Cissp Communications And Network Security

Front 1

Layers of the OSI model

Back 1

Application

Presentation

Session

Transport

Network

Data link

Physical

Front 2

Application layer device/protocols

Back 2

User applications

HTTP

FTP

Telnet

DHCP

SMTP

etc.

Front 3

Presentation layer device/protocols

Back 3

JPG

AFCII

TIFF

SSL

Front 4

Session layer device/protocol

Back 4

Logical ports / inter host communication

AppleTalk

WinSock

RPC

Front 5

Transport layer device/protocols

Back 5

TCP

UDP

SPX

SCTP

Front 6

Network layer device/protocols

Back 6

Routers

IP

IPSec

ICMP

IGMP

Front 7

Data link layer device/protocols

Back 7

Switch

BridgeWAP

PPP

SLIP

CSLIP

L2TP

Front 8

Physical layer device / protocols

Back 8

Physical characteristics of the hardware -

Volts

Pins

Bit-rate

Transmission

etc.

Front 9

Layer 1

Back 9

The physical layer describes the networking hardware, such as electrical signals and network interfaces and cabling.

Front 10

Layer 2

Back 10

The data link layer describes data transfer between machines, for instance by an Ethernet.

Front 11

Layer 3

Back 11

The network layer describes data transfer between networks, for instance by the Internet Protocol IP.

Front 12

Layer 4

Back 12

The transport layer describes data transfer between applications, flow control, and error detection and correction, for instance by TCP.

Front 13

Layer 5

Back 13

The session layer describes the handshake between applications, for instance, authentication processes.

Front 14

Layer 6

Back 14

The presentation layer describes the presentation of information, such as ASCII syntax

Front 15

Layer 7

Back 15

The application layer describes the structure, interpretation, and handling of information. Insecurity terms, it is relevant because it relies on all underlying layers.

Front 16

The layer in which Ethernet is described in the OSI reference model

Back 16

Layer 2 data-link layer

Front 17

Port address translation PAT

Back 17

An extension to network address translation (NAT) that permits multiple devices on a local area network (LAN) to be map to a single public IP address.

Front 18

Tracert

Back 18

A utility that will attempt to trace the route to the target address over a maximum of 30 hops. As a result, it will tell the user which routes are valid, and where the packets are being dropped, allowing them to quickly diagnose connectivity problems.

Front 19

Ping scanning

Back 19

A basic network mapping technique that helps narrow the scope of an attack. An attacker can use one of many tools such as a Very Simple Network Scanner for Windows based platforms NMAP for Linux and Windows based platforms to ping all of the addresses in a range. If the host replies to a ping, than the attacker knows the host exist at the address.

Front 20

Power over Ethernet PoE

Back 20

Allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras.

Front 21

Virtual Private Network VPN

Back 21

Extends a private network across a public network such as the Internet. It enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network and thus are benefiting from the functionality, security and management policies of the private network.

Front 22

Virtual local area network VLAN

Back 22

Any broadcast domain that is partitioned and isolated in a computer network at the data link layer.

Front 23

Optimal location for network based intrusion detection system

Back 23

On the network perimeter, to alert the network administrator of all suspicious traffic.

Front 24

Intrusion detection system IDS

Back 24

Monitor activity and send alerts when they detect suspicious traffic.

Front 25

Two types of intrusion detection systems

Back 25

Host based IDS - which monitor activity on servers and workstations

Network based IDS - monitor network activity

Front 26

Two parts of a subnet mask

Back 26

Network ID and host ID

Front 27

Network ID

Back 27

Represents the network the device is connected to

Front 28

Subnet Mask

Back 28

Only devices in the same subnet mask are able to communicate with other devices on the same subnet

Front 29

Convert ip-based networks can contain the following devices

Back 29

Physical security, industrial monitoring, CCTV, voice services, data, television

Front 30

TCP/IP port filtering

Back 30

The practice of selectively enabling or disabling the Transmission Control Protocol (TCP) ports and user Datagram Protocol (UDP) ports on computers or network devices.

Front 31

Content filtering

Back 31

HTTP proxy is used as a means to implement. Logging or blocking traffic that has been defined as or is assumed to be non business related for some reason.

Front 32

Devices that should be part of a network's perimeter defense

Back 32

A firewall

A proxy server

A host-based intrusion detection system(HIDS)

Front 33

Security perimeter

Back 33

The first line of protection between trusted and untrusted networks.

Front 34

Principal security risks of wireless LANs

Back 34

Lack of physical access control - wireless networks allow users to be mobile while remaining connected to a LAN.

Front 35

IPv4 routing protocols

Back 35

RIPvl: (legacy) IGP, distance vector, classful protocol

IGRP: (legacy) IGP, distance vector, classful protocol developed by Cisco

RIPv2: IGP, distance vector, classless protocol

EIGRP: IGP, distance vector, classless protocol developed by Cisco

OSPF: IGP, link-state , classless protocol

IS-IS: IGP, link-state , classless protocol

BGP: EGP, path-vector, classless protocol

Front 36

IPSec

Back 36

Provides mechanisms for authentication and encryption

Front 37

IP security IPSec

Back 37

A suite of protocols for communicating securely with IP by providing mechanisms for authenticating an encryption. Authenticates only to hosts with each other

Front 38

SEM/SEIM

Back 38

Have to understand a wide variety of different applications and network element (routers/switches) logs and formats; consolidate these logs into a single database and then correlate events looking for clues to unauthorized behaviors that would be otherwise inconclusive isf observed in a single log file.

