CompTIA Network+ Study Guide: Exam N10-008

Cover
Title Page
Copyright Page
Acknowledgments
About the Author
About the Technical Editor
Contents at a Glance
Contents
Introduction
N10-008 Exam Objectives
Objective Map
Assessment Test
Answers to Assessment Test
Chapter 1 Introduction to Networks
First Things First: What’s a Network?
The Local Area Network
Common Network Components
Metropolitan Area Network
Wide Area Network
Personal Area Network
Campus Area Network
Storage Area Network
Software-Defined Wide Area Network
Multiprotocol Label Switching
Multipoint Generic Routing Encapsulation
Network Architecture: Peer-to-Peer or Client-Server?
Physical Network Topologies
Bus Topology
Star Topology
Ring Topology
Mesh Topology
Point-to-Point Topology
Point-to-Multipoint Topology
Hybrid Topology
Topology Selection, Backbones, and Segments
Selecting the Right Topology
The Network Backbone
Network Segments
Service-Related Entry Points
Service Provider Links
Virtual Networking
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 2 The Open Systems Interconnection Specifications
Internetworking Models
The Layered Approach
Advantages of Reference Models
The OSI Reference Model
The Application Layer
The Presentation Layer
The Session Layer
The Transport Layer
The Network Layer
The Data Link Layer
The Physical Layer
Introduction to Encapsulation
Modulation Techniques
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 3 Networking Connectors and Wiring Standards
Physical Media
Coaxial Cable
Twisted-Pair Cable
Twinaxial Cable
Fiber-Optic Cable
Transceivers
Media Converters
Serial Cables
Cable Properties
Transmission Speeds
Distance
Duplex
Noise Immunity (Security, EMI)
Frequency
Wiring Standards
T568A vs. T568B
Straight-Through Cable
Crossover Cable
Rolled/Rollover Cable
T1 Crossover Cable
Installing Wiring Distributions
MDF/IDF
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 4 The Current Ethernet Specifications
Network Basics
Ethernet Basics
Collision Domain
Broadcast Domain
CSMA/CD
Broadband/Baseband
Bit Rates vs. Baud Rate
Wavelength
Half- and Full-Duplex Ethernet
Ethernet at the Data Link Layer
Binary to Decimal and Hexadecimal Conversion
Ethernet Addressing
Ethernet Frames
Ethernet at the Physical Layer
Ethernet over Other Standards (IEEE 1905.1-2013)
Ethernet over Power Line
Ethernet over HDMI
Bidirectional Wavelength-Division Multiplexing (WDM)
Course Wavelength-Division Multiplexing (CWDM)
Dense Wavelength-Division Multiplexing (DWDM)
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 5 Networking Devices
Common Network Connectivity Devices
Network Interface Card
Hub
Bridge
Switch
Router
Firewall
IDS/IPS
HIDS
Access Point
Wireless Range Extender
Wireless LAN Controller
Load Balancer
Contention Methods
Dynamic Host Configuration Protocol Server
IPAM
Other Specialized Devices
Multilayer Switch
Domain Name Service Server
Network Time Protocol
Proxy Server
Encryption and Content Filtering
Analog Modem
Packet Shaper
VPN Concentrator/Headend
Media Converter
VoIP PBX
VoIP Endpoint
NGFW/Layer 7 Firewall
VoIP Gateway
Cable Modem
DSL Modem
Networked Devices
VoIP Phones
Printers
Physical Access Control Devices
Cameras
Heating, Ventilation, and Air Conditioning (HVAC) Sensors
Internet of Things (IoT)
Industrial Control Systems
Planning and Implementing a Basic SOHO Network Using Network Segmentation
Determining Requirements
Switches and Bridges at the Data Link Layer
Hubs at the Physical Layer
Environmental Considerations
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 6 Introduction to the Internet Protocol
Introducing TCP/IP
A Brief History of TCP/IP
TCP/IP and the DoD Model
The Process/Application Layer Protocols
The Host-to-Host Layer Protocols
The Internet Layer Protocols
Data Encapsulation
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 7 IP Addressing
IP Terminology
The Hierarchical IP Addressing Scheme
Network Addressing
Private IP Addresses (RFC 1918)
IPv4 Address Types
Layer 2 Broadcasts
Layer 3 Broadcasts
Unicast Address
Multicast Address (Class D)
Internet Protocol Version 6 (IPv6)
Why Do We Need IPv6?
