Candi's Cissp Domain 4

Front 1

What did ISO create to get everyone on the same networking standards allowing for integration across vendors?

Back 1

OSI (Open Systems Interconnection) model

Front 2

True or False. The OSI model has 7 layers that talk to the layer above and below as well as to the peer layer in another system.

Back 2

True

Front 3

What is a common mnemonic to help you remember the 7 layers of the OSI model?

Back 3

All People Seem To Need Domino's Pizza

Front 4

What is the OSI layer 1 and what is transmitted there?

Back 4

Physical and bits are transmitted

Front 5

What is the OSI layer 2 and what is transmitted?

Back 5

Data Link and frames are transmitted

Front 6

What is the OSI layer 3 and what is transmitted?

Back 6

Network and packets are transmitted

Front 7

What is the OSI layer 4 and what is transmitted?

Back 7

Transport and segments/datagrams are transmitted

Front 8

What is the OSI layer 5 and what is transmitted?

Back 8

Session and data streams are transmitted

Front 9

What is the OSI layer 6 and what is transmitted?

Back 9

Presentation and data streams are transmitted

Front 10

What is the OSI layer 7 and what is transmitted?

Back 10

Application and data streams are transmitted

Front 11

What is the addition of a header and sometimes a footer to the payload as communication goes down the OSI layers?

Back 11

Encapsulation

Front 12

What is it when headers are peeled away from the payload as communication goes up the OSI layers?

Back 12

De-encapsulation

Front 13

What OSI layers are considered media layers?

Back 13

Layers 1-3 (physical, data link, network)

Front 14

What OSI layers are considered host layers?

Back 14

Layers 4-7 (transport, session, presentation, application)

Front 15

This OSI layer is where media, signal and binary transmission occurs.

Back 15

L1 Physical

Front 16

This OSI layer is where physical MAC & LLC addressing occurs.

Back 16

L2 Data Link

Front 17

This OSI layer is where path determination and logical IPSEC addressing occurs.

Back 17

L3 Network

Front 18

This OSI layer is where end to end connections and reliability occurs.

Back 18

L4 Transport

Front 19

This OSI layer is where interhost communication is established.

Back 19

L5 Session

Front 20

This OSI layer is where data representation and encryption occurs.

Back 20

L6 Presentation

Front 21

This OSI layer is where the network connects to the application.

Back 21

L7 Application

Front 22

What computer networking model did DARPA/DoD (dept of defense) create with just 4 levels?

Back 22

TCP/IP (Transmission Control Protocol/ Internet Protocol)

Front 23

What are the 4 TCP/IP layers?

Back 23

Network Access, Internet, Transport, Application

Front 24

What OSI & TCP/IP layers do ethernet and token rings belong to?

Back 24

Physical - Network Access

Front 25

What OSI & TCP/IP layers do ARP & RARP (address resolution) protocols play?

Back 25

Data Link - Network Access

Front 26

What OSI & TCP/IP layers do IP, ICMP, IGMP (control message) protocols play in?

Back 26

Network - Internet

Front 27

What OSI & TCP/IP layers do TCP, UDP (transmission control, user datagram) protocols play?

Back 27

Transport - Transport (aka host-to-host)

Front 28

What OSI & TCP/IP layers do DNS, DHCP, NTP, HTTPS, FTP, SSH, POP3, Telnet play?

Back 28

Application - Application

Front 29

What devices/apps show up at the L1 Physical and Network Access layers?

Back 29

Hub, repeaters, modems

Front 30

What devices/apps show up at the L2 Data Link and Network Access layers?

Back 30

Bridge, layer 2 switch

Front 31

What devices/apps show up at the L3 Network and Internet layers?

Back 31

Router, firewalls, layer 3 switch

Front 32

What devices/apps show up at the L4 Transport layers?

Back 32

Gateways

Front 33

What devices/apps show up at L5 Session, L6 Presentation , L7 Application layers?

Back 33

Web server, mail server, browser

Front 34

What are the 3 layers of TCP/IP addressing?

