Cissp-Domain 7-Telecomm & Network Security

Front 1

In the OSI reference model , on which later can a telphone number be described?

Back 1

This depends on the nature of the telephony system (for instance, Voice-over-IP versus
public switched telephony network (PSTN))

Front 2

Which transmission modes exist on OSI layer 5?

Back 2

Simplex, half duplex, duplex

Front 3

3. In which of the following situations is the network itself not a target of attack?

Back 3

MiTM

Front 4

Which of the following are effective protective or countermeasures against a distributed denialof-
service attack? a = Redundant network layout; b = Secret fully qualified domain names
(FQDNs); c = Reserved bandwidth; d = Traffic filtering; e = Network Address Translation (NAT).

Back 4

c. a and c

Front 5

5. What is the optimal placement for network-based intrusion detection systems (NIDSs)?

Back 5

On network segments with business-critical systems (e.g., demilitarized zones (DMZs)
and on certain intranet segments)

Front 6

Which of the following are meaningful uses for network-based scans? a = Discovery of devices
and services on a network; b = Test of compliance with the security policy; c = Detection of
attackers in a network, for instance, sniffers; d = Test for vulnerabilities and backdoors, for
instance, as part of a penetration test or to detect PCs infected by Trojans;

Back 6

b. a, b, and d

Front 7

7. Which of the following is an advantage of fiber-optic over copper cables from a security
perspective?

Back 7

b. Fiber optics are more difficult to wiretap.

Front 8

8. Which of the following devices should not be part of a network's perimeter defense?
boundary router, firewall, proxy server

Back 8

non of the above

Front 9

9. Which of the following is a principal security risk of wireless LANs?

Back 9

a. Lack of physical access control

Front 10

10. Which of the following configurations of a WLAN's SSID offers adequate security protection?

Back 10

d. None of the above

Front 11

11. Which of the following is the principal security risk of broadband Internet access proliferation for
home users?

Back 11

Home computers that are not securely configured or maintained and are permanently
connected to the Internet become easy prey for attackers.

Front 12

12. Who should be allowed to change rules on a firewall and for which reason?

Back 12

The firewall administrator in compliance with a change process that will, in particular,
validate the request against the organization's security policy and provide proper
authorization for the request

Front 13

13. Which of the following is the principal benefit of a personal firewall?

Back 13

They provide a PC on a public network with a reasonable degree of protection; if the PC
connects to a trusted network later on (for instance, an Intranet), it will prevent the PC
from becoming an agent of attack (e.g., by spreading viruses).

Front 14

14. Which of the following are true statements about IPSec?

Back 14

provides mechanisms for auth an encryption and authenticates hosts against each other

Front 15

15. Which of the following statements about well-known ports (0 through 1023) on layer 4 is true?

Back 15

On most operating systems, use of well-known ports requires system-level
(administrative, superuser) access.

Front 16

Which of the following is the enabler for TCP sequence number attacks, and which mitigation
exists?

Back 16

The fact that sequence numbers can be predicted, enabling insertion of illegitimate
packets into the data stream. Mitigation is offered by better randomization, as described
in RFC 1948.

Front 17

17. Which of the following is the principal weakness of DNS (Domain Name System)?

Back 17

Lack of authentication of servers, and thereby authenticity a. of records

Front 18

18. Which of the following statements about open e-mail relays is incorrect?

Back 18

Using a blacklist of open e-mail relays provides a secure way for an e-mail administrator
to identify open mail relays and filter spam.

Front 19

19. A cookie is a way to:

Back 19

b. Add statefulness to the (originally stateless) HTTP

Front 20

20. From a disaster recovery perspective, which of the following is the principal concern associated
with Voice-over-IP services?

Back 20

They can make the IP network of an organization a single point of failure for
communication.

Front 21

21. Why is public key encryption unsuitable for multicast applications?

Back 21

c. All data is going to all members of the multicast group.

Front 22

IEEE 802.3 defines

Back 22

Ethernet

Front 23

IEEE 802.5 defines

Back 23

Token ring

Front 24

Which WLAN spec uses OFDM

Back 24

802.11a, 802.11g

Front 25

2.4GHz WLAN specs

Back 25

802.11b,g

Front 26

protocol which uses PVCs and SVC. Overhead requirement limit it to lower speeds

Back 26

X.25

Front 27

high performance packet switching technology designed to replace X.25

Back 27

Frame Relay

Front 28

Very high speed, similar to Frame relay.uses PVCs and SVC. carry all traffic types

Back 28

ATM

Front 29

standard protocol for enabling wireless data access via small portable terminals to secure transaction service

Back 29

Wireless Application Protocol (WAP)

Front 30

What document defines the OSI model

Back 30

ISO 7498

Front 31

Layer 2 consists of what

Back 31

1) Logical Link Control
2) Media Access Control

Front 32

In the OSI reference model, which layer can Ethernet be described

Back 32

Layer 2

Front 33

Which of the following are effective protective countermeasures against DDOS

Back 33

Redundant network layout, Reserve bandwidth and traffic filtering

Front 34

OPtimal placement for NIDS?

