Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISSP > Secure Networks > Flashcards

Secure Networks Flashcards

1
Q

What protocol is session oriented and provides either 40bit or 128 bit encryption?

A

SSL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the characteristics of CHAP?

A

Challenge handshake authentication protocol… Used over PPP links and encrypts usernames and passwords.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is PAP?

A

Password Authentication Protocol. Standard authentication protocol for PPP. Does transmit Usernames and passwords in clear.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What makes EAP Unique?

A

More of a framework for authentication than a protocol. Allows for 3rd party integration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is PPTP?

A

PPTP - Point To Point Tunneling Protocol. Derived from PPP and works at layer 2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe the differences between L2F and L2TP

A

L2F - Layer 2 Forwarding vs L2TP - Layer 2 Tunneling Protocol. L2F does not encrypt.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe IPSec

A

Most commonly used VPN. It is both a protocol and a security mechanism for L2TP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the 2 main components of IPsec?

A 
Authentication Header (AH) - provides Authentication, integrity, and non repudiation.
Encapsulating Security Payload (ESP) - Provides encryption.  Operates at Layer 3.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

In IPsec what is the difference between Transport Mode and Tunnel Mode?

A

In tunnel mode the entire packet is encrypted and in transport mode the header is not encrypted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the address range for a private Class A network?

A

10.0.0.0 - 10.255.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the address range for a private class B network?

A

172.16.0.0. - 172.31.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the address range for a private class C network?

A

192.168.0.0 - 192.168.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is stateful NAT?

A

Basic NAT operation… Mapping of clients and internal addresses is maintained and managed during the session.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Static NAT?

A

Fixed address mapping. Used when and internal client needs to be accessed from the outside.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Dynamic NAT?

A

Allows multiple clients to share a few external IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is APIPA?

A

Automatic Private IP Addressing - Method of assigning IP address when DHCP fails. Primarily used in Windows

17
Q

What is RFC 1918?

A

Standard for private IP addressing.

18
Q

What is the difference between Circuit and Packet Switching?

A

Circuits depend on fixed connections for session communication and packets break payloads into smaller packets. oe Analog vs Digital.

19
Q

What is a BRI?

A

Basic Rate Interface - 2 B Channel communication with a throughput of 64 Kbps per channel.

20
Q

What is a PRI?

A

Primary Rate Interface - Allows multiple 64 Kbps B channels (2 - 23) and a single 64 Kbps D Channel.

21
Q

What is the purpose of the D Channel?

A

Manages the link.

22
Q

What is the CSU/ DSU and its purpose?

A

Border management in a WAN connection. CSU - Channel Service Unit
DSU - Data Service Unit

23
Q

What is X.25?

A

Older packet switched technology used mainly in Europe.

24
Q

What is Frame Relay?

A

Layer 2 packet switched. It supports multiple PVC (Permanent Virtual Circuit) over a single connection.

25
Q

What is a PVC

A

Permanent virtual circuit. Like a dedicated leased line. Always on and ready to go.

26
Q

What is an SVC

A

Switched Virtual Circuit. Operates more like a dial up connection. Some delay in opening the connection for use.

27
Q

What is the Committed Information Rate?

A

CIR is the basic connection bandwidth before any bursting is taken into consideration.

28
Q

What is ATM and when is it best used?

A

Asynchronous Transfer Mode - Packet Switching. Breaks packets into fixed 53 byte cells. Best used for high throughput environments.

29
Q

What is transparency in design?

A

The ability to apply security that cannot be seen/ observed by users.

30
Q

What are some checksum validation methods?

A

MD5 and SHA

31
Q

What are some basic security mechanisms when deploying an SMTP server?

A

Change basic settings (ie passwords).
Apply patches.
DO NOT enable open relay. This makes you a target for spammers.

32
Q 
Which of the following VPN protocols do not offer native data encryption?
A. L2F
B. L2TP
C. IPSec
D. PPTP
A

L2F
L2TP
PPTP

33
Q

At which OSI layer does the IPsec protocol function?

A

Network layer

34
Q 
When designing a security systems for internet delivered email, which of the following is least important?
A. Non repudiation
B. Availability
C. Message Integrity
D. Access Restriction
A

B. Availability

35
Q 
Which of the following is typically not a discussion topic with end users regarding email retention policies?
A. Privacy
B. Auditor Review
C. Length of retention
D. Backup method
A

D. - Backup method

36
Q 
Which of the following is a type of connection that can be described as a logical circuit that always exists and is waiting for data to be sent?
A. ISDN
B. PVC
C. VPN
D. SVC
37
Q 
What authentication protocol offers no encryption or protection for logon credentials?
A. PAP
B. CHAP
C. SSL
D. Radius

CISSP (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions