CISSP Chapter 7 Chapter 7

CISSP – Chapter 7

Chapter 7

OSI model 484

OSI model – layer 2 - 492

OSI model layer 3 network - 491

OSI Model Layer 3 - 491

Quick OSI review

TCP/IP model

OSI vs. TCP/IP model

TCP/IP (497)

TCP/IP class networks - 504

TCP/IP class networks - 504

TCP/IP Classless networks

TCP/IP - 504

TCP/UDP - 498

TCP - 502

TCP - 499

UDP - 499

Ports - 501

Random Networking Terms

Network Topologies (509)

Ethernet - 513

Ethernet media types - 514

Ethernet Media Types - 514

Ethernet Media Types - 514

Ethernet Media Types - 514

Ethernet Media Types - 514

Token Ring (516)

FDDI - 517

Cabling - 519

Twisted Pair - 520

Fiber - 522

LAN Protocols - 529

DHCP - 530

ICMP - 531

Basic Networking Devices (536)

Repeaters - 536

Hub

Bridge (537)

Switch - 541

VLANs - 544

VLAN - 544

Routers - 539

Routers vs. Switches - 540

Routing Protocols (532)

Routing Protocols (532)

Dynamic routing protocols (533)

Specific Routing Protocols (534)

OSPF (534)

BGP (535)

Advanced Networking Devices

Gateway - 545

PBX 547

Firewalls - 548

Packet filter

Statefull firewall

Dynamic packet filtering

Proxy firewall – 552

Proxy firewall - 552

Proxy firewalls - 552

Application level proxies - 552

Circuit Level proxies - 554

NAT (577)

NAT (577)

NAT (577)

NAT (577)

PNAT (577)

PNAT (577)

Firewall issues

Firewall architecture - 560

DMZ

DMZ - 560

Bastion Host (560)

Dual Homed Firewall

Multi-homed firewall

Screened Subnet - 561

Screen Subnet

Multiple interface firewalls - 560

End of firewalls

NOS (568)

NOS (568)

DNS - 569

DNS - 569

DNS (also example on 571)

DNS

DNS cache poisoning - 572

DNS SEC

NIS - 573

NIS+ (574)

Intranet, Extranet - 579

LAN, WAN, MAN - 581

Dedicated

Frame Relay - 592

Frame relay / cloud

WAN terms

Multiplexing

CSU/DSU - 589

ATM - 594

Qo. S - 595

Vo. IP - 598

Vo. IP

Remote Access

Remote Access - 603

Dial up - 603

Dial Up - 603

ISDN - 604

DSL - 606

Cable Modem - 606

VPNs - 608

Tunnels - 609

PPTP - 612

L 2 TP - 613

IPSEC (749 (chapter 8))

IPSEC

Transport and Tunneling

Transport vs. Tunnel

Example of transport

Example of Tunneling

IPSEC

Authentication Protocols - 614

Remote Access Best Practices

Wireless

Wireless (619)

Spread Spectrum - 619

Wireless Components - 621

802. 11 standard

802. 11 family

Wireless security problems

Transmission encryption - 626

Transmission Encryption

802. 1 X - 627

Bluetooth (634)

Mobile device security

WAP (636)

Some attacks against software and systems

Root Kit

MAC flooding

Smurf

Fraggle (like Fraggle rock)

SYN flood

Tear Drop

DDo. S

Buffer Overflows

From Chapter 5