Which protocol is NOT implemented in the Network layer of the OSI Protocol Stack?
Answer(s): A
Open Shortest Path First, Internet Protocol, and Routing Information Protocol are all protocols implemented in the Network Layer.Domain: Telecommunications and Network Security
AIO 3rd edition. Page 429Official Guide to the CISSP CBK. Page 411
The session layer provides a logical persistent connection between peer hosts. Which of the following is one of the modes used in the session layer to establish this connection?
Layer 5 of the OSI model is the Session Layer. This layer provides a logical persistent connection between peer hosts. A session is analogous to a conversation that is necessary for applications to exchange information.The session layer is responsible for establishing, managing, and closing end-to-end connections, called sessions, between applications located at different network endpoints. Dialogue control management provided by the session layer includes full-duplex, half-duplex, and simplex communications. Session layer management also helps to ensure that multiple streams of data stay synchronized with each other, as in the case of multimedia applications like video conferencing, and assists with the prevention of application related data errors.The session layer is responsible for creating, maintaining, and tearing down the session.Three modes are offered:(Full) Duplex: Both hosts can exchange information simultaneously, independent of each other. Half Duplex: Hosts can exchange information, but only one host at a time. Simplex: Only one host can send information to its peer. Information travels in one direction only.Another aspect of performance that is worthy of some attention is the mode of operation of the network or connection. Obviously, whenever we connect together device A and device B, there must be some way for A to send to B and B to send to A. Many people don't realize, however, that networking technologies can differ in terms of how these two directions of communication are handled. Depending on how the network is set up, and the characteristics of the technologies used, performance may be improved through the selection of performance-enhancing modes.Basic Communication Modes of OperationLet's begin with a look at the three basic modes of operation that can exist for any network connection, communications channel, or interface.Simplex OperationIn simplex operation, a network cable or communications channel can only send information in one direction; it's a "one-way street". This may seem counter-intuitive: what's the point of communications that only travel in one direction? In fact, there are at least two different places where simplex operation is encountered in modern networking.The first is when two distinct channels are used for communication: one transmits from A to B and the other from B to A. This is surprisingly common, even though not always obvious. For example, most if not all fiber optic communication is simplex, using one strand to send data in each direction. But this may not be obvious if the pair of fiber strands are combined into one cable.Simplex operation is also used in special types of technologies, especially ones that are asymmetric. For example, one type of satellite Internet access sends data over the satellite only for downloads, while a regular dial-up modem is used for upload to the service provider. In this case, both the satellite link and the dial-up connection are operating in a simplex mode.Half-Duplex OperationTechnologies that employ half-duplex operation are capable of sending information in both directions between two nodes, but only one direction or the other can be utilized at a time. This is a fairly common mode of operation when there is only a single network medium (cable, radio frequency and so forth) between devices.While this term is often used to describe the behavior of a pair of devices, it can more generally refer to any number of connected devices that take turns transmitting. For example, in conventional Ethernet networks, any device can transmit, but only one may do so at a time. For this reason, regular (unswitched) Ethernet networks are often said to be "half-duplex", even though it may seem strange to describe a LAN that way.Full-Duplex OperationIn full-duplex operation, a connection between two devices is capable of sending data in both directions simultaneously. Full-duplex channels can be constructed either as a pair of simplex links (as described above) or using one channel designed to permit bidirectional simultaneous transmissions. A full-duplex link can only connect two devices, so many such links are required if multiple devices are to be connected together.Note that the term "full-duplex" is somewhat redundant; "duplex" would suffice, but everyone still says "full-duplex" (likely, to differentiate this mode from half-duplex).For a listing of protocols associated with Layer 5 of the OSI model, see below:ADSP - AppleTalk Data Stream ProtocolASP - AppleTalk Session ProtocolH.245 - Call Control Protocol for Multimedia Communication ISO-SPOSI session-layer protocol (X.225, ISO 8327)iSNS - Internet Storage Name ServiceThe following are incorrect answers:Synchronous and Asynchronous are not session layer modes.Half simplex does not exist. By definition, simplex means that information travels one way only, so half-simplex is a oxymoron.