Back 34

network perimeter

Front 35

A Security Event Manager (SEM)...

Back 35

aggregates logs from secuirity devices and application server looking for suspicious activity

Front 36

Methodology of an Attack step

Back 36

1. Target Acquisition
2. Target Analysis
3. Target Access
4. Target appropriation

Front 37

802.11i defines

Back 37

RSNs, WPA-AES, security

Front 38

802.1x defines

Back 38

port security

Front 39

T/F PAP transmits password in the clear

Back 39

true

Front 40

how does CHAP transmit the password

Back 40

one-way hash

Front 41

T/F CHAP features periodic authentication

Back 41

true

Front 42

Radius and EAP fall under

Back 42

802.1x

Front 43

protocol provides bandwidth mgmt and a scalable solutions for network usage without the performance penalties of encryption

Back 43

MPLS

Front 44

what type of proxy does not inspect any traffic

Back 44

circuit proxy

Front 45

another name for a screened subnet is a

Back 45

DMZ

Front 46

a popular circuit proxy server that can act as a VPN

Back 46

SOCKS

Front 47

IKE consists of

Back 47

OAKLEY and ISAKMP

Front 48

IPSEC offers

Back 48

encryption & auth

Front 49

SOCKS offers

Back 49

only Auth

Front 50

SSH offers

Back 50

encryption and auth

Front 51

L2F offers

Back 51

tunnine

Front 52

L2TP offers

Back 52

only auth (but encryption w/ IPSec)

Front 53

PPTP offers

Back 53

encryption, auth (MSCHAPv2)

Front 54

MPLS offers

Back 54

only tunneling

Front 55

SSL/TLS offers

Back 55

Encryption and auth

Front 56

Two modes of IPSec

Back 56

Transport (payload only)
Tunnel (paylod + header)

Front 57

a Security Assocation, used by network device to identify connections, consist of:

Back 57

1) SPI
2) IP Dst address
3) AH or ESP identifier

Front 58

an Autonomous system is controlled by

Back 58

one organization

Front 59

Java RMI and Microsoft's .NEt function at what layer

Back 59

Layer 5 (session)

Front 60

Aside from TCP & UDP what is another Layer 4 protocol

Back 60

SPX

Front 61

what layer ensure a common format for data (ASCII/Unicode, codecs)

Back 61

Layer 6-Presentation

Front 62

GPRS, 1xRTT (144kbps) represent which generation

Back 62

2.5 generation

Front 63

Analog cellular is what generation

Back 63

1st generation

Front 64

TDMA, GSM, CDMA represent which generation

Back 64

2nd generation

Front 65

DNSSEC uses what to secure dtat

Back 65

digital signatures

Front 66

IPSec provies whcih security features

Back 66

Connectionless Integrity

Front 67

In a very large organization, where th user pop ulation is dynamic and static apassword are undesirable, which method of authentication would be desireable?

Back 67

CHAP, b/c MSCHAP is non standard

Front 68

One of the main risks associated with VOIP may be:

Back 68

DoS

Front 69

Which layer is least suitable when end-to-end encryption is needed

Back 69

data-link

Front 70

Which of the following network technologies would be best suited to operate in an Error-prone environment

Back 70

X.25

Front 71

what protocol has the overhead of ACKs for each hop, and has a strong focus on error correction

Back 71

X.25

Front 72

unless what it's built on, assumes the cloud is reliable

Back 72

Frame Relay

Front 73

which of these routing protocols support optional authentication?
I) RIP v1
II) RIP v2
III) OSPF v3
IV) BGP v4

Back 73

D) II,III,IV

Front 74

L2TP provides confidentiality (T/F)

Back 74

False, no encryption!!!

Front 75

L2TP is a comnination of Cisco and MS's

Back 75

L2F and PPTP

Front 76

Convergine voice, video and data onto the same network infrastructure poses many challenges. Which of the following technologies would offer the greatest advantage when dealing with the different needs of Voice, video and data?

Back 76

ATM

Front 77

What is the most important consideration when designing a firewall architecture?

Back 77

Understand the specific security needs of the business

Front 78

Which of the following criteria should be met by off-site storage protetion for media backup?

Back 78

The storage site should guard against unauthorized access

Front 79

Which of the following can assist in preventing denial of service attacks?

Back 79

Configure the router to check all outgoing traffic

Front 80

The main difference between penetration testers and hackers is

Back 80

pen tester have permission from the company

Front 81

which of the following is a list of actice attacks against WLAN?

