Polygon examination

Содержание и основные понятия

Back to the table of contents
Alterna · Chapter 5 · page 5.5
Polygon examination
Check yourself out: OGE No. 7, No. 8 and EEG No. 13, Quest scripts, a bank test of 75 jobs and a mission developed.
This page is
Final inspection
This is a collection of tasks similar to those encountered at the EEG and EGE.
The bank contains
75 jobs
: 25 - OGE 7 format (URL/IP), 25 - EGE 8 format (search requests), 25 = EGE 13 format (subset masks), each opening being randomly sampled.
OGE No. 7
OGE No. 8
EEG No. 13
01
Conformity map
What's the theme of chapter 5? What is the test assignment?
Subject
Page
Examination
What's being tested
URL, protocol, domain
5.1
OGE 7
Scratch URL into parts: protocol, server, path, file
IP addresses, classes
5.1
OGE 7
Identify class, type (private/public), Octates
Search requests (I/OR)
5.1
OGE 8
Formula for inclusions, sorting by number of results
The masks of the subnets
5.2
EEG 13
IP and mask network address, number of hosts, CIDR
RAID, NAS, SAN
5.3
PIF
Theory (not tested directly, but needed for understanding)
Firewall, VPN, TLS
5.4
PIF
Theory (in-depth)
02
Quest: Network Admin
8 Scenarios — Make a Maximum XP
EEG + EEG
0 / 80 XP
1 / 8
03
Test
15 random tasks from the bank · 5 OGE7 + 5 OEG8 + 5 EEG13 · 20 minutes
OGE 7
OGE 8
EEG 13
04
Open task
Situational challenge — Write a solution with text
PLF · Infred
Scenario: Suspicious traffic
You're the network administrator of the school.
192.168.1.45
(Cables) sends a large volume of traffic to an external IP address.
185.234.218.50
Through port
4444
This IP is not on the list of authorized persons, but at the same time several teachers complained that the Internet was slowing down.
Job:
Describe the plan of action: (1) Situation analysis, (2) Diagnostics, (3) Response measures, (4) Prevention.
Evaluation criteria (max. 4)
Analysis (1 point):
The threat is a possible harmful activity (botnet, data leak, engineering).
Diagnostics (1 point):
Check the process that traffic sends (netstat, task manager). Check the MAC address. Check the firewall logs. Isolate the computer from the network.
Removal (1 point):
Lock the IP and port on firewall. Check the computer with an antivirus. Reset the OS if necessary. Re-establish the Internet for others (limit the capacity).
Prevention (1 point):
Settings firewall: default deny for non-standard ports. Introduce IDS/IPS. Update anti-virus databases. Conduct a security briefing.