TRAINER RESOURCE

NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION

YOUR PROGRESSION, OUR PASSION!

 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
NETCOM TRAINING
CompTIA Secure Infrastructure Specialist (CSIS)
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION

CompTIA Network+ Exam N10-008

Lesson 9
Explaining Transport Layer Protocols

Copyright © 2023
2022 CompTIA, Inc. All Rights Reserved. | CompTIA.org
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Objectives
Compare and contrast transport protocols
Use appropriate tools to scan network ports
Lesson 9

Topic 9A
Compare and Contrast Transport
Protocols

Copyright © 2023
2022 CompTIA, Inc. All Rights Reserved. | CompTIA.org
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Transport Layer Ports and Connections
Identify individual applications as port
numbers
Socket
Source IP plus port bound to
software process
Connection
Client IP and port connected to
server IP and port
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Transmission Control Protocol
Connection-oriented, guaranteed delivery
Segments with header fields to track sequence and acknowledgements
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
TCP Handshake and Teardown
Three-way handshake
Client SYN
Server SYN/ACK
Client ACK
Graceful teardown
FIN
ACK
FIN
ACK
Session termination
RST
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
User Datagram Protocol
Connectionless, non-guaranteed communication
Fewer header fields required
Used by protocols that can tolerate lost or out-of-order packets
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Common TCP and UDP Ports
TCP/UDP/53 UDP/123 UDP/67 UDP/68 UDP/546 UDP/547 TCP/80
DNS NTP DHCP-Server DHCP-Client DHCPv6-Client DHCPv6- HTTPS
Server
TCP/25 TCP/587 TCP/110 TCP/995 TCP/143 TCP/993 TCP/443
SMTP SMTPS POP POP3S IMAP IMAPS HTTPS
UDP/5004 UDP/5005 TCP/UDP/5060 TCP/UDP/5061 TCP/1433 TCP/1521 TCP/3306
RTP RTCP SIP SIPS MS-SQL SQL*net MySQL

TCP/20 TCP/21 TCP/22 TCP/23 UDP/69 TCP/3389

FTP-Data FTP-Control SSH/SFTP Telnet TFTP RDP

UDP/514 UDP/161 UDP/162 TCP/UDP/389 TCP/636 TCP/445

Syslog SNMP SNMP-Trap LDAP LDAPS SMB over
TCP/IP
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Review Activity: Transport Protocols
• Transport Layer Ports and Connections
• Transmission Control Protocol
• TCP Handshake and Teardown
• User Datagram Protocol
• Common TCP and UDP Ports
Lesson 9

Topic 9B
Use Appropriate Tools to Scan
Network Ports

Copyright © 2023
2022 CompTIA, Inc. All Rights Reserved. | CompTIA.org
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Nmap
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
IP Scanners
• Perform host and topology discovery
to maximize network visibility
• Standalone tools
• IP Address Management (IPAM)
• Determining “up” status
• ping, arp, traceroute
• Simple Network Management Protocol
(SNMP)
• Query DHCP/DNS
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
netstat
• Report local port status
• TCP versus UDP
• Local IP and port
• Remote IP and port
• State (Listening, Established, …)
• Options
• Skip name resolution, show process,
report statistics, …
• Windows versus Linux syntax differences
• iproute2 ss and nstat commands replace
netstat
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Remote Port Scanners
• Report port status from a remote host
• Scan types
• Half-open, full connect, UDP, port range, …
• Host and service fingerprinting
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Protocol Analyzers
• Decode frames captured by sniffer
• Live capture or saved capture file (pcap)
• Parse header fields to reveal packet metadata
• Reconstruct TCP streams
• Analyze traffic statistics
• Per-host utilization
• Per-protocol utilization
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION
Review Activity: Port Scanning
• IP Scanners
• Nmap
• netstat
• Remote Port Scanners
• Protocol Analyzers
 TRAINER RESOURCE
NETCOM TRAINING
LEARNER RESOURCE

LEARNER INDUCTION

CompTIA Network+ Exam N10-008

Lesson 9
Summary

Copyright © 2023
2022 CompTIA, Inc. All Rights Reserved. | CompTIA.org