Cybersecurity Principles & Protocols Flashcards

An administrator needs encrypted remote command-line access to a Linux server. Which default port must be open?

Answer: TCP 22

SSH, which provides encrypted remote shell access, listens on TCP port 22 by default.

Which protocol is the modern successor to SSL for securing HTTPS traffic?

Answer: TLS

TLS replaced the deprecated SSL protocol and is used to secure HTTPS sessions.

In which IPsec mode is the entire original IP packet encrypted and wrapped in a new IP header, as used in site-to-site VPNs?

Answer: Tunnel mode

Tunnel mode encapsulates the whole original packet, including its header, inside a new IP packet.

Which IPsec protocol provides integrity and origin authentication but does NOT encrypt the payload?

Answer: AH

Authentication Header (AH) authenticates packets but provides no confidentiality.

Which version of SNMP adds message authentication and encryption for managing network devices?

Answer: SNMPv3

SNMPv3 introduced the User-based Security Model with authentication and privacy (encryption).

A directory service must be queried over an encrypted connection using LDAPS. Which default port is used?

Answer: 636

LDAPS (LDAP over SSL/TLS) uses TCP port 636, while plain LDAP uses 389.

What does DNSSEC primarily add to DNS?

Answer: Digital signatures that verify the authenticity and integrity of DNS responses

DNSSEC signs DNS records so resolvers can verify origin and integrity, but it does not encrypt queries.