CISSP Communication and Network Security Practice Exam

Sample Questions:

Encapsulating Security Payload

Key Distribution Center

Internet Key Exchange

None

Which of the following statements regarding IPSec is not it?

Security association must be defined between two IPSec systems for two-way communication to be established.

The integrity and authentication for IP packets are provided by AH.

ESP provides for the integrity, authentication and encryption for IP packets

In transport mode, ESP encrypts only the data payload of each packet.

None

Which of the following statements related to packet filtering is not it?

It is based on ACL

It depends on the application.

It operates at the network layer.

It keeps track of the state of a connection.

None

Which of the following is a data multiplexing method in which a communication channel is divided into an arbitrary number of variable bit-rate digital channels or data streams. This method allocates bandwidth dynamically to physical channels which have information to be transmitted?

Time-Division Multiplexing

Asynchronous time division multiplexing

statistical multiplexing

Frequency Division Multiplexing

None

f organization should deploy only one sensor of Intrusion Detection System (IDS) to protect its information system from the Internet:

It should be based on host and installed on the most critical system in the DMZ, between the external router and the firewall.

It should be based on the network and installed in the DMZ, between the external router and the firewall.

It should be based on the network and installed between the firewall to the DMZ and the intranet

It should be based on host and installed between the external router and the Internet.

None