Cissp - Telecommunications And Network Security

Front 1

What is IEEE 802.11i used for?

Back 1

Provides strong encyption, replay protection, integrity protection. Not for network authentication.

Front 2

What is IEEE 802.1x used for?

Back 2

Network Authentication. Uses different EAP types for different environments.

Front 3

What is WPA and WPA2?

Back 3

Wi-Fi Protected Acess is emprovement over WEP and old hardware (TKIP)

Front 4

What data is at byte 9 of the IP header?

Back 4

Protocol

Front 5

What type of Technology is used at the Application layer?

Back 5

Gateways

Front 6

What type of Technology is used at the Presentation layer?

Back 6

Gateways

Front 7

What type of Technology is used at the Session layer?

Back 7

Gateways

Front 8

What type of Technology is used at the Transport layer?

Back 8

Gateways

Front 9

What type of Technology is used at the Network layer?

Back 9

Virtual circuits (ATM), routers

Front 10

What type of Technology is used at the Data link layer?

Back 10

Bridges, switches

Front 11

What type of Technology is used at the Physical layer?

Back 11

ISDN, Hubs, Repeaters, Cables

Front 12

Which OSI layer uses these protocols: FTP, SMB, TELNET, TFTP, SMTP, HTTP, NNTP, CDP, GOPHER, SNMP, NDS, AFP, SAP, NCP, SET

Back 12

Application Layer - Layer 7

Front 13

Which OSI layer uses these protocols: ASCII, EBCDIC, POSTSCRIPT, JPEG, MPEG, GIF

Back 13

Presentation Layer - Layer 6

Front 14

Which OSI layer uses these protocols: Remote Procedure Calls (RPC) and SQL, RADIUS, DNS, ASP, NFS, NetBIOS

Back 14

Session Layer - Layer 5

Front 15

Which OSI layer uses these protocols: TCP, UDP, SSL, SSH-2, SPX, NetBios, ATP

Back 15

Transport Layer - Layer 4

Front 16

Which OSI layer uses these protocols: IP, IPX, ICMP, OSPF, IGRP, EIGRP, RIP, BOOTP, DHCP, ISIS, ZIP, DDP, X.25

Back 16

Network Layer - Layer 3

Front 17

Which OSI layer uses these protocols: L2F, PPTP, L2TP, PPP, SLIP, ARP, RARP, SLARP, IARP, SNAP, BAP, CHAP, LCP, LZS, MLP, Frame Relay, Annex A, Annex D, HDLC, BPDU, LAPD, ISL, MAC, Ethernet, Token Ring, FDDI

Back 17

Data Link Layer - Layer 2

Front 18

Which OSI layer uses these protocols: 10BaseT, 100BaseT, 1000BaseT, 10Base2, 10Base5, OC-3, OC-12,  DS1, DS3, E1, E3, ATM, BRI, PRI, X.23

Back 18

Physical Layer - Layer 1

Front 19

Which layer of the OSI model provides file transmission, message exchange, terminal sessions, etc

Back 19

Application Layer

Front 20

Which layer of the OSI model provides encryption/decryption, compression, and virtual terminal emulation

Back 20

Presentation Layer

Front 21

Which layer of the OSI model provides setup of the links, maintaining of the link, and the link tear-down between applications. Controls application to application communication

Back 21

Session Layer

Front 22

Which layer of the OSI model provides delivery of user information. It is also responsible for error detection, correction, and flow control. Handles computer to computer communication

Back 22

Transport Layer

Front 23

Which layer of the OSI model inserts info into packet headers so it can be properly addressed and routed. Then route the packet to their proper destination.
Determines the best path for the packet to take.

Back 23

Network Layer

Front 24

Which layer of the OSI model provides error detection, frame ordering, and flow control. Translate data to binary format for proper line transmission over LAN or WAN.
Responsible for the physical addressing of the network via MAC addresses.

Back 24

Data Link Layer

Front 25

Which layer of the OSI model converts bits into voltage for transmission.
Responsible for the physical transmission of the binary digits through the physical medium.

Back 25

Physical Layer

Front 26

What are the 4 layers of the TCP/IP model?

Back 26

Application Layer
Host to Host Layer
Internet Layer
Network Access Layer

Front 27

What are the protocols for the TCP/IP Model's Host to Host Layer?

Back 27

TCP and UDP

Front 28

What is a Class A range of IP addresses?

