CISSP Training Kit

Chapter review

Test your knowledge of the information in this chapter by answering these questions. The answers to these questions, and the explanations of why each answer choice is correct or incorrect, are located in the Answers section at the end of this chapter.

1. Which feature or mode of IPsec protects the actual source and destination IP addresses?

   1. Transport mode

   2. Tunnel mode

   3. Internet Key Exchange (IKE)

   4. Security Parameter Index (SPI)

2. What network location needs to be checked to verify whether the issuer of an X.509 digital certificate has withdrawn its claim of trust for the subject of the certificate?

   1. The certificate revocation list (CRL)

   2. Directory services registry

   3. The email server for the organization

   4. The CRL distribution point (CDP)

3. Which of the following ...