IT120 Final Exam Study Guide
CIDR (Classless Inter-Domain Routing)
Definition: CIDR allows efficient allocation of IP addresses by using variable-length
subnet masks.
Purpose: Reduces waste of IP addresses, enhances routing efficiency.
Key Concepts:
- CIDR Notation (e.g., /24, /21).
- Calculate valid hosts: 2^n - 2, where n = host bits.
- Subblock addresses, subnet masks, and calculating min/max addresses.
Why CIDR is useful:
- Enables precise IP allocations.
- Supports route aggregation to minimize routing table size.
DHCP (Dynamic Host Configuration Protocol)
Definition: Automates the assignment of IP addresses to devices on a network.
Process:
1. Discover: Client broadcasts a request for an IP address.
2. Offer: Server responds with an available IP address.
3. Request: Client accepts the offered address.
4. Acknowledge: Server confirms and assigns the address.
Static vs. Dynamic Addressing:
- Static: Manually assigned; requires configuration on each device.
- Dynamic: Assigned automatically via DHCP.
Fragmentation
Definition: Breaking large packets into smaller ones to fit the MTU.
Purpose: Ensure data can be transmitted over networks with varying MTU sizes.
Key Differences:
- IPv4: Supports fragmentation at both sender and intermediate routers.
- IPv6: Only sender fragments packets; routers do not.
DNS (Domain Name System)
Definition: Translates human-readable domain names into IP addresses.
Purpose: Simplifies internet navigation by abstracting IP addresses.
Key Concepts:
- Hierarchical structure (root, TLDs, authoritative servers).
- DNS caching to improve resolution speed.
Autonomous Systems (AS) and Gateway Routers
Definition:
- Autonomous System: A collection of IP networks under single administrative control.
- Gateway Routers: Connect AS to the internet.
Key Concepts:
- Border Gateway Protocol (BGP) manages routing between ASes.
NAT (Network Address Translation)
Definition: Maps private IP addresses to a single public IP for internet communication.
Purpose: Conserves public IP addresses, enhances security.
IPv4 vs. IPv6:
- NAT is common in IPv4 due to limited address space.
- IPv6 reduces NAT need with vast address space.
IPv6
Notation: Eight groups of four hexadecimal digits separated by colons (e.g.,
2001:0db8::1).
Scope: Global, unique local, and link-local addresses.
Aggregation: Simplifies routing by summarizing multiple routes.
Migration Process: Dual-stack implementation, tunneling mechanisms like 6to4 or
Teredo.
Network Layer (Layer 3)
Purpose: Routing and forwarding packets; determines best data delivery path.
Key Concepts:
- Header structure: Source/destination IPs, TTL, protocol.
- Routing Algorithms: RIP, OSPF, EIGRP, BGP.
- Routing Tables: Built using dynamic or static routes.
Sockets
Definition: Endpoints for data exchange between applications over a network.
Process:
- Open: Establish a connection.
- Close: Terminate the connection.
- States: Blocked, wait, listening.
Transport Layer (Layer 4)
Purpose: Provides reliable or unreliable data delivery.
UTP vs. UDP:
- TCP: Connection-oriented, reliable (e.g., handshake: SYN, SYN-ACK, ACK).
- UDP: Connectionless, faster but less reliable.
Security:
- Authorization: Ensures only authorized users access resources.
- Encryption: Converts data into an unreadable format.
- Authentication: Verifies identity.
- Nonrepudiation: Prevents denial of actions.
IPSec
Definition: Suite of protocols securing IP communications via encryption and
authentication.
Uses: Common in VPNs for secure communication.
Key Features: Supports symmetric and asymmetric encryption.
Symmetric vs. Asymmetric Encryption
Symmetric:
- Same key for encryption and decryption.
- Fast but requires secure key distribution.
Asymmetric:
- Public/private key pair.
- Slower but more secure.
Digital Certificates
Definition: Verifies ownership of public keys.
Certificate Authorities (CAs): Trusted entities that issue certificates.
Security Hardware
IPS (Intrusion Prevention System): Actively blocks threats.
IDS (Intrusion Detection System): Monitors and alerts on threats.
Firewalls: Filters traffic based on rules.
VLANs (Virtual Local Area Networks)
Definition: Segments a physical network into multiple logical networks.
Pros: Improved security and management.
Cons: Complexity in setup and management.
