Examius
🇺🇸 Certified Information Systems Security Professional (CISSP) · flashcards
Certified Information Systems Security Professional (CISSP) Communication and Network Security Flashcards
51 question-and-answer cards covering Communication and Network Security as it is examined in Certified Information Systems Security Professional (CISSP). 24 of them are printed below, taken from across the deck — no signup, no paywall on the preview.
24 sample cards from the Communication and Network Security deck
Sampled from the end of the deck, so these are different cards from the ones shown on the syllabus page.
What is NAT and how does PAT differ from it?
NAT (Network Address Translation) maps private IPs to public IPs. PAT (Port Address Translation / NAT overload) maps many private IPs to a single public IP using unique port numbers to track sessions.
What is the difference between baseband and broadband transmission?
Baseband uses the entire medium for a single channel/signal (e.g., Ethernet). Broadband divides the medium into multiple channels carrying multiple signals simultaneously (e.g., cable TV).
Compare UTP, coaxial, and fiber-optic cabling on speed, distance, and EMI immunity.
UTP (copper twisted pair): cheap, ~100m, susceptible to EMI. Coax: more EMI resistant, longer runs. Fiber: highest speed/bandwidth, longest distance, immune to EMI, hardest to tap—best for security.
What is the difference between single-mode and multimode fiber?
Single-mode fiber has a thin core, uses laser light, and supports very long distances/high bandwidth. Multimode has a larger core, uses LED light, costs less, but has shorter range due to modal dispersion.
What are the Ethernet UTP category speeds for Cat5e, Cat6, and Cat6a?
Cat5e: 1 Gbps up to 100m. Cat6: 1 Gbps (10 Gbps up to ~55m). Cat6a: 10 Gbps up to 100m.
What is the main security advantage of a VPN?
A VPN creates an encrypted tunnel over an untrusted network (like the Internet), providing confidentiality, integrity, and authentication for data in transit between endpoints.
What are the two IPsec protocols and what does each provide?
AH (Authentication Header) provides integrity and authentication but no encryption. ESP (Encapsulating Security Payload) provides confidentiality (encryption) plus integrity and authentication.
What is the difference between IPsec transport mode and tunnel mode?
Transport mode encrypts only the payload, leaving the original IP header intact (host-to-host). Tunnel mode encrypts the entire original packet and adds a new IP header (gateway-to-gateway/site-to-site).
What is the role of IKE in IPsec?
Internet Key Exchange negotiates the security association (SA), authenticates peers, and establishes shared keys. It operates in two phases (IKE Phase 1 builds a secure channel; Phase 2 negotiates the IPsec SA).
Compare IPsec VPNs with SSL/TLS VPNs.
IPsec VPNs operate at Layer 3, often need a client, and give full network access (site-to-site or remote). SSL/TLS VPNs operate at the session/application layer, are typically clientless (browser-based), and give granular application access.
What is the difference between WEP, WPA2, and WPA3 wireless security?
WEP uses weak RC4/short IV (broken). WPA2 uses AES-CCMP with 802.11i (strong but vulnerable to KRACK). WPA3 adds SAE (Simultaneous Authentication of Equals) replacing PSK handshake, forward secrecy, and protection against offline dictionary attacks.
What is the difference between WPA2-Personal (PSK) and WPA2-Enterprise?
WPA2-Personal uses a shared pre-shared key (PSK) for all users. WPA2-Enterprise uses 802.1X/EAP with a RADIUS server for per-user authentication and unique session keys.
What is 802.1X and what are its three components?
802.1X is a port-based network access control standard. Components: Supplicant (client), Authenticator (switch/AP), and Authentication Server (RADIUS). It uses EAP for the authentication exchange.
What are the three AAA protocols' key differences (RADIUS vs TACACS+ vs Diameter)?
RADIUS uses UDP, encrypts only the password, combines authN+authZ. TACACS+ uses TCP, encrypts the entire payload, and separates authentication, authorization, and accounting. Diameter is the successor to RADIUS with reliability and better security.
What are common secure remote access methods for administrators?
SSH (encrypted CLI, replaces Telnet), RDP over TLS/VPN, jump/bastion hosts, and VPN tunnels. Avoid clear-text protocols like Telnet, rlogin, and unencrypted RDP.
What is a man-in-the-middle (MITM) attack and one common technique enabling it on a LAN?
An attacker secretly relays/alters communication between two parties who believe they talk directly. ARP poisoning/spoofing on a LAN lets the attacker associate their MAC with the victim's IP to intercept traffic.
What is a SYN flood attack and what category does it fall under?
A SYN flood is a denial-of-service attack that sends many SYN packets without completing the handshake (no final ACK), exhausting the server's half-open connection table. Mitigated with SYN cookies.
What is the difference between DoS and DDoS attacks?
DoS comes from a single source overwhelming a target. DDoS uses many distributed, often botnet-controlled, sources simultaneously, making it harder to block and capable of far larger volume.
What is DNS cache poisoning (spoofing)?
An attacker injects forged DNS records into a resolver's cache so that legitimate domain names resolve to attacker-controlled IPs, redirecting users. Mitigated by DNSSEC, which authenticates DNS responses.
What is a smurf attack?
An ICMP-based amplification DoS where the attacker sends ICMP echo requests with a spoofed source (victim's IP) to a broadcast address, causing all hosts to flood the victim with replies.
What is Zero Trust networking and its core principle?
Zero Trust assumes no implicit trust based on network location. Core principle: 'never trust, always verify'—every access request is authenticated, authorized, and continuously validated regardless of whether it originates inside or outside the perimeter.
What is microsegmentation and what security benefit does it provide?
Microsegmentation divides the network into small, isolated zones (down to individual workloads) with granular per-segment policies. It limits lateral movement, containing breaches and reducing the attack surface.
What are the three primary network monitoring data sources (telemetry types)?
Full packet capture (deepest detail, storage heavy), flow data like NetFlow/sFlow (metadata about conversations), and logs/SNMP (device and event data). SIEM aggregates and correlates these.
What network resilience techniques improve availability, and what does each address?
Redundancy (duplicate components), load balancing (distribute traffic), failover/HA clustering (automatic switchover), and protocols like STP (loop prevention) and HSRP/VRRP (gateway redundancy) to eliminate single points of failure.
What this deck covers
The Communication and Network Security deck follows the Certified Information Systems Security Professional (CISSP) Communication and Network Security syllabus — 4 chapters and 13 topics — so questions land on material that is genuinely examinable rather than trivia around it. That works out to roughly 12.8 cards per chapter.
Answers are written to be recallable, not just readable — averaging about 200 characters, which is long enough to carry the reasoning and short enough to say out loud.
A deck like this earns its keep on the second and third pass. Read the syllabus first so you know the shape of the subject, then use the cards to find the specific facts that have not stuck.
Communication and Network Security flashcards FAQ
How many Communication and Network Security flashcards are in this Certified Information Systems Security Professional (CISSP) deck?
51 cards. This page previews 24 of them, sampled evenly across the deck so you can judge the difficulty before installing anything.
Are these Certified Information Systems Security Professional (CISSP) flashcards free?
Yes. The preview here is free to read with no signup, and the full 51-card deck is free inside the Examius app.
What do the Communication and Network Security cards cover?
They follow the Certified Information Systems Security Professional (CISSP) Communication and Network Security syllabus — 4 chapters and 13 topics — so the questions track what is actually examinable.
How should I use these flashcards?
Read the syllabus first so you know the shape of the subject, then drill the deck. Examius schedules each card with spaced repetition, so cards you keep missing come back sooner and ones you know drift further apart.