Explain the difference between Transport mode and Tunnel mode in IPSec. Include a diagram description of packet formats in each mode and a typical use case (e.g., VPN) for each.

In access control terminology, a “subject” is

Bell-LaPadula enforces

True or False: Extended ACLs in filesystems provide more granular control than the traditional owner/group/other model.

Capabilities are stored with

Bell-LaPadula is a classic example of which model?

Router/bridge-based firewalls:

Describe a DNS cache poisoning attack via ID guessing. Explain why DNS is particularly vulnerable (mention UDP, lack of authentication, and spoofing) and name one real-world consequence of successful poisoning.

In Role-Based Access Control (RBAC), permissions are assigned to

IPSec provides security at which layer?