Cissp Domain 4 - Communication & Network Security (Steve)

Front 1

What are layer 1 endpoints for cables from wall jacks?

Back 1

Patch panels

Front 2

Which is more resistant to EMI, Coax or twisted pair?

Back 2

Coax

Front 3

UTP (Unshielded Twisted Pair) is more vulnerable to interference, crosstalk, and ______________.

Back 3

Eavesdropping

Front 4

What is the main TP (Twisted Pair) used today?

Back 4

Cat 5e. (Next Gen is Cat 6a)

Front 5

What are fire retardant cables called?

Back 5

Plenum (cost 2x as much)

Front 6

What is the Twisted Pair Cat 7 speed and how is it used?

Back 6

10 Gbps, backbone cabling

Front 7

What is the difference between broadband and baseband?

Back 7

Baseband: Binary (single channel)

Broadband: Analog (multiple channels)

Front 8

What is the effective communication distance for copper communication cables?

Back 8

100m

Front 9

What is a loss of signal strength over distance?

Back 9

Attenuation

Front 10

What causes corruption in binary signals?

Back 10

Noise

Front 11

What happens when a signal spills from one cable to a nearby cable?

Back 11

Crosstalk

Front 12

Regarding fiber, what light source is used for single and multi-mode?

Back 12

single mode - Laser (kilometers)

multi-mode - LEDs (within buildings)

Front 13

What is the difference between synchronous and asynchronous signals?

Back 13

Synchronous: No start stop, continuous signal

Asynchronous: Bits sent sequentially

Front 14

What topology is good for several servers being linked in a high availability (HA) need situation?

Back 14

Mesh

Front 15

What is the normal topology we use?

Back 15

Star

Front 16

What are the layers of the OSI model? Bottom to top.

Back 16

1. Physical

2. Data Link

3. Network

4. Transport

5. Session

6. Presentation

7. Application

All People Seem To Need Data Processing

Front 17

What is it called when data is packaged to travel through the OSI model (up or down) and communicates with same layers at the the other end.

Back 17

Encapsulation

Front 18

What is Layer 1 of the OSI model for?

Back 18

Physical - media - patch panels, fiber cable

Front 19

What is Layer 2 of the OSI model for?

Back 19

Network: Ethernet, switches

Front 20

What is Layer 3 of the OSI model for?

Back 20

Networking: Routers, IPV4, IPV6, OSPF, BGP

Front 21

What is Layer 4 of the OSI model for?

Back 21

Transport: TCP, UDP, SSL, TLS (port #s/sockets)

Front 22

What is Layer 5 of the OSI model for?

Back 22

Session: NetBIOS, NFS, SQL, RPC

Front 23

What is Layer 6 of the OSI model for?

Back 23

Presentation: ASCII, TIFF, GIF, JPEG, etc.

Front 24

What is Layer 7 of the OSI model for?

Back 24

Application: FTP, SSH, API, MIME, TELNET, HTTP

Front 25

At OSI Layer 1, how does communication happen? In the form of.....

Back 25

Bits

Front 26

Where does the MAC address get resolved in the OSI model?

Back 26

Layer 2

Front 27

Where does IP addressing happen in the OSI model?

Back 27

Network Layer (3)

Front 28

Where is UDP and TCP used in the OSI model?

Back 28

Layer 4, Transport

Front 29

At what layer does segment size and sequence numbering happen?

Back 29

Layer 4, Transport

Front 30

What is the difference between TCP and UDP?

Back 30

TCP: Reliable (3 way handshake - connection oriented, sequential series of packets)

UDP: Fast (Connectionless - best effort - used for VoIP and Streaming)

Front 31

What OSI Layer allows applications to organize and synchronize how they will transfer data?

Back 31

Layer 5, Session

Front 32

Which OSI Layer translates messages into standard presentations? (encryption and compression, as well as formatting - like jPEG)

Back 32

Layer 6, Presentation

Front 33

Which OSI Layer includes Application Programming Interfaces (API)

Popular protocols: SMTP, HTTP, FTP, Telnet, TFTP)

Back 33

Application Layer, 7

Front 34

At which layers are the following data frame types:

Data

Segment

Packet

Frame ( last frame element is Frame Check Sequence)

Back 34

Data: Presentation

Segment: Transport

Packet: Network

Frame & FCS: Data Link / Physical

Front 35

What are the TCP/IP Layers?

Back 35

Application

Transport (host to host)

Internet

Network Interface

A TIN man

Front 36

How does the TCP/IP map to OSI?

Back 36

Application

Presentation Application

Session___________________________

Transport_______________Transport (host2host)

Network________________ Internet

Datalink

Physical Network Interface

Front 37

What are the common network devices on layers 1, 2, and 3? What device is multi-layer?

