SSCP Network & Communications Security 3

Question 1

What distinguishes a site-to-site VPN from a remote-access VPN?

Accepted Answer

Site-to-site connects entire networks; remote-access connects individual clients

Answer

Site-to-site VPNs create a permanent tunnel between two network gateways, while remote-access VPNs allow individual users to connect securely from any location.

Question 2

Which DNS attack causes a resolver to cache a fraudulent IP mapping for a legitimate domain?

Accepted Answer

DNS cache poisoning

Answer

DNS cache poisoning (Kaminsky attack) injects a forged DNS response so the resolver stores a malicious IP for a legitimate domain, redirecting users.

Question 3

In the context of 802.1X port-based access control, what is the role of the authenticator?

Accepted Answer

Enforce access by relaying credentials to the authentication server

Answer

The authenticator (typically a switch or access point) enforces access control by passing supplicant credentials to the RADIUS authentication server.

Question 4

What is the function of IPsec's Authentication Header (AH) protocol?

Accepted Answer

Provides data integrity and origin authentication but no confidentiality

Answer

AH provides integrity protection and authentication for the entire IP packet using HMAC, but unlike ESP it does not encrypt the payload.

Question 5

A security engineer needs to segment a physical network into multiple isolated broadcast domains without buying new hardware. What technology enables this?

Accepted Answer

VLANs (Virtual Local Area Networks)

Answer

VLANs logically segment a physical switch into separate broadcast domains using 802.1Q tagging, allowing traffic isolation without additional hardware.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Network & Communications Security 3