ISC CISSP-ISSMP examen pratique questions et réponses

Choisir le Pass4Test peut vous aider à réussir 100% le test ISC CISSP-ISSMP qui change tout le temps. Pass4Test peut vous offrir les infos plus nouvelles. Dans le site de Pass4Test le servie en ligne est disponible toute la journée. Si vous ne passerez pas le test, votre argent sera tout rendu.

Pass4Test est un bon site d'offrir la facilité aux candidats de test ISC CISSP-ISSMP. Selon les anciens test, l'outil de formation ISC CISSP-ISSMP est bien proche de test réel.

Code d'Examen: CISSP-ISSMP
Nom d'Examen: ISC (CISSP-ISSMP - Information Systems Security Management Professional)
Questions et réponses: 218 Q&As

Votre vie changera beaucoup après d'obtenir le Certificat de ISC CISSP-ISSMP. Tout va améliorer, la vie, le boulot, etc. Après tout, ISC CISSP-ISSMP est un test très important dans la série de test Certification ISC. Mais c'est pas facile à réussir le test ISC CISSP-ISSMP.

Les produits de Pass4Test sont préparés pour le test Certification ISC CISSP-ISSMP, y compris les formations et les informations ciblées au test ISC CISSP-ISSMP. D'ailleurs, la Q&A de Pass4Test qui est impressionnée par la grande couverture des questions et la haute précision des réponses vous permet à réussir le test avec une haute note.

CISSP-ISSMP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSMP.html

NO.1 Which of the following are the ways of sending secure e-mail messages over the Internet.? Each correct
answer represents a complete solution. (Choose two.)
A. TLS
B. PGP
C. S/MIME
D. IPSec
Answer: B,C

ISC examen   certification CISSP-ISSMP   CISSP-ISSMP

NO.2 Which of the following characteristics are described by the DIAP Information Readiness Assessment
function? Each correct answer represents a complete solution. Choose all that apply.
A. It performs vulnerability/threat analysis assessment.
B. It identifies and generates IA requirements.
C. It provides data needed to accurately assess IA readiness.
D. It provides for entry and storage of individual system data.
Answer: A,B,C

ISC examen   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.3 Which of the following BCP teams is the first responder and deals with the immediate effects of the
disaster?
A. Emergency-management team
B. Damage-assessment team
C. Off-site storage team
D. Emergency action team
Answer: D

ISC   certification CISSP-ISSMP   CISSP-ISSMP

NO.4 Which of the following security models dictates that subjects can only access objects through
applications?
A. Biba-Clark model
B. Bell-LaPadula
C. Clark-Wilson
D. Biba model
Answer: C

ISC examen   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP

NO.5 You work as a Network Administrator for ABC Inc. The company uses a secure wireless network. John
complains to you that his computer is not working properly. What type of security audit do you need to
conduct to resolve the problem?
A. Operational audit
B. Dependent audit
C. Non-operational audit
D. Independent audit
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.6 Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?
A. Managed level
B. Defined level
C. Fundamental level
D. Repeatable level
Answer: C

ISC   CISSP-ISSMP examen   CISSP-ISSMP

NO.7 Which of the following recovery plans includes specific strategies and actions to deal with specific
variances to assumptions resulting in a particular security problem, emergency, or state of affairs?
A. Business continuity plan
B. Disaster recovery plan
C. Continuity of Operations Plan
D. Contingency plan
Answer: D

certification ISC   certification CISSP-ISSMP   certification CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP

NO.8 Which of the following is the best method to stop vulnerability attacks on a Web server?
A. Using strong passwords
B. Configuring a firewall
C. Implementing the latest virus scanner
D. Installing service packs and updates
Answer: D

ISC   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP   CISSP-ISSMP

NO.9 Which of the following fields of management focuses on establishing and maintaining consistency of a
system's or product's performance and its functional and physical attributes with its requirements, design,
and operational information throughout its life?
A. Configuration management
B. Risk management
C. Procurement management
D. Change management
Answer: A

certification ISC   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.10 Which of the following protocols is used with a tunneling protocol to provide security?
A. FTP
B. IPX/SPX
C. IPSec
D. EAP
Answer: C

ISC examen   CISSP-ISSMP   certification CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.11 Which of the following is the process performed between organizations that have unique hardware or
software that cannot be maintained at a hot or warm site?
A. Cold sites arrangement
B. Business impact analysis
C. Duplicate processing facilities
D. Reciprocal agreements
Answer: D

ISC examen   CISSP-ISSMP examen   CISSP-ISSMP examen   CISSP-ISSMP examen

NO.12 Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a
document to be used to help understand what impact a disruptive event would have on the business. The
impact might be financial or operational. Which of the following are the objectives related to the above
phase in which Mark is involved? Each correct answer represents a part of the solution. Choose three.
A. Resource requirements identification
B. Criticality prioritization
C. Down-time estimation
D. Performing vulnerability assessment
Answer: A,B,C

ISC examen   CISSP-ISSMP   certification CISSP-ISSMP   CISSP-ISSMP examen

NO.13 You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software
applications on the systems were malfunctioning and also you were not able to access your remote
desktop session. You suspected that some malicious attack was performed on the network of the
company. You immediately called the incident response team to handle the situation who enquired the
Network Administrator to acquire all relevant information regarding the malfunctioning. The Network
Administrator informed the incident response team that he was reviewing the security of the network
which caused all these problems. Incident response team announced that this was a controlled event not
an incident. Which of the following steps of an incident handling process was performed by the incident
response team?
A. Containment
B. Eradication
C. Preparation
D. Identification
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP

NO.14 Which of the following subphases are defined in the maintenance phase of the life cycle models?
A. Change control
B. Configuration control
C. Request control
D. Release control
Answer: A,C,D

ISC examen   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.15 Which of the following penetration testing phases involves reconnaissance or data gathering?
A. Attack phase
B. Pre-attack phase
C. Post-attack phase
D. Out-attack phase
Answer: B

ISC   certification CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.16 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Non-repudiation
B. Confidentiality
C. Authentication
D. Integrity
Answer: A

certification ISC   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP

NO.17 Which of the following relies on a physical characteristic of the user to verify his identity?
A. Social Engineering
B. Kerberos v5
C. Biometrics
D. CHAP
Answer: C

ISC   CISSP-ISSMP examen   certification CISSP-ISSMP

NO.18 Which of the following types of activities can be audited for security? Each correct answer represents a
complete solution. Choose three.
A. Data downloading from the Internet
B. File and object access
C. Network logons and logoffs
D. Printer access
Answer: B,C,D

certification ISC   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP

NO.19 Which of the following involves changing data prior to or during input to a computer in an effort to
commit fraud?
A. Data diddling
B. Wiretapping
C. Eavesdropping
D. Spoofing
Answer: A

ISC   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.20 Joseph works as a Software Developer for Web Tech Inc. He wants to protect the algorithms and the
techniques of programming that he uses in developing an application. Which of the following laws are
used to protect a part of software?
A. Code Security law
B. Trademark laws
C. Copyright laws
D. Patent laws
Answer: D

certification ISC   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP

Pass4Test a capacité d'économiser vos temps et de vous faire plus confiant à réussir le test. Vous pouvez télécharger le démo ISC CISSP-ISSMP gratuit à connaître mieux la bonne fiabilité de Pass4Test. Nous nous font toujours confiant sur nos produits, et vous aussi dans un temps proche. La réussite de test ISC CISSP-ISSMP n'est pas loin de vous une fois que vous choisissez le produit de Pass4Test. C'est un choix élégant pour vous faciliter à réussir le test ISC CISSP-ISSMP.

ISC certification CAP exam training programs

If you have ITCertMaster's ISC CAP exam training materials, we will provide you with one-year free update. This means that you can always get the latest exam information. As long as the Exam Objectives have changed, or our learning material changes, we will update for you in the first time. We know your needs, and we will help you gain confidence to pass the ISC CAP exam. You can be confident to take the exam and pass the exam.

If you choose to sign up to participate in ISC certification CAP exams, you should choose a good learning material or training course to prepare for the examination right now. Because ISC certification CAP exam is difficult to pass. If you want to pass the exam, you must have a good preparation for the exam.

About CAP exam, ITCertMaster has a great sound quality, will be the most trusted sources. Feedback from the thousands of registration department, a large number of in-depth analysis, we are in a position to determine which supplier will provide you with the latest and the best CAP practice questions. The ITCertMaster ISC CAP training materials are constantly being updated and modified, has the highest ISC CAP training experience. If you want to pass the exam，please using our ITCertMaster ISC CAP exam training materials. ITCertMaster ISC CAP Add to your shopping cart, it will let you see unexpected results.

If you buy ITCertMaster ISC CAP exam training materials, you will solve the problem of your test preparation. You will get the training materials which have the highest quality. Buy our products today, and you will open a new door, and you will get a better future. We can make you pay a minimum of effort to get the greatest success.

Exam Code: CAP
Exam Name: ISC (CAP – Certified Authorization Professional)
Guaranteed success with practice guides, No help, Full refund!
395 Questions and Answers
Updated: 2013-12-28

If you use the ITCertMaster ISC CAP study materials, you can reduce the time and economic costs of the exam. It can help you to pass the exam successfully. Before you decide to buy our ISC CAP exam materials, you can download our free test questions, including the PDF version and the software version. If you need software versions please do not hesitate to obtain a copy from our customer service staff.

In order to pass ISC certification CAP exam disposably, you must have a good preparation and a complete knowledge structure. ITCertMaster can provide you the resources to meet your need.

When you select to use ITCertMaster's products, you have set the first foot on the peak of the IT industry and the way to your dream is one step closer. The practice questions of ITCertMaster can not only help you pass ISC certification CAP exam and consolidate your professional knowledge, but also provide you one year free update service.

CAP Free Demo Download: http://www.itcertmaster.com/CAP.html

NO.1 Topic 1, Volume A
1. The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title
commonly
given to the most senior executive in an enterprise. What are the responsibilities of a Chief
Information Officer?
Each correct answer represents a complete solution. Choose all that apply.
A. Preserving high-level communications and working group relationships in an organization
B. Facilitating the sharing of security risk-related information among authorizing officials
C. Establishing effective continuous monitoring program for the organization
D. Proposing the information technology needed by an enterprise to achieve its goals and then
working within a budget to implement the plan
Answer: A,C,D

ISC   CAP   CAP exam dumps   CAP
Topic 2, Volume D

NO.2 What does RTM stand for?
A. Resource Testing Method
B. Replaced Traceability Matrix
C. Requirements Traceability Matrix
D. Resource Tracking Matrix
Answer: C

ISC pdf   CAP test questions   CAP questions   CAP pdf   CAP answers real questions

NO.3 David is the project manager of HGF project for his company. David, the project team, and
several
key stakeholders have completed risk identification and are ready to move into qualitative risk
analysis. Tracy, a project team member, does not understand why they need to complete
qualitative risk analysis. Which one of the following is the best explanation for completing
qualitative risk analysis?
A. It isa rapid and cost-effective means of establishing priorities for the plan risk responses and
lays the foundation for quantitative analysis.
B. It is a cost-effective means of establishing probability and impact for the project risks.
C. Qualitative risk analysis helps segment the project risks, create a risk breakdown structure, and
create fast and accurate risk responses.
D. All risks must pass through quantitative risk analysis before qualitative risk analysis.
Answer: A

ISC   CAP   CAP   CAP   CAP   CAP
Topic 1, Volume A

NO.4 Which of the following is NOT an objective of the security program?
A. Security organization
B. Security plan
C. Security education
D. Information classification
Answer: B

ISC exam simulations   CAP exam prep   CAP   CAP   CAP
Topic 1, Volume A

NO.5 Penetration testing (also called pen testing) is the practice of testing a computer system,
network,
or Web application to find vulnerabilities that an attacker could exploit. Which of the following
areas can be exploited in a penetration test?
Each correct answer represents a complete solution. Choose all that apply.
A. Race conditions
B. Social engineering
C. Information system architectures
D. Buffer overflows
E. Kernel flaws
F. Trojan horses
G. File and directory permissions
Answer: A,B,D,E,F,G

ISC   CAP test   CAP   CAP exam simulations   CAP exam prep

NO.6 Kelly is the project manager of the BHH project for her organization. She is completing the risk
identification process for this portion of her project. Which one of the following is the only thing
that
the risk identification process will create for Kelly?
A. Project document updates
B. Risk register updates
C. Change requests
D. Risk register
Answer: D

ISC   CAP   CAP exam simulations   CAP demo   CAP exam   CAP questions
Topic 2, Volume D

NO.7 Where can a project manager find risk-rating rules?
A. Risk probability and impact matrix
B. Organizational process assets
C. Enterprise environmental factors
D. Risk management plan
Answer: B

ISC   CAP practice test   CAP braindump
Topic 2, Volume D

NO.8 Which of the following processes is a structured approach to transitioning individuals, teams,
and
organizations from a current state to a desired future state?
A. Configuration management
B. Procurement management
C. Change management
D. Risk management
Answer: C

ISC   CAP study guide   CAP
Topic 3, Volume C

NO.9 Which of the following system security policies is used to address specific issues of concern to
the
organization?
A. Program policy
B. Issue-specific policy
C. Informative policy
D. System-specific policy
Answer: B