The Benefits of and Uses for IPv6
IPv6 Addressing and Expressions
Shortened Expression
Address Types
Special Addresses
Stateless Address Autoconfiguration (SLAAC)
DHCPv6 (Stateful)
Migrating to IPv6
Summary
Exam Essentials
Written Labs
Written Lab 7.1
Written Lab 7.2
Review Questions
Chapter 8 IP Subnetting, Troubleshooting IP, and Introduction to NAT
Subnetting Basics
How to Create Subnets
Subnet Masks
Classless Inter-Domain Routing (CIDR)
Subnetting Class C Addresses
Subnetting Class B Addresses
Troubleshooting IP Addressing
Determining IP Address Problems
Introduction to Network Address Translation (NAT)
Types of Network Address Translation
NAT Names
How NAT Works
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 9 Introduction to IP Routing
Routing Basics
The IP Routing Process
Testing Your IP Routing Understanding
Static and Dynamic Routing
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 10 Routing Protocols
Routing Protocol Basics
Administrative Distances
Classes of Routing Protocols
Distance-Vector Routing Protocols
Routing Information Protocol (RIP)
RIP Version 2 (RIPv2)
VLSMs and Discontiguous Networks
EIGRP
Border Gateway Protocol (BGP)
Link-State Routing Protocols
Open Shortest Path First (OSPF)
Intermediate System-to-Intermediate System (IS-IS)
High Availability
Hot Standby Router Protocol (HSRP)
Virtual Router Redundancy Protocol
Advanced IPv6 Concepts
Router Advertisement
Neighbor Discovery Protocol
Tunneling
Dual Stack
IPv6 Routing Protocols
RIPng
EIGRPv6
OSPFv3
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 11 Switching and Virtual LANs
Networking Before Layer 2 Switching
Switching Services
Limitations of Layer 2 Switching
Bridging vs. LAN Switching
Three Switch Functions at Layer 2
Distributed Switching
Spanning Tree Protocol
Spanning Tree Port States
STP Convergence
Rapid Spanning Tree Protocol 802.1w
Virtual LANs
VLAN Basics
Quality of Service
VLAN Memberships
Static VLANs
Dynamic VLANs
Identifying VLANs
VLAN Identification Methods
VLAN Trunking Protocol
VTP Modes of Operation
Do We Really Need to Put an IP Address on a Switch?
Switch Port Protection
Port Bonding
Device Hardening
Two Additional Advanced Features of Switches
Power over Ethernet (802.3af, 802.3at)
Port Mirroring/Spanning (SPAN/RSPAN)
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 12 Wireless Networking
Introduction to Wireless Technology
Cellular Technologies
The 802.11 Standards (Regulatory Impacts)
2.4 GHz (802.11b)
2.4 GHz (802.11g)
5 GHz (802.11a)
5 GHz (802.11h)
2.4 GHz/5 GHz (802.11n)
5 GHz (802.11ac)
WiFi 6 (802.11ax)
Comparing 802.11 Standards
Range and Speed Comparisons
Wireless Network Components
Wireless Access Points
Wireless Network Interface Card
Wireless Antennas
Installing a Wireless Network
Ad Hoc Mode: Independent Basic Service Set
Infrastructure Mode: Basic Service Set
Wireless Controllers
Mobile Hot Spots
Signal Degradation
Other Network Infrastructure Implementations
Technologies That Facilitate the Internet of Things (IoT)
Installing and Configuring WLAN Hardware
Site Survey
Providing Capacity
Multiple Floors
Location-Based WLAN
Site Survey Tools
Wireless Security
Wireless Threats
Open Access
Service Set Identifiers, Wired Equivalent Privacy, and Media Access Control Address Authentication
Remote Authentication Dial-In User Service (802.1X)
Temporal Key Integrity Protocol
Wi-Fi Protected Access or WPA2 Pre-Shared Key
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 13 Using Statistics and Sensors to Ensure Network Availability
