2 cissp ® Official Study Guide Eighth Edition

Understand voice communications security.
Voice communications are vulnerable to many 
attacks, especially as voice communications become an important part of network services. 
You can obtain confidentiality by using encrypted communications. Countermeasures must 
be deployed to protect against interception, eavesdropping, tapping, and other types of 
exploitation. Be familiar with voice communication topics, such as POTS, PSTN, PBX,
and VoIP.
Be able to explain what social engineering is.
Social engineering is a means by which 
an unknown person gains the trust of someone inside your organization by convincing 
employees that they are, for example, associated with upper management, technical sup-
port, or the help desk. The victim is often encouraged to make a change to their user 
account on the system, such as reset their password, so the attacker can use it to gain access 
to the network. The primary countermeasure for this sort of attack is user training.
Explain the concept of security boundaries.
A security boundary can be the division 
between one secured area and another secured area. It can also be the division between a 
secured area and an unsecured area. Both must be addressed in a security policy.
Understand the various network attacks and countermeasures associated with commu-
nications security.
Communication systems are vulnerable to many attacks, including 
distributed denial of service (DDoS), eavesdropping, impersonation, replay, modification, 
spoofing, and ARP and DNS attacks. Be able to supply effective countermeasures for each.
Written Lab
1.
Describe the differences between transport mode and tunnel mode of IPsec.
2.
Discuss the benefits of NAT.
3.
What are the main differences between circuit switching and packet switching?
4.
What are some security issues with email and options for safeguarding against them?

---