• Physical & Data Link Layers
• Controls the use of a network

Ethernet 802.3

• Uses CSMA/CD
• Designed for sporadic traffic
• Defines a bus topology with 3 different cabling standards:
  • Thinnet (10Base2) – coax with segments up to 185 meters
  • Thicknet (10Base5) – coax with segments up to 500 meters
  • Unshielded Twisted Pair (UTP) – all devices connected to a hub or a switch

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

ARCNet (802.5)

• Early LAN technologies
• Uses token passing in a Star topology on coax cable

Token Ring

• Second to Ethernet
• All end stations connected to a Multistation Access Unit (MSAU)
• One station is designated as the Active Monitor
• IF a transmitting station fails, the Active monitor will remove the token and generate a new one

Fiber Distributed Data Interface (FDDI)

• Dual token ring LAN at 100 MBps on Fiber
• Dual counter rotating rings only one active at a time
• Operates over long distances with minimal interference
• Predictable delays, deterministic
• Permits several tokens to be present at a time
• Expensive and requires special expertise
• Copper Distributed Data Interface – can be used with UTP cable, but subject to interference and length issues associated with copper

You may also want to consider these CISSP resources from Amazon.com

Bus

• All transmissions travel full length of the cable and receive by all other stations
• Single point of failure n the cable
• If one of the links between any of the computers is broken, the network is down
• Primarily Ethernet
• These networks were originally designed to work with more sporadic traffic

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

Ring

• Unidirectional transmission links form closed loop
• Token Ring and FDDI
• Similar to the Star topology, however there’s a device called a Multistation Access Unit (MAU)
• MAU works the same as a hub, but with Token Ring networks instead of Ethernet networks
• These networks were originally designed to serve large, bandwidth-intensive applications

Star

• Nodes connected to a central LAN or a junction box called a hub or a concentrator at the center of the network
• Provides reliability and often used by Bus and ring topology as the physical connection

Tree – branches can have multiple nodes

Mesh – all nodes are connected to every other node

You may also want to consider these CISSP resources from Amazon.com

Twisted Pair Cable

• Relatively slow speed
• Two insulated wires can be shielded (STP0 or unshielded (UTP)
• UTP is four-pair medium and comes in several categories
• UTP can be easily tapped by eavesdroppers than the other cable types
• Category based on how tightly wound the wires are, the tighter the wind the higher the rating and the higher the resistance to interference
• Cat 1 UTP – was used for telephone lines, not good for data
• Cat 2 UTP – up to 4 MBps
• Cat 3 UTP – Used for 10BaseT networks up to 10 MBps
• Cat 4 UTP – Used in Token Ring Networks up to 16 MBps
• Cat 5 – Current UTP standard for new installations up to 100MBps
• Cat 6 UTP – up to 155MBps
• Cat 7 UTP – up to 1 GBps

You may also want to consider these CISSP resources from Amazon.com

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

Coaxial Cable

• Hollow outer conductor surrounds inner wire conductor
• Currently two types of LAN
  • 50-ohm Cable for digital signaling
  • 75-ohm Cable for analog signaling and high-speed digital signaling
• More expensive, but is more resistant to Electromagnetic Interference (EMI)
• Used rarely except in Broadband communications
• Comes in two types:
  • Thinnet – RG58
  • Thicknet RG8 and RG11
• Two common types of coaxial transmission methods:
  • Baseband – The cable carries a single channel
  • Broadband – Cable carries several channels

Fiber Optic Cable

• Conducts modulated light transmission
• Light waves are faster and travel greater distances
• Difficult to tap
• Resistant to EMI
• Usually connects backbones in larger networks
• Can be used to connect workstations to the network
• Expensive to install and to terminate

LAN Transmission Protocols

• Rules for communication between computers on a LAN
• Formatting of the data frame, the timing and sequencing of packet delivery, and resolution of error states

Carrier Sense Multiple Access (CSMA)

• Foundation of the Ethernet protocol
• Workstation continuously monitors the line waiting until it thinks it is free
• If the workstation doesn’t receive an acknowledgement from the destination to which it sent the packet, it assumes a collision has occurred and it resends the packet
  • Persistent Carrier Sense – Unless it receives an acknowledgement it will resend
  • Non-persistent Carrier Sense – Waits a random amount of time before it resends

CSMA/CA

• Carrier Sense Multiple Access / Collision Avoidance
• Workstations connected to two coax cables, one to send and one to receive data

CSMA/CD

• Carrier Sense Multiple Access / Collision Detection
• If the host detects another signal while transmitting it will send a jam signal causing all nodes to stop sending data
• Nodes will wait to resend
• Designed to avoid collisions

Polling

• A primary workstation polls another at a predetermined time to determine if it has data to transmit
• Primary must give permission to others to transmit

Token Passing

• Token Ring, FDDI and ARCnet
• Cannot transmit without the token
• Each station can hold token for maximum predetermined amount of time

LAN Transmission Methods

• Refer to the way packets are sent on the network
• Unicast – from single source to single destination
• Multicast – source copied and sent to multiple destinations
• Broadcast – source copied and sent to all nodes on the network

