Cissp - Domain 10 - Telecommunications And Network Security

Front 1

Seven layers of the OSI model

Back 1

Physical, data link, network, transport, session, presentation, application

Front 2

Security at layer seven.

Back 2

Confidentiality, authentication, data integrity, non-repudiation

Front 3

Technology at layer seven.

Back 3

Gateways

Front 4

Protocols at layer seven.

Back 4

FTP, SNMP, SMTP, DNS, TFTP, NFS, S-HTTP

Front 5

Security at layer six.

Back 5

Confidentiality, authentication, encryption

Front 6

Protocols at layer six.

Back 6

None

Front 7

Technology at layer six.

Back 7

Gateways

Front 8

Security at layer five.

Back 8

None

Front 9

Technology at layer five.

Back 9

Gateways

Front 10

Protocols at layer five.

Back 10

RPC, SQL

Front 11

Security at layer four.

Back 11

Confidentiality, authentication, integrity

Front 12

Technology at layer four.

Back 12

Gateways

Front 13

Protocols at layer four.

Back 13

TCP, UDP, SSL, SSH-2

Front 14

Security at layer three.

Back 14

Confidentiality, authentication, data integrity

Front 15

Technology at layer three.

Back 15

Virtual circuits, routers

Front 16

Protocols at layer three.

Back 16

IP, IPSec, ARP, RARP, ICMP

Front 17

Security at layer two.

Back 17

Confidentiality

Front 18

Technology at layer two.

Back 18

Bridges, switches

Front 19

Security at layer one.

Back 19

Confidentiality

Front 20

Technology at layer one.

Back 20

ISDN, repeaters, hubs

Front 21

Protocols at layer one.

Back 21

IEEE 802, IEEE 802.2, X.21, HSSI

Front 22

Four layers of the TCP/IP model.

Back 22

Network access (link), internet, host-to-host, aplication

Front 23

Protocols at the host-to-host-layer

Back 23

TCP, UDP

Front 24

Protocols at the internet layer

Back 24

IP, ARP, RARP, ICMP

Front 25

The process in which information from one packet is wrapped around or attached to the data of another packet.

Back 25

Encapsulation

Front 26

Five attributes of TCP.

Back 26

Acknowledged, sequenced, connection oriented, reliable, high overhead

Front 27

Five attributes of UDP.

Back 27

Unacknowledged, subsequence, connectionless, unreliable, low overhead (faster)

Front 28

Three steps of the TCP three way handshake.

Back 28

SYN, SYN ACK, ACK

Front 29

Three steps to tear down a TCP connection.

Back 29

FIN, FIN ACK, ACK

Front 30

Uniquely identifies a network destination.

Back 30

IP address

Front 31

Uniquely identifies a service on a destination system for a given protocol.

Back 31

Port

Front 32

Identifies one side of a network connection using an IP address and port.

Back 32

Socket

Front 33

Uniquely identifies a network connection.

Back 33

Two sockets.

Front 34

Well known ports.

Back 34

0 - 1023

Front 35

High numbered ports.

Back 35

1024 - 65536

Front 36

FTP port numbers.

Back 36

20 and 21

Front 37

SSH port number.

Back 37

22

Front 38

Telnet port number.

Back 38

23

Front 39

SMTP port number.

Back 39

25

Front 40

DNS port number.

Back 40

53

Front 41

TFTP port number.

Back 41

69

Front 42

HTTP port number.

Back 42

80

Front 43

POP3 port number.

Back 43

110

Front 44

SNMP port numbers.

Back 44

161 and 162

Front 45

HTTPS port number.

Back 45

443

Front 46

OSI layer that ARP operates at.

Back 46

Data link layer

Front 47

Resolves IP addresses to MAC addresses.

Back 47

Address resolution protocol (ARP)

Front 48

Resolves MAC addresses to IP addresses.

Back 48

Reverse address resolution protocol (RARP)

Front 49

Used to map private IP addresses to public IP addresses.

Back 49

Network address translation (NAT)

Front 50

Similar to NAT but all hosts share a small pool of public addresses.

