Title Details

Bill Ferguson, MCT Alumni, A+, Network+, Server+, Security+, CCSI, VCP3, 4, 5, VCI3, 4, 5, VCP-DCV, VCP-NV, has been in the computer industry for more than 20 years. Originally in technical sales and sales management with Sprint, Bill made his transition to Certified Technical Trainer in 1997 with ExecuTrain. Bill now runs his own company (Parallel Connections) as an independent contractor/author in Birmingham, Alabama, teaching classes for many national training companies and some regional training companies as well as international classes and virtual (online) classes. Bill has written several books, including the previous edition of the CompTIA Network+ Review Guide for Sybex.

Contents

Introduction xxvii

Chapter 1 Domain 1.0 Network Architecture 1

1.1 Explain the Functions and Applications of Various

Network Devices 11

Router 11

Switch 11

Multilayer Switch 12

Firewall 12

IDS and IPS 12

HIDS 13

Access Point (Wireless/Wired) 13

Content Filter 13

Load Balancer 14

Hub 14

Analog Modem 14

Packet Shaper 15

VPN Concentrator 15

Exam Essentials 15

1.2 Compare and Contrast the Use of Networking

Services and Applications 15

VPN 16

RADIUS 18

RAS 18

TACACS+ 18

Web Services 19

Unified Voice Services 19

Network Controllers 19

Exam Essentials 19

1.3 Install and Configure the Following Network Services and Applications 20

DHCP 20

DNS 23

Proxy/Reverse Proxy 24

NAT 24

Port Forwarding 27

Exam Essentials 27

1.4 Explain the Characteristics and Benefits of Various WAN Technologies 28

Fiber 28

Frame Relay 29

Satellite 29

Broadband Cable 30

DSL/ADSL 30

ISDN 31

ATM 32

PPP/Multilink PPP 33

MPLS 33

GSM/CDMA 33

Dialup 34

WiMAX 35

Metro‐Ethernet 35

Leased Lines 35

Circuit Switch vs. Packet Switch 37

Exam Essentials 37

1.5 Install and Properly Terminate Various Cable Types and Connectors Using Appropriate Tools 39

Copper Connectors 39

Copper Cables 43

Fiber Connectors 47

Fiber Cables 49

Media Converters 51

Tools 52

Exam Essentials 55

1.6 Differentiate between Common Network Topologies 57

Mesh 57

Bus 58

Ring 59

Star 59

Hybrid 60

Point‐to‐Point 61

Point‐to‐Multipoint 61

Client‐Server 62

Peer‐to‐Peer 62

Exam Essentials 62

1.7 Differentiate between Network Infrastructure Implementations 62

WAN 63

MAN 63

LAN 63

WLAN 63

PAN 63

SCADA/ICS 64

Medianets 65

Exam Essentials 66

1.8 Given a Scenario, Implement and Configure the Appropriate Addressing Schema 66

IPv6 67

IPv4 69

APIPA 74

MAC Address Format 76

Multicast vs. Unicast vs. Broadcast 77

Exam Essentials 78

1.9 Explain the Basics of Routing Concepts and Protocols 79

Routing Loops 79

Routing Tables 79

Static vs. Dynamic Routes 80

Default Route 80

