main circuit board in a computer• Must be securely fastened to system chassis• Should never touch anything metal, except
through proper connections• Most motherboard components are soldered
on and no longer replaceable• If components fail (except for memory and the
microprocessor), the entire motherboard needs to be replaced
IRQs, I/O Addresses and DMA
• IRQs — hardware lines used to identify when a device wants to communicate with the processor– Example: When a printer has finished
printing, it sends an interrupt signal to the computer so the computer can decide what to process next
• I/O address — memory location that allows the system processor and system devices to communicate
• DMA — allows a device to access system memory directly, bypassing the processor
Electronic Communication
• Binary numbering– Converting decimal values into binary– Bytes and bits
• Hexadecimal numbering– Converting from hexadecimal into binary
and decimal– Converting from binary into hexadecimal
• ASCII
Communication Basics
Serial communication
Communication Basics
Parallel communication
Mass Storage Device Interfaces
• To communicate with a motherboard, mass storage devices need to be connected to the motherboard through an interface
• Three most common interfaces are:– IDE – EIDE – SCSI
IDE/EIDE
• IDE is also known as Advanced Technology Attachment (ATA)
• EIDE (ATA-2) is an enhanced version of IDE that provides higher drive capacities
• IDE/EIDE interface cables are long, thin and gray in appearance
Serial ATA (SATA)
• SATA provides faster speeds than standard ATA
• SATA devices are connected using a cable that somewhat resembles a small Category 5 Ethernet cable
Small Computer System Interface (SCSI)
• With SCSI, multiple devices can be connected to a single controller in a daisy chain configuration
• You can attach as many as 127 internal or external SCSI devices to a single controller
• SCSI devices include hard disk drives, floppy disk drives, printers, scanners and tape drives
• SCSI daisy chain must be terminated at both ends and only at the ends
Resolving Device ID Conflicts
• LUN conflicts are a common cause of difficulty when installing a SCSI device
• All SCSI device numbers and LUNs must be unique
Network Interface Card
• Each network device must have a network interface card (or network adapter card)
• The network adapter makes the physical connection between the device and the network cabling
• The network adapter converts the data from the computer into a format appropriate for transmission over the network
• Transceiver — the network adapter component that handles data transmission
Common Peripheral Ports
Common Peripheral Ports (cont’d)
• PS/2-style ports are for the mouse and keyboard
• Serial ports:– Communicate using serial asynchronous
communication– Are used for serial communication devices
• Parallel ports:– Communicate using parallel
communication– Are used for parallel communication
devices
Common Peripheral Ports (cont’d)
• USB ports:– Support asynchronous and isochronous
transmissions for data transfer– Communicate using serial communication– Support as many as 127 peripheral devices
in a daisy chain configuration• FireWire (IEEE 1394):
– A high-speed serial interface to which you can daisy chain as many as 63 peripheral devices
– Good for devices that need to transfer large amounts of data
Power Requirements
• Electricity is measured according to different standards in North America and Europe
• Computing and networking equipment is also manufactured to different standards
• When traveling from North America to Europe, you will need:– A special plug adapter– A power inverter
CD-ROM
• CD-ROM — an optical storage device from which data can be read only
• CD-ROM drives use common mass storage interfaces
• Writable CD-ROM devices allow you to create, or "burn," your own data and audio CDs – CD-R (CD-recordable) — write data once – CD-RW (CD-rewritable) — write data
multiple times
DVD
• DVD — optical storage device from which data can be read only
• DVDs are similar to CD-ROMs but have higher storage capacity– Initial DVD standard provided 4.7 GB of storage
capacity – Current DVD standards support dual-layer discs
with a storage capacity of 8.5 GB – Double-sided disc standard supports 9.4 GB
when writing to one side or 17 GB total when writing to both sides
CD-ROM and DVD Maintenance
• Keep the drives closed when they are not in use and check all media for foreign matter before inserting into the drive
• CD-ROMs and DVDs should be handled only by the edges
• Avoid scratching the disc surface • Never directly touch or try to manually clean
the laser • Brush away and vacuum accumulated dust • Manually eject a stuck disc by inserting a wire
into the small hole on the face of the drive, then pressing hard until the disc is ejected
Software Licensing
• When you purchase software, you are purchasing the right to use the software under certain restrictions
• These restrictions are outlined in the license agreement
• When you load software, the license agreement typically displays during the installation process
• You must indicate that you have read and understood the agreement before the installation procedure will allow you to continue
Software Licensing (cont’d)
• Apart from legal consequences, using unlicensed software can also mean:– No documentation – No warranties – No technical product support – Greater exposure to software viruses,
corrupt disks, or otherwise defective software
– Ineligibility for software upgrades
Partitions and Logical Drives
