Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISSP > Secure Networks > Flashcards

Secure Networks Flashcards

1
Q

What protocol is session oriented and provides either 40bit or 128 bit encryption?

A

SSL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the characteristics of CHAP?

A

Challenge handshake authentication protocol… Used over PPP links and encrypts usernames and passwords.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is PAP?

A

Password Authentication Protocol. Standard authentication protocol for PPP. Does transmit Usernames and passwords in clear.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What makes EAP Unique?

A

More of a framework for authentication than a protocol. Allows for 3rd party integration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is PPTP?

A

PPTP - Point To Point Tunneling Protocol. Derived from PPP and works at layer 2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe the differences between L2F and L2TP

A

L2F - Layer 2 Forwarding vs L2TP - Layer 2 Tunneling Protocol. L2F does not encrypt.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe IPSec

A

Most commonly used VPN. It is both a protocol and a security mechanism for L2TP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the 2 main components of IPsec?

A 
Authentication Header (AH) - provides Authentication, integrity, and non repudiation.
Encapsulating Security Payload (ESP) - Provides encryption.  Operates at Layer 3.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

In IPsec what is the difference between Transport Mode and Tunnel Mode?

A

In tunnel mode the entire packet is encrypted and in transport mode the header is not encrypted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the address range for a private Class A network?

A

10.0.0.0 - 10.255.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the address range for a private class B network?

A

172.16.0.0. - 172.31.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the address range for a private class C network?

A

192.168.0.0 - 192.168.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is stateful NAT?

A

Basic NAT operation… Mapping of clients and internal addresses is maintained and managed during the session.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Static NAT?

A

Fixed address mapping. Used when and internal client needs to be accessed from the outside.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Dynamic NAT?

A

Allows multiple clients to share a few external IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is APIPA?

A

Automatic Private IP Addressing - Method of assigning IP address when DHCP fails. Primarily used in Windows

17
Q

What is RFC 1918?

A

Standard for private IP addressing.

18
Q

What is the difference between Circuit and Packet Switching?

A

Circuits depend on fixed connections for session communication and packets break payloads into smaller packets. oe Analog vs Digital.

19
Q

What is a BRI?

A

Basic Rate Interface - 2 B Channel communication with a throughput of 64 Kbps per channel.

20
Q

What is a PRI?

A

Primary Rate Interface - Allows multiple 64 Kbps B channels (2 - 23) and a single 64 Kbps D Channel.

21
Q

What is the purpose of the D Channel?

A

Manages the link.

22
Q

What is the CSU/ DSU and its purpose?

A

Border management in a WAN connection. CSU - Channel Service Unit
DSU - Data Service Unit

23
Q

What is X.25?

A

Older packet switched technology used mainly in Europe.

24
Q

What is Frame Relay?

A

Layer 2 packet switched. It supports multiple PVC (Permanent Virtual Circuit) over a single connection.

25
Q

What is a PVC

A

Permanent virtual circuit. Like a dedicated leased line. Always on and ready to go.

26
Q

What is an SVC

A

Switched Virtual Circuit. Operates more like a dial up connection. Some delay in opening the connection for use.

27
Q

What is the Committed Information Rate?

A

CIR is the basic connection bandwidth before any bursting is taken into consideration.

28
Q

What is ATM and when is it best used?

A

Asynchronous Transfer Mode - Packet Switching. Breaks packets into fixed 53 byte cells. Best used for high throughput environments.

29
Q

What is transparency in design?

A

The ability to apply security that cannot be seen/ observed by users.

30
Q

What are some checksum validation methods?

A

MD5 and SHA

31
Q

What are some basic security mechanisms when deploying an SMTP server?

A

Change basic settings (ie passwords).
Apply patches.
DO NOT enable open relay. This makes you a target for spammers.

32
Q 
Which of the following VPN protocols do not offer native data encryption?
A. L2F
B. L2TP
C. IPSec
D. PPTP
A

L2F
L2TP
PPTP

33
Q

At which OSI layer does the IPsec protocol function?

A

Network layer

34
Q 
When designing a security systems for internet delivered email, which of the following is least important?
A. Non repudiation
B. Availability
C. Message Integrity
D. Access Restriction
A

B. Availability

35
Q 
Which of the following is typically not a discussion topic with end users regarding email retention policies?
A. Privacy
B. Auditor Review
C. Length of retention
D. Backup method
A

D. - Backup method

36
Q 
Which of the following is a type of connection that can be described as a logical circuit that always exists and is waiting for data to be sent?
A. ISDN
B. PVC
C. VPN
D. SVC
A

B. PVC

37
Q 
What authentication protocol offers no encryption or protection for logon credentials?
A. PAP
B. CHAP
C. SSL
D. Radius
A

A. - PAP

CISSP (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions