Exam N Network+ Overview. Course Length. Prerequisites. Course Contents

Transcription

1 Network+ Exam N Overview This course is intended for new or intending network support technicians wishing to qualify with CompTIA Network+. It is also suitable for experienced technicians who require an industrybacked credential that validates their skills and knowledge. This course will particularly benefit students pursuing a career in network support, in job roles such as network administrator, network technician, network installer, help desk technician and IT cable installer Course Length 5 days Prerequisites CompTIA Network+ candidates are recommended to have the following: CompTIA A+ certification or equivalent knowledge At least 9 to 12 months of work experience in IT networking Course Contents Networking Concepts Explain the purposes and uses of ports and protocols. o Protocols and ports ü SSH 22 ü DNS 53 ü SMTP 25 ü SFTP 22 ü FTP 20, 21 ü TFTP 69 ü TELNET 23 ü DHCP 67, 68

2 ü HTTP 80 ü HTTPS 443 ü SNMP 161 ü RDP 3389 ü NTP 123 ü SIP 5060, 5061 ü SMB 445 ü POP 110 ü IMAP 143 ü LDAP 389 ü LDAPS 636 ü H o Protocol types ü ICMP ü UDP ü TCP ü IP o Connection-oriented vs. connectionless Explain devices, applications, protocols and services at their appropriate OSI layers. o Layer 1 Physical o Layer 2 Data link o Layer 3 Network o Layer 4 Transport o Layer 5 Session o Layer 6 Presentation o Layer 7 Application Explain the concepts and characteristics of routing and switching. o Properties of network traffic ü Broadcast domains ü CSMA/CD ü CSMA/CA ü Collision domains

3 ü Protocol data units ü MTU ü Broadcast ü Multicast ü Unicas o Segmentation and interface properties ü VLANs ü Trunking (802.1q) ü Tagging and untagging ports ü Port mirroring ü Switching loops/spanning tree ü PoE and PoE+ (802.3af, 802.3at) ü DMZ ü MAC address table ü ARP table o Routing ü Routing protocols (IPv4 and IPv6) Ø Distance-vector routing protocols v RIP v EIGRP Ø Link-state routing protocols v OSPF Ø Hybrid v BGP Ø Routing types v Static v Dynamic v Default o IPv6 concepts ü Addressing ü Tunneling o Dual stack

4 ü Router advertisement ü Neighbor discovery o Performance concepts ü Traffic shaping ü QoS ü Diffserv ü CoS o NAT/PAT o Port forwarding o Access control list o Distributed switching o Packet-switched vs. circuitswitched network o Software-defined networking Given a scenario, configure the appropriate IP addressing components. o Private vs. public o Loopback and reserved o Default gateway o Virtual IP o Subnet mask o Subnetting ü Classful Ø Classes A, B, C, D, and E ü Classless Ø VLSM Ø CIDR notation (IPv4 vs. IPv6) o Address assignments ü DHCP ü DHCPv6 ü Static ü APIPA ü EUI64 ü IP reservations

5 Compare and contrast the characteristics of network topologies, types and technologies. o Wired topologiesü Logical vs. physical ü Star ü Ring ü Mesh ü Bus o Wireless topologies ü Mesh ü Ad hoc ü Infrastructure o Types ü LAN ü WLAN ü MAN ü WAN ü CAN ü SAN ü PAN o Technologies that facilitate the Internet of Things (IoT) ü Z-Wave ü Ant+ ü Bluetooth ü NFC ü IR ü RFID ü Given a scenario, implement the appropriate wireless technologies and configurations. o standards ü a

6 ü b ü g ü n ü ac o Cellular ü GSM ü TDMA ü CDMA o Frequencies ü 2.4GHz ü 5.0GHz o Speed and distance requirements o Channel bandwidth o Channel bonding o MIMO/MU-MIMO o Unidirectional/omnidirectional o Site surveys Summarize cloud concepts and their purposes. o Types of services ü SaaS ü PaaS ü IaaS o Cloud delivery models ü Private ü Public ü Hybrid o Connectivity methods o Security implications/considerations o Relationship between local and cloud resources Explain the functions of network services. o DNS service ü Record types

7 Ø A, AAAA Ø TXT (SPF, DKIM) Ø SRV Ø MX Ø CNAME Ø NS Ø PTR ü Internal vs. external DNS ü Third-party/cloud-hosted DNS ü Hierarchy ü Forward vs. reverse zone o DHCP service ü MAC reservations ü Pools ü IP exclusions ü Scope options ü Lease time ü TTL ü DHCP relay/ip helper o NTP o IPAM Infrastructure Given a scenario, deploy the appropriate cabling solution. o Media types ü Copper Ø UTP Ø STP Ø Coaxial ü Fiber Ø Single-mode Ø Multimode o Plenum vs. PVC

