2 cissp ® Official Study Guide Eighth Edition

574
Chapter 12 
■
Secure Communications and Network Attacks
Review Questions
1.
is a layer 2 connection mechanism that uses packet-switching 
technology to establish virtual circuits between the communication endpoints.
A.
ISDN
B.
Frame Relay
C.
SMDS
D.
ATM
2.
Tunnel connections can be established over all except for which of the following?
A.
WAN links
B.
LAN pathways
C.
Dial-up connections
D.
Stand-alone systems
3.
is a standards-based mechanism for providing encryption for 
point-to-point TCP/IP traffic.
A.
UDP
B.
IDEA
C.
IPsec
D.
SDLC
4.
Which of the following IP addresses is not a private IP address as defined by RFC 1918?
A.
10.0.0.18
B.
169.254.1.119
C.
172.31.8.204
D.
192.168.6.43
5.
Which of the following cannot be linked over a VPN?
A.
Two distant internet-connected LANs
B.
Two systems on the same LAN
C.
A system connected to the internet and a LAN connected to the internet
D.
Two systems without an intermediary network connection
6.
What is needed to allow an external client to initiate a communication session with an 
internal system if the network uses a NAT proxy?
A.
IPsec tunnel
B.
Static mode NAT
C.
Static private IP address
D.
Reverse DNS

---

Review Questions 
575
7.
Which of the following VPN protocols do not offer native data encryption?
(Choose all that apply.)