Cissp Set 4 (Telecommunications And Network Security

Front 1

What type of key does WEP use?

Back 1

A 40-bit shared secret key, a RC4 psuedorandom number generator PRNG encryption and a 24 bit initialization vector

Front 2

What are some liabilities of PDAs

Back 2

They do not support DAC
They lack audit capabilities
They don't support a non-object reuse policy
They provide no data integrity protection

Front 3

What do string signatures look for?

Back 3

text strings that indicate a possible attack

Front 4

What do header condition signatures look for?

Back 4

dangerous or illogical combinations in packet headers.

Front 5

What is logon abuse?

Back 5

Privilege escalation

Front 6

What is C2MYAZZ?

Back 6

A utility that enables server spoofing to implement a session hijacking or MITM attack

Front 7

During Discovery scanning what does the classification process produce?

Back 7

Applications running on the target system

Front 8

During discovery scanning what does the inventory scan produce

Back 8

A list about the target systems OS and available ports

Front 9

What is the most basic and fastest type of TCP scan?

Back 9

TCP connect()

Front 10

What is a SYN/ACK scan

Back 10

A scanner sends a SYN/ACK packet if the port is closed it assumes the SYN/ACK is a mistake and sends a RST if the port is open the SYN/ACK will be dropped

Front 11

What is a liability of TCP FIN scans?

Back 11

They work only on Non-Windows machines because Windows Machines send a RST regardless of if the port is open or closed.

Front 12

What are four differences in OS implementation of the TCP/IP stack?

Back 12

Time to Live
Initial Window Size
Don't Fragment bit
Type of Service

Front 13

What is the standard TTL value for most network devices, UNIX and Mac systems?

Back 13

255

Front 14

What is the standard TTL value for most Windows systems?

Back 14

128

Front 15

What is the standard TTL value for HP Jet direct printers?

Back 15

60

Front 16

What is the standard TTL value for Windows 95B/98 systems?

Back 16

32

Front 17

Port 118

Back 17

sqlserv

Front 18

Port 119

Back 18

nntp

Front 19

Port 161

Back 19

snmp

Front 20

Port 194

Back 20

irc

Front 21

Port 389,636

Back 21

LDAP/Secure LDAP

Front 22

Port 2049

Back 22

NFS

Front 23

Port 5631

Back 23

PCAnywhere

Front 24

What are the three main components of a polymorphic virus?

Back 24

A scrambled virus body, a decryption routine, and a mutation engine

Front 25

Name common Trojans:

Back 25

Trinoo, Back Orifice, NetBus, SubSeven

Front 26

Describe XOR

Back 26

Performs binary bit addition where T is 1 if A and B are not equal

Front 27

What is C2MYAZZ?

Back 27

A utility that enables server spoofing to implement a s ession hijacking or MITM exploit

Front 28

What is the intent of a discovery scan?

Back 28

to collect enough information about each network device to identify what type of device it is.

Front 29

What is the intent of an inventory scan?

Back 29

It provides information about the target system's OS and its available ports

Front 30

What is clustering with reguards to cryptography?

Back 30

a situation in which a plaintext message generates identical ciphertext messages by using the same transformation algorithms but with different cryptovariables or keys

Front 31

How does link encyrption operate?

Back 31

each entity has keys in common with its two neighboring entities thus as a node recives the encyrpted message from its predecessor (neighboring node) it decrypts it and then reencrypts it with the shared key for the succesive node.

Front 32

How is a one-time pad usually implemented

Back 32

as a stream cipher by using XOR

Front 33

What is the best known symmetric key system?

Back 33

DES

Front 34

Describe DES/DEA

Back 34

64-bit block size and 56-bit key. It is a 16 round cryptosystem utlizsing S-boxes

Front 35

How is diffusion performed in DES

Back 35

P-Boxes

Front 36

What are the four modes of DES

Back 36

Cipher block chaining
Electronic Code Book
Cipher Feedback
Output Feedback

Front 37

How is confusion performed in DES?

Back 37

S-box

Front 38

What is the native mode of DES

Back 38

Electronic Code Book

Front 39

Which modes of DES operates as a stream cipher?

Back 39

Cipher Feedback and Output Feedback

Front 40

Which operational mode of DES is most likely to allow errors to propogate?

Back 40

Cipher Feedback

Front 41

In a triple DES encryption notation noted DES-EDE2 what do the letters after DES stand for?

Back 41

Encrypt
Decrypt
Encrypt
2(keys)

Front 42

What cipher is AES based on?

Back 42

Rijndael

Front 43

What are the bit strenghts of AES variations?

Back 43

128, 192 and 256

Front 44

Describe the Rijndael block cipher

Back 44

iterated block cipher with variable block lenght and variabe key length

Front 45

What is the fixed block size for AES?

Back 45

128 bits

Front 46

What are the three layers of the Rijndael cipher?

Back 46

The non-linear layer
The liner mixing layer
The key addition layer

Front 47

The number of rounds in the Rijndael Cipher is a function of the key size: Given a key size of 256 how many rounds will occur

Back 47

14

Front 48

The number of rounds in the Rijndael Cipher is a function of the key size: Given a key size of 192 how many rounds will occur

Back 48

12

Front 49

The number of rounds in the Rijndael Cipher is a function of the key size: Given a key size of 128 how many rounds will occur

Back 49

10