8 o Connector types ü Copper Ø RJ-45 Ø RJ-11 Ø BNC Ø DB-9 Ø DB-25 Ø F-type ü Fiber Ø LC Ø ST Ø SC v APC v UPC ü MTRJ o Transceivers ü SFP ü GBIC ü SFP+ ü QSFP ü Characteristics of fiber transceivers Ø Bidirectional Ø Duplex o Termination points ü 66 block ü 110 block ü Patch panel ü Fiber distribution panel o Copper cable standards ü Cat 3 ü Cat 5 ü Cat 5e

9 ü Cat 6 ü Cat 6a ü Cat 7 ü RG-6 ü RG-59 o Copper termination standards ü TIA/EIA 568a ü TIA/EIA 568b ü Crossover ü Straight-through o Ethernet deployment standards ü 100BaseT ü 1000BaseT ü 1000BaseLX ü 1000BaseSX ü 10GBaseT Given a scenario, determine the appropriate placement of networking devices on a network and install/configure them. o Firewall o Router o Switch o Hub o Bridge o Modems o Wireless access point o Media converter o Wireless range extender o VoIP endpoint Explain the purposes and use cases for advanced networking devices. o Multilayer switch o Wireless controller o Load balancer

10 o IDS/IPS o Proxy server o VPN concentrator o AAA/RADIUS server o UTM appliance o NGFW/Layer 7 firewall o VoIP PBX o VoIP gateway o Content filter Explain the purposes of virtualization and network storage technologies. o Virtual networking components ü Virtual switch ü Virtual firewall ü Virtual NIC ü Virtual router ü Hypervisor o Network storage types ü NAS ü SAN o Connection type ü FCoE ü Fibre Channel ü iscsi ü InfiniBand o Jumbo frame Compare and contrast WAN technologies. o Service type ü ISDN ü T1/T3 ü E1/E3 ü OC-3 OC-192 ü DSL

11 ü Metropolitan Ethernet ü Cable broadband ü Dial-up ü PRI o Transmission mediums ü Satellite ü Copper ü Fiber ü Wireless o Characteristics of service ü MPLS ü ATM ü Frame relay ü PPPoE ü PPP ü DMVPN ü SIP trunk o Termination ü Demarcation point ü CSU/DSU ü Smart jack Network Operations Given a scenario, use appropriate documentation and diagrams to manage the network. o Diagram symbols o Standard operating procedures/ work instructions o Logical vs. physical diagrams o Rack diagrams o Change management documentation o Wiring and port locations o IDF/MDF documentation o Labeling

12 o Network configuration and performance baselines o Inventory management Compare and contrast business continuity and disaster recovery concepts. o Availability concepts ü Fault tolerance ü High availability ü Load balancing ü NIC teaming ü Port aggregation ü Clustering ü Power management Ø Battery backups/ups Ø Power generators Ø Dual power supplies Ø Redundant circuits o Recovery ü Cold sites ü Warm sites ü Hot sites ü Backups Ø Full Ø Differential Ø Incremental ü Snapshots o MTTR o MTBF o SLA Requirements Explain common scanning, monitoring and patching processes and summarize their expected outputs. o Processes ü Log reviewing ü Port scanning

13 ü Vulnerability scanning ü Patch management Ø Rollback ü Reviewing baselines ü Packet/traffic analysis o Event management ü Notifications ü Alerts ü SIEM o SNMP monitors ü MIB o Metrics ü Error rate ü Utilization ü Packet drops ü Bandwidth/throughput Given a scenario, use remote access methods o VPN ü IPSec ü SSL/TLS/DTLS ü Site-to-site ü Client-to-site o RDP o SSH o VNC o Telnet o HTTPS/management URL o Remote file access ü FTP/FTPS ü SFTP ü TFTP o Out-of-band management

14 ü -Modem ü Console router Identify policies and best practices. o Privileged user agreement o Password policy o On-boarding/off-boarding procedures o Licensing restrictions o International export controls o Data loss prevention o Remote access policies o Incident response policies o BYOD o AUP o NDA o System life cycle ü Asset disposal o Safety procedures and policies Network Security Summarize the purposes of physical security devices. o Detection ü Motion detection ü Video surveillance ü Asset tracking tags ü Tamper detection o Prevention ü Badges ü Biometrics ü Smart cards ü Key fob ü Locks Explain authentication and access controls. o Authorization, authentication and accounting