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 5603-5636). Auerbach Publications. Kindle Edition.andhttp://www.tcpipguide.com/free/t_SimplexFullDuplexandHalfDuplexOperation.htm andhttp://www.wisegeek.com/what-is-a-session-layer.htm
Which of the following tools is NOT likely to be used by a hacker?
Answer(s): C
It is a data integrity assurance software aimed at detecting and reporting accidental or malicious changes to data.The following answers are incorrect :Nessus is incorrect as it is a vulnerability scanner used by hackers in discovering vulnerabilities in a system.Saint is also incorrect as it is also a network vulnerability scanner likely to be used by hackers. Nmap is also incorrect as it is a port scanner for network exploration and likely to be used by hackers.
Tripwire : http://www.tripwire.comNessus : http://www.nessus.orgSaint : http://www.saintcorporation.com/saintNmap : http://insecure.org/nmap
Which of the following would be LESS likely to prevent an employee from reporting an incident?
Answer(s): B
The reporting process should be centralized else employees won't bother.The other answers are incorrect because :They are afraid of being pulled into something they don't want to be involved with is incorrect as most of the employees fear of this and this would prevent them to report an incident.They are afraid of being accused of something they didn't do is also incorrect as this also prevents them to report an incident.They are unaware of the company's security policies and procedures is also incorrect asmentioned above.
Shon Harris AIO v3 , Ch-10 : Laws , Investigatio & Ethics , Page : 675.
Which of the following would NOT violate the Due Diligence concept?
Answer(s): D
To be effective a patch management program must be in place (due diligence) and detailed procedures would specify how and when the patches are applied properly (Due Care). Remember, the question asked for NOT a violation of Due Diligence, in this case, applying patches demonstrates due care and the patch management process in place demonstrates due diligence.Due diligence is the act of investigating and understanding the risks the company faces. A company practices by developing and implementing security policies, procedures, and standards. Detecting risks would be based on standards such as ISO 2700, Best Practices, and other published standards such as NIST standards for example.Due Diligence is understanding the current threats and risks. Due diligence is practiced by activities that make sure that the protection mechanisms are continually maintained and operational where risks are constantly being evaluated and reviewed. The security policy being outdated would be an example of violating the due diligence concept.Due Care is implementing countermeasures to provide protection from those threats. Due care is when the necessary steps to help protect the company and its resources from possible risks that have been identifed. If the information owner does not lay out the foundation of data protection (doing something about it) and ensure that the directives are being enforced (actually being done and kept at an acceptable level), this would violate the due care concept.If a company does not practice due care and due diligence pertaining to the security of its assets, it can be legally charged with negligence and held accountable for any ramifications of that negligence. Liability is usually established based on Due Diligence and Due Care or the lack of either.A good way to remember this is using the first letter of both words within Due Diligence (DD) and Due Care (DC).Due Diligence = Due DetectSteps you take to identify risks based on best practices and standards.Due Care = Due Correct.Action you take to bring the risk level down to an acceptable level and maintaining that level over time.The Following answer were wrong:Security policy being outdated:While having and enforcing a security policy is the right thing to do (due care), if it is outdated, you are not doing it the right way (due diligence). This questions violates due diligence and not due care.Data owners not laying out the foundation for data protection:Data owners are not recognizing the "right thing" to do. They don't have a security policy.Network administrator not taking mandatory two week vacation:The two week vacation is the "right thing" to do, but not taking the vacation violates due diligence (not doing the right thing the right way)Reference(s) used for this questionShon Harris, CISSP All In One, Version 5, Chapter 3, pg 110
Post your Comments and Discuss ISC SSCP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SSCP content, but please register or login to continue.