CISSP Chapter 12

Domain 4

point to point protocol (PPP)

encapsulation protocol designed to support the transmission of IP traffic over dial up or point to point links

password authentication protocol (PAP)

sends usernames and passwords in cleartext

challenge handshake authentication protocol (CHAP)

uses a challenge response process to prevent replay attacks

extensible authentication protocol (EAP)

supports multiple authentication methods

IEEE 802.1X (Port Based Network Access Control)

encapsulated EAP to support a wide range of authentication options for LAN connections

port security

protects connection points by controlling physical ports, TCP/UDP ports and port authentication

what are some countermeasures for PBX fraud and abuse?

technical, admin, physical controls

what issues does VoIP face?

caller id spoofing, vishing, DoS, MitM

phreaking

hacking or manipulating telephone systems to make unauthorized calls or cause disruptions

quality of service (QoS)

managing network traffic to keep communications running efficiently

public switched telephone network (PSTN) vs private branch exchange (PBX)

PSTN is a public telephone network used to connect calls while PBX is a private telephone system within an organization that manages internal/external calls

how to secure VoIP communications?

use strong passwords and MFA, train users on best practices, record call logs for unusual activity

direct inward system access (DISA)

allows authorized users to remotely access a PBX and place calls through the organization’s telephone system

telecommuting

working remotely while using telecom and network technologies to access organizational resources

service specific remote access

allows remote user to access only one specific service

remote control remote access

allows remote user to control a computer from another location including it’s keyboard and mouse

remote node operation remote access

connects a remote computer to organization’s network so it functions like a locally connected network device

remote access security policy

defines approved remote connection methods, protection of transmitted data, authentication requirements, secure remote user support

multimedia collaboration

using video, audio, chat and other tools to work together remotely

traffic flow/shaping

controls network traffic to prevent congestion and prioritize important data

capacity management

ensuring a network has enough capacity to meet demand

load balancer

spreads traffic across multiple resources to improve performance and availability

random choice load balancing

packet is assigned a destination randomly

round robin load balancing

packet is assigned the next destination in order

load monitoring load balancing

packet is assigned destination with the lowest current load

weighted load balancing

packet is assigned destination based on known capacity difference

least connections load balancing

packet is assigned destination based on least amount of traffic

locality based geographic load balancing

packet is assigned destination based on its distance from the load balancer

locality based affinity load balancing

packet is assigned destination based on previous connections with a destination

virtual IP addresses (VIP/VIPA)

mapped to a cluster of servers

virtual IP addresses (VIP/VIPA) pros

high availability, scalability, load balancing

purpose of virtual IP addresses (VIP/VIPA)

efficiently distribute incoming network traffic across multiple servers

active-active system

form of load balancing that uses all available pathways during normal operations

when should an active-active system be used?

when workload during normal operations need to be maximized but reduced capacity is tolerated during slower times

active-passive system

form of load balancing that keeps some pathways in an unused state during normal operations

when should an active-passive system be used?

when workload needs to be consistent between normal states and slower times

simple mail transfer protocol (SMTP)

accept messages from clients, transport messages to other servers, deposits them in a user’s server based inbox. TCP port 25

open relay

SMTP server that doesn’t authenticate senders before accepting and relaying mail

issue with open relays

spammers can send out floods of emails by piggybacking on an insecure email infrastructure