Performance Metrics/Sensors
Device/Chassis
Network Metrics
SNMP
Traps
Object Identifiers (OIDs)
Management Information Bases (MIBs)
Network Device Logs
Log Reviews
Logging Levels/Severity Levels
Interface Statistics/Status
Link State (Up/Down)
Speed/Duplex
Send/Receive Traffic
Cyclic Redundancy Checks (CRCs)
Protocol Packet and Byte Counts
Interface Errors or Alerts
CRC Errors
Giants and Runts
Encapsulation Errors
Environmental Factors and Sensors
Temperature
Humidity
Electrical
Flooding
Baselines
NetFlow Data
NetFlow Overview and Flows
Uptime/Downtime
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 14 Organizational Documents and Policies
Plans and Procedures
Change Management
Incident Response Plan
Disaster Recovery Plan
Business Continuity Plan
System Life Cycle
Standard Operating Procedures
Hardening and Security Policies
Acceptable Use Policy
Password Policy
Bring Your Own Device (BYOD) Policy
Remote Access Policy
Onboarding and Offboarding Policy
Security Policy
Data Loss Prevention
Common Documentation
Physical Network Diagram
Logical Network Diagram
Wiring Diagram
Site Survey Report
Audit and Assessment Report
Baseline Configurations
Common Agreements
Nondisclosure Agreement (NDA)
Service-Level Agreement (SLA)
Memorandum of Understanding (MOU)
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 15 High Availability and Disaster Recovery
Load Balancing
Multipathing
Network Interface Card (NIC) Teaming
Redundant Hardware/Clusters
Switches
Routers
Firewalls
Facilities and Infrastructure Support
Uninterruptible Power Supply (UPS)
Power Distribution Units (PDUs)
Generator
HVAC
Fire Suppression
Redundancy and High Availability (HA) Concepts
Recovery Sites
Cold Site
Warm Site
Hot Site
Cloud Site
Active/Active vs. Active/Passive
Mean Time to Repair (MTTR)
Mean Time Between Failure (MTBF)
Recovery Time Objective (RTO)
Recovery Point Objective (RPO)
Network Device Backup/Restore
State/Configuration
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 16 Common Security Concepts
Confidentiality, Integrity, and Availability (CIA)
Confidentiality
Integrity
Availability
Threats
Internal
External
Vulnerabilities
Common Vulnerabilities and Exposures (CVE)
Zero-Day
Exploits
Least Privilege
Role-Based Access
Zero Trust
Defense in Depth
Network Segmentation Enforcement
Screened Subnet (aka Demilitarized Zone)
Separation of Duties
Network Access Control
Honeypot
Authentication Methods
Multifactor
Authentication, Authorization, and Accounting (AAA)
Remote Authentication Dial-In User Service (RADIUS)
Terminal Access Controller Access Control System Plus (TACACS+)
Single Sign-On (SSO)
LDAP
Kerberos
Local Authentication
802.1X
Extensible Authentication Protocol (EAP)
Security Risk Assessments
Threat Assessment
Vulnerability Assessment
Penetration Testing
Business Risk Assessments
Security Information and Event Management (SIEM)
Notifications
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 17 Common Types of Attacks
Technology-Based Attacks
Denial of Service (DoS)/Distributed Denial of Service (DDoS)
On-Path Attack (Previously Known as Man-in-the-Middle Attack)
DNS Poisoning
VLAN Hopping
ARP Spoofing
Rogue DHCP
Rogue Access Point (AP)
Evil Twin
Ransomware
Password Attacks
MAC Spoofing
IP Spoofing
Deauthentication
Malware
Human and Environmental
Social Engineering
Phishing
Environmental
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 18 Network Hardening Techniques
Best Practices
Secure SNMP
Router Advertisement (RA) Guard
Port Security
Dynamic ARP Inspection
Control Plane Policing
Private VLANs
Disable Unneeded Switchports
Disable Unneeded Network Services
Change Default Passwords
Password Complexity/Length
Enable DHCP Snooping
Change Default VLAN
Patch and Firmware Management
Access Control List
Role-Based Access
Firewall Rules
Wireless Security
MAC Filtering
Antenna Placement
Power Levels
Wireless Client Isolation
Guest Network Isolation
Preshared Keys (PSKs)
EAP
Geofencing
Captive Portal
IoT Access Considerations
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 19 Remote Access Security
Site-to-Site VPN
Client-to-Site VPN
Clientless VPN
Split Tunnel vs. Full Tunnel
Remote Desktop Connection
Remote Desktop Gateway
SSH
Virtual Network Computing (VNC)
Virtual Desktop
Authentication and Authorization Considerations
In-Band vs. Out-of-Band Management
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 20 Physical Security
Detection Methods
Cameras
Motion Detection
Asset Tags
Tamper Detection
Prevention Methods
Employee Training
Access Control Hardware
Locking Racks
Locking Cabinets
Access Control Vestibule (Previously Known as a Mantrap)
Smart Lockers
Asset Disposal
Factory Reset/Wipe Configuration
Sanitize Devices for Disposal
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 21 Data Center Architecture and Cloud Concepts
Data Center Network Architectures
Access/Edge Layer
Distribution Layer
Core Layer
Software-Defined Networking
Application Layer
Control Layer
Infrastructure Layer
Management Plane
Spine-Leaf–Based Two-Tier Networks
Top-of-Rack Switching
Backbone
Traffic Flows
North-South
East-West
Branch Office vs. On-premises Data Center vs. Colocation
Cloud Computing and Its Effect on the Enterprise Network
Service Models
Overview of Network Programmability in Enterprise Network
Software-Defined Networking
Application Programming Interfaces (APIs)
Southbound APIs
Northbound APIs
Managing Network Documentation
Using SNMP
Schematics and Diagrams
Network Monitoring
Baselines
Processes
Onboarding and Offboarding of Mobile Devices
NAC
Policies, Procedures, and Regulations
Safety Practices
Implementing Network Segmentation
Network Optimization
Reasons to Optimize Your Network’s Performance
How to Optimize Performance
Unified Communications
Traffic Shaping
Load Balancing
High Availability
Caching Engines
Fault Tolerance
Archives/Backups
Common Address Redundancy Protocol
Virtual Networking
Locating and Installing Equipment
Change Management Procedures
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 22 Ensuring Network Availability
Performance Metrics/Sensors
Network Metrics
SNMP
Network Device Logs
Interface Statistics/Status
Interface Errors
Environmental Factors and Sensors
Baseline
NetFlow
Uptime
Downtime
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 23 Cable Connectivity Issues and Tools
Identifying Hardware Tools
Cable Testers
Protocol Analyzer
Certifiers
Time-Domain Reflectometer
Optical Time-Domain Reflectometer
Multimeter
Spectrum Analyzer
Toner Generator (Probe)
Tap
Metrics
Butt Set
Punch-Down Tool
Cable Snips/Cutters
Voltage Event Recorder (Power)
Fiber Light Meter
Fiber Fusion Splicer
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 24 Network Troubleshooting Methodology
Narrowing Down the Problem
Did You Check the Super Simple Stuff?
Is Hardware or Software Causing the Problem?
Is It a Workstation or a Server Problem?
Which Segments of the Network Are Affected?
Is It Bad Cabling?
