click below
click below
Normal Size Small Size show me how
N+ 3.Operations
3 > Network Operations
Question | Answer |
---|---|
Bandwidth Monitors | - amount of network used over time - SNMP, Netflow, protocol analysis etc |
Latency | - delay b/n request and response |
Jitter | - time between frames - excessive jitter can cause you to miss info, choppy voice calls |
SNMP | Simple Network Management Protocol - 161, 162 - database of data (MIB) - Management Information Base - remote monitoring of all devices - V3 new standard |
Interface Monitoring | - link status - error rate - utilization - discards, packet drops - interface resets - speed and duplex |
SNMP OIDs | Object Identifier - referenced by name or number - .iso(1).org(3) etc - .1.3. etc - every variable in the MIB has a corresponding OID SNMP manager requests info based on OID |
SNMP Traps | - most SNMP operations expect a poll -- devices then respond to the SNMP request - udp/162 - e.g. if number of CRC errors increase by 5, send a trap |
Traffic Log | - view traffic info from routers, switches, firewalls etc |
Audit Log | - what did they do and when did they do it |
Syslog | UDP 514/6514 - standard for message logging - usually a central logging receiver - integrated into a SIEM |
Interface Errors | Runts - frames that are less than 64 bytes Giants - frames that are more than 1518 bytes CRC error- failed the Frame Check Sequence, may indicate a bad cable or interface Encapsulation error - inconsistent configurations between switches |
Netflow | Probe and Collector - probe watches network communication - summary records are sent to collector |
Change Management | Have clear policies - frequency, duration, installation process, fallback procedures |
NIST | National Institute of Standards and Technology |
Incident Response Lifecycle PDCP | - Preparation - Detection and Analysis - Containment, Eradication, and Recovery - Post-incident Activity |
Disaster Recovery Plan | - recovery location - data recovery method - application restoration - IT team and employee availability |
COOP | Continuity of Operations Planning |
System Life Cycle | Managing asset disposal |
SLA | Service Level Agreement |
MOU | Memorandum of Understanding |
NDA | Non-disclosure Agreement |
AUP | Acceptable Use Policies |
DLP | Data Loss Prevention - Detailed policies needed to define what is allowed -- how is sensitive data transferred? - DLP solutions can watch and alert on policy violations |
Distribution Frame | - passive cable termination - usually mounted on the wall or flat surface - all transport media - often used as a room or location name |
MDF | Main Distribution Frame - central point of the network - termination point for WAN links |
IDF | Intermediate Distribution Frame - extension of the MDF - connects users to the network |
Port Labelling | E.g. -CB01-01A-DO88 -- CB01 - main facility -- 01A - floor 1, space A -- DO88 - Data port 88 |
Fault Tolerance | - maintain uptime in case of failure - single device fault tolerance -- RAID, redundant power supplies, redundant NICs |
Redundancy and Fault Tolerance | - redundant hardware components |
UPS | Uninterruptible Power Supplies |
RAID | Redundant Array of Independent Disks |
Clustering | Logical collective of servers |
Load Balancing | Shared service load across components |
LBFO | Load Balancing / Fail Over - aggregate bandwidth, redundant paths |
PDUs | Power Distribution Units - provide multiple power outlets - often include monitoring and control |
Active-passive | - two devices are installed and configured -- only one operates at a time - configuration and real-time session info is constantly synchronized |
Active-active | - use both at the same time |
Diverse Paths | - create multiple paths -- more than one ISP |
FHRP | First Hop Redundancy Protocol - your computer is configured with a single default gateway - we need a way to provide availability if the dg fails |
VRRP | Virtual Router Redundancy Protocol - default router isn't real - devices use a virtual IP for the default gateway - if a router disappears, another one takes its place |
RTO | Recovery Time Objective - get up and running quickly back to a particular service level |
RPO | Recovery Point Objective - how much data loss is acceptable? - how far back does the data go? |
MTTR | Mean Time To Repair |
MTBF | Mean Time Between Failures - predict the time b/n failures |