WIXLIB

Cambridge TECHNICALS LEVEL 3ITMAPPING GUIDEUnit 4 Computer networksVersion 1ocr.org.uk/it

CAMBRIDGE TECHNICALS LEVEL 3 IN ITINTRODUCTIONProdigy are delighted to work with OCR, a progressive Awarding Organisation, whoshare the ambition of providing high-quality qualifications, learning solutions thatare industry-led and reliable and valid assessment. The Cambridge Technicals inIT qualifications provide ‘future-ready’ skills for a learner to further their ambitions,whether that is in terms of further academic study, enter an apprenticeship or as aspringboard to gaining employment.Prodigy Learning (Prodigy) is an award-winning EdTech business providing digitalskills certifications and learning solutions for a range of technologies includingAdobe, Autodesk and Microsoft. Established in 2000, Prodigy now have offices inDublin, London and Sydney. Having worked closely with Microsoft since 2000,Prodigy is a Microsoft Authorised Education Gold Partner and a MS Global TrainingPartner supporting academic institutions utilise Microsoft Imagine Academy,Microsoft certifications and other Microsoft Education solutions.Historically, the UK has thrived on a rich research and technology base and has beenat the forefront of global technology innovation. Enthusing young learners aboutfollowing exciting careers in science, technology, engineering and mathematics(STEM) subjects is fundamental to maintaining this success. However, currentlythe UK has a widely acknowledged skills gap in the pipeline of talent studyingcomputing-related disciplines. Therefore, providing high quality, engaging andrelevant qualifications that equip learners with current technical knowledge and skillsis essential to encourage more young people into the computing discipline, andmoreover to ensure they progress to jobs in the sector.UNIT 42

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT1. Understanding Network Infrastructures1.1.31.2.11.2.21.2.31.2.4firewalls perimeter addressing reservedVLANsnetworksaddressranges forlocal use(includinglocalloopbackip)1.2.1 Network types- local area network(LAN)XXX1.2.2 Network types- wireless local areanetwork nes1.3.2dial-up1.3.3ISDN,VPN,T1, T3,E1, E3,DSL,1.3.4 cable1.5.1and esh1.5.3ringXX1.2.3 Network types- wide area network(WAN)X1.4 Networktopologies(layout) (e.g. bus,wireless, segments,backbones)XXXX1.8.1 Networkaddressing - MACAddressingXX1.8.2 Networkaddressing - APIPAXX1.8.3 Networkaddressing - ClassaddressingXXXXUNIT 43

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT1.1.31.2.11.2.21.2.31.2.4firewalls perimeter addressing reservedVLANsnetworksaddressranges forlocal use(includinglocalloopbackip)1.8.4 Networkaddressing Classless addressingXX1.8.5 Networkaddressing - PrivateaddressingXX1.8.6 Networkaddressing- LoopbackaddressingXX1.10.2 NetworkSecurity - SecuritySystems (e.g.firewall, routers,WEP)X2.5.7 NetworkSpecification security networksecurity (e.g.firewall, MACfiltering)X2.6.4 NetworkPlan - software (e.g.operating .1leasedlines1.3.2dial-up1.3.3ISDN,VPN,T1, T3,E1, E3,DSL,1.3.4 cable1.5.1and esh1.5.3ringUNIT 44

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT1.1.31.2.11.2.21.2.31.2.4firewalls perimeter addressing reservedVLANsnetworksaddressranges forlocal use(includinglocalloopbackip)4.2.2 Maintenanceissues - virus:treatment (e.g. virusprotection, firewall,security update)X4.2.11 Maintenanceissues - securitysettings (e.g. 1leasedlines1.3.2dial-up1.3.3ISDN,VPN,T1, T3,E1, E3,DSL,1.3.4 cable1.5.1and esh1.5.3ring2. Understanding Network Hardware2.2.1transmissionspeedconsiderations1.3.6 Networkcomponents – routersX2.2.2 directlyconnectedroutesX2.2.3 staticroutingX2.2.4 dynamicrouting(routingprotocols)X2.2.5 defaultroutesX2.2.6 routing 2.2.7 routing 2.2.8 NATtable and how table memoryit selects bestroutesXXX2.2.9 softwarerouting inWindowsServerXUNIT 45