• When installing an operating system on a new computer or after recovering from a hard disk failure, prepare the hard disk for use by:– Partitioning the hard disk – Creating logical drives – Formatting logical drives
Disk Partitioning
• Partition disks to divide total storage space
• Primary partition — the system’s boot drive, used for system startup
• Extended partition — the remaining drive space after you create the primary partition
Logical Disk Drives
• A disk partition must be assigned a logical drive identifier
• A primary partition is treated as a single logical drive
• An extended partition can be divided into multiple logical drives (drives D and E in figure)
Logical Drive Format
• Low-level format:– Prepares the hard disk before disk partitions
can be defined– Primarily the responsibility of the hard disk
manufacturer • High-level format:
– Logical drive formatting that prepares the drive for use by the operating system
– Creates the file system root directory and the files used to track disk space use
File System Types
• Primary partitions and logical drives must be formatted so the operating system can use them
• Formatting creates the file system by adding information about how files should be stored on the drive to organize and manage disk storage
• File system types include:– FAT, FAT32 and NTFS (Windows)– Ext3 and ReiserFS (Linux)
File and Directory Permissions
• NTFS allows you to set permission bits on system resources
• In NTFS, you can protect files so that only certain users or groups of users can read them
• Concerns:– If permissions are applied improperly,
users may take security for granted – Improperly set permissions can disrupt an
operating system
Convert Utility
• Information about the files on an NTFS volume and their attributes is stored in the MFT
• Convert utility — used to convert a partition or logical drive from FAT or FAT32 to NTFS
convert drive /FS:NTFS [/v]
Disk Defragmenter Utility
• As files are created and deleted, a partition can become severely fragmented
• Fragmented files are no longer located in contiguous clusters
• You can use the Disk Defragmenter utility to defragment hard disks and put files back together in a contiguous format
Chkdsk Utility
• You can use the Chkdsk utility in Windows NT/2000/XP to:– Create and display a status report for a disk
based on its file system – List and correct errors on the disk – Display the status of the disk in the current
drive
Disk Cleanup Utility
Use the Disk Cleanup utility to recover the disk space used by:– Temporary files– Unused applications– Files in the Recycle Bin– Files you downloaded as part of Web pages– Files created when Chkdsk attempted to
recover lost file fragments
Backup and Restore Utilities
• Keep a current backup of all data files to ensure that data can be recovered if a hard drive fails
• When you back up data, you store copies of folders and files to a source other than your computer's hard disk
• You restore data when you need to access the backed up data
Troubleshooting Software
• Software troubleshooting refers to anything other than problems caused by system hardware
• Software problems can be caused by:– Bugs– Corrupted files– Incompatibilities– Virus infections
Operating System Boot Problems
• Error: No operating system• Operating system files missing• Hard disk or controller failure• Startup failure
Blue Screen of Death (BSOD)
• Blue screen that indicates that a critical operating system failure has occurred during startup
• To troubleshoot:– Restart the system in Safe mode and use
the Last Known Good Configuration option– Reinstall the operating system– Attempt to diagnose the problem by
parsing the dump file
System Lockup
• Lockup causes:– Applications that are incompatible with the
operating system or with a hardware component
– IRQ conflicts– Related problems that you may be able to
find in the system log file• Power down your system by manually
pressing the power key continually for five seconds
Application Failures
• Application failure causes:– Low system RAM– Current logon environment may have
crashed– Improper permissions– Improper system resolution or color levels
• View the system log– Windows Event Viewer– UNIX/Linux “messages”
Application Failures (cont’d)
• Windows protection error causes:– Device drivers that may not be written
specifically for your operating system– Applications or utilities that attempt to
bypass the operating system and directly access local system hardware
• Dr. Watson — Windows application debug program that creates a system error report
Application Failures (cont’d)
• Application installation and loading failures:– Application will not load into memory– Application can cause an illegal operation,
resulting in the blue screen of death– Application may not install at all
Remote Management and Troubleshooting
• Telnet — TCP/IP command that establishes a remote connection with a server
• SSH — protocol and command interface that can gain secure access to a remote computer
• VNC — program that controls a remote computer– VNC consists of two components:
• A server that listens to a specific port• The viewer, which shows the remote
system’s logon environment
Remote Management and Troubleshooting (cont’d)
• Remote Desktop — Windows XP service used to gain access to a Windows session that is running on another computer– Allows multiple users to have active
sessions on a single computer – Allows you to switch from one user to
another on the same computer • Remote Assistance — Windows XP service
used to seek help from a remote user
Copyright © 2004 ProsoftTraining, All Rights Reserved.