You may also want to consider these CISSP resources from Amazon.com

Mail Services – Send and receive e-mail internally and externally

Print Services – Print documents to shared printers

Client/Server Services – Allocate computing resources among workstations

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

Domain Name Service

• Matches Internet Uniform Resource Locator (URL) with the actual IP address of the server providing the URL
• Maps host names to IP addresses
• Domain Name System (DNS) – global network of servers that provide this service

• Local Area Network (LAN)
• Wide Area Network (WAN)
• Internet, Intranet and Extranet

You may also want to consider these CISSP resources from Amazon.com

Local Area Networks (LAN)

• Discrete network for limited geographical area like a building or a single floor
• Two LAN Variations
  • CAN (Campus Area Network) – connects multiple buildings with each other over a switched backbone
  • MAN (Metropolitan Area Network) – LAN over a city wide metropolitan area
• Both CAN and MAN can have a connection fot WAN

Wide Area Networks (WAN)

• Network of sub-networks that interconnect LANs over large geographic areas
• Everything outside of the LAN (router is involved)

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

Internet – WAN originally funded by the DoD and uses TCP/IP

Intranet

• Internet-like logical network that uses a companies internal physical network structure
• More security and control than Internet
• Uses Internet tools like browsers

Extranet

• Extranet can be accessed by users outside of the company, (i.e. vendors and partners), but not the general public
• Includes come type of authentication or encryption

Asynchronous vs. Synchronous Communications

• Asynchronous
  • Basis of modem and dial-up remote access
  • Must operate at same speed
  • Start and stop bits mark the beginning and the end of each transfer
• Synchronous – very high speed and governed by clock timing signals

You may also want to consider these CISSP resources from Amazon.com

So I Googled, “CISSP Domain 2”.  The result was TechTarget’s SearchSecurity.com listed at number 1. And it says “CISSP Domain 2 quiz: Access Control.” Access Control? What do you mean Access Control? I thought “Telecommunications and Network Security” is the CBK”s Domain 2?

At first I thought it was a mistake by TechTarget, but as I go down the Google search result they all say Access Control. Was I smoking something when I was typing my notes 4 years ago? You are probably saying, “well Don, what is the big deal?” It sort of kinda a big deal, since if you have been following my entries in this blog, I have Access Control listed as Domain 1 and Telecommunications and Network Security is Domain 2. Don’t want to end up losing street cred here . Plus really it bugs me not being able to figure out how I could have done such a mistake.

So I visited the original source, I went to ISC2.org and looked up how they listed the domains. And this is what I found:

• Access Control
• Application Development Security
• Business Continuity and Disaster Recovery Planning
• Cryptography
• Information Security Governance and Risk Management
• Legal, Regulations, Investigations and Compliance
• Operations Security
• Physical (Environmental) Security
• Security Architecture and Design
• Telecommunications and Network Security

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

If you notice the list is in alphabetical order. There is no direct number designation for each domain. I also used the Shon Harris All-in-One book () primarily to do my review. Since I don’t have the book handy (it is stuck somewhere in storage), I went to Amazon and looked up the book and see if I can view the table of contents inside. The book is now on its fifth edition (CISSP All-in-One Exam Guide, Fifth Edition) and I know I have an older version. The oldest version I can find that has the Amazon Look Inside feature is the Third Edition. And voila! There it is the first domain discussed is Access Control and therefore making it Domain 1, right?

But wait, it also lists Telecommunications & Network Security fourth in the list, which means I am still up in smoke . I looked up the publication date of the third edition and it shows as September 15, 2005. I bought my book in 2003 and this means I have the older edition, which may have a different way of listing the domains. I can’t prove that since I don’t have the book and I don’t feel like diving into the abyss otherwise known as my storage, I just continued Googling for answers.

I looked up the Official CISSP book () that I have (Official (ISC)2 Guide to the CISSP CBK ((ISC)2 Press)) and it lists “Information Security Governance and Risk Management” as Domain 1, while “Access Control” is Domain 2. I really could care less, I already passed the exam, I already have 120 CPEs and I am on time on my membership payments to ISC2, so I am set to get my CISSP cert to be renewed by September this year. But this difference in numbering does bug me. Now I think about it, I did notice the numbering difference when I bought the Official CISSP book in 2006, I didn’t pay much attention to it for some reason since I was already deep into my studying of the Shon Harris book. What was I smoking? What was Ms. Harris smoking? Well to be quite sure, nothing.

As I did further Googling I landed into another SearchSecurity.com site. The site that started this little hubbub. And guess what I found?

Domain 1 is “Telecommunications & Network Security”, Domain 2 “Physical Security”…

Whut!?!

Yep, the site contradicted itself.

So a quick conclusion after all this little exercise in WTF, I concluded that OFFICIALLY there are 10 Domains in the CISSP Common Body of Knowledge. Which domain comes first, next and last, is NOT AN OFFICIAL RANKING OR NUMBERING. Don’t get too hung up on this while you are studying, you will not encounter a question in the exam that says, “In Domain 2 of the CBK…”, it will instead more than likely say, “In the Access Control Domain of the CBK…”

All that said, I wish you goodluck on the exam. If you are not taking the exam, thank you for reading . Happy weekend.