Front 39

What is Security Event Management (SEM) service performs

Back 39

Aggregates logs from security devices and applications servers looking for suspicious activity.

Front 40

Principal weakness of DNS (Domain Name System)

Back 40

Lack of authentication of servers and thereby authenticity of records. Authentication services have been delegated upward to higher protocol layers.

Front 41

Open email relay

Back 41

A server that forwards email from domains other than the one it serves. Also widely considered a sign of bad system administration.

Front 42

Principal tool for the distribution of spam

Back 42

Open email relays

Front 43

Botnet

Back 43

A group of dispersed, compromised machines controlled remotely from illicit reasons.

Front 44

Bots and botnets

Back 44

Zombies controlled by ethereal entities from the dark places on the internet

Front 45

WPA2 ( Wi-Fi Protected Access 2)

Back 45

Security technology commonly used on Wi-Fi wireless networks. Replace the original WPA technology on all certified Wi-Fi hardware since 2006 and is based on the IEEE 802.11i technology standard for data encryption.

Front 46

Disabling the SSID will

Back 46

Further enhances the security of the solution, as it requires a user that wants to connect to the WAP to have the exact _______ as opposed to selecting it from a list.

Front 47

HDSL

Back 47

Requires two twisted pair so it is deployed primarily for PBX network connections, digital loop carrier systems, interchange POPs, Internet servers, and private data networks.

Front 48

Operating range of HDSL

Back 48

Limited to 12,000 feet so signal repeaters are installed to extend the service

Front 49

DSL (digital subscriber line) methods

Back 49

ADSL- Asymmetric digital subscriber line - downstream transmission rates are much greater than upstream one typically 256 or 512 kbps downstream and 64 kbps upstream

RADSL- Rate adaptive DSL - the upstream transmission rate is automatically tuned based on the quality of the line

SDSL - Symmetric digital subscriber line - uses the same rates for upstream and downstream transmissions what are you doing

VDSL - Very high bitrate DSL- supports much higher transmission rates than other DSL technologies, such as 13 mbps downstream and 2 megabytes per second upstream

Front 50

Fiber cable

Back 50

Relies on light. Electromagnetic and source power based distortions do not affect it.

Front 51

Media types that rely on electromagnetic principles to operate and are therefore susceptible to electromagnetic interference

Back 51

Coax cable

Wireless

Shielded twisted pair

Front 52

Media types that rely on electromagnetic principles to operate and are therefore susceptible to electromagnetic interference

Back 52

Coax cable

Wireless

Shielded twisted pair

Front 53

Coaxial cable (or simply coax)

Back 53

Uses one thick conductor that is surrounded by a grounding braid of wire. A non-conducting layer is placed between the two layers to insulate them. The entire cable is placed within a protective sheath.

Front 54

Disadvantages of coaxial cable

Back 54

Is expensive, and is difficult to bend during installation.

Front 55

Thicker than the twisted pair and therefore can support greater bandwidth and longer cable length

Back 55

Coax cable

Front 56

Shielding

Back 56

On coax cable ____ makes it harder for an intruder to monitor the signal with antenna or install a tap.

Front 57

Protects coax cable from electrical interference such as EMI and RFI

Back 57

Superior insulation

Front 58

UTP unshielded twisted pair

Back 58

The most common cable type. Is inexpensive and can be easily bent during installation. Risks of drawbacks does not justify more expensive cables.

Front 59

STP - Shielded twisted pair

Back 59

Pairs of insulated twisted copper are in close in a protective jacket. Uses an electronically grounded shield to protect signal. The shield surrounds each of the twisted pairs in the cable, surround the bundle of twisted pairs, or both. Disadvantages over UTP = more expensive and is bulkier and hard to bend during installation

Front 60

Multi layer protocols such as Modbus

Back 60

Are often insecure by their very nature as they are not designed to natively operate over today is IP networks. Often used in industrial control systems.

Front 61

Packet switched technologies include

Back 61

X. 25

Link access / procedure balanced LAPB

Frame Relay

Switched multi megabyte data services SMDS

Asynchronous transfer mode ATM

Voice over IP VoIP

Front 62

Generation 1 firewalls

Back 62

Static packet filter

Stateful Packet Inspection

Front 63

Second-generation firewalls

Back 63

Proxy services

Front 64

Firewall

Back 64

A system designed to prevent unauthorized access to or from a private network.

Front 65

Third-generation firewalls, firewalls evolved, next generation firewalls

Back 65

Stateful multilevel inspection, screen see entire packet, OSI layers 2 through 7, rapidly compares each packet to known bit patterns of friendly packets before deciding whether to pass the traffic. Coupled with or integrated into intrusion detection system IDS, SMLI offers the first glimpse of this new definition of firewall.

Front 66

If the communication mode is gateway-gateway or host-gateway

Back 66

Encapsulating security payload (ESP) authentication must be used

Front 67

Polling

Back 67

A LAN transmission protocol