Back 34

1. Domain name (google.com)

2. IP address (temp number assigned to MAC address)

3. MAC address (permanent)

Front 35

What is the number range for IP Class A (the 1st of the 4 sections in an IP address) and what is the host count?

Back 35

1 - 126

Host count is 16 million

Front 36

What is the number range for IP Class B and what is the host count?

Back 36

128 - 191

Host count is 65 thousand

Front 37

What is the number range for IP Class C and what is the host count?

Back 37

192 - 223

Host count is 254

Front 38

What is the number range for IP Class D and what is its purpose?

Back 38

224 - 239

Purpose is multicasting (transmitting to multiple recipients)

Front 39

What is the number range for IP Class E and what is its purpose?

Back 39

240 - 254

Purpose is future use and research

Front 40

What IP address broadcasts to all hosts on the local network?

Back 40

255.255.255.255

Front 41

What IP address range is reserved for loopback or local host?

Back 41

127.x.x.x

Front 42

What uses mask bits rather than dotted decimal notation?

Back 42

CIDR (classless inter-domain routing)

Front 43

IEEE 802.11 is the standard for what?

Back 43

Wireless network communications

Front 44

What IEEE amendment introduced the 5 Ghz frequency?

Back 44

IEEE 802.11a

Front 45

What IEEE amendment introduced 200+ Mbps and both 2.4 & 5 Ghz?

Back 45

IEEE 802.11n

Front 46

What is a case sensitive, 32 character unique identifier attached to the header of packets sent over a wireless LAN (WLAN) and acts like a password when a mobile device connects to the basic service set (BSS)?

Back 46

SSID (service set identifier)

Front 47

What is a security algorithm for wireless networks intended to provide data confidentiality comparable to wired networks?

Back 47

WEP Wired Equivalent Privacy

Front 48

True or False. WEP uses Rivest Cipher 4 (RC4), symmetric stream cipher, but was cracked because it used the same key for all connections.

Back 48

True

Front 49

Name the 2 methods for authenticating wireless clients.

Back 49

1. Open System Authentication (OSA)

2. Shared Key Authentication (SKA)

Front 50

What superseded WEP and negotiates unique keys and requires a passphrase of 14 characters or more?

Back 50

Wi-Fi Protected Access (WPA)

Front 51

What wireless network security method uses Counter Mode Cipher Block Chaining Message Protocol (CCMP)?

Back 51

WPA2 (Wireless Protected Access 2)

Front 52

What does EAP (extensible authentication protocol) do?

Back 52

It allows for new technologies to be compatible.

Front 53

What kind of portal is it where hotels want you to provide your name and room number before granting internet access?

Back 53

Captive portal

Front 54

What are the 8 steps in securing a new wireless/wi-fi network?

Back 54

1. Change the default password

2. Disable SSID broadcast

3. Change SSID to something unique

4. Enable MAC filtering

5. Turn on highest form of authentication and encryption (WPA2)

6. Separate external access using a firewall

7. Monitor communications with IDS (intrusion detection system)

8. Require VPN link

Front 55

What do attackers use to discover wireless networks (usually from within a car) then move to using sniffers to gather wireless packets?

Back 55

Wardriving

Front 56

What is a cross between the internet and intranet, such as DMZ's (demilitarized zones)?

Back 56

Extranet

Front 57

What is an approach to computer security that attempts to unify endpoint security technology (such as anti-virus and host intrusion prevention) with authentication and network security enforcement?

Back 57

Network Access Control (NAC)

Front 58

What network device manages, controls, blocks, and filters traffic?

Back 58

A firewall

Front 59

True or False. Firewalls are effective at blocking viruses and malware.

Back 59

False, but you can add antivirus scanners and IDS tools.

Front 60

True or False. Firewalls can hide the network, but can also be a single point of failure when you concentrate security features there.

Back 60

True

Front 61

What type of firewall filters traffic by looking at the message header; it has no authentication and operates at Network layer 3?

Back 61

Static packet-filtering firewall

Front 62

What type of firewall copies packets from one network to another; slows things down as each packet is examined and operates at Application layer 7?

Back 62

Application-level gateway firewall (aka Proxy)

Front 63

What type of firewall manages based off circuits, not the content of the traffic and operates at Session layer 5?