Lesson 5:Network Security and IT Career Opportunities
Objectives
• Define security• Identify various kinds of network attacks• Describe computer viruses• Describe authentication principles • Explain the three major types of encryption • Describe network security protocols and technologies• Describe firewalls, security zones and common firewall
topologies • Describe security audit principles • Describe the function of a UPS • Review career opportunities in the IT industry • Describe the importance of successfully explaining technical
issues to non-technical audiences
Defining Security
• Security — a set of procedures designed to protect transmitted and stored information, as well as network resources
• Security administrators must determine which people can take appropriate actions on specific items at the appropriate time
Overview of Network Attack Types
• Spoofing• Man in the middle• DOS• Distributed DDOS• Brute force
• Dictionary• Back door• Buffer overflow• Trojan horse• Social
engineering
• To avoid attacks:• Install stable updates• Use encryption• Be suspicious of information requests• Remain informed
Viruses and Worms
• Virus — code that causes damage to systems• Virus types
– Macro/script– File infecting– Boot sector– Stealth– Polymorphic– Retro
• Worm — similar to virus but automatically replicates
Defeating Attacks
• OSI/RM security services– Authentication– Access control– Data confidentiality– Data integrity– Non-repudiation
• Updates
Authentication
• Three authentication methods– What you know– What you have– Who you are
• Passwords– Strong passwords– Age passwords appropriately
• Account lockout — disables accounts after a given number of invalid passwords have been entered
• Account reset — enables you to choose whether accounts reset automatically after a given interval
Encryption
• The primary means to ensure privacy across the enterprise
• Symmetric-key encryption– One key to encrypt and decrypt– All parties must know and trust one another
• Symmetric algorithms:– DES– Triple DES– AES
Encryption (cont’d)
• Asymmetric-key encryption– Uses a key pair (one public, one private)– Used to create a digital signature
• Asymmetric algorithms– RSA– DSA
Encryption (cont’d)
• Hash encryption– Uses a hash table that contains a hash
function – Used for information that will not be
decrypted or read • Hash algorithms
– MD2, MD4 and MD5– SHA
Encryption (cont’d)
• PGP — uses a combination of the three encryption types
• For example:– Use symmetric-key encryption to scramble
the original message you want to send– Use asymmetric-key encryption to encrypt
only the symmetric key you just used – Use hash encryption to "sign" the message
and ensure that no one can tamper with it
Virtual Private Network (VPN)
• A technique that allows secure communication across long distances, usually for a company extranet
• In a VPN, the Internet is often the corporate network backbone
• Appropriate for any organization requiring secure external access to internal resources
• All VPNs are tunneling protocols — encryption occurs at the source and decryption occurs at the destination
Virtual Private Network (VPN) (cont’d)
• VPN protocols– PPTP — works only with IP protocols– L2TP — works with non-IP protocols– IPsec — more flexible than PPTP or L2TP
because you can specify different authentication methods
Remote Access Server (RAS)
• Requires the use of dial-up modems to dial up, connect and log on to RAS
• Offers security through a callback feature:– A user logs on to RAS– The user is disconnected – RAS calls the user back to ensure the call
was made from an authorized computer
Digital Certificates
• Provide authoritative identification • Verify the sender's identity • Use the X.509 standard• Are used for non-repudiation • Contain digital signatures
– CA
Public Key Infrastructure (PKI)
• PKI CA servers:– Are repositories for managing digital
certificates – Enable the secure creation and
management of digital certificates – Provide the ability to revoke an invalid key
• If you need a certificate for a server, use PKI
Firewall
• A secure computer system placed between a trusted network and an untrusted one, such as the Internet – The most common location for a firewall is
between a corporate LAN and the Internet • Allows users from a protected network to
access a public network while simultaneously making the protected company's products and services available to the public
Internal and Personal Firewalls
• Internal firewall — resides inside your company's internal network– Internal firewalls can:
• Protect sensitive systems• Isolate networks that still need Internet
connectivity but that use software that may cause problems with other company resources
• Personal firewall — offers protection for an individual system
Packet Filtering
• Packet filter — inspects each packet for predefined content
• Packet filters filter data based on the following fields in the packet:– Source IP address– Destination IP address– TCP/UDP source port– TCP/UDP destination port
Proxy Server
• Replaces the network IP address with a single IP address
• Provide the following services:– Hiding of network resources– Logging– Caching
• Proxies come in two basic forms:– Circuit-level gateways– Application-level gateways