• Secure connection between two nodes using secret encapsulation method
• Secure Encrypted Tunnel – encapsulated tunnel (encryption may or may not be used)
• Tunnel can be created by the following three methods:
  • Installing software or agents on the client or network gateway
  • Implementing user or node authentication systems
  • Implementing key and certificate exchange systems

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

VPN Protocol Standards

PPTP – Point-to-Point Tunneling Protocol

• Works at the data link layer
• Single point to point connection from client to server
• Common with asynchronous connections with NT and Win 95

L2TP – Layer 2 Tunneling Protocol

• Combination of PPTP and earlier Layer 2 Forwarding Protocol (L2F)
• Multiple protocols can be encapsulated within the L2TP
• Single point to point connection from client to server
• Common with Dial-up VPNs

IPSec

• Operates at the network layer
• Allows multiple and simultaneous tunnels
• Encrypt and authenticate IP data
• Focuses more on Network to Network Connectivity

VPN Devices

• Hardware and Software devices that utilize VPN standards
• Two types:
  • IPSec Compatible
  • Non-IPSec Compatible

IPSec Compatible

• Installed on a network perimeter and encrypt traffic between two networks
• Only works with IP
• Operates at the Network Layer
• Two modes:
  • Tunnel Mode – entire packet is encrypted and encased in the IPSec packet
  • Transport Mode – only datagram is encrypted leaving IP address visible
• Datagram – self-contained, independent entity of data carrying sufficient information to be routed from the source to the destination

Non-IPSec Compatible

• Common non-IPSec compatible includes: SOCKS, PPTP and SSH
• SOCKS is not a traditional VPN protocol, but is robust and operates at the application layer
• PPTP was implemented in Win95 and NT
  • Multiprotocol and uses PAP and CHAP user authentication
  • Compresses data
  • End-to-End encryption
• Secure Shell SSH-2 – Not strictly VPN but can be used as one with terminal session

Firewall-based VPNs

• Frequently available with 3^rd Generation (Stateful Inspection) Firewalls
• Operates at the application layer
• Performance degradation is often a problem

You may also want to consider these CISSP resources from Amazon.com

• 3 Private IP Address Ranges

• Global Non-routable Addresses
• Class A – 10.0.0.0 to 10.255.255.255
• Class B – 172.16.0.0 to 172.31.255.255
• Class C – 192.168.0.0 to 192.168.255.255
• Class A addresses are for large networks (1 – 127)
• Class B addresses are for medium size networks (128-191)
• Class C address are for small networks – fewer than 256 devices (192-223
• Class D are for multicast addresses

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS. You may also want to consider these CISSP resources from Amazon.com

Packet Filtering Firewall – First Generation

• Screening router
• Operates at Network and Transport Level
• Examines Source and Destination IP address
• Can deny based on ACLs
• Can specify port

You may also want to consider these CISSP resources from Amazon.com

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS.

Application Level Firewall – Second Generation

• Proxy server
• Copies each packet from one network to the other
• Masks the origin of the data
• Operates at layer 7 (application Layer)
• Reduces network performance since it has to analyze each packet and decide what to do with it
• Also called Application Layer Gateway

Stateful Inspection Firewalls – Third Generation

• Packets analyzed at all OSI Layers
• Queued at the network level
• Faster than the Application Layer Gateway

Dynamic Packet Filtering Firewalls- Fourth Generation

• Allows modification of security rules
• Mostly used for UDP
• Remembers all of the UDP packets that have crossed the network’s perimeter, and it decides whether to enable packets to pass through the firewall

Kernel Proxy – Fifth Generation

• Runs on NT Kernel
• Uses dynamic and custom TCP/IP-based stacks to inspect the network packets and to enforce security policies

You may also want to consider these CISSP resources from Amazon.com

• The process in which information from one packet is wrapped around or attached to the data of another packet
• In the OSI model each layer encapsulates the layer immediately above it

OSI Layers

• Process down the stack and up the stack
• Each layer communicates with corresponding layer through the stack

Planning to take the CISSP Exam? Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00. Click the Add To Cart Button to Purchase Plus you will also get copies of notes from other CISSPs. Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM. CLICK BELOW TO MAKE YOUR PURCHASE NOW. All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order. IMPORTANT NOTICE: I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS.

6 OSI Security Services

• A security service is a collection of security mechanisms, files and procedures that help protect the network
  • Authentication
  • Access Control
  • Data Confidentiality
  • Data Integrity
  • Non-repudiation
  • Logging & monitoring

8 OSI Security Mechanisms

• A security mechanism is a control that is implemented in order to provide the 6 basic security services
  • Encipherment
  • Digital Signature
  • Access Control
  • Data Integrity
  • Authentication
  • Traffic Padding
  • Routing Control
  • Notarization

TCP/IP Suite of Protocols