2 cissp ® Official Study Guide Eighth Edition

Understand PEAP.
PEAP (Protected Extensible Authentication Protocol) encapsulates 
EAP methods within a TLS tunnel that provides authentication and potentially encryption.
Understand LEAP.
LEAP (Lightweight Extensible Authentication Protocol) is a Cisco pro-
prietary alternative to TKIP for WPA. This was developed to address deficiencies in TKIP 
before the 802.11i/WPA2 system was ratified as a standard.
Understand MAC Filtering.
A MAC filter is a list of authorized wireless client interface 
MAC addresses that is used by a wireless access point to block access to all nonauthorized 
devices.
Understand SSID Broadcast.
Wireless networks traditionally announce their SSID on a 
regular basis within a special packet known as the beacon frame. When the SSID is broad-
cast, any device with an automatic detect and connect feature is not only able to see the 
network, but it can also initiate a connection with the network.

---

516
Chapter 11 
■
Secure Network Architecture and Securing Network Components
Understand TKIP.
TKIP (Temporal Key Integrity Protocol) was designed as the replace-
ment for WEP without requiring replacement of legacy wireless hardware. TKIP was imple-
mented into 802.11 wireless networking under the name WPA (Wi-Fi Protected Access).
Understand CCMP.
CCMP (Counter Mode with Cipher Block Chaining Message 
Authentication Code Protocol) was created to replace WEP and TKIP/WPA. CCMP uses 
AES (Advanced Encryption Standard) with a 128-bit key.
Understand captive portals.
A captive portal is an authentication technique that redirects 
a newly connected wireless web client to a portal access control page.
Understand antenna types.
A wide variety of antenna types can be used for wireless cli-
ents and base stations. These include omnidirectional pole antennas as well as many direc-
tional antennas, such as Yagi, cantenna, panel, and parabolic.