Back 50

Port address translation (PAT)

Front 51

Occurs when conductors in close physical proximity interfere with each other.

Back 51

Crosstalk

Front 52

Occurs when a signal weakens when traveling across a long network segment,

Back 52

Attenuation

Front 53

Occurs when external sources of electromagnetic energy interfere with communication.

Back 53

Electromagnetic interference (EMI)

Front 54

Five network access techniques.

Back 54

CSMA, CSMA/CA, CSMA/CD, token ring, polling

Front 55

Systems check to see if a network is in use, if not they start transmitting.

Back 55

Carrier sense multiple access (CSMA)

Front 56

Networks require each host to ask for permission before transmitting.

Back 56

Carrier sense multiple access with collision avoidance (CSMA/CA)

Front 57

Hosts transmit when they believe the network is clear but continue monitoring for other hosts. If they detect another host transmitting the stop and wait for a random period of time to start again.

Back 57

Carrier sense multiple access with collision detection (CSMA/CD)

Front 58

Networks pass a logical token from host to host, A host may only transmit when it has the token.

Back 58

Token ring

Front 59

Network use a master/slave hierarchy. The master system polls each host to see if it has traffic. When a system is polled it may transmit any data in the queue.

Back 59

Polling

Front 60

Six types of data networks.

Back 60

LANs, MANs, WANs, internet, intranet, extranet

Front 61

Network covering a limited geographical area.

Back 61

Local area network (LAN)

Front 62

Network that connects LANs within a limited geographical area.

Back 62

Metropolitan area network (MAN)

Front 63

A global network connecting sites worldwide.

Back 63

Internet

Front 64

Private networks limited to a particular organization.

Back 64

Intranet

Front 65

Extensions of an intranet to outside organizations.

Back 65

Extranets

Front 66

Three methods of network communication in IPv4.

Back 66

Broadcast, unicast, multicast

Front 67

Communications from a single host directed to all hosts,

Back 67

Broadcast

Front 68

Communications between two individual hosts.

Back 68

Unicast

Front 69

Communications from a single host to many separate hosts.

Back 69

Multicast

Front 70

Five LAN topologies.

Back 70

Bus, ring, star, tree, mesh

Front 71

LAN topology where all hosts are connected to a single conductor.

Back 71

Bus

Front 72

LAN topology where each host is connected to two adjacent hosts, forming a ring.

Back 72

Ring.

Front 73

LAN topology where all hosts are connected to a central hub or other networking device.

Back 73

Star

Front 74

LAN topology where several busses or stars are connected together.

Back 74

Tree

Front 75

LAN topology where there are several links between hosts.

Back 75

Mesh

Front 76

Network devices that amplify signals and operate at OSI layer 1.

Back 76

Repeaters

Front 77

Network devices that are repeaters with multiple ports that operate at OSI layer 1.

Back 77

Hubs

Front 78

Network devices that connect similar networks and operate at OSI layer 2

Back 78

Bridges

Front 79

Network devices that block broadcasts, connect similar networks, and operate at OSI layer 2.

Back 79

Switches

Front 80

Network devices that clock broadcasts, connect similar networks, and operate at OSI layer 3.

Back 80

Routers

Front 81

Network devices that connect similar networks and operate at OSI layer 7.

Back 81

Gateways

Front 82

Five types of WAN technologies.

Back 82

Dedicated lines, non-dedicated lines, X.25 networks, frame relay networks, ATM networks

Front 83

Circuits such as T1, T3, E1, and E3 circuits which are point to point links between networks.

Back 83

Dedicated lines

Front 84

Circuits such as DSL and ISDN that operate over the telephone network.

Back 84

Non-dedicated lines

Front 85

Packet switching networks that have permanent virtual circuits (PVCs).

Back 85

X.25

Front 86

Networks that allow multiple private virtual circuits (PVCs) on one line.

Back 86

Frame relay

Front 87

Networks that use 53 byte cells and are able to allocate bandwidth on demand.

Back 87

ATM

Front 88

RAID type that uses disk striping and offers no added security.

Back 88

RAID 0

Front 89

RAID type that uses mirroring between two disks.