Distance Vector Routing Protocols (RIPv2) 80

Hybrid Routing Protocols (EIGRP) 81

Link State Routing Protocols (OSPF, IS‐IS) 81

IGP vs. EGP 82

Route Redistribution 82

Loopback Interface 82

High Availability 83

Route Aggregation 83

Routing Metrics 83

Exam Essentials 84

1.10 Identify the Basic Elements of Unified Communication Technologies 85

VoIP and Video 85

Real‐Time Services 86

QoS 86

Devices 87

Exam Essentials 87

1.11 Compare and Contrast Technologies That Support

Cloud and Virtualization 87

Virtualization 87

Storage Area Network 88

Cloud Concepts 89

Exam Essentials 90

1.12 Given a Set of Requirements, Implement a Basic Network 90

List of Requirements 90

Device Types/Requirements 91

Environment and Equipment Limitations 91

Compatibility, Wireless, and Security Considerations 91

Exam Essentials 92

Review Questions 93

Chapter 2 Domain 2.0 Network Operations 95

2.1 Given a Scenario, Use Appropriate Monitoring Tools 100

Packet/Network Analyzer 100

Interface Monitoring Tools 101

Port Scanner 102

Top Talkers/Listeners 102

SNMP Management Software 102

Alerts 103

Packet Flow Monitoring 103

SYSLOG 104

SIEM 104

Environment Monitoring Tools 104

Power Monitoring Tools 104

Wireless Survey Tools and Wireless Analyzers 105

Exam Essentials 105

2.2 Given a Scenario, Analyze Metrics and Reports from Monitoring and Tracking Performance Tools 106

Baseline 106

Bottleneck 106

Log Management 106

Graphing 107

Utilization 108

Link Status 109

Interface Monitoring 109

Exam Essentials 109

2.3 Given a Scenario, Use Appropriate Resources to Support Configuration Management 110

Archives/Backups 110

Baselines 110

On‐Boarding and Off‐Boarding of Mobile Devices 110

NAC 111

Documentation 111

Exam Essentials 112

2.4 Explain the Importance of Implementing Network Segmentation 112

SCADA 113

Legacy Systems 113

Separate Private/Public Networks 113

Honeypot/Honeynet 113

Testing Lab 114

Load Balancing 114

Performance Optimization 114

Security 114

Compliance 115

Exam Essentials 115

2.5 Given a Scenario, Install and Apply Patches and Updates 116

OS Updates 116

Firmware Updates 116

Driver Updates 117

Feature Changes/Updates 118

Major vs. Minor Updates 118

Vulnerability Patches 118

Upgrading vs. Downgrading 118

Exam Essentials 118

2.6 Given a Scenario, Configure a Switch Using Proper Features 119

VLAN 119

Spanning Tree (802.1d) and Rapid Spanning Tree (802.1w) 120

Interface Configuration 121

Default Gateway 124

PoE and PoE+ (802.3af, 802.3at) 124

Switch Management 124

Managed vs. Unmanaged 124

Exam Essentials 124

2.7 Install and Configure Wireless LAN Infrastructure and Implement the Appropriate Technologies in Support of Wireless Capable Devices 125

