Certified Information Systems Security Professional (CISSP)

Which of the following type of traffic can easily be filtered with a stateful packet filter by enforcingthe context or state of the request?

• ICMP

• TCP

• UDP

• IP

When referring to the data structures of a packet, the term Protocol Data Unit (PDU) is used, what is the proper term to refer to a single unit of TCP data at the transport layer?

• TCP segment.

• TCP datagram

• TCP frame

• TCP packet.

How do you distinguish between a bridge and a router?

• A bridge simply connects multiple networks, a router examines each packet to determine which network to forward it to.

• "Bridge" and "router" are synonyms for equipment used to join two networks.

• The bridge is a specific type of router used to connect a LAN to the global Internet.

• The bridge connects multiple networks at the data link layer, while router connects multiple networks at the network layer.

ICMP and IGMP belong to which layer of the OSI model?

• Datagram Layer

• Network Layer.

• Transport Layer

• Data Link Layer

What is a limitation of TCP Wrappers?

• It cannot control access to running UDP services.

• It stops packets before they reach the application layer, thus confusing some proxy servers.

• The hosts.* access control system requires a complicated directory tree.

• They are too expensive.

The IP header contains a protocol field. If this field contains the value of 1, what type of data is contained within the IP datagram?

• TCP.

• ICMP

• UDP

• IGMP

The IP header contains a protocol field. If this field contains the value of 2, what type of data is contained within the IP datagram?

• TCP

• ICMP

• UDP

• IGMP

What is the proper term to refer to a single unit of IP data?

• IP segment.

• IP datagram.

• IP frame

• IP fragment.

A packet containing a long string of NOP's followed by a command is usually indicative of what?

• A syn scan

• A half-port scan

• A buffer overflow attack

• A packet destined for the network's broadcast address

In the days before CIDR (Classless Internet Domain Routing), networks were commonly organized by classes. Which of the following would have been true of a Class C network?

• The first bit of the IP address would be set to zero.

• The first bit of the IP address would be set to one and the second bit set to zero.

• The first two bits of the IP address would be set to one, and the third bit set to zero.

• The first three bits of the IP address would be set to one