Proxy Gateways
• Circuit-level gateway — acts as a proxy between the Internet and your internal systems
• Application-level gateway — same as a circuit-level gateway but at the application level
• Most firewalls are combinations of packet filtering, circuit-level gateways and application-level gateways
Network Address Translation (NAT)
• The practice of hiding internal IP addresses from the external network
• Three ways to provide NAT:– Configure masquerading on a packet-
filtering firewall – Configure a circuit-level gateway – Use a proxy server to conduct requests on
behalf of internal hosts
Accessing Internet Services
• If Internet access is required and a network is located behind a proxy server or firewall, you may have problems accessing Internet services that use ports other than common ports
• To avoid these problems:– Make sure the network has access to all
Internet-related protocols used by the company
– Make sure that the IP addresses assigned to the computers in your network have permission to access the Internet
Troubleshooting Access Through Firewalls
• Firewalls can cause a bottleneck
• Firewalls may not allow home-based account access to the corporate e-mail server
• To troubleshoot firewall problems:
– Verify that you are using the correct IP address and subnet mask
– Check your default gateway and verify that the computer can communicate with systems on the same subnet
– Verify DNS resolution
– Try to use multiple protocols on the Internet
Security Zones
• DMZ — a mini-network that resides between a company's internal network and the external network
• Intranet — a security zone available only to authorized organization employees
• Extranet — a private network that allows selected access to outsiders only after they provide authentication information
• VLAN — a logical grouping of hosts, generally not implemented by a firewall
Firewall Topologies
• Common firewall implementations:– Packet filter– Dual-homed bastion host– Triple-homed bastion host– Screened subnet (back-to-back firewalls)
• Bastion host — a computer that houses various firewall components and services and is connected to a public network
Packet Filter Topology
Dual-Homed Bastion Host
Triple-Homed Bastion Host
Screened Subnet
Security Audit
• Review of the state of the network • Auditing process:
– Conduct a status quo analysis – Conduct a risk analysis – Make recommendations concerning what
was found
Uninterruptible Power Supply (UPS)
• Device that allows a computer to keep running temporarily when the primary power source is lost
• Can be configured to:– Shut down entire systems automatically – Shut down only certain components
automatically– Place components into minimal power use
mode until the system is shut down manually
IT Industry Career Opportunities
• Web site designer
• Web application developer
• Web architect
• Web site analyst
• Web site manager
• Database administrator
• Server administrator
• Network engineer
• Security manager
• Security analyst/consultant
• PC repair technician
• Help desk technician
Conducting Job Searches
• Participating in on-campus interviews • Searching through want ads • Visiting employment agencies/employment placement
services • Attending job/career fairs • Volunteering • Seeking part-time work • Networking (socially) • Working with an executive search firm • Mailing cover letters and résumés to companies• Applying in person • Entering résumés electronically or posting them to the Web
Using the Internet to Conduct Job Searches
• Use Usenet job newsgroups and search engines, such as:– groups.google.com – hotjobs.yahoo.com – careers.excite.com – www.monster.com
• Enter keywords to narrow your search to specific job types, and retrieve available job listings that relate to your career goals
Creating a Résumé• Formatting a résumé:
– Create using a word-processing program – Use formatting to increase visual appeal– Recipient needs same word-processing program to be
able to read résumés• Text format résumés:
– Contain little formatting– Intended for keyword-searchable résumé databases and
applicant tracking systems• RTF résumés:
– Incorporate basic formatting techniques– Can be read by many different programs on many
different platforms
Creating a Résumé (cont’d)
• PDF résumés:– Compatible across all computer platforms – Not vulnerable to viruses – Need PDF software
• HTML résumés:– Posted as Web pages– Retain the formatting characteristics of a word-
processing file
Education and IT Careers
• University degrees are available in:– Computer science – Computer engineering – Management information systems
• Employers are also looking for:– Interpersonal skills– Business skills– Project management skills
Education and IT Careers (cont’d)
• Importance of continuing education• Obtain certifications in:
– A+– CIW– Network+– Security+ Certification
Technical Concepts and Training
• Communicating technical issues to end users• Justifying IT-related expenses to management• Understanding problems and concerns of end
users• Providing understandable solutions• Remembering the ROI affect of IT decisions• Presenting technical data clearly so that
managers understand the information and can make informed decisions