Small Office/Home Office Wireless Router 125

Wireless Access Points 126

Wireless Bridge 126

Site Surveys 126

Frequencies 127

Channels 127

Goodput 127

Connection Types 127

Antenna Placement 128

Antenna Types 128

MIMO/MUMIMO 129

SSID (Enable/Disable) 129

Topologies 129

Mobile Devices 131

Exam Essentials 131

Review Questions 133

Chapter 3 Domain 3.0 Network Security 135

3.1 Compare and Contrast Risk Related Concepts 141

Disaster Recovery 141

Business Continuity 142

Battery Backups/UPS 142

First Responders 142

Data Breach 143

End User Awareness and Training 143

Single Point of Failure 143

Adherence to Standards and Polices 143

Vulnerability Scanning 144

Penetration Testing 144

Exam Essentials 144

3.2 Compare and contrast common network vulnerabilities and threats 145

Attacks/Threats 145

Vulnerabilities 152

Exam Essentials 153

3.3 Given a Scenario, Implement Network Hardening Techniques 154

Anti‐malware Software 155

Switch Port Security 155

Security Policies 156

Disable Unneeded Network Services 156

Use Secure Protocols 156

Access Lists 156

Wireless Security 157

User Authentication 159

Hashes 162

Exam Essentials 162

3.4 Compare and Contrast Physical Security Controls 163

Mantraps 164

Network Closets 164

Video Monitoring 164

Door Access Controls 164

Proximity Readers/Key Fob 164

Biometrics 165

Keypad/Cypher Locks 165

Security Guard 165

Exam Essentials 165

3.5 Given a Scenario, Install and Configure a Basic Firewall 165

Types of Firewalls 166

Settings/Techniques 167

Exam Essentials 169

3.6 Explain the Purpose of Various Network Access Control Methods 169

802.1x and Posture Assessment 170

Guest Network 170

Persistent vs. Non‐persistent Agents 170

Quarantine Network 170

Edge vs. Access Control 171

Exam Essentials 171

3.7 Summarize Basic Forensic Concepts 171

First Responder 172

Secure the Area 172

Document the Scene 172

eDiscovery 172

Exam Essentials 173

Review Questions 174

Chapter 4 Domain 4.0 Troubleshooting 177

4.1 Given a Scenario, Implement the Following Network Troubleshooting Methodology 183

Identify the Problem 183

Establish Theory of Probable Cause 184

Test the Theory to Determine Cause 185

Establish a Plan of Action to Resolve the Problem and Identify Potential Effects 185

Implement the Solution or Escalate as Necessary 185

Verify Full System Functionality and If Applicable Implement Preventive Measures 186

Document Findings, Actions, and Outcomes 186

Exam Essentials 186

4.2 Given a Scenario, Analyze and Troubleshoot the Output of Troubleshooting Tools 186

Ipconfig/Ifconfig 187

Netstat 188

Ping/Ping6 190

Tracert/Traceroute 190

Nbtstat 191

Nslookup 192

ARP 193

Mac Address Lookup Table 194

Pathping 195

Line Testers/Certifiers 195

Multimeter 195

Cable Tester 196

Toner Probe 197

Speed Test Sites 198

Looking Glass Sites 198

Wi‐Fi Analyzer 199

Protocol Analyzer 199

Exam Essentials 199

4.3 Given a Scenario, Troubleshoot and Resolve Common Wireless Issues 200

Signal Loss 200

Interference 200

Overlapping/Mismatched Channels 200

Signal‐to‐Noise Ratio 201

Device and Bandwidth Saturation 201

Untested Updates 201

Wrong SSID 201

Power Levels 202

Open Networks 202

Rogue Access Point 202

Wrong Antenna Type 202

Icompatibilities 203

Wrong Encryption 203

Bounce 203

MIMO 204

AP Placement/Environmental Factors 204

AP Configuration 204

Wireless Standard Related Issues 204

Exam Essentials 205

4.4 Given a Scenario, Troubleshoot and Resolve Common Copper Cable Issues 206

Shorts 206

Opens 206

Incorrect Termination (Mismatched Standards) 206

Crosstalk 207

EMI/RFI 207

Distance Limitations 208

Bad Connector/Bad Wiring 208

Split Pairs 208

TX/RX Reverse 208

Cable Placement 209

Bad SFP/GBIC Cable or Transceiver 209

Exam Essentials 209

4.5 Given a Scenario, Troubleshoot and Resolve Common Fiber Cable Issues 210

Attenuation/DB Loss 210

SFP/GBIC–Cable, Wavelength, Fiber Types, Dirty Connectors, and Connector Mismatch 210

