All language subtitles for 1. OSI Model Layer Questions

In this video, we will see that our interview, which type of questions they ask regarding Osama questions.

So let's see.

I mean, definitely they are going to ask you that.

What is Osama there?

What protocols on every layer they can ask you how many there are layers and what what is the function

of those?

Right.

And one important question is that for us, a layer that they can ask that what are what different validity

is related to different different OSA layer means layer wise.

They are asking you they will limit it.

So these type of questions we are going to see in this video.

So firstly, what is OSA model layer?

It is open system interconnection we know is a reference model for how application communicate over

a network.

The only there there is seven layers and how actually the communication is happening.

That is what OSA model layer.

Now second question we have, can you tell OSA last name and at least one protocol for each layer?

So generally we have several layers in OSA layer.

The first one, we have physical layer right on which we are actually the bits is started where actually

the bits converted into for the next layer.

That is, if you can see, send it on to the physical wire.

Right.

And if we talk about the protocols, if you can see here, hops and cables, these are the protocols.

Second, we have data link layer, right, where the data framing is happening.

Right.

And here we all get to get the physical address and protocol like switches.

So this is the layer second switches, right.

And network layer on this we have protocol routers and layer three switches.

Now what is the difference between that layer three switches and layer two?

So on layer three, there is routing and switches would work, right?

And here only switches.

Now we have the fourth layer transport layers where there is end to end connections and reliability

and the protocol like TCP and UDP session layer, we have we use it for generally for the establishment

and connections between two host.

So for example, our protocols like net bias, PDP, present presentation layer, we have HTTPS, SSL,

GPG, these are some protocol.

And at the last application layer here we have SMTP, Telnet, SDP, FTP.

So whenever any, any interview, ask you on which layer SDP works, right?

So it is application layer.

They can ask some simple terms like on which layer https works.

So it's presentation layer.

So this type of questions also can be made.

Next question we have.

Do you know.

Attack on every.

Sorry, every website.

Leo, this is what I was talking about.

So on application layer, if you can see.

These are attacks actually injection cross-site scripting.

Okay.

So if you remember, we we were talking about client side, you know, client side attack about cross-site

scripting.

So what is client side?

That is obviously application, right?

So that is what application layer.

And parameter tempering can be happened slowly.

Surtax, which is only used for details on present day presentation layer.

We have attacks like SSL, hijacking decryption attacks and coding attacks on Chechen layer.

We have again session hijacking attack man in the middle, which is important.

They can ask on which layer man in the middle attack generally works.

So it's session layer.

Now such sniffing can also be.

Transport layer on transport layer.

This sequence prediction can be happens in flood and UDP based amplification attacks can be happened

on network layer IP spoofing and jamming.

Definitely.

Here we got the actually IP rate we have already seen here.

If let me show you again.

Yeah.

Then we got the logical logic.

That is IP address.

Okay.

So we were on the network layer, so IP spoofing and jamming can happen here.

Black hole attacks are civil attack packages, thing can be happen.

Data link here, layer here, ERP spoofing can be happen because there generally we got the MAC address,

right?

So ARP spoofing can be happened.

Mac cloning you can read about ERP that what actually the address resolution protocol.

So this is nothing but just it is used for the mapping of Mac Mac address and IP address.

So how actually spoofing work you can you can read out Google I gave you just an introduction that what

actually the ERP.

Now expanding to your deck villa and hoping these attacks can be happening happen here.

Physical layout there at the last layer.

Definitely physical damage can be happened and it has been seen many times that there is always a physical

damage on physical layer.

Apart from that data sniffing can be happen.

Unauthorized access also.

Okay.

So on which layer is be protocol work that is application layer.

What is middle?

How can you prevent men in the middle attack?

So my idea was working where it was working on the second layer.

If you can see here, let me show you again.

Concessionaire.

It was working man in the middle deck.

Right.

Okay.

So Amsterdam attack happens when the communication between two parties is intruded or intercepted by

an outside.

So let's say there is A and B, right?

And you are the third party or you just light in in the center part is sending something to be.

So you are sitting in the middle so you are taking something some data from and sending to B by modification.

But B is thinking that data is coming from A, so it's vice versa.

So this is what MIT attack.

So what we can do to mitigate it, so we can use the encryption right between both parties.

Whatever the data is transferring, we can avoid using open Wi-Fi networks and we can use HTTPS, forced

TLS or VPN.

So why we are using VPN?

Because it it gives us the option of encrypted.

You can say that with the help of encrypted tunnel, we can communicate securely.

What is sniffing so.

And do you know, do you any tool?

Okay.

There is something at it.

Do you know any tool for sniffing?

Obviously, Wireshark is one of the sniffing tool.

A sniffer attack corresponds to the type of interception of data by capturing the network traffic using

a sniffer.

I hope you have already used the Wireshark.

Right.

So this is what they sniffing is.

So that's it in this video and we'll talk in the next video that how actually you can prevent your organization

from ransomware.