Back 89

RAID 1

Front 90

RAID type that uses interleave parity with a minimum of three physical disks and stripes data blocks and a parity block across the disks.

Back 90

RAID 5

Front 91

RAID type that uses two striped disk sets that are mirror images of each other.

Back 91

RAID 10

Front 92

Three different types of RAID drives.

Back 92

Hot swappable, cold swappable, warm swappable

Front 93

RAID drives that may be replaced while the server is running without any downtime.

Back 93

Hot swappable

Front 94

RAID drives that require a server shutdown for replacement and cause downtime.

Back 94

Cold swappable

Front 95

RAID drives that require disabling the RAID array and render it unavailable but do not require a complete server shutdown for replacement.

Back 95

Warm swappable

Front 96

Four types of firewall.

Back 96

Packet filtering, Application level, Stateful packet inspection, dynamic packet filtering

Front 97

Firewall that examines the source and destination address of an IP packet and can deny access to applications or services based on ACLs.

Back 97

Packet filtering

Front 98

First generation firewall.

Back 98

Packet filtering

Front 99

Second generation firewall.

Back 99

Application level

Front 100

Third generation firewall.

Back 100

Stateful packet inspection

Front 101

Fourth generation firewall.

Back 101

Dynamic packet filtering

Front 102

Firewall that captures packets with an inspection engine.

Back 102

Stateful packet inspection

Front 103

Four firewall architectures.

Back 103

Packet filtering routers, screened host systems, dual homed host, screened subnets

Front 104

Firewall that use ACLs to determine what type of traffic is permitted onto the protected network.

Back 104

Packet filtering routers

Front 105

Firewall that provides both network layer packet filtering and application layer proxy services.

Back 105

Screened host

Front 106

Firewall that consists of a single host with two NICs, one on the trusted network and one on the untrusted.

Back 106

Dual homed host

Front 107

Type of firewall that provides a demilitarized zone (DMZ)

Back 107

Screened subnet

Front 108

Network that creates secure communication links over inherently insecure networks such as the internet.

Back 108

Virtual private network (VPN)

Front 109

Five PPTP authentication techniques.

Back 109

CHAP, MS-CHAP, PAP, EAP, SPAP

Front 110

A proprietary VPN protocol developed by cisco that does not support encryption and is not commonly used.

Back 110

Layer two forwarding (L2F)

Front 111

VPN protocll that combines elements of PPTP and L2F. Typically uses IPSec for security.

Back 111

Layer two tunneling protocol (L2TP)

Front 112

The most common VPN protocol in use today.

Back 112

IPSec

Front 113

IPSec mode where the entire data packet is encrypted and encased in an IPSec packet.

Back 113

Tunnel mode

Front 114

IPSec mode where only the datagram is encrypted, not the header.

Back 114

Transport mode

Front 115

Two IPSec modes.

Back 115

Tunnel, transport

Front 116

Used to negotiate and establish security associations (SAs) between hosts for IPSec.

Back 116

Internet security association and key management protocol (ISAKMP)

Front 117

Protocol that provides authentication and integrity for IPSec.

Back 117

Authentication header (AH)

Front 118

Protocol that provides authentication, integrity, and confidentiality for IPSec.

Back 118

Encapsulating security payload (ESP)

Front 119

Five common attacks against networked communications.

Back 119

Eavesdropping, masquerading, replay, session hijacking, man in the middle

Front 120

Attack that occur when an intermediary is able to observe communications while in transit on a network.

Back 120

Eavesdropping

Front 121

Attacks that occur when one entity is able to successfully impersonate another entity.

Back 121

Masquerading

Front 122

Attacks that occur when one entity is able to eavesdrop on the authentication process used between two hosts and then reuse the captured packets to authenticate with one of the hosts.

Back 122

Replay

Front 123

Attacks that occur when one system is able to take over a connection being used by another system.

Back 123

session hijacking

Front 124

Attacks that occur when one host is able to successfully convince two other hosts that they are communicating with each other when they are really both communicating with the attacker who is relaying the messages.

Back 124

Man in the middle.