Back 63

Circuit level gateway firewall

Front 64

What type of firewall manages based off states in the network traffic like destination address, source of origin and operates at either Transport layer 4 or Network layer 3?

Back 64

Stateful inspection firewall (aka Dynamic packet filtering)

Front 65

What is a firewall with more than one interface where one acts as a bastion (guard house)?

Back 65

Multihomed firewall

Front 66

3 types of firewall architecture.

Back 66

Single, two, and three tiered

Front 67

What says that each device must maintain local security?

Back 67

End point security

Front 68

What rule defines the number of repeaters/concentrators used in a network design?

Back 68

5-4-3 rule [5 segments - 4 repeaters - 3 segments with clients]

Front 69

Fill in the blanks. _____ based network cables transmit electricity. _____ cable transmit light.

Back 69

Conductor and Fiber-optic

Front 70

What network topology connects each system/node to exactly two other nodes forming a single continuous pathway in a circle?

Back 70

Ring topology

Front 71

What network topology connects each system/node to a common trunk or backbone cable?

Back 71

Bus topology

Front 72

What network topology connects each system/node to a central device?

Back 72

Star topology

Front 73

What network topology connects each system/node connect systems to other systems?

Back 73

Mesh topology

Front 74

What is the finite set of signals that must be managed and is measured in frequency (Hz/hertz) and 900 MHz, 2.4 GHz, and 5 GHz are most common frequencies and are unlicensed?

Back 74

Radio Spectrum

Front 75

What is the use of multiple frequencies at the same time where the message is broken into parts and sent in parallel over multiple frequencies?

Back 75

Spread Spectrum

Front 76

What is FHSS (frequency hopping spread spectrum)?

Back 76

Sends data in a series while always changing the frequency.

Front 77

What is DSSS (direct sequence spread spectrum)?

Back 77

Uses available frequencies at the same time (goes faster).

Front 78

What is an example of a PAN (personal area network)?

Back 78

Bluetooth

Front 79

What LAN technology is a broadcast technology allowing numerous devices on the same medium?

Back 79

Ethernet

Front 80

What LAN technology passes tokens to control which systems can transmit data over network medium?

Back 80

Token Ring

Front 81

What LAN technology is a high speed token passing technology?

Back 81

FDDI fiber distributed data interface

Front 82

What listens to see if media is in use before transmitting, but doesn't address collisions?

Back 82

Carrier-Sense Multiple Access (CSMA)

Front 83

What CSMA has collision avoidance? AppleTalk and 802.11 use it.

Back 83

CSMA/CA

Front 84

What CSMA has collision detection sending a jam signal when a collision occurs? Ethernet uses it.

Back 84

CSMA/CD

Front 85

What has a copper core and braided shielding allowing 2 way communication? It is resistant to EMI (electromagnetic interference)

Back 85

Coaxial cable

Front 86

What cable transmits only a single signal at a time?

Back 86

Baseband cable

Front 87

What cable transmits multiple signals at a time?

Back 87

Broadband cable

Front 88

What secure channel protocol for applications is for sharing encryption keys?

Back 88

SKIP (Simple Key mgmnt for Internet Protocol)

Front 89

What secure channel protocol for applications encapsulates for authentication, integrity and confidentiality?

Back 89

swIPe (SW IP Encryption)

Front 90

What secure channel protocol for applications was developed by Netscape and protects between the web server and the browser?

Back 90

SSL (secure socket layer)

Front 91

What secure channel protocol for applications is the same as SSL, but uses stronger authentication and encryption?

Back 91

TLS (transport layer security)

Front 92

If the internet uses SSL/TLS, what does Visa and MC use for secure transactions over the internet (based on RSA encryption and the DES-data encryption standard)?

Back 92

SET (secure electronic transaction)

Front 93

What controls how logon credentials are exchanged and whether they have to be encrypted?

Back 93

Authentication protocols

Front 94

What authentication protocol encrypts username and password and uses a challenge-response dialogue?

Back 94

CHAP (Challenge Handshake Authentication Protocol)

Front 95

What authentication protocol has username and password in cleartext and no encryption?