ISC   CAP dumps   CAP   CAP practice test
Topic 3, Volume C

NO.10 Which of the following assessment methodologies defines a six-step technical security
evaluation?
A. FITSAF
B. FIPS 102
C. OCTAVE
D. DITSCAP
Answer: B

ISC certification training   CAP   CAP braindump
Topic 4, Volume B

ITCertMaster offer the latest HP0-S34 Practice Test and high-quality 70-410 PDF Exam Questions training material. Our 000-156 VCE testing engine and C_TFIN22_64 dumps can help you pass the real exam. High-quality 000-593 Exam Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertmaster.com/CAP.html

Le matériel de formation de l'examen de meilleur ISC CISSP-ISSAP

Le test ISC CISSP-ISSAP est bien populaire dans l'Industrie IT. Mais ça coûte beaucoup de temps pour bien préparer le test. Le temps est certainemetn la fortune dans cette société. L'outil de formation offert par Pass4Test ne vous demande que 20 heures pour renforcer les connaissances essentales pour le test ISC CISSP-ISSAP. Vous aurez une meilleure préparation bien que ce soit la première fois à participer le test.

Pass4Test provide non seulement le produit de qualité, mais aussi le bon service. Si malheureusement vous ne pouvez pas réussir le test, votre argent sera tout rendu. Le service de la mise à jour gratuite est aussi pour vous bien que vous passiez le test Certification.

Il y a plusieurs de façons pour réussir le test ISC CISSP-ISSAP, vous pouvez travailler dur et dépenser beaucoup d'argents, ou vous pouvez travailler plus efficacement avec moins temps dépensés.

Beaucoup de travailleurs espèrent obtenir quelques Certificat IT pour avoir une plus grande space de s'améliorer. Certains certificats peut vous aider à réaliser ce rêve. Le test ISC CISSP-ISSAP est un certificat comme ça. Mais il est difficile à réussir. Il y a plusieurs façons pour se préparer, vous pouvez dépenser plein de temps et d'effort, ou vous pouvez choisir une bonne formation en Internet. Pass4Test est un bon fournisseur de l'outil formation de vous aider à atteindre votre but. Selons vos connaissances à propos de Pass4Test, vous allez faire un bon choix de votre formation.

Code d'Examen: CISSP-ISSAP
Nom d'Examen: ISC (CISSP-ISSAP - Information Systems Security Architecture Professional)
Questions et réponses: 237 Q&As

L'équipe de Pass4Test rehcerche la Q&A de test certification ISC CISSP-ISSAP en visant le test ISC CISSP-ISSAP. Cet outil de formation peut vous aider à se préparer bien dans une courte terme. Vous vous renforcerez les connaissances de base et même prendrez tous essences de test Certification. Pass4Test vous assure à réussir le test ISC CISSP-ISSAP sans aucune doute.

Pass4Test peut vous fournir un raccourci à passer le test ISC CISSP-ISSAP: moins de temps et efforts dépensés. Vous trouverez les bonnes documentations de se former dans le site Pass4Test qui peut vous aider efficacement à réussir le test ISC CISSP-ISSAP. Si vous voyez les documentations dans les autres sites, c'est pas difficile à trouver qu''elles sont venues de Pass4Test, parce que lesquelles dans Pass4Test sont le plus complété et la mise à jour plus vite.

Les produits de Pass4Test a une bonne qualité, et la fréquence de la mise à jour est bien impressionnée. Si vous avez déjà choisi la Q&A de Pass4Test, vous n'aurez pas le problème à réussir le test ISC CISSP-ISSAP.

CISSP-ISSAP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSAP.html

NO.1 Which of the following statements about a stream cipher are true? Each correct answer represents a
complete solution. Choose three.
A. It typically executes at a higher speed than a block cipher.
B. It divides a message into blocks for processing.
C. It typically executes at a slower speed than a block cipher.
D. It divides a message into bits for processing.
E. It is a symmetric key cipher.
Answer: A,D,E

certification ISC   CISSP-ISSAP examen   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP examen

NO.2 Which of the following types of firewall functions at the Session layer of OSI model?
A. Circuit-level firewall
B. Application-level firewall
C. Packet filtering firewall
D. Switch-level firewall
Answer: A

ISC   CISSP-ISSAP examen   CISSP-ISSAP examen

NO.3 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Policy Access Control
B. Mandatory Access Control
C. Discretionary Access Control
D. Role-Based Access Control
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP

NO.4 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Integrity
B. Confidentiality
C. Authentication
D. Non-repudiation
Answer: D

certification ISC   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.5 Which of the following security devices is presented to indicate some feat of service, a special
accomplishment, a symbol of authority granted by taking an oath, a sign of legitimate employment or
student status, or as a simple means of identification?
A. Sensor
B. Alarm
C. Motion detector
D. Badge
Answer: D

ISC   CISSP-ISSAP   certification CISSP-ISSAP

NO.6 Which of the following elements of planning gap measures the gap between the total potential for the
market and the actual current usage by all the consumers in the market?
A. Project gap
B. Product gap
C. Competitive gap
D. Usage gap
Answer: D

ISC examen   CISSP-ISSAP examen   CISSP-ISSAP

NO.7 A user is sending a large number of protocol packets to a network in order to saturate its resources and
to disrupt connections to prevent communications between services. Which type of attack is this?
A. Denial-of-Service attack
B. Vulnerability attack
C. Social Engineering attack
D. Impersonation attack
Answer: A

certification ISC   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.8 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which
of the following will you use to accomplish this?
A. PGP
B. PPTP
C. IPSec
D. NTFS
Answer: A

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.9 Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each
correct answer represents a complete solution. Choose two.
A. GTC
B. MS-CHAP v2
C. AES
D. RC4
Answer: A,B

ISC   certification CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.10 Which of the following terms refers to the method that allows or restricts specific types of packets from
crossing over the firewall.?
A. Hacking
B. Packet filtering
C. Web caching
D. Spoofing
Answer: B

ISC examen   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.11 You want to implement a network topology that provides the best balance for regional topologies in
terms of the number of virtual circuits, redundancy, and performance while establishing a WAN network.
Which of the following network topologies will you use to accomplish the task?
A. Bus topology
B. Fully meshed topology
C. Star topology
D. Partially meshed topology
Answer: D

ISC   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.12 Which of the following is used to authenticate asymmetric keys?
A. Digital signature
B. MAC Address
C. Demilitarized zone (DMZ)
D. Password
Answer: A

ISC   CISSP-ISSAP   CISSP-ISSAP

NO.13 Which of the following types of attack can be used to break the best physical and logical security
mechanism to gain access to a system?
A. Social engineering attack
B. Cross site scripting attack
C. Mail bombing
D. Password guessing attack
Answer: A

ISC   CISSP-ISSAP   CISSP-ISSAP

NO.14 Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the
authenticity of a certificate to be immediately verified?
A. RSTP
B. SKIP
C. OCSP
D. HTTP
Answer: C

certification ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP examen

NO.15 Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement
two-factor authentication for the employees to access their networks. He has told him that he would like to
use some type of hardware device in tandem with a security or identifying pin number. Adam decides to
implement smart cards but they are not cost effective. Which of the following types of hardware devices
will Adam use to implement two-factor authentication?
A. Biometric device
B. One Time Password
C. Proximity cards
D. Security token
Answer: D

ISC   certification CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.16 Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to
connect and access its private network through a dial-up connection via the Internet. All the data will be
sent across a public network. For security reasons, the management wants the data sent through the
Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.
Which communication protocol will Peter use to accomplish the task?
A. IP Security (IPSec)
B. Microsoft Point-to-Point Encryption (MPPE)
C. Pretty Good Privacy (PGP)
D. Data Encryption Standard (DES)
Answer: A

certification ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.17 You are the Security Consultant advising a company on security methods. This is a highly secure
location that deals with sensitive national defense related data. They are very concerned about physical
security as they had a breach last month. In that breach an individual had simply grabbed a laptop and
ran out of the building. Which one of the following would have been most effective in preventing this?
A. Not using laptops.
B. Keeping all doors locked with a guard.
C. Using a man-trap.
D. A sign in log.
Answer: C

certification ISC   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.18 Which of the following is a method for transforming a message into a masked form, together with a way
of undoing the transformation to recover the message?
A. Cipher
B. CrypTool
C. Steganography
D. MIME
Answer: A

ISC examen   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP examen

NO.19 IPsec VPN provides a high degree of data privacy by establishing trust points between communicating
devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each
correct answer represents a complete solution. Choose two.
A. MD5
B. LEAP
C. AES
D. 3DES
Answer: C,D

ISC   certification CISSP-ISSAP   CISSP-ISSAP

NO.20 Which of the following protocols multicasts messages and information among all member devices in an
IP multicast group?
A. ARP