Back 28

1.0.0.0 to 127.255.255.255
For large networks
N.H.H.H; 255.0.0.0;/8
Remember 1-127

Front 29

What is a Class B range of IP addresses?

Back 29

128.0.0.0 to 191.255.255.255
For medium networks
N.N.H.H. 255.255.0.0;/16
Remember 128-191

Front 30

What is a Class C range of IP addresses?

Back 30

192.0.0.0 to 223.255.255.255
N.N.N.H; 255.255.255.0;/24
Remember 192-223

Front 31

What is Classless Interdomain Routing (CIDR) used for?

Back 31

Class B address range is usually too large for most companies and Class C is too small. CIDR provides flexibility to increase or decrease the class sizes

Front 32

Describe the protocol IP (Internet Protocol)

Back 32

All hosts on a network have an IP address
Each data packet is assigned the IP address of the sender and receiver
It provides an 'unreliable datagram service'.

Front 33

Describe the protocol ARP (Address Resolution Protocol)

Back 33

Use the IP Address to get the MAC Address
MAC address is 48 bit
IP address is 32 bit
Only broadcast to network first time, otherwise stores IP and MAC info in table

Front 34

Describe the protocol RARP (Reverse Address Resolution Protocol)

Back 34

Use the MAC Address to get the IP Address
RARP Server tells diskless machines IP Address

Front 35

Describe the protocol ICMP (Internet Control Message Protocol)

Back 35

Management Protocol and messaging service provider for IP.
Sends messages between network devices regarding the health of the network.
Ping is ICMP packet
Ping checks if a host is up and operational

Front 36

What is TCP/IP protocol Telnet used for?

Back 36

Terminal Emulation (No File Transfer)

Front 37

What is TCP/IP protocol LDP used for?

Back 37

Line Printer Daemon – with LPR enables print spooling

Front 38

What is TCP/IP protocol X-Windows used for?

Back 38

For writing graphical interface application

Front 39

What is TCP/IP protocol Simple Network Management Protocol (SNMP) used for?

Back 39

Provides the collection of network information by polling the devices on the network from a management station.
Sends SNMP traps (notification) to MIBS Management Information

Front 40

What OSI model protocol supports authentication, compression, confidentiality, and integrity; uses DES encryption; used for Encrypted File Transfer

Back 40

SSH-2

Front 41

What OSI model protocol uses symmetric encryption and public key for authentication and MAC (message authentication code) for integrity

Back 41

SSL - Secure Socket Layer

Front 42

Compare asynchronous and synchronous transmission types.

Back 42

Asynchronous used when 2 devices not synchronized
Synchronized if communication takes place between synchronized devices usually sync via a clocking mechanism
Larger amount of data transmitted via synchronized

Front 43

Describe Broadband transmission.

Back 43

Divides the communication channel into individual channels so different type of data an be transmitted simultaneously
Carries several signals over different channels

Front 44

Give examples of Broadband medium.

Back 44

Coaxial Cable TV (CATV), ATM, DSL, ISDN

Front 45

Describe Baseband transmission.

Back 45

Uses entire communication channel for transmission
Permits only one signal to be transmitted

Front 46

Give examples of Baseband medium.

Back 46

Ethernet - entire wire for one channel

Front 47

What technology is used for the Bus network topology?

Back 47

Ethernet

Front 48

What technology is used for the Ring network topology?

Back 48

FDDI

Front 49

What technology is used for the Star network topology?

Back 49

Local bus (Ethernet) and ring topologies (Token Ring)

Front 50

What technology is used for the Tree network topology

Back 50

Ethernet

Front 51

What technology is used for the Mesh network topology

Back 51

Internet

Front 52

Describe 10Base2, ThinNet.
What is cable type? What is speed? What is max length?

Back 52

Coaxial
10 Mbps
Max 185 meters

Front 53

Describe 10Base5, ThickNet.
What is cable type? What is speed? What is max length?

Back 53

Coaxial
10 Mbps
Max 500 meters

Front 54

Describe 10BaseT.
What is cable type? What is speed?

Back 54

UTP
10 Mps

Front 55

Describe 100BaseT, Fast Ethernet.
What is cable type? What is speed?

Back 55

UTP
100 Mps

Front 56

Describe 1000BaseT, Gigabit Ethernet.
What is cable type? What is speed?