Back 81

Masquerade, Replay, Message modification, and DoS

Front 82

which wirless technology operaing in 5GHz

Back 82

802.11a

Front 83

what security pratices should be implemented to suppor wireless security

Back 83

Policy, Change Control and Configuration mgmt

Front 84

which of these types of scan is more often doen by white hat penetration testers rather than attackers

Back 84

Compliance scanning

Front 85

HDLC and SDLC operate at what layer`

Back 85

2: data link

Front 86

ISDN consists of what two channels

Back 86

B (data)
D (signaling)

Front 87

What is a beaconing functionality in a token passing technology?

Back 87

Excludes a misbehaving computer from the ring

Front 88

Another name for ThinNet

Back 88

10Base2

Front 89

Which of the following is a disadvantage of PPTP?

Back 89

Works only over IP

Front 90

a SONET architecture at a large university connecting internal network in each building is an example of

Back 90

MAN

Front 91

Not every data transmission incorporates the session layer. Which of the following best describes the functionality of the session layer?
a) end-to-end transmission
b) application client/server communication mechanism in a distributed environment
c) Application to computer physical communication
d) Provides application with the proper syntax for transsmission

Back 91

Application client/server communication mechanism in a distributed environmen

Front 92

Which polling protocol is used mainly to communicate with IBM mainframe systems?

Back 92

Synchronous Data Link Control

Front 93

What is the purpose of the LLC layer in the OSI model

Back 93

provides a standard interface for the network layer protocol

Front 94

Ethernet uses what type of access method?

Back 94

CSMA/CD

Front 95

Which of the following tunneling protocol would be used if tunneled communications needed to take plae over X.25, ATM or Frame Relay

Back 95

L2TP

Front 96

A corporate vice president routinely using his office phon for personal international phon calls in as example of what secuirty issue?

Back 96

Telephone fraud

Front 97

which of the following is required for LAN and WAN-centralized access control technologies?

Back 97

system with database of authentication information

Front 98

All of the following are true about bastion hosts except:

Back 98

protected by the DMZ and has internal user accounts

Front 99

what is the port range for well-known ports

Back 99

0-1023

Front 100

bandwidth of T3

Back 100

45Mbps

Front 101

SONET works at which layer

Back 101

Layer 1: physical

Front 102

What are two ways HDLC improves upon SDLC

Back 102

1) provides higher throughput
2) supports full-duplex transmission

Front 103

Which of the following is not true about ISDN?
a) required both B & D channels
b) supports voice, data, video transmission
c) sends control information over the B channel
d) uses the same wires as analog transmission

Back 103

c) sends controll information over the B-channel

Front 104

What is the electronic phenomenon that allows data to escape in a bundle of network cables?

Back 104

Cross-talk

Front 105

What is the importance of using plenum-rated cabling in buildings

Back 105

Human safety

Front 106

How are FDDI and FDDI-2 different

Back 106

FDDI-2 allows for fixed bandwidth to be assigned.

Front 107

In the TCP/IP model, where does PPP protocol reside

Back 107

Network Access

Front 108

how many bearer (B) channels does BRI ISDN have

Back 108

2

Front 109

how many bearer (B) channels does PRI ISDN have

Back 109

23

Front 110

UMTS, EVDO are what generation

Back 110

3d Generation

Front 111

nonces prevent

Back 111

replay

Front 112

difference between PEAP and EAL-TLS

Back 112

EAP-TLS sends User Identity in the clear
PEAP sends a Domain Identifier instead

BUT EAP-TTLS protect user ID as well

Front 113

what is the difference between open system authentication and shared key authentication

Back 113

SKA requires a WEP encryption key

Front 114

Paying for a guaranteed amount of frame relay bandwidth is called what

Back 114

CIR (Committed Information rate)

Front 115

In which technology do different user share the same network medium?

Back 115

cable modem

Front 116

which of the following is true about a SSID value

Back 116

It is a value that the wireless device uses to authenticate the AP

Front 117

Backbones that connect businesses to WANs , the Internet and other business usually via SONET networks are called what

Back 117

MANs

Front 118

which of the following is a reason companies implement routers and packet filters?

Back 118

to provide protection that is transparent to users

Front 119

How does PPTP provide protection

Back 119

Through encryption and encapsulation

Front 120

a WAN technology that uses 53-byte cells and has low delay levels is called what?

Back 120

ATM

Front 121

all data is is fragmented into fixed-length 53-byte cless..connection oriented suite of protocols. does not guarantee delivery of cells

Back 121

ATM

Front 122

Is DSL always on

Back 122

yes

Front 123

what replaced SLIP

Back 123

PPP

Front 124

what is a good definition of asynchronous communication

Back 124

sequential data transfer, using bits framed with start and stop bits

Front 125

What would be the best tool to deal with a distribute port scan?

Back 125

Firewall

Front 126

Principal benefit of personal firewalls

Back 126

provide a PC on a public netowrk with a reasonable degree of protection; if the PC connects to a trusted netowrk later on , it will prevent the PC from becoming an agent of attack

Front 127

factors when configuring audit logs

Back 127

value of asset, threats against asset, sensitivity of asset