Cambridge TECHNICALS LEVEL 3

Transcription

1 Cambridge TECHNICALS LEVEL 3 IT MAPPING GUIDE Unit 4 Computer networks Version 1 ocr.org.uk/it

2 INTRODUCTION Prodigy are delighted to work with OCR, a progressive Awarding Organisation, who share the ambition of providing high-quality qualifications, learning solutions that are industry-led and reliable and valid assessment. The Cambridge Technicals in IT qualifications provide future-ready skills for a learner to further their ambitions, whether that is in terms of further academic study, enter an apprenticeship or as a springboard to gaining employment. Prodigy Learning (Prodigy) is an award-winning EdTech business providing digital skills certifications and learning solutions for a range of technologies including Adobe, Autodesk and Microsoft. Established in 2000, Prodigy now have offices in Dublin, London and Sydney. Having worked closely with Microsoft since 2000, Prodigy is a Microsoft Authorised Education Gold Partner and a MS Global Training Partner supporting academic institutions utilise Microsoft Imagine Academy, Microsoft certifications and other Microsoft Education solutions. Historically, the UK has thrived on a rich research and technology base and has been at the forefront of global technology innovation. Enthusing young learners about following exciting careers in science, technology, engineering and mathematics (STEM) subjects is fundamental to maintaining this success. However, currently the UK has a widely acknowledged skills gap in the pipeline of talent studying computing-related disciplines. Therefore, providing high quality, engaging and relevant qualifications that equip learners with current technical knowledge and skills is essential to encourage more young people into the computing discipline, and moreover to ensure they progress to jobs in the sector. 2

3 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT 1. Understanding Network Infrastructures Network types - local area network (LAN) Network types - wireless local area network (WLAN) Network types - wide area network (WAN) 1.4 Network topologies (layout) (e.g. bus, wireless, segments, backbones) Network - MAC Addressing Network - APIPA Network - Class firewalls perimeter networks reserved address ranges for local use (including local loopback ip) VLANs wired LAN wireless LAN leased lines dial-up ISDN, VPN, T1, T3, E1, E3, DSL, cable and their characteristics (speed, availability) star mesh ring 3

4 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT Network - Classless Network - Private Network - Loopback Network Security - Security Systems (e.g. firewall, routers, WEP) Network Specification - security network security (e.g. firewall, MAC filtering) Network Plan - software (e.g. operating systems, firewall) firewalls perimeter networks reserved address ranges for local use (including local loopback ip) VLANs wired LAN wireless LAN leased lines dial-up ISDN, VPN, T1, T3, E1, E3, DSL, cable and their characteristics (speed, availability) star mesh ring 4

5 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Maintenance issues - security settings (e.g. router, firewall) firewalls perimeter networks reserved address ranges for local use (including local loopback ip) 2. Understanding Network Hardware Network components routers transmission speed considerations directly connected routes static routing VLANs wired LAN dynamic routing (routing protocols) wireless LAN leased lines default routes dial-up ISDN, VPN, T1, T3, E1, E3, DSL, routing table and how it selects best routes cable and their characteristics (speed, availability) routing table memory star mesh ring NAT software routing in Windows Server 5

6 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT 3. Understanding Protocols and Services Networking models - OSI 7 layer model Networking models - TCP/IP model 1.7 IP versions (e.g. IPv4, IPv6) Network - MAC Addressing Network - APIPA Network - Class Network - Classless Network - Private Network - Loopback Network - TCP ports Network data units - Ethernet frames OSI model TCP model examples of devices, protocols, and applications and which OSI/ TCP layer they belong to TCP and UDP wellknown ports for most-used purposes (not necessarily Internet) packets and frames 3.2.1, subnetting NAT, static IP, gateway APIPA network classes, classful/ classless IP reserved address ranges for local use (including local loopback ip) 6

7 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT Network data units - IP packets Network data units - TCP packets OSI model TCP model examples of devices, protocols, and applications and which OSI/ TCP layer they belong to TCP and UDP wellknown ports for most-used purposes (not necessarily Internet) packets and frames 3.2.1, subnetting NAT, static IP, gateway APIPA network classes, classful/ classless IP reserved address ranges for local use (including local loopback ip) 7

8 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT 1.7 IP versions (e.g. IPv4, IPv6) Network - Loopback Network data units - IP packets subnetting IPconfig why use IPv ipv4toipv6 tunnelling protocols to ensure backwards compatibility dual ip stack subnet mask gateway ports packets reserved address ranges for local use (including local loopback ip) 8

9 MAPPED TO MTA NETWORKING FUNDAMENTALS UNIT DHCP IPsec remote access tools such as ping; tracert; pathping Telnet IPconfig; netstat, reserved address ranges for local use (including local loopback ip) protocols Network protocols - TCP Networking models - TCP/IP model Network Services - DHCP Network Services - Other Services (e.g. printing, , web, DNS) Testing Tools - Ping Testing Tools - ipconfig Testing Tools -pathping Testing Tools -tracert 9