Back 56

UTP
1000 Mps

Front 57

What type of LAN implementation does this describe:
Shared media
Uses broadcast and collision domains
Uses CSMA/CD access method
Can use coaxial or twisted pair media
Transmission speeds 10 Mbps to 1 Gbps

Back 57

Ethernet

Front 58

What type of LAN implementation does this describe:
All devices connect to a central MAU
Token passing media access method
Transmission speeds of 4-16 Mbps
Uses an active monitor and beaconing

Back 58

Token Ring

Front 59

What type of LAN implementation does this describe:
Token Passing media access method
Dual counter rotation rings for fault tolerance
Transmission speeds of 100 Mbps
Operates over long distances at high speeds and is used as backbone
CDDI works over UTP

Back 59

FDDI

Front 60

Describe Coaxial Cable.

Back 60

Copper core surrounded by shielding layer & grounding wire encased in outer jacket
Compared with twisted pair, more resilient to EMI, higher bandwidth, supports longer cable lengths. But more expensive
10Base2 (ThinNet)
10Base5 (ThickNet)
Can transmit in baseband or broadband

Front 61

Describe Twisted Pair Cable.

Back 61

Insulated copper wires surrounded by outer protective jacket
If it has outer foil shielding, then referred to as shielded twisted pair (STP)
Otherwise Unshielded twisted pair (UTP)
Twisting of wires protects the signals from radio frequency and EMI
Tighter the twisting, the more resilient
Copper makes the signal degrade after certain distance.
Copper radiates energy meaning info can be monitored or captured

Front 62

Describe UTP Category 3 cable.

Back 62

10 Mbps for Ethernet and 4 Mbps for Token Ring
Used in 10Base-T network installations

Front 63

Describe UTP Category 4 cable.

Back 63

16 Mbps
Usually used in Token Ring networks

Front 64

Describe UTP Category 5 cable.

Back 64

100 Mbps for 100Base-TX and CDDI networks, has high twisting and low crosstalk
Used in 100Base-TX, CDDI, Ethernet, and ATM installations. Most widely used in new network installations

Front 65

List 4 Media Access technologies.

Back 65

Token Passing
CSMA (Carrier Sense Multiple Access)
Collision Domains
Polling

Front 66

Describe the two kinds of CSMA (Carrier Sense Multiple Access)

Back 66

CSMA/CD - Carrier sense multiple access with collision detection -
Monitor the transmission activity on the wire to determine best time to transmit data
Each node monitors the wire and waits until wire is free before it transmits data.
With CSMA/CD - if 2 computers try to transmit data at same time, it will abort transmission and alert other stations that a collision took place. Stations will execute a random collision timer to force a delay before attempting to transmit

CSMA/CA - Carrier sense multiple access with collision avoidance
Computers signals its intent to transmit data before doing it

Front 67

Define Collision Domains

Back 67

A collision domain is a group of computers that are competing for same shared communication medium
Too many collisions can be caused by highly populated network, damaged cable or conductor, too many repeaters, too long cables
Problems can be dealt with by implementing collision domains
Can also make network sniffing more difficult

Front 68

Define Polling

Back 68

Media access technology
Primary and secondary stations
At predefined intervals, primary station asks secondary station if it has anything to transmit

Front 69

What is Address Resolution Protocol (ARP)?

Back 69

LAN protocol
MAC address (Media Access Control) - unique address for each ROM
When Frame hits the wire it only knows the MAC address

Front 70

What is Dynamic Host Configuration Protocol (DHCP)?

Back 70

LAN protocol
If computer IP address is not assigned, it goes to DHCP to get its IP when booting up

Front 71

What are Distance Vector Routing Protocols?

Back 71

Make routing decision based on distance or number of hops and vector or direction. Example: RIP

Front 72

What are Link State routing protocols?

Back 72

Build more accurate routing table because build a topology db of the network.
Look at more variables like packet size, link speed, delay, loading, reliability.
Example: OSPF

Front 73

What is a Repeater?

Back 73

Amplifies electrical signals between cable segments which enables it to extend a network
Work on Physical layer
Can be line conditioners

Front 74

What is a Hub?

Back 74

On Physical layer of OSI model.
Used to connect multiple LAN devices, no added intelligence
Multiport repeater

Front 75

What is a Bridge?

Back 75

Data Link Layer
Forwards Packets and filters based on MAC address.
Forwards broadcast traffic, but not collision traffic

Front 76

What is a Switch?

Back 76

Data Link Layer
Provides a private virtual link between communication devices. Allows for VLANs. Reduces collisions, impedes network sniffing
Will only send data to the port where the destination MAC address is
Multiport bridge

Front 77

What is a Router?

Back 77

Network Layer
Separates and connects LANs creating internetworks
Routers filter based on IP address
Opens packets and look at MAC or IP

Front 78

What is a Gateway?

Back 78

Application Layer
Connects different types of networks. Performs protocols and format translations

Front 79

Describe Packet Filtering Firewalls.

Back 79

1st Generation
Network and Transport level
Filtering based on network layer information so cannot look too far into the packet
Decisions based on header info
Routers using ACLs dictate acceptable access to a network

Front 80

Describe Application level proxy firewalls.

Back 80

2nd Generation
Looks deep into packets and makes granular access control decisions.
Requires one proxy per service

Front 81

Describe Circuit level proxy firewalls.

Back 81

2nd Generation
Network Layer
Looks at the header packet info. Protects a wider range of protocols and services, but does not provide the detailed level of control of an application level proxy

Front 82

Describe Stateful firewalls.

Back 82

3rd Generation
Network layer
Looks at the state and context of packets.
Keeps track of each conversation using a state table

Front 83

Describe Dynamic packet filtering firewalls.

Back 83

Dynamic ports are high numbers above well known ports starting at 1023
Dynamic packet firewall builds an ACL
Gives option of allowing any type of traffic outbound and permitting only response traffic inbound
Mostly used for UDP

Front 84

Describe Kernel proxy firewalls

Back 84

5th Generation
Faster because processing is done in the kernel.
One network stack is created for each packet

Front 85

What is a bastion host firewall?

Back 85

Locked down or hardened system
Usually highly exposed. Existence known to internet
No unnecessary services should be running, unnecessary user accounts disabled…
Any system that resides within the DMZ should be installed on a bastion host since it is closer to their internet

Front 86

What is a dual homed firewall?

Back 86

Two interfaces - one facing the external and one facing the internal network
If software is installed on dual homed device, underlying OS should have packet forwarding and routing turned off
Used to divide internal trusted network from external untrusted network

Front 87

What is a screened host firewall?

Back 87

Router filters (or screens) traffic before passing it to firewall
Firewall that communicates directly with perimeter router and internal network
Traffic first filtered via packet filtering firewall. Then moves to this point where more rules are applied
Screened host is the only device that receives traffic directly from the router

Front 88

What is a screened subnet?

Back 88

External router filters (or screens) traffic before it enters the subnet. Traffic headed toward internal network goes through 2 firewalls
Adds another layer of security to the screened host architecture.
External firewall screens the data entering the DMZ. Instead of the firewall then redirecting traffic to the internal network an internal firewall also filters the traffic
The use of 2 physical firewalls creates a DMZ

Front 89

What is Network Information System (NIS)?

Back 89

Like a telephone book for locating network resources
When computer boots up, goes to NIS server which provides group files, password files, host tables, port numbers, info on resources on domain
Workstations run a client process that identifies NIS services through a broadcast
NIS+ improved on performance and security

Front 90

What is Network Address Translation (NAT)?

Back 90

Enables a network that does not follow the internet's addressing scheme to communicate over the internet.
Enables a company to use private addresses and still be able to communicate transparently on the internet

Front 91

What is Port Address Translation (PAT)?

Back 91

Used by NAT
Company owns and uses only one public IP address for all systems that need to communicate outside internal network

Front 92

What is Asynchronous Transfer Mode (ATM)?

Back 92

Encapsulates data in fixed cells & can be used to deliver data over SONET network.
Uses fixed cell size instead of variable frame size used by earlier technologies

High bandwidth switching and multiplexing technologies that has low delay

Front 93

What is circuit switching?

Back 93

Sets up virtual connection that acts like a dedicated link between 2 systems
Traffic travels in predictable and consistent manner
Fixed delays
Usually used for voice oriented data

Front 94

What is packet switching?

Back 94

Packets from one connection can pass through number of individual devices instead of following one another through the same device
Examples: the internet, X.25, frame relay
Multiple paths to same destination and high degree of redundancy
Traffic is "bursty"
Variable delays
Usually used for data oriented data

Front 95

Describe Frame Relay.

Back 95

High performance WAN protocol that uses packet switching technology which works over public networks
Shared media among companies
Uses SVC and PVCs
Fee based on bandwidth use
Data link layer

Front 96

Describe X.25.

