Security Plus notes part 1

 near field communication (NFC) allows someone to get close to a terminal and have access or authenticate themselves. example- key card to allow access to a building or phone to make a payment. has to be 4 centimeters or less, so relatively close. 

PAN- personal area network. what we call the network that we use Bluetooth on, its short distance over a high powered connection.

turn your phone into a wifi hotspot. 

trackpad- what is called for the box at the bottom of the laptop that allows us to use our fingers as a mouse (no external mouse needed). 

1.3 MDM- mobile device management- manage company owned and user owned mobile devices (cell phones, tablets). some companies allow use of personal phone inside the building. others provide company owned devices and allow user to have personal use as well. 

2.1 introduction to IP

TCP and UDP are two different ways to move data from place to place.

TDP- transmission control protocol, a connection based way to transfer data. the important thing with this one is that there is acknowlegement that the data is received, also to speed up or slow down the data. 

UDP- user diagram protocol. there is no acknowledgement that the data was received. this makes it faster. 

UDP has no 'flow control' where the sender device sent data but doesn't know if it was received. 

why use UDP?

low setup, faster, used in voice over IP (Zoom calls, Whatsapp, for example)

TCP and UDP port numbers can be any value between 0 and 65,535.

MEMORIZE PORT NUMBERS. IT HELPS.

file transfer protocol- use port TCP 20 or TCP 21, to transfer file between systems.

when we need encryption- we use SSH (secure shell) through port TCP/22

TCP/23 port uses old telnet (before SSH was used). similar to SSH except no encryption. it can authenticate and can be used to log on remotely

TCP/25 port used to send email (SMTP) simple mail transfer protocol. 

UDP/53  DNS-domain name system. converts names to IP address. ex: professor messer.com to 162.593.462.378

TCP/80 is used for http

TCP/443 is https (more secure)

TCP/3389- port used for sharing a desktop from a remote location. ((REVIEW 2.1 again, about the ports)

2.2 (have to view again)

WIFI,

2.3  Data center.

DHCP server- automatic IP addresss configuration.  it assign IP address to your computer when you turn it on, you don't have to do it. dont have to remember IP address or type anything in. 

SIEM- central server stands for security information and event manager, its a central consolidation point that has all the log files. log files is information that is recorded like this person logged in at this location. this update was done at this time. etc.

NTP servers- network time protocol, works to get the correct time on computers.