Back 37

1 - Hub

2 - Switch

3 - Router

Multi-layer: Gateway

Front 38

What is 802.3?

Back 38

Standard for Ethernet (3 is like a backwards E)

Front 39

Switches work at Layer _____ using a standard called _______.

Back 39

2, Ethernet

Front 40

What device is subject to MAC flooding and Spoofing attacks?

Back 40

Layer 2 switch (Data Link)

Front 41

Where is a NIC used?

Back 41

Layer 2 - with switches

Front 42

What routing protocol simply used hops to decide routes?

Back 42

RIP (Routing Information Protocol) - 15 hop limit (TTL - Time to Live)

Front 43

What routing protocol keeps a topology map and determines shortest path/

Back 43

OSPF (Open Shortest Path First)

Front 44

What is the exterior routing protocol and is used by ISPs?

Back 44

BGP (Border Gateway Protocol)

Front 45

What acts as a translator (between media or protocols) and works at several layers of the OSI model?

Back 45

Gateway

Front 46

What is the primary protocol suite used on the Internet today?

Back 46

TCP/IP

(TCP - Layer 4, IP - Layer 3)

Front 47

What are the ports for FTP, SMTP, SNMP, HTTP, Telnet, and SSH?

Back 47

FTP - 20, 21

SMTP - 25

SNMP - 161

HTTP - 80

Telnet - 23

SSH - 22 (Secure Telnet Replacement)

Front 48

Source port numbers are dynamic, or __________ and used to track communications sessions.

Back 48

Ephemeral

Front 49

What defines the network and host portions of an IP address?

Back 49

Subnet Mask

Front 50

In 192.168.0.1:23, what does the 23 represent?

Back 50

The port number

Front 51

In 192.168.0.1/24, what does the 24 represent?

Back 51

Subnet Mask

Front 52

What are the ranges for IP addresses for Classes A - E?

Back 52

A - 0-127 (First byte defines network)

- Note: 127 is reserved for loopback testing

B - 128-192 (First 2 bytes define network)

C - 193-224 (First 3 bytes define network)

D - 225-240 (multicast)

E - Invalid Experimental

Front 53

What is an IPv6 address?

Back 53

Unique 128 bit address scheme -

8 blocks of four hexadecimal units

Front 54

How is an IPv6 unicast network and host split up?

Back 54

equal 64 bits of each

Front 55

How can you shorten the IPv6 address?

Back 55

By eliminating leading zeros and adjacent blocks of zeros with ::

e.g. ...2f29:0:0:0:3d... becomes: 2f29::3d...

Front 56

For global addressing of IPv6, what is the global routing prefix and subnet ID?

Back 56

Global routing = first 48 bits

Subnet ID = next 16 bits

Front 57

In IPv6, what does Link Local Addressing always begin with?

Back 57

fe80:: (understood as fe80:0:0:0

Front 58

T/F IPv6 Tunnels may be misused by attackers.

Back 58

True

Front 59

What protocol does DHCP use?

Back 59

UDP

Front 60

What defines the DHCP sequence of actions?

DORA

Back 60

DORA:

- Discover message

- Offer message

- Request proper network info

- Acknowledge

Front 61

What is a major man in the middle attack threat that redirects IP addressing?

Back 61

Rogue DHCP Server

Front 62

What is a High Availability (HA) practice for DHCP and DNS to ensure redundancy?

Back 62

Split DNS or Split DHCP (shares the load)

Front 63

Routers can be a _______________ for DHCP services, rebroadcasting across subnets.

Back 63

Relay Agent

Front 64

Split DNS (or split-Brain DNS) is a best practice, allowing....?

Back 64

One Internal DNS server (locates domain resources)

One Exernal DNS server (locates Internet resources)

Front 65

T/F - DNSSEC encrypts.

Back 65

False, it uses digital signatures for authentication

Front 66

What is the directory service database (standard for storing details about the network) and in what standard does it store?

Back 66

Lightweight Directory Access Protocol (LDAP), X.500

Front 67

Difference between x.500 and x.509?

Back 67

x.509 = Public Key (digital certificates)

x.500 = LDAP naming standards (Leafs)

Front 68

In LDAP, what is a subject called?

Back 68

A leaf

Front 69

What is the protocol that resolves MAC addresses from a known IP address?

Back 69

Address Resolution Protocol (ARP)

Front 70

What is it called when someone puts bad information into an ARP table to misdirect users?

Back 70

ARP Poisoning (man in the middle)

Front 71

ICMP can be misused through which utility?

Back 71

Ping (Packet Internet Network Grope)

Front 72

Which version of SNMP is most secure?

Back 72

v3 (SNMP v4 works with IPv6)

Front 73

ATM works at which layer of the OSI model?

Back 73

Multiple layers

Front 74

ATM has which 2 circuit methods?

