CISSP Official Practice Tests by Mike Chapple, David Seidl

Chapter 4 ■ Communication and Network Security (Domain 4) 87

Lauren’s organization has used a popular messaging service for a number of years.

Recently, concerns have been raised about the use of messaging. Using the following dia-

gram, answer questions 29 through 31 about messaging.

Internet

A

A

Firewall

Router

Switch

Messaging Traffic

via TCP 80

Messaging Traffic

via TCP 80

B

C

29. What protocol is the messaging traffic most likely to use based on the diagram?

A. SLACK

B. HTTP

C. SMTP

D. HTTPS

30. What security concern does sending internal communications from A to B raise?

A. The firewall does not protect system B.

B. System C can see the broadcast traffic from system A to B.

C. It is traveling via an unencrypted protocol.

D. Messaging does not provide nonrepudation.

31. How could Lauren’s company best address a desire for secure messaging for users of inter-
    nal systems A and C?
    A. Use a third-party messaging service.
    B. Implement and use a locally hosted service.
    C. Use HTTPS.
    D. Discontinue use of messaging and instead use email, which is more secure.