15 ü RADIUS ü TACACS+ ü Kerberos ü Single sign-on ü Local authentication ü LDAP ü Certificates ü Auditing and logging o Multifactor authentication ü Something you know ü Something you have ü Something you are ü Somewhere you are ü Something you do o Access control ü 802.1x ü NAC ü Port security ü MAC filtering ü Captive portal ü Access control lists Given a scenario, secure a basic wireless network. o WPA o WPA2 o TKIP-RC4 o CCMP-AES o Authentication and authorization ü EAP Ø PEAP Ø EAP-FAST Ø EAP-TLS ü Shared or open

16 ü Preshared key ü MAC filtering o Geofencing Summarize common networking attacks. o DoS ü Reflective ü Amplified ü Distributed o Social engineering o Insider threat o Logic bomb o Rogue access point o Evil twin o War-driving o Phishing o Ransomware o DNS poisoning o ARP poisoning o Spoofing o Deauthentication o Brute force o VLAN hopping o Man-in-the-middle o Exploits vs. Vulnerabilities Given a scenario, implement network device hardening. o Changing default credentials o Avoiding common passwords o Upgrading firmware o Patching and updates o File hashing o Disabling unnecessary services o Using secure protocols

17 o Generating new keys o Disabling unused ports ü IP ports ü Device ports (physical and virtual) Explain common mitigation techniques and their purposes. o Signature management o Device hardening o Change native VLAN o Switch port protection ü Spanning tree ü Flood guard ü BPDU guard ü Root guard ü DHCP snooping Network segmentation ü DMZ ü VLAN o Privileged user account o File integrity monitoring o Role separation o Restricting access via ACLs o Honeypot/honeynet o Penetration testing Network Troubleshooting and Tools Explain the network troubleshooting methodology. o Identify the problem ü Gather information ü Duplicate the problem, if possible ü Question users ü Identify symptoms ü Determine if anything has changed ü Approach multiple problems individually

18 o Establish a theory of probable cause ü Question the obvious ü Consider multiple approaches ü Top-to-bottom/bottom-to-top ü OSI model ü Divide and conquer o Test the theory to determine the cause ü Once the theory is confirmed, determine the next steps to resolve the problem ü If the theory is not confirmed, reestablish a new theory or escalate o Establish a plan of action to resolve the problem and identify potential effects o Implement the solution or escalate as necessary o Verify full system functionality and, if applicable, implement preventive measures o Document findings, actions, and outcomes Given a scenario, use the appropriate tool. o Hardware tools ü Crimper ü Cable tester ü Punchdown tool ü OTDR ü Light meter ü Tone generator ü Loopback adapter ü Multimeter ü Spectrum analyzer o Software tools ü Packet sniffer ü Port scanner ü Protocol analyzer ü WiFi analyzer ü Bandwidth speed tester ü Command line Ø ping

19 Ø tracert, traceroute Ø nslookup Ø ipconfig Ø ifconfig Ø iptables Ø netstat Ø tcpdump Ø pathping Ø nmap Ø route Ø arp Ø dig Given a scenario, troubleshoot common wired connectivity and performance issues. o Attenuation o Latency o Jitter o Crosstalk o EMI o Open/short o Incorrect pin-out o Incorrect cable type o Bad port o Transceiver mismatch o TX/RX reverse o Duplex/speed mismatch o Damaged cables o Bent pins o Bottlenecks o VLAN mismatch o Network connection LED status indicators Given a scenario, troubleshoot common wireless connectivity and performance issues.

20 o Reflection o Refraction o Absorption o Latency o Jitter o Attenuation o Incorrect antenna type o Interference o Incorrect antenna placement o Channel overlap o Overcapacity o Distance limitations o Frequency mismatch o Wrong SSID o Wrong passphrase o Security type mismatch o Power levels o Signal-to-noise ratio Given a scenario, troubleshoot common network service issues. o Names not resolving o Incorrect gateway o Incorrect netmask o Duplicate IP addresses o Duplicate MAC addresses o Expired IP address o Rogue DHCP server o Untrusted SSL certificate o Incorrect time o Exhausted DHCP scope o Blocked TCP/UDP ports o Incorrect host-based firewall settings o Incorrect ACL settings

21 o Unresponsive service o Hardware failure Certification Information Exam N10-007