CISSP Communication and Network Security 5

Question 1

Which protocol is used by network devices to dynamically assign IP addresses and provide configuration parameters to hosts?

Accepted Answer

DHCP

Answer

DHCP (Dynamic Host Configuration Protocol) dynamically assigns IP addresses, subnet masks, default gateways, and DNS server addresses to network clients.

Question 2

A company discovers that an attacker exploited a switch to access traffic on a VLAN they should not have access to by sending specially crafted 802.1Q frames. This attack is known as:

Accepted Answer

VLAN hopping (double tagging)

Answer

VLAN hopping via double tagging embeds two 802.1Q tags so traffic crosses VLAN boundaries when the outer tag is stripped by the first switch.

Question 3

Which network security concept ensures that all traffic, including internal east-west traffic, is inspected and no implicit trust is granted based on network location?

Accepted Answer

Zero Trust Network Access (ZTNA)

Answer

Zero Trust Network Access operates on the principle of 'never trust, always verify,' requiring authentication and authorization for all traffic regardless of source location.

Question 4

What is the MAIN difference between a stateful packet inspection (SPI) firewall and a stateless packet filter?

Accepted Answer

SPI firewalls track connection state and context; packet filters evaluate each packet in isolation

Answer

Stateful inspection firewalls maintain a connection state table to evaluate packets in the context of their TCP/UDP session, while packet filters assess each packet independently.

Question 5

Which Bluetooth attack allows an attacker to send unsolicited messages to a discoverable Bluetooth device without pairing?

Accepted Answer

Bluejacking

Answer

Bluejacking sends unsolicited messages (typically via vCard or messages) to nearby discoverable Bluetooth devices without requiring authentication or pairing.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Communication and Network Security 5