Final Exam Review ITIS 3110 Spring 2012 Exam

Final Exam Review ITIS 3110 - Spring 2012

Exam Format • Some true/false • Multiple choice • Discussion

General Study Help • I'm looking for understanding o What infrastructure technologies are (names) o What infrastructure technologies do (purpose) o What are the security issues (secure) • Slides only give overview o Read wikipedia and 24 x 7 chapters for more understanding o Ask me questions via email for better understanding o Study together if you need help

SNMP • what SNMP is used for o know that SNMP has a MIB o know what operations you can do on the MIB (ie can you look at values? can you set values? what are example values? ) • SNMP vulnerabilities o SNMP enumeration (using snmpwalk) o MIB may contain backdoor/password information

System Auditing • services o what services do (both good and bad) and where they are located o some common services (ones we have seen in the lab - ntp, bind 9, etc • file permissions o you need to know file permissions are for user - group - other o you need to know you can set read - write - execute for each of those o I may give you a list of files and ask you which are open for anyone to write to, etc

Network Auditing • arp o arp tables § what devices have them § what information does the table contain • network scanning o know what at least 2 scanning tools are o describe how you can use scanning techniques to exploit a network § you don't need to know all methods, just an example

System Hardening • understand things you can do to harden a system o remove services o remove extra accounts o update packages regularly o implement auditing services o using sudo o using selinux o monitor system changes o scan and watch logs o others. . .

Network Hardening • be able to answer questions about the types of firewalls o stateless o stateful o application • firewall placements o know the different areas where firewalls are placed • know the technologies used to protect networks o NAT o DMZ o IDS o IPS o remove rouge devices

Replication and Load Balancing • Replication (diagrams) o Primary/Backup o Master/Slave • Load balancing o DNS Round-robin § When does this work well (think stateless) o Reverse proxy § What is this best used for?