Troubleshooting Steps
Step 1: Identify the Problem
Step 2: Establish a Theory of Probable Cause
Step 3: Test the Theory to Determine Cause
Step 4: Establish a Plan of Action to Resolve the Problem and Identify Potential Effects
Step 5: Implement the Solution or Escalate as Necessary
Step 6: Verify Full System Functionality, and If Applicable, Implement Preventative Measures
Step 7: Document Findings, Actions, Outcomes, and Lessons Learned
Troubleshooting Tips
Don’t Overlook the Small Stuff
Prioritize Your Problems
Check the Software Configuration
Don’t Overlook Physical Conditions
Don’t Overlook Cable Problems
Check for Viruses
Summary
Exam Essentials
Written Lab
Review Questions
Chapter 25 Network Software Tools and Commands
Software Tools
Wi-Fi Analyzers
Protocol Analyzer/Packet Capture
Bandwidth Speed Testers
Port Scanners
NetFlow Analyzers
Trivial File Transfer Protocol (TFTP) Server
Connectivity Software
IP Scanner
Using traceroute
Using ipconfig, ifconfig, and ip
Using the ipconfig Utility
Using the ifconfig Utility
Using the ip Utility
Using the iptables Utility
Examples of iptables
Using the ping Utility
Using the Address Resolution Protocol
The Windows ARP Table
Using the arp Utility
Using the nslookup Utility
Resolving Names with the Hosts File
Using the Mtr Command (pathping)
Using the Nmap Utility
Using the route Command
Using the route Command Options
Some Examples of the route Command
Using the nbtstat Utility
The –a Switch
The –A Switch
The –c Switch
The –n Switch
The –r Switch
The –R Switch
The –S Switch
The –s Switch
Using the netstat Utility
The –a Switch
The –e Switch
The –r Switch
The –s Switch
The –p Switch
The –n Switch
Using tcpdump
Examples of Using tcpdump
Using the File Transfer Protocol
Starting FTP and Logging In to an FTP Server
Downloading Files
Uploading Files
Using the Telnet Utility
How to Enable Telnet in Windows
Don’t Use Telnet, Use Secure Shell
Summary
Exam Essentials
Written Lab
Review Questions
Appendix A Answers to Written Labs
Chapter 1: Introduction to Networks
Chapter 2: The Open Systems Interconnection Specifications
Chapter 3: Networking Connectors and Wiring Standards
Chapter 4: The Current Ethernet Specifications
Chapter 5: Networking Devices
Chapter 6: Introduction to the Internet Protocol
Chapter 7: IP Addressing
Written Lab 7.1
Written Lab 7.2
Chapter 8: IP Subnetting, Troubleshooting IP, and Introduction to NAT
Chapter 9: Introduction to IP Routing
Chapter 10: Routing Protocols
Chapter 11: Switching and Virtual LANs
Chapter 12: Wireless Networking
Chapter 13: Using Statistics and Sensors to Ensure Network Availability
Chapter 14: Organizational Documents and Policies
Chapter 15: High Availability and Disaster Recovery
Chapter 16: Common Security Concepts
Chapter 17: Common Types of Attacks
Chapter 18: Network Hardening Techniques
Chapter 19: Remote Access Security
Chapter 20: Physical Security
Chapter 21: Data Center Architecture and Cloud Concepts
Chapter 22: Ensuring Network Availability
Chapter 23: Cable Connectivity Issues and Tools
Chapter 24: Network Troubleshooting Methodology
Chapter 25: Network Software Tools and Commands
Appendix B Answers to Review Questions
Chapter 1: Introduction to Networks
Chapter 2: The Open Systems Interconnection Specifications
Chapter 3: Networking Connectors and Wiring Standards
Chapter 4: The Current Ethernet Specifications
Chapter 5: Networking Devices
Chapter 6: Introduction to the Internet Protocol
Chapter 7: IP Addressing
Chapter 8: IP Subnetting, Troubleshooting IP, and Introduction to NAT
Chapter 9: Introduction to IP Routing
Chapter 10: Routing Protocols
Chapter 11: Switching and Virtual LANs
Chapter 12: Wireless Networking
Chapter 13: Using Statistics and Sensors to Ensure Network Availability
Chapter 14: Organizational Documents and Policies
Chapter 15: High Availability and Disaster Recovery
Chapter 16: Common Security Concepts
Chapter 17: Common Types of Attacks
Chapter 18: Network Hardening Techniques
Chapter 19: Remote Access Security
Chapter 20: Physical Security
Chapter 21: Data Center Architecture and Cloud Concepts
Chapter 22: Ensuring Network Availability
Chapter 23: Cable Connectivity Issues and Tools
Chapter 24: Network Troubleshooting Methodology
Chapter 25: Network Software Tools and Commands
Appendix C Subnetting Class A
Subnetting Practice Examples: Class A Addresses
Practice Example #1A: 255.255.0.0 (/16)
Practice Example #2A: 255.255.240.0 (/20)
Practice Example #3A: 255.255.255.192 (/26)
Subnetting in Your Head: Class A Addresses
Written Lab 1
Written Lab 2
Answers to Written Lab 1
Answers to Written Lab 2
Index
Online Test Bank
Register and Access the Online Test Bank
EULA