An example is the use of a GPRS-enabled laptop that connects to a
corporate intranet via a VPN. The laptop is given an IP address and a
RADIUS server authenticates the user. IPSEC is used to create the
VPN. As background, GPRS is a second-generation (2G) packet data
technology that is overlaid on existing Global System for Mobile
communications (GSM). GSM is the wireless analog of the ISDN
landline system. The key features of GPRS are that it is always on line
(no dial-up needed), existing GSM networks can be upgraded with
GPRS, and it can serve as the packet data core of third generation
(3G) systems.
Answers SSL and TLS are similar security protocols
that are used on the Internet side of the Wireless Application
Protocol (WAP) Gateway.
For answer WTP is the Wireless Transaction
Protocol that is part of the WAP suite of protocols. WTP is a lightweight, message-oriented, transaction protocol that provides more reliable connections than UDP, but does not have the robustness of
TCP.

Sniffing is the action of capture the information going over the network. Most popular way of connecting computers is through Ethernet. Ethernet protocol works by sending packet information to all the hosts on the same circuit. The packet header contains the proper address of the destination machine. Only the machine with the matching address is suppose to accept the packet. A machine that is accepting all packets, no matter what the packet header says, is said to be in promiscuous mode. Because, in a normal networking environment, account and password information is passed along Ethernet in clear-text, it is not hard for an intruder to put a machine into promiscuous mode and by sniffing, compromise all the machines on the net by capturing password in an illegal fashion.

Explanation/Reference:
Explanation:
In the Orange Book, covert channels in operating systems are not addressed until security level B2 and above because these are the systems that would be holding data sensitive enough for others to go through all the necessary trouble to access data in this fashion.
B2: Structured Protection: The security policy is clearly defined and documented, and the system design and implementation are subjected to more thorough review and testing procedures. This class requires more stringent authentication mechanisms and well-defined interfaces among layers. Subjects and devices require labels, and the system must not allow covert channels. A trusted path for logon and authentication processes must be in place, which means the subject communicates directly with the application or operating system, and no trapdoors exist. There is no way to circumvent or compromise this communication channel. Operator and administration functions are separated within the system to provide more trusted and protected operational functionality. Distinct address spaces must be provided to isolate processes, and a covert channel analysis is conducted. This class adds assurance by adding requirements to the design of the system.
The type of environment that would require B2 systems is one that processes sensitive data that require a higher degree of security. This type of environment would require systems that are relatively resistant to penetration and compromise.
Incorrect Answers:
A: Level B2, not A1 is the FIRST to be concerned with covert channels.
B: Level B2, not B3 is the FIRST to be concerned with covert channels.
D: Level B2, not B1 is the FIRST to be concerned with covert channels.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 395-396

Reference: pg 255 Krutz: CISSP Prep Guide: Gold Edition

Each Class A network address has a 8-bit network prefix, with the first bit of the ipaddress set to zero. See the diagram below for more details.
The following answers are incorrect:
The first bit of the IP address would be set to one and the second bit set to zero. Is incorrect because this would be a Class B network address.
The first two bits of the IP address would be set to one, and the third bit set to zero. Is incorrect because, this would be a Class C network address.
The first three bits of the ipaddress would be set to one. Is incorrect because, this is a distractor.
Class D & E have the first three bits set to 1.
Class D the 4th bit is 0 and for
Class E the 4th bit to 1.
See diagram below from the 3COM tutorial on everything you ever wanted to know about
IP addressing:
Classful IP addressing format
Classless Internet Domain Routing (CIDR)
Classless Inter-Domain Routing (CIDR) is a method for allocating IP addresses and routing
Internet Protocol packets. The Internet Engineering Task Force introduced CIDR in 1993 to replace the previous addressing architecture of classful network design in the Internet.
Their goal was to slow the growth of routing tables on routers across the Internet, and to help slow the rapid exhaustion of IPv4 addresses.
For Class A, the addresses are 0.0.0.0 - 127.255.255.255.
For Class B networks, the addresses are 128.0.0.0 - 191.255.255.255.
For Class C, the addresses are 192.0.0.0 - 223.255.255.255.
For Class D, the addresses are 224.0.0.0 - 239.255.255.255.
For Class E, the addresses are 240.0.0.0 - 255.255.255.255.
References:
3 Com http://www.3com.com/other/pdfs/infra/corpinfo/en_US/501302.pdf
and
AIOv3 Telecommunications and Networking Security (page 438)
and
https://secure.wikimedia.org/wikipedia/en/wiki/Classless_Inter-Domain_Routing