Back 96

First packet switching technology developed over public networks
Shared media among companies
Lower speed than frame relay because of extra overhead
International standard used more in countries other than US

Front 97

Describe ISDN

Back 97

Communication protocol provided by phone companies and ISPs
Enable data, voice and other traffic to travel over a medium in digital manner
Developed to replace the aging telephone analog systems
Can be used for anything a modem can be used for, but more functionality and higher bandwidth

Front 98

Describe DSL

Back 98

High speed connection technology to connect to service providers CO
6 to 30 times higher bandwidth speeds than ISDN and analog
Uses existing phone lines
24 hour connections to internet
Have to be within 2.5 mile radius of the DSL equipment

Front 99

What is PPP - Point to Point Protocol?

Back 99

Encapsulation protocol meaning an extra header and possibly trailer added to a frame
Allows TCP/IP and other protocols to be carried across telecommunications lines
Used to establish telecomm connections between routers, users to routers or users to users

Front 100

What are tunneling protocols?

Back 100

Tunnel is a virtual path across a network that delivers packets that are encapsulated and possibly encrypted
Can provide "gateway to gateway" connection between 2 routers
Examples: PPTP, IPSec, L2F, L2TP

Front 101

What is PPTP?

Back 101

A tunneling protocol
Data link layer
A Microsoft protocol - only for IP networks
Designed for client server connectivity

Front 102

What is IPSec?

Back 102

Tunneling protocol
Network layer. Provides security on top of IP
Can work in tunnel mode (payload and header are protected) or transport mode (payload is protected)
More secure authentication and encryption
Only supports IP networks
Focuses on LAN to LAN communication

Front 103

What is L2TP?

Back 103

Hybrid of L2F and PPTP
Data link layer
Provides functionality of PPTP but can work over non IP networks running other protocols including frame relay, X.25, ATM
Provides higher level of security when combined with IPSec
Supports TACACS+ and RADIUS while PPTP does not

Front 104

What is Frequency Hopping Spread Spectrum (FHSS)?

Back 104

Takes total amount of bandwidth and splits it into smaller sub channels.
Sender and receiver work at one of these channels for specific amount of time and then move to another channel
Helps prevent interference
Helps avoid eavesdropping
Uses portion of total bandwidth available

Front 105

What is Direct Sequence Spread Spectrum (DSSS)?

Back 105

Applies sub bits to the message
Sub bits used by sending system to generate a different format of the data before the data are transmitted. Receiving end uses sub bits to reassemble the signal into the original data format
Sequence sometimes called pseudo noise sequence because if you don't know the sequence, it appears as random noise
Uses all available bandwidth. Spreads signals over a wider frequency band

Front 106

Describe the 802.11b wireless standard

Back 106

Transfer up to 11 Mbps
2.4 GHz

Front 107

Describe the 802.11a wireless standard

Back 107

Transfer up to 54 Mbps
5 GHz

Front 108

Describe the 802.11g wireless standard

Back 108

Higher data transfer rates 0 up to 54 Mbps.
Backwards compatible with b.
Works in 2.4 GHz range

Front 109

What is WAP

Back 109

Not a standard but a de facto market and industry driven protocol stack
Provides common architecture for wireless devices to communicate over the internet
Set of communication protocols used to perform similar functionalities as TCP/IP

Front 110

What is Traceroute?

Back 110

Shows you the path a packet took to get to its destination.
Normal traceroutes list the routers.

Front 111

What is Asymmetrical digital subscriber line (ADSL)?

Back 111

Higher download rates than upload
Downstream 1.5 mbps to 9 mbps
Upstream 16 kbps to 640 kbps
Max distance 18,000 ft

Front 112

What is Single-line digital subscriber line (SDSL)?

Back 112

Symmetrical download and upload rates
1.544 mbps
Single twisted pair in both directions
Operating range 10,000 ft

Front 113

What is High Rate Digital Subscriber Line (HDSL)?

Back 113

Symmetrical download and upload rates
1.544 mbps
Two copper twisted pairs
Used by local phone companies for T1
Operating range 12,000 ft

Front 114

What is Very High Data Rate digitals subscriber line (VDSL)?

Back 114

Downstream data range 13 mbps to 52 mbps
Upstream data rate 1.5 to 2.3 mbps upstream
Operating range 1000 to 4500 ft