Back 74

Switched Virtual Circuit (SVC) - created on demand

Permanent Virtual Circuit (PVC) - programmed in advance

Front 75

What is an L2/L3 (or just L3) Switch?

Back 75

It is a layer 3 switch (VLAN capable) that performs routing functions. (multilayer device)

Front 76

A proxy server does NAT (Network Address Translation) and deep packet inspection at ______layers?

Back 76

Multi-layers

Front 77

What is it called when two separate standards come together to do something better, such as with protocols?

Back 77

convergence or converged protocols

Front 78

Evolving from specialized Fibre channel storage, this convergence allowed Ethernet to communicate with Fibre SANs?

Back 78

FCoE (Fibre Channel over Ethernet)

Front 79

What was the convergence of SCSI and IP?

Back 79

iSCSI

Front 80

What is MPLS?

Back 80

Multiprotocol Label Switching - used by ISPs to create private WANs across their backbone (forwards with labels instead of IP addresses)

- Isolates traffic, as in a VLAN

- More secure than normal IP routing

- Good for VoIP (meaning good for QoS)

Front 81

What device hides internal addresses by centralizing them on one router and forwarding only the source address of that router?

Back 81

Network Address Translation (NAT)

Front 82

VoIP requires _________ to provide lag-free communication

Back 82

Quality of Service, or Traffic Shaping

Front 83

What is the initiation protocol that is used to setup and tear down VoIP sessions?

What protocol carries the actual media payload?

Back 83

SIP (Session Initiation Protocol)

RTP (Real-time Transfer Protocol)

Front 84

What IEEE standard defines Wi-Fi standards for security?

Back 84

802.11i

Front 85

What WPA function keeps you from eavesdropping?

Back 85

TKIP (Temporal Key Integrity Protocol)

Front 86

WPA also replaced CRC error checking in WEP with better ____________________ (MIC)

Back 86

Message Integrity Check

Front 87

WPA2 enhances security. Replaces RC4 with ____________ (AES.....?)

Back 87

AES-CCMP

Front 88

TKIP (Temporal Key Integrity Protocol) is a ___________ encryption key. It is a single use session key. Also uses strong/long keys.

Back 88

Symmetric

Front 89

What is a network protocol that provides client/server authentication and authorization, and audits remote users. It also provides enterprise authentication?

Back 89

RADIUS (Remote Authentication Dial-In User Service)

Front 90

What is the difference between bluejacking and bluesnarfing?

How can you eliminate the threat?

Back 90

Bluejacking: Send anonymous spam

Bluesnarfing: stealing info from bluetooth device

- Eliminate by disabling discovery

Front 91

What is the best protection for "bring your own device" mobile devices?

Back 91

MDM (mobile device management) infrastructure

Front 92

What are some good MDM choices to implement?

Back 92

Sophos and Airwatch

Front 93

What is "footprinting"?

Back 93

Discovery - gathering data about a target (security profile) before attacking.

Front 94

Firewalls have moved from static postures to...

Back 94

Dynamic Stateful firewalls. Keeps track of "state" or dialog process of a communication stream between internal and external hosts

Front 95

What is an application layer firewall that inspects 100% of the packet (deep packet inspection) called?

Back 95

Application firewall

Front 96

Proxy Firewalls are better than hardware firewalls at ___________ information.

Back 96

logging

Front 97

What is a proxy that hides the real sender's info?

Back 97

Anonymizer proxy

Front 98

TOR (TOR Onion Networks) is free software that does what?

Back 98

enables anonymous communication over the Internet.

Front 99

Open ________________ are used to mask SPAM senders

Back 99

mail relays

Front 100

What is a Bastion Host?

Back 100

Extremely hardened system. Locked down due to being Internet accessible.

Front 101

What two methods hide and extend your IP address scheme for your internal network?

Back 101

NAT and PAT (Port Address Translation)

Front 102

What is our IT "network burglar alarm" system?

Back 102

IDS

Front 103

Does an IDS block intrusion?

Back 103

No!

Front 104

What does block an intrusion?

Back 104

Network Intrusion Prevention System (NIPS)

Front 105

When alerted by an IDS/IPS, what is the responding administrator called?

Back 105

First responder

Front 106

What advantage does an application-based proxy firewall have over packet-filtering firewalls?

Back 106

Better Security

Front 107

What are the two intrusion detection techniques:

Anomaly Detection and Signature Based?

Back 107

Anomaly Detection: comparing current systems to baseline activities.

Signature Based: comparing LAN traffic to a variety of attack signatures

Front 108

Host HIDS/HIPS can examine encrypted traffic after it is decrypted. T/F?

Back 108

True

Front 109

PPTP, L2TP/IPsec, SSL/TLS, and SSTP are modern _________ Protocols

Back 109

VPN Tunneling

Front 110

What is CHAP

Back 110

Challenge Handshake Authentication Protocol, authentication protocol that validates user through handshake instead of sending password.