Back 95

PAP (Password Authentication Protocol)

Front 96

What authentication protocol is more of a framework than a protocol and allows for customized authentication like smart cards, tokens and biometrics?

Back 96

EAP (Extensible Authentication Protocol)

Front 97

What authentication protocol encapsulates EAP (extensible authentication protocol) in a TLS tunnel?

Back 97

PEAP (Protected Extensible Authentication Protocol)

Front 98

What authentication protocol is Cisco's proprietary EAP response to the insecure WEP?

Back 98

LEAP (Lightweight Extensible Authentication Protocol)

Front 99

What encapsulates audio into IP packets for phone calls over TCP/IP?

Back 99

VoIP (voice over Internet Protocol)

Front 100

What is a phreaker?

Back 100

Someone who hacks a telecommunications system

Front 101

What colored box (Phreakers attack tool) is a custom built circuit board that attacks voltage lines to steal long distance service?

Back 101

Black box

Front 102

What colored box (Phreakers attack tool) simulates tones of coins being deposited into a pay phone?

Back 102

Red box

Front 103

What colored box (Phreakers attack tool) simulates 2600Hz tones attacking the telephone network trunk system?

Back 103

Blue box

Front 104

What colored box (Phreakers attack tool) controls the phone system with a dual tone multifrequency keypad?

Back 104

White box

Front 105

What is SMTP (simple mail transfer protocol)?

Back 105

Electronic mail (email) transmission standard

Front 106

What is a SMTP (simple mail transfer protocol) that does not authenticate called?

Back 106

Open relay agent

Front 107

What is a standard for authentication and confidentiality via public key encryption and digital signatures of email?

Back 107

S/MIME (Secure Multipurpose Internet Mail Extension)

Front 108

What is an email validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail is authorized and has not been modified through verification of domain name identity?

Back 108

DKIM (DomainKeys Identified Mail)

Front 109

What is an email encryption mechanism that provides authentication, integrity, confidentiality, and nonrepudation and uses RSA, DES and X.509?

Back 109

PEM (Privacy Enhanced Mail)

Front 110

What are the 2 types of messages that can be formed using S/MIME (Secure Multipurpose Internet Mail Extension)?

Back 110

Signed and enveloped

Front 111

What email security solution uses MD2 and MD5 algorithms and RSA public key and DES (data encryption standard)?

Back 111

MOSS (MIME Object Security Services)

Front 112

What independently developed product is a public-private key system that uses various encryption algorithms to encrypt files and email?

Back 112

PGP (pretty good privacy)

Front 113

What 4 things do you need to address when planning your remote access security?

Back 113

1. Remote connectivity technology

2. Transmission protection

3. Authentication protection

4. Remote user assistance

Front 114

What dial up protocol is a full duplex transmission of TCP/IP authenticated with CHAP (Challenge Handshake Authentication Protocol) or PAP (Password Authentication Protocol)?

Back 114

PPP (point to point protocol)

Front 115

What older dial up protocol is rarely used as it only supports IP?

Back 115

SLIP (Serial Line Internet Protocol)

Front 116

What networking protocol is Cisco's response to RADIUS and separates out the authorization functionality from authentication and uses TCP rather than UDP?

Back 116

TACACS+ (terminal access controller access- control system plus)

Front 117

True or False. VPNs provide confidentiality and integrity, but do not guarantee availability.

Back 117

True

Front 118

What is encapsulating network communication packets called? They are virtual paths between 2 points?

Back 118

Tunneling

Front 119

Fill in the blanks. The act of encapsulating involves ____ blank.

____ blank allows you to transport sensitive data across untrusted networks.

Back 119

The act of encapsulating involves ENCRYPTION. TUNNELING allows you to transport sensitive data across untrusted networks.

Front 120

What are the 4 common VPN protocols?

Back 120

1. PPTP (point to point tunnelling protocol)

2. L2F (layer 2 forwarding protocol)

3. L2TP (layer 2 tunnelling protocol)

4. IPSec (IP security)

Front 121

Of the 4 common VPN protocols, which is the only one with native encryption?

