INT-2690: CISSP Chapter 4 Communication and Network Security Questions
Which best describes the IP protocol?
A connectionless protocol that deals with the addressing and routing of packets
Which of the following proxies cannot make access decisions based upon protocol commands?
Circuit
An effective method to shield networks from unauthenticated DHCP clients is through the use of _______________ on network switches.
DHCP snooping
Which of the following is the best countermeasure for the attack type addressed in the scenario?
DNSSEC
Which of the following is the best countermeasure that John's team should implement to protect from improper caching issues?
DNSSEC
Which of the following shows the layer sequence as layers 2, 5, 7, 4, and 3?
Data link, session, application, transport, and network
Which of the following is not a characteristic of the Protected Extensible Authentication Protocol?
Designed to support password-protected connections
What takes place at the session layer?
Dialog control
Which of the following is the best and most cost-effective countermeasure for Grace's team to put into place?
Disallowing unnecessary ICMP traffic coming from untrusted networks
What type of client ports should Don make sure the institution's software is using when client-to-server communication needs to take place?
Dynamic
Which of the following solutions is best to meet the company's need to protect wireless traffic?
EAP-TTLS
What takes place at the data link layer?
Framing
What should Tom's team implement to provide source authentication and data encryption at the data link level?
IEEE 802.1X
Wireless LAN technologies have gone through different versions over the years to address some of the inherent security issues within the original IEEE 802.11 standard. Which of the following provides the correct characteristics of Wi-Fi Protected Access 2 (WPA2)?
IEEE 802.1X, EAP, CCMP
Which of the following provides an incorrect definition of the specific component or protocol that makes up IPSec?
Internet Key Exchange provides authenticated keying material for use with encryption algorithms.
How does TKIP provide more protection for WLAN environments?
It adds more keying material.
Why are switched infrastructures safer environments than routed networks?
It is more difficult to sniff traffic since the computers have virtual private connections.
Which of the following is not a characteristic of the IEEE 802.11a standard?
It provides 52 Mbps in bandwidth.
Which of the following is the best type of fiber that should be implemented in this scenario?
Multimode
Which of the following is not one of the stages of the DHCP lease process?
None of Them
Charlie uses PGP on his Linux-based email client. His friend Dave uses S/MIME on his Windows-based e-mail. Charlie is unable to send an encrypted email to Dave. What is the likely scenario?
PGP and S/MIME are incompatible
Which of the following best describes why Sean's team wants to put in the mentioned countermeasure for the most commonly attacked systems?
Reduce DoS attack effects
Alice wants to send a message to Bob, who is several network hops away from her. What is the best approach to protecting the confidentiality of the message?
S/MIME
Which of the following is the best countermeasure to put into place to help reduce the threat of network sniffers viewing network management traffic?
SNMP v3
What should Don's team put into place to stop the masquerading attacks that have been taking place?
SRPC
Which of the following is a cost-effective countermeasure that Don's team should implement?
SYN proxy
The ______________ is an IETF-defined signaling protocol, widely used for controlling multimedia communication sessions such as voice and video calls over IP.
Session Initiation Protocol
Which of the following best describes the firewall configuration issues Sean's team member is describing?
Silent rule, negate rule
Which of the following technologies should Lance's team investigate for increased authentication efforts?
Simple Authentication and Security Layer
Which of the following is most likely taking place to allow spurious packets to gain unauthorized access to critical servers?
Source routing is not restricted
Which of the following protocols is considered connection-oriented?
TCP
Which of the following protocols work in the following layers: application, data link, network, and transport?
TFTP, ARP, IP, and UDP
Based upon the information in the scenario, what should the network team implement as it pertains to IPv6 tunneling?
Teredo should be configured on IPv6-aware hosts that reside behind the NAT device.
Metro Ethernet is a MAN protocol that can work in network infrastructures made up of access, aggregation, metro, and core layers. Which of the following best describes these network infrastructure layers?
The access layer connects the customer's equipment to a service provider's aggregation network. Aggregation occurs on a distribution network. The metro layer is the metropolitan area network. The core connects different metro networks.
Systems that are built on the OSI framework are considered open systems. What does this mean?
They are built with internationally accepted protocols and standards so they can easily communicate with other systems.
Which of the following is most likely the issue that Grace's team experienced when their systems went offline?
Three critical systems were connected to a single-attached station.
Which of the following technologies integrates previously independent security solutions with the goal of providing simplicity, centralized control, and streamlined processes?
Unified Threat Management
Which of the following can take place if an attacker can insert tagging values into network- and switch-based protocols with the goal of manipulating traffic at the data link layer?
VLAN hopping attack
Which of the following is a bridge-mode technology that can monitor individual traffic links between virtual machines or can be integrated within a hypervisor component?
Virtual firewall
Which of the following is the best solution to meet the company's need for broadband wireless connectivity?
WiMAX
Which of the following unauthorized activities have most likely been taking place in this situation?
Zone transfer