Front 111

ISDN has two connection types. What are they and what are their speeds?

Back 111

- BRI (Basic Rate Interface) 2 b channels and 1 d channel

- PRI (Primary Rate Interface) 23 b channels and 1 d channel

b channels: 64 KBps (data)

d channels: 64 KBps (control)

Front 112

What are the Internet, X.25, and Frame Relay examples of?

Back 112

Packet switching?

Front 113

What is an early fast WAN packet-switched technology that uses PVCs and SVCs?

Back 113

Frame Relay (Early WAN)

Front 114

What connection-oriented technology uses 53-byte packets in the form of fixed cells?

Back 114

ATM

Front 115

What is an encryption protocol that is a hybrid of Cisco L2F and PPTP?

Back 115

L2TP (Layer 2 Tunneling Protocol) and IPSec.

Front 116

In L2TP, what does the encryption at Layer 3?

Back 116

ESP in IPSec.

Front 117

The IPSec protocol that performs only integrity checking (doesn't encrypt) is __________

Back 117

AH (Authentication Header) Protocol

Front 118

The IPSec protocol that performs encryption (most used) is ____________

Back 118

ESP (Encapsulating Security Payload) in tunneling mode with encapsulation

Front 119

With the ESP protocol, what is the difference between transport and tunnel mode?

Back 119

Transport mode: Only data is secured

Tunnel mode: Entire packet encapsulated

Front 120

Browser based VPN solutions (utilizing SSL and TLS) are harder to implement. T/F

Back 120

False. They are easier to implement.

Front 121

What is an IP address combined with a Port Number called?

Back 121

A Socket

Front 122

Regarding VLANs, what is 802.1q?

Back 122

The header in the frame has an extra piece of information (VLAN Tag) that will allow it to forward or reject traffic.

Front 123

In the TCP/IP model, where does the PPP protocol reside?

Back 123

Network access

Front 124

What is a Loki attack?

Back 124

A backdoor ICMP attack

Front 125

What does CDN (Content Distribution Network) provide?

Back 125

Improves the delivery or performance of streaming or large file application. Stores data closer to where user needs it.

Front 126

In virtualization, it doesn't require an overarching OS. What runs the functions (multiple instances of OS) instead?

Back 126

Hypervisor

Front 127

What is a Virtual Desktop Infrastructure (VDI)?

Back 127

A client/server solution that utilizes virtualization and centralized servers to run a desktop operating system across a LAN or WAN connection to a host system (thin client)

Front 128

What are the three primary categories of cloud computing?

(Hint: Hosted - I, P, S)

Back 128

- Hosted Infrastructure (Iaas): virtualized servers and disk storage

- Hosted Platforms (PaaS): Rent virtual servers with the OS installed

- Hosted (applications) Software (Saas): Leasing the use of a service providers configured software (Netflix)

aaS = as a Service

Front 129

What are these cloud models:

Public, Private, Community, Hybrid

Back 129

Public: Internet Public Clouds

Private: provisioned or single organization

Community: specific community of organizations, like federal gov.

Hybrid: Any combination of the above

Front 130

What was a solution that incorporated the physical separation (decoupling) of the network control plane of packets from the data plane (hardware)? (single large virtualization that removes hardware from the equation)

Back 130

Software Defined Networking

Front 131

What are two multi-layer protocols?

Back 131

ATM and DNP3

Front 132

What is providing conversion at the perimeter of most networks?

Back 132

Router (normally Cisco)

Front 133

Can a router be a firewall?

Back 133

Yes

Front 134

In WiFi what does the key exchange?

Back 134

TKIP

Front 135

SSL VPN uses what for access?

Back 135

web browser

Front 136

What two primary concerns with VoIP technology?

Back 136

Lag - QoS (Quality of Service)

Sniffing

Front 137

What is a screenscraper?

Back 137

Data mining....???

Front 138

What is a guest operating system?

Back 138

An operating system running under a hypervisor

Front 139

What is port isolation?

Back 139

A management VLAN. E.g. Only one port can be used to program a router or switch.

Front 140

What does a stateful firewall look at that a normal one doesn't?

Back 140

Ephemeral port. (session states)

Front 141

How is a proxy firewall different from a normal one?

Back 141

Deep packet inspection.

Front 142

What is an anonymizer proxy used for?

Back 142

Hides the sender's information. (e.g. TOR)

Front 143

What device:

- Does MPLS translation

- uses BGP

- Stateful Firewall

- ATM mode

- VPN concentrator for IPSec

Back 143

Edge Router

Front 144

WiFi encrypts what portion of the communication?

Back 144

Antenna to Antenna (radiated signal)