CISSP Communication and Network Security 3

Question 1

Which VPN technology operates at Layer 2 and allows remote sites to appear as if they are on the same local network segment?

Accepted Answer

MPLS L2VPN (VPLS)

Answer

VPLS (Virtual Private LAN Service) is an MPLS-based L2VPN that bridges remote sites at Layer 2, making them appear as a single LAN.

Question 2

An organization wants to prevent employees from exfiltrating data via encrypted DNS tunnels. Which control is MOST effective?

Accepted Answer

Deploy a recursive DNS resolver with anomaly detection for high-volume or large TXT record queries

Answer

DNS tunneling detection relies on behavioral analysis—unusually high query volumes, large TXT records, and long subdomains—which a monitored internal resolver can identify.

Question 3

What is the key security advantage of using SNMPv3 over SNMPv2c for network device management?

Accepted Answer

SNMPv3 provides authentication and encryption; SNMPv2c uses only community strings

Answer

SNMPv3 adds USM (User-based Security Model) providing message authentication (HMAC-MD5/SHA) and encryption (AES), unlike SNMPv2c's cleartext community strings.

Question 4

A penetration tester uses a rogue AP broadcasting the same SSID as the corporate network to capture credentials. This attack is BEST described as:

Accepted Answer

Evil twin attack

Answer

An evil twin attack creates a fraudulent access point mimicking a legitimate SSID to intercept client connections and capture credentials.

Question 5

Which routing protocol security feature prevents unauthorized routers from injecting false routing information into an OSPF domain?

Accepted Answer

OSPF MD5 or SHA authentication

Answer

OSPF neighbor authentication (MD5 or SHA) requires routers to prove identity before exchanging routing updates, preventing rogue router injection.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Communication and Network Security 3