Back 121

IPSec

Front 122

Of the 4 common VPN protocols, which ones have native authentication?

Back 122

All 4 do

Front 123

Of the 4 common VPN protocols, which one does not support dial up?

Back 123

IPSec

Front 124

How many simultaneous connections do the 4 VPN protocols support?

Back 124

Single

Front 125

What maps the IP addresses of your internal clients to leased addresses outside your company (saves global address space)?

Back 125

NAT (network address translation)

Front 126

What maps internal IP addresses to an external address and port number combination?

Back 126

PAT (port address translation)

Front 127

What do you call communication that is broken up into lengths dictated by the protocol and sent across the network?

Back 127

Packet switching

Front 128

What is the line between any 2 things where the security requirements differ called?

Back 128

Security boundary

Front 129

What is transparency in cybersecurity?

Back 129

Security controls that are unseen by users

Front 130

What military term refers to the electromagnetic emissions from computers and related equipment?

Back 130

TEMPEST

Front 131

What 2 sub layers exist in Layer 2 of the OSI model, Data Link?

Back 131

MAC (media access control) and LLC (logical link control)

Front 132

True or False. TCP (transmission control protocol) is a connection orientated protocol?

Back 132

True

Front 133

What is an intranet that has been extended to include external parties?

Back 133

Extranet

Front 134

What is a group of IP address ranges under the control of a single Internet entity which assigns a 16 or 32 bit number (ASN) that uniquely identifies someone's network on the internet?

Back 134

Autonomous System (AS)

Front 135

What version of IEEE 802.11 is WPA?

Back 135

802.11i

Front 136

What GHz does Bluetooth operate at?

Back 136

2.4 GHz

Front 137

What are the 3 basic types of firewalls?

Back 137

Packet-filtering; circuit-level gateway; application-level gateway

Front 138

What is a packet-switched protocol that handles multiple virtual circuits over WANs?

Back 138

Frame Relay

Front 139

What routing protocol creates a list of destinations with metrics including distance and direction, Link-State protocol or Distance-Vector protocol?

Back 139

Distance-Vector

Front 140

What type of ISDN is fastest, BRI (basic rate interface) or PRI (primary rate interface)?

Back 140

Primary Rate Interface (PRI)

Front 141

Packet filtering firewalls are what generation of firewalls?

Back 141

First generation

Front 142

Stateful firewalls are what generation of firewalls?

Back 142

Third generation

Front 143

Application layer firewalls are what generation of firewalls?

Back 143

Second generation

Front 144

What issue occurs when data transmitted over one set of wires is picked up by another set of wires?

Back 144

Crosstalk

Front 145

When you connect your laptop to your tablet, what wireless network mode are you using?

Back 145

Ad hoc mode

Front 146

Why is it easy to break WEP in less than 1 minute?

Back 146

It relies on a single, predefined shared static key.

Front 147

What is the process of planning and designing a wireless network called?

Back 147

Site survey (wireless survey)

Front 148

What network technology is a token passing network that uses a pair of rings with traffic flowing in opposite directions?

Back 148

FDDI (fiber distributed data interface)

Front 149

What is the best way to avoid security problems with email attachments?

Back 149

Train users and use anti malware

Front 150

What is this? BC-5F-F4-7B-4B-7D

Back 150

MAC address that tells the network interface card's manufacturer

Front 151

What is the likely security issue with PBX (private branch exchange) and how do you prevent it?

Back 151

Eavesdropping and prevent it with physical security

Front 152

What firewall architecture is simply a private network behind a firewall?

Back 152

Single tier

Front 153

What firewall architecture has 3 interfaces?

Back 153

Two tier

Front 154

What firewall architecture has multiple subnets separated by firewalls?

Back 154

3 tier

Front 155

True or False. A static packet filtering firewall is only aware of what is in the header of the packet such as source, destination and the port it is sent from and headed to.

Back 155

True

Front 156

What is the most common challenge for end point security system deployments?

Back 156

The volume of data

Front 157

Modern dial up connections use what dial up protocol?

Back 157

PPP (point to point) replacing SLIP

Front 158

Circuit level gateway firewalls are what generation?

Back 158

Second generation