Bend Radius and Distance Limitations 210

Exam Essentials 210

4.6 Given a Scenario, Troubleshoot and Resolve Common Network Issues 211

Incorrect IP Configuration/Default Gateway 211

Broadcast Storms/Switching Loop 211

Duplicate IP 211

Speed and Duplex Mismatch 212

End‐to‐End Connectivity 212

Incorrect VLAN Assignment 212

Hardware Failure 213

Misconfigured DHCP/DNS 213

Incorrect Interface/Interface Misconfiguration 213

Cable Placement 213

Interface Errors 214

Simultaneous Wired and Wireless Connections 214

Discovering Neighboring Devices/Nodes 214

Power Failure/Power Anomalies 214

MTU/MTU Black Hole 215

Missing IP Routes 215

NIC Teaming Misconfiguration 215

Exam Essentials 216

4.7 Given a Scenario, Troubleshoot and Resolve Common Security Issues 216

Misconfigured Firewalls and ACLs 216

Malware 217

Denial of Service 217

Open/Closed Ports 217

ICMP‐Related Issues 217

Unpatched Firmware/OSs 218

Malicious Users 218

Authentication Issues 218

Improper Access/Backdoor Access 219

ARP Issues 219

Banner Grabbing/OUI 220

Domain/Local Group Configurations 221

Jamming 221

Exam Essentials 221

4.8 Given a Scenario, Troubleshoot and Resolve Common WAN Issues 222

Loss of Internet Connectivity 222

Interface Errors 222

DNS Issues/Split Horizon 223

Interference 223

Router Configurations 223

Customer Premise Equipment 223

Copper Line Drivers/Repeaters 225

Common Security Policy 225

Satellite Issues 225

Exam Essentials 225

Review Questions 227

Chapter 5 Domain 5.0 Industry Standards, Practices, and Network Theory 229

5.1 Analyze a Scenario and Determine the Corresponding OSI Layer 235

Exam Essentials 237

5.2 Explain the Basics of Network Theory and Concepts 237

Encapsulation/De-encapsulation 237

Modulation Techniques 238

Numbering Systems 239

Broadband vs. Baseband 242

Bit Rate vs. Baud Rate 242

Sampling Size 242

CSMA/CD 243

CSMA/CA 243

Wavelength 243

TCP/IP Suite 244

Exam Essentials 246

5.3 Given a Scenario, Deploy the Appropriate Wireless Standard 246

802.11 a/b/g/n/ac Standards 246

Exam Essentials 248

5.4 Given a Scenario, Deploy the Appropriate Wired Connectivity Standard 249

Ethernet Standards (Copper and Fiber) 249

Wiring Standards 250

Broadband Standards 251

Exam Essentials 251

5.5 Given a Scenario, Implement the Appropriate Policies or Procedures 251

Security Policies 251

Network Policies 252

Acceptable Use Policy 252

Standard Business Documents 252

Exam Essentials 253

5.6 Summarize Safety Practices 253

Electrical Safety 253

ESD 254

Installation Safety 254

MSDS 254

Emergency Procedures 255

Fire Suppression Systems 255

Exam Essentials 255

5.7 Given a Scenario, Install and Configure Equipment in the Appropriate Location Using Best Practices 256

IDF 256

MDF 256

Patch Panel 256

Power Management 257

Device Placement 258

Air Flow 258

Cable Trays 258

Rack Systems 258

Labeling 259

Rack Monitoring and Security 259

Exam Essentials 260

5.8 Explain the Basics of Change Management Procedures 260

Document Reason for a Change 261

Change Request 261

Approval Process 261

Maintenance Window 261

Notification of Change 262

Documentation 262

Exam Essentials 262

5.9 Compare and Contrast the Following Ports and Protocols 263

Hypertext Transfer Protocol (HTTP) 263

Hypertext Transfer Protocol Secure (HTTPS) 263

NetBIOS 264

Post Office Protocol Version 3 (POP3) 264

Internet Message Access Protocol Version 4 (IMAPv4) 264

Simple Mail Transfer Protocol (SMTP) 264

Session Initiation Protocol (SIP) 265

Media Gateway Control Protocol (MGCP) 265

Real-Time Transport Protocol (RTP) 265

H.323 265

Transmission Control Protocol (TCP) 265

User Datagram Protocol (UDP) 266

Exam Essentials 267

5.10 Given a Scenario, Configure and Apply the nAppropriate Ports and Protocols 267

File Transfer Protocol (FTP) 267

Simple Network Management Protocol 2/3 (SNMP 2/3) 268

Secure Shell (SSH) 268

Telnet 268

Domain Name System (DNS) 268

Dynamic Host Configuration Protocol (DHCP) 269

Trivial File Transfer Protocol (TFTP) 269

Server Message Block (SMB) 269

Remote Desktop Protocol (RDP) 269

Exam Essentials 270

Review Questions 271

Appendix Answers to Review Questions 273

Index 279