Network address hijacking allows an attacker to reroute data traffic from a network device to a personal computer.
Also referred to as session hijacking, network address hijacking enables an attacker to capture and analyze the data addressed to a target system. This allows an attacker to gain access to critical resources and user credentials, such as passwords, and to gain unauthorized access to critical systems of an organization.
Session hijacking involves assuming control of an existing connection after the user has successfully created an authenticated session. Session hijacking is the act of unauthorized insertion of packets into a data stream. It is normally based on sequence number attacks, where sequence numbers are either guessed or intercepted.
The following are incorrect answers: Network address translation (NAT) is a methodology of modifying network address information in Internet Protocol (IP) datagram packet headers while they are in transit across a traffic routing device for the purpose of remapping one IP address space into another. See RFC 1918 for more details.
Network Address Supernetting There is no such thing as Network Address Supernetting. However, a supernetwork, or supernet, is an Internet Protocol (IP) network that is formed from the
combination of two or more networks (or subnets) with a common Classless Inter-Domain Routing
(CIDR) prefix. The new routing prefix for the combined network aggregates the prefixes of the
constituent networks.
Network Address Sniffing This is another bogus choice that sound good but does not even exist.
However, sniffing is a common attack to capture cleartext password and information unencrypted
over the network. Sniffier is accomplished using a sniffer also called a Protocol Analyzer. A
network sniffers monitors data flowing over computer network links. It can be a self-contained
software program or a hardware device with the appropriate software or firmware programming.
Also sometimes called "network probes" or "snoops," sniffers examine network traffic, making a
copy of the data but without redirecting or altering it.
The following reference(s) were used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition
((ISC)2 Press ) (Kindle Locations 8641-8642). Auerbach Publications. Kindle Edition.
http://compnetworking.about.com/od/networksecurityprivacy/g/bldef_sniffer.htm
http://wiki.answers.com/Q/What_is_network_address_hijacking
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of
Computer Security, 2001, John Wiley & Sons, Page 239.

Convenience -Using single sign-on users have to type their passwords only once when they first log in to access all the network resources; and Centralized
Administration as some single sign-on systems are built around a unified server administration system. This allows a single administrator to add and delete accounts across the entire network from one user interface.
The following answers are incorrect:
Convenience - alone this is not the correct answer.
Centralized Data or Network Administration - these are thrown in to mislead the student.
Neither are a benefit to SSO, as these specifically should not be allowed with just an SSO.
References: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management
Handbook, 4th Edition, Volume 1, page 35
TIPTON, Harold F. & HENRY, Kevin, Official (ISC)2 Guide to the CISSP CBK, 2007, page
180

Section: Communication and Network Security

Explanation/Reference:
DES-EDE3 is the most secure form of triple-DES encryption as it uses three different keys for encryption.
3DES can work in different modes, and the mode chosen dictates the number of keys used and what functions are carried out:
DES-EEE3: Uses three different keys for encryption, and the data are encrypted, encrypted, encrypted.

DES-EDE3: Uses three different keys for encryption, and the data are encrypted, decrypted, encrypted.

DES-EEE2: The same as DES-EEE3, but uses only two keys, and the first and third encryption

processes use the same key.
DES-EDE2: The same as DES-EDE3, but uses only two keys, and the first and third encryption

processes use the same key.
Incorrect Answers:
B: DES-EDE1 uses one encryption key and returns the algorithm (and strength) as DES. It is only provided for backwards compatibility. This is not the most secure form of triple-DES encryption.
C: DES-EEE4 is not a valid form of 3DES encryption.
D: DES-EDE2 uses only two keys and is not the most secure form of triple-DES encryption.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 808