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT3. Understanding Protocols and Services3.1.1 OSI 3.1.2modelTCPmodel1.6.7 Networking models OSI 7 layer modelX3.1.3 examples 3.1.4 TCPof devices,and UDPprotocols, andapplicationsand which OSI/TCP layer theybelong toXXX1.6.8 Networking models TCP/IP modelXXX1.7 IP versions (e.g. IPv4,IPv6)X3.1.5 wellknownports 3.2.1packets and addressing,framessubnetting3.2.2 NAT,static IP,gateway3.2.3 APIPA3.2.4networkclasses,classful/classless IPaddressingXXXX1.8.1 Network addressing MAC AddressingXX1.8.3 Network addressing Class addressingX1.8.4 Network addressing Classless addressingX1.8.5 Network addressing Private addressingX1.8.6 Network addressing Loopback addressing1.9.1 Network data units Ethernet framesXX1.8.2 Network addressing- APIPA1.8.7 Network addressing TCP ports3.2.5reservedaddressranges forlocal use(includinglocalloopbackip)XXXUNIT 46

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT3.1.1 OSI 3.1.2modelTCPmodel3.1.3 examples 3.1.4 TCPof devices,and UDPprotocols, andapplicationsand which OSI/TCP layer theybelong to3.1.5 wellknownports .2.1packets and addressing,framessubnetting1.9.2 Network data units IP packetsX1.9.3 Network data units TCP packetsX3.2.2 NAT,static IP,gateway3.2.3 APIPA3.2.4networkclasses,classful/classless IPaddressing3.2.5reservedaddressranges forlocal use(includinglocalloopbackip)UNIT 47

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT3.3.13.3.2subnetting IPconfig1.7 IP versions (e.g. IPv4,IPv6)XX3.3.3 whyuse IPv6X3.3.43.3.5addressing ipv4toipv6tunnellingprotocolsto ensurebackwardscompatibilityXX3.3.6 dualip stackX3.3.7subnetmaskX3.3.8gatewayX3.3.9 portsX3.3.10packetsX1.8.6 Network addressing Loopback addressing1.9.2 Network data units IP packets3.3.11reservedaddressranges forlocal use(includinglocalloopbackip)XXXUNIT 48

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA NETWORKING FUNDAMENTALS UNIT3.5.1 DHCP3.5.2 IPsec3.5.3 remoteaccess3.6.1 tools suchas ping; tracert;pathping3.6.2 Telnet3.6.3 IPconfig;3.6.4 protocolsnetstat, reservedaddress rangesfor local use(including localloopback ip)1.5.3 Network protocols - TCPXXXX1.6.8 Networking models - TCP/IP modelXXXX2.2.1 Network Services - DHCPX2.2.4 Network Services - Other Services(e.g. printing, email, web, DNS)X2.4.1 Testing Tools - PingXXX2.4.2 Testing Tools - ipconfigX2.4.3 Testing Tools -pathpingX2.4.4 Testing Tools -tracertXUNIT 49

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT2. Understand operating system securityUNIT Service(RADIUS)2.1.4biometrics2.5.5 NetworkSpecification- security riskassessmentXXXX2.5.6 NetworkSpecification- securityWi-Fi securityXXX4.2.1Maintenanceissues - virus:sources(e.g. sues - virus:treatment(e.g. virusprotection,firewall,securityupdate)XX2.1.5use RunAs toperformadministrativetasks2.2.1 istry2.2.4ActiveDirectory2.2.5enable ordisableinheritance2.2.6behaviourwhenmoving orcopyingfileswithinthe samedisk or onanotherdisk2.2.7multiplegroupswith edpermissions2.2.9takeownership2.2.102.2.11delega- XXXXXXXXXXXXXXXXXX10

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 npasswordchanges2.3.6enforceby asswords2.4.Understandauditpolicies2.4.1Types ofauditing2.4.2whatcan beaudited2.4.3enableauditing2.4.4what toaudit forspecificpurposes2.4.5where tosave auditinformation2.4.6how tosecureauditinformation2.5.5 NetworkSpecification- security riskassessmentXXXXXXXXXXXXXXXX2.5.6 NetworkSpecification- securityWi-Fi securityXXXXXXXXXXXXXXXX4.2.1Maintenanceissues - virus:sources(e.g. 2Maintenanceissues - virus:treatment(e.g. XXXXXXUNIT 411

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT2.5.1Encryptingfile system(EFS)2.5.2how EFSencryptedfoldersimpactmoving/copyingfiles2.5.5 NetworkSpecification- security riskassessmentXX2.5.6 NetworkSpecification securityWi-Fi securityX4.2.1Maintenanceissues - virus:sources (e.g.email, hacking,softwareinstall)4.2.2Maintenanceissues - virus:treatment(e.g. cker(To tionandsigningand c key/private servicesinfrastructure2.5.12tokendevices2.5.13 lock downdevices to runonly XXXXXXXXXXXXXXXXXXUNIT 412

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 6.7ransomware adware2.6.8rootkits2.6.9backdoors2.6.10 zeroday attacks2.5.5 Network Specification security risk assessmentXXXXXXXXXX2.5.6 Network Specification security Wi-Fi securityXXXXXXXXXX4.2.1 Maintenance issues - virus:sources (e.g. email, hacking,software install)XXXXXXXXXX4.2.2 Maintenance issues - virus:treatment (e.g. virus protection,firewall, security update)XXXXXXXXXXUNIT 413

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT3. Understand network security3.1.1Types ofhardwarefirewallsand theircharacteristics3.1.2whento use ahardwarefirewallinsteadof asoftwarefirewall3.1.3stateful curityCompliance neypot perimeter networkVPNnetworks ainisolation2.5.7 NetworkSpecification - securitynetwork security (e.g.firewall, MAC filtering)XXXXXXXXXXXX4.2.1 Maintenance issues- virus: sources (e.g.email, hacking, softwareinstall)XXXXXXXXXXXX4.2.2 Maintenance issues- virus: treatment (e.g.virus protection, firewall,security updateXXXXXXXXXXXX4.2.11 Maintenanceissues - security settings(e.g. router, firewall)XXXXXUNIT 414

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT3.3.1 Protocolspoofing3.3.2 Ipsec3.3.3 tunnelling3.3.4 DNSsec3.3.5 networksniffing3.3.6 denial-ofservice (DoS)attacks3.3.7 commonattack methods2.5.7 Network Specification security network security (e.g.firewall, MAC filtering)XXXXXXX4.2.1 Maintenance issues - virus:sources (e.g. email, hacking,software install)XXXXXXX4.2.2 Maintenance issues - virus:treatment (e.g. virus protection,firewall, security update)XXXXXXXUNIT 415

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT4. Understand security oftwareinstallations4.1.3 UserAccountControl(UAC)4.1.4 keepclientoperatingsystem oftwarerestrictionpolicies4.1.7principalof shing,pharming;client vs.serverprotection4.2.2 Sender 4.2.3 PTRPolicyrecordsFramework(SPF)records2.5.6 Network Specification security Wi-Fi securityXXXXXXXXXX2.5.7 Network Specification security network security (e.g.firewall, MAC filtering)XXXXXXXXXX4.2.1 Maintenance issues - virus:sources (e.g. email, hacking,software install)XXXXXXXXXX4.2.2 Maintenance issues - virus:treatment (e.g. virus protection,firewall, security update)XXXXXXXXXX4.2.9 Maintenance issues security: security updateXXXXXXX4.2.10 Maintenance issues security: security breachXXXXXXX4.5.1 Software/Hardwareupdates - security updatesXUNIT 416

CAMBRIDGE TECHNICALS LEVEL 3 IN ITMAPPED TO MTA SECURITY FUNDAMENTALS 98-367 UNIT4.3.1Separation ofservices4.3.2 hardening4.3.3 keep serversupdated4.3.4 securedynamic DomainName System(DNS) updates4.3.5 disableunsecureauthenticationprotocols4.3.6 ReadOnly DomainControllers (RODC)2.5.6 Network Specification - security Wi-Fi securityXXXXXX2.5.7 Network Specification - security networksecurity (e.g. firewall, MAC filtering)XXXXXX4.2.1 Maintenance issues - virus: sources (e.g. email,hacking, software install)XXXXXX4.2.2 Maintenance issues - virus: treatment (e.g.virus protection, firewall, security update)XXXXXXUNIT 417