SCION Overview

Which properties does SCION provide by design? (2 correct answers). Guaranteed communication if a safe path exists. Dynamic BGP convergence. Cryptographically verifiable paths. Global single root of trust. Stateless hosts.

What is an Isolation Domain (ISD)? (1 correct answer). A physical router cluster. A group of ASes sharing governance and trust roots. A BGP confederation. A VPN tunnel. A routing table.

Which attacks are mitigated by SCION? (3 correct answers). Prefix hijacking. Man-in-the-middle. Routing relays. SQL injection. DDoS.

Which entities initiate Path Construction Beacons (PCBs)? (1 correct answer). End hosts. Border routers. Core ASes. Beacon servers. Firewalls.

What information is added by each AS to a PCB? (3 correct answers). AS identifier. Hop field with interfaces. MAC and expiration. IP routing table. User credentials.

What are up-path segments used for? (1 correct answer). Core to AS routing. AS to Core routing. Core to Core routing. Peer shortcuts. DNS resolution.

Which systems store path segments? (2 correct answers). Path servers. Beacon servers. Core path servers. Border routers. DNS servers.

Which elements are returned to a host during path lookup? (3 correct answers). Up-path. Core-path. Down-path. BGP routes. IP prefixes.

What role does RHINE play? (1 correct answer). Path verification. Name resolution to ISD-AS. Packet forwarding. Encryption. Beacon generation.

What does a hop field contain? (3 correct answers). Ingress interface. Egress interface. MAC. IP address. DNS name.

What advantage do SCION routers have? (2 correct answers). No forwarding tables. Cryptographic forwarding. Dynamic path learning. IP tunneling. DNS caching.

Which features support network sovereignty? (2 correct answers). ISDs. Single global PKI. Trust Root Configuration. Hidden paths. BGP.

Which mechanisms enable geo-fencing? (1 correct answer). Path verification. Hop MAC. Path selection. DNS filtering. NAT.

Which are SCION control plane functions? (2 correct answers). Path exploration. Path registration. Packet encryption. NAT traversal. IP forwarding.

What is differentiated trust? (1 correct answer). Single CA model. Ranked trust per entity. Anonymous routing. BGP policy. NAT security.

What enables fast failover in SCION? (2 correct answers). Multiple path segments. Precomputed routes. BGP convergence. DNS switching. Firewalls.

What does a down-path segment represent? (1 correct answer). AS to core. Core to AS. Peer to peer. Core to core. Local routing.

Which devices enable legacy hosts to use SCION? (1 correct answer). SIG. DNS. VPN. Firewall. Router.

Which properties are achieved with hidden paths? (2 correct answers). Off-by-default access. DDoS protection. IP anonymity. Faster DNS. NAT traversal.

What type of routing does SCION eliminate? (1 correct answer). BGP-based routing. MPLS. Static routing. Overlay routing. Link-state.

Which are SCION use cases? (3 correct answers). IoT security. Gaming. Enterprise connectivity. Social networks. Email servers.

What does a core-path segment connect? (1 correct answer). AS to core. Core to core. AS to AS. Host to AS. Router to router.

Which properties improve efficiency? (2 correct answers). Multipath. Path optimization. BGP policies. NAT. Firewalls.

Which information is in the SCION header? (2 correct answers). ISD-AS addresses. Path type. DNS cache. IP TTL. TCP port.

Which are SCION border components? (2 correct answers). SBR. SCS. DNS. NAT. Proxy.

Which benefit does SCION offer to ISPs? (2 correct answers). Premium links. Business continuity. Free bandwidth. NAT traversal. Ad blocking.

Which fields ensure path integrity? (2 correct answers). Hop MAC. Expiration time. DNS. IP checksum. TTL.

Which plane separates path discovery from forwarding? (1 correct answer). Control plane. Data plane. Management plane. Transport plane. Application plane.

Which entities manage ISD trust? (1 correct answer). Core ASes. End hosts. Routers. DNS. NAT.

What makes SCION disruptive? (2 correct answers). Built-in DDoS defense. Path verification. IP tunneling. NAT support. DNSSEC.