Question 1

What is the difference between an IP address and a port?

Accepted Answer

An IP address acts like the street address of a large apartment complex, directing data to the correct physical or virtual building on a network. Ports, on the other hand, act like individual apartment numbers within that building. There are 65,535 possible ports on every device, and they ensure that data reaches the specific service it needs, such as a web browser, an email client, or a database.

Question 2

Why are some network protocols considered "dinosaurs" or "glass houses"?

Accepted Answer

Older protocols like Telnet (port 23) and FTP (port 21) were designed in an era when the internet was built entirely on trust, long before modern security was a priority. These protocols are considered "glass houses" because they send data in cleartext, meaning information like usernames and passwords is not encrypted. Anyone monitoring the network traffic can easily read this data as if it were written in giant letters.

Question 3

What is the "Three-Way Handshake" in network communication?

Accepted Answer

The Three-Way Handshake is the process used by the Transmission Control Protocol (TCP) to establish a reliable connection between two computers. It begins with a "SYN" (synchronize) packet from the sender, followed by a "SYN-ACK" (synchronize-acknowledge) from the receiver, and concludes with an "ACK" (acknowledge) from the original sender. This orderly exchange ensures both parties are ready to trade data, though it can be exploited by attackers through "SYN Flooding" to overwhelm a server's resources.

Question 4

What is the difference between Passive and Active Reconnaissance?

Accepted Answer

Passive Reconnaissance involves gathering information about a target without ever directly touching their systems, often using Open Source Intelligence (OSINT) like public records, job postings, or certificate logs. Active Reconnaissance involves "knocking on the doors" by sending data packets directly to the target's ports using tools like Nmap. While active scanning provides more detailed information about software versions, it is "noisy" and more likely to be detected by a target's security team.

Question 5

Why is the reporting phase considered the most important part of a penetration test?

Accepted Answer

The primary goal of a professional penetration test is not just to break into a system, but to provide a roadmap for making that system more secure. A high-quality report translates technical vulnerabilities into business risks for executives while providing specific, prioritized remediation guidance for technical teams. Without a clear report that explains how to fix the identified flaws, the organization remains vulnerable to actual malicious attacks.

Penetration testing for beginners: How the internet works

How This Personalized Podcast Was Made