CISSP Domain 4

Which of the following is used by the Point-to-Point Protocol (PPP) to determine packet formats?

• Layer 2 Tunneling Protocol (L2TP)

• Link Control Protocol (LCP)

• Challenge Handshake Authentication Protocol (CHAP)

• Packet Transfer Protocol (PTP)

Which of the following operates at the Network Layer of the Open System Interconnection (OSI) model?

• Packet filtering

• Port services filtering

• Content filtering

• Application access control

What does a Synchronous (SYN) flood attack do?

• Forces Transmission Control Protocol /Internet Protocol (TCP/IP) connections into a reset state

• Establishes many new Transmission Control Protocol / Internet Protocol (TCP/IP) connections

• Empties the queue of pending Transmission Control Protocol /Internet Protocol (TCP/IP) requests

• Exceeds the limits for new Transmission Control Protocol /Internet Protocol (TCP/IP) connections

In a High Availability (HA) environment, what is the PRIMARY goal of working with a virtual router address as the gateway to a network?

• The second of two routers can periodically check in to make sure that the first router is operational.

• The second of two routers can better absorb a Denial of Service (DoS) attack knowing the first router is present.

• The first of two routers fails and is reinstalled, while the second handles the traffic flawlessly.

• The first of two routers can better handle specific traffic, while the second handles the rest of the traffic seamlessly.

How does Encapsulating Security Payload (ESP) in transport mode affect in the Internet Protocol (IP)?

• Authenticates the IP payload and selected portions of the IP header

• Encrypts and optionally authenticates the complete IP packet

• Encrypts and optionally authenticates the IP header, but not the IP payload

• Encrypts and optionally authenticates the IP payload, but not the IP header

Which of the following type of traffic can easily be filtered with a stateful packet filter by enforcing the context or state of the request?

• ICMP

• TCP

• UDP

• IP

When referring to the data structures of a packet, the term Protocol Data Unit (PDU) is used, what is the proper term to refer to a single unit of TCP data at the transport layer?

• TCP Segment

• TCP Datagram

• TCP Frame

• TCP Packet

How do you distinguish between a bridge and a router?

• A bridge simply connects multiple networks, a router examines each packet to determine which network to forward it to.

• "Bridge" and "router" are synonyms for equipment used to join two networks.

• The bridge is a specific type of router used to connect a LAN to the global Internet.

• The bridge connects multiple networks at the data link layer, while router connects multiple networks at the network layer

ICMP and IGMP belong to which layer of the OSI model?

• Datagram Layer

• Network Layer

• Transport Layer

• Data Link Layer

Which of the following is an IP address that is private (i.e. reserved for internal networks, and not a valid address to use on the Internet)?

• 192.168.42.5

• 192.166.42.5

• 192.175.42.5

• 192.1.42.5