10 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT 2. Understand operating system security Network Specification - security risk assessment Network Specification - security Wi-Fi security Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Multifactor authentication physical and virtual smart cards Remote Authentication Dial-In User Service (RADI- US) biometrics use Run As to perform administrative tasks File system permissions share permissions registry Active Directory enable or disable inheritance behaviour when moving or copying files within the same disk or on another disk multiple groups with different permissions basic permissions and advanced permissions take ownership delegation inheritance 10

11 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT Network Specification - security risk assessment Network Specification - security Wi-Fi security Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Password complexity account lockout password length password history time between password changes enforce by using Group Policies common attack methods password reset procedures protect domain user account passwords 2.4. Understand audit policies Types of auditing what can be audited enable auditing what to audit for specific purposes where to save audit information how to secure audit information 11

12 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT Network Specification - security risk assessment Network Specification - security Wi-Fi security Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Encrypting file system (EFS) how EFSencrypted folders impact moving/ copying files BitLocker (To Go); TPM softwarebased encryption MAIL encryption and signing and other uses virtual private network (VPN) public key/ private key encryption algorithms certificate properties certificate services PKI/certificate services infrastructure token devices lock down devices to run only trusted applications 12

13 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT Network Specification - security risk assessment Network Specification - security Wi-Fi security Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Buffer overflow viruses, polymorphic viruses worms Trojan horses spyware ransomware adware rootkits backdoors zero day attacks 13

14 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT 3. Understand network security Network Specification - security network security (e.g. firewall, MAC filtering) Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update Maintenance issues - security settings (e.g. router, firewall) Types of hardware firewalls and their characteristics when to use a hardware firewall instead of a software firewall stateful vs. stateless firewall inspection Security Compliance Manager security baselines Routing honeypot perimeter networks network address translation (NAT) VPN Ipsec server and domain isolation 14

15 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT Network Specification - security network security (e.g. firewall, MAC filtering) Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Protocol spoofing Ipsec tunnelling DNSsec network sniffing denial-ofservice (DoS) attacks common attack methods 15

16 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT 4. Understand security software Network Specification - security Wi-Fi security Network Specification - security network security (e.g. firewall, MAC filtering) Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) Maintenance issues - security: security update Maintenance issues - security: security breach Software/Hardware updates - security updates Antivirus protect against unwanted software installations User Account Control (UAC) keep client operating system and software updated encrypt offline folders software restriction policies principal of least privilege Antispam, antivirus, spoofing, phishing, pharming; client vs. server protection Sender Policy Framework (SPF) records PTR records 16

17 MAPPED TO MTA SECURITY FUNDAMENTALS UNIT Separation of services hardening keep servers updated secure dynamic Domain Name System (DNS) updates disable unsecure authentication protocols Read- Only Domain Controllers (RODC) Network Specification - security Wi-Fi security Network Specification - security network security (e.g. firewall, MAC filtering) Maintenance issues - virus: sources (e.g. , hacking, software install) Maintenance issues - virus: treatment (e.g. virus protection, firewall, security update) 17

18 The small print We d like to know your view on the resources we produce. By clicking on the Like or Dislike button you can help us to ensure that our resources work for you. When the template pops up please add additional comments if you wish and then just click Send. Thank you. Whether you already offer OCR qualifications, are new to OCR, or are considering switching from your current provider/awarding organisation, you can request more information by completing the Expression of Interest form which can be found here: OCR Resources: the small print OCR s resources are provided to support the delivery of OCR qualifications, but in no way constitute an endorsed teaching method that is required by OCR. Whilst every effort is made to ensure the accuracy of the content, OCR cannot be held responsible for any errors or omissions within these resources. We update our resources on a regular basis, so please check the OCR website to ensure you have the most up to date version. This resource may be freely copied and distributed, as long as the OCR logo and this small print remain intact and OCR is acknowledged as the originator of this work. Our documents are updated over time. Whilst every effort is made to check all documents, there may be contradictions between published support and the specification, therefore please use the information on the latest specification at all times. Where changes are made to specifications these will be indicated within the document, there will be a new version number indicated, and a summary of the changes. If you do notice a discrepancy between the specification and a resource please contact us at: resources.feedback@ocr.org.uk. OCR acknowledges the use of the following content: Front cover: Young female with tablet, wavebreakmedia/ Shutterstock.com; Square down and Square up: alexwhite/ Shutterstock.com Please get in touch if you want to discuss the accessibility of resources we offer to support delivery of our qualifications: resources.feedback@ocr.org.uk OCR Customer Contact Centre Vocational qualifications Telephone Facsimile vocational.qualifications@ocr.org.uk OCR is part of Cambridge Assessment, a department of the University of Cambridge. For staff training purposes and as part of our quality assurance programme your call may be recorded or monitored. OCR 2018 Oxford Cambridge and RSA Examinations is a Company Limited by Guarantee. Registered in England. Registered office The Triangle Building, Shaftesbury Road, Cambridge, CB2 8EA. Registered company number OCR is an exempt charity. Looking for a resource? There is now a quick and easy search tool to help find free resources for your qualification: