Cybersecurity Analyst
Networking questions
39 questions on Networking for cybersecurity analysts, easiest first.
Easy 11
- Default port for Remote Desktopeasy
- Which port does DNS use?easy
- What HTTPS protectseasy
- Which IP address is private?easy
- Sysmon Event ID 22easy
- Default port for SSHeasy
- What runs on port 445easy
- What TLS gives a connectioneasy
- DNS on UDP and TCPeasy
- The first TLS messageeasy
- Browser warns on a self-signed certeasy
Medium 14
- Wireshark filter for HTTP POSTsmedium
- What SNI shows on the wiremedium
- Trade-offs of TLS inspectionmedium
- What DNSSEC protectsmedium
- How a DNS sinkhole helpsmedium
- Why Telnet and FTP are riskymedium
- Finding failed DNS lookupsmedium
- Filtering TLS by server namemedium
- Self-signed certificates in ssl.logmedium
- Old traffic after a key leakmedium
- Wildcard certificate warningmedium
- Works in Chrome, fails in curlmedium
- How Let's Encrypt checks you own a domainmedium
- What mutual TLS addsmedium
Hard 14
- Browsers using DNS over HTTPShard
- A host with thousands of NXDOMAINshard
- Stopping SSL strippinghard
- A web page attacking the routerhard
- Apps that fail after TLS inspectionhard
- Where did the certificate details go?hard
- Decrypting your own test traffichard
- Why the IDS missed a web exploithard
- Traffic on UDP 443hard
- Pivoting on a C2 certificatehard
- Phishing on your own subdomainhard
- Maximum TLS certificate lifetimehard
- Risk of TLS 1.3 0-RTT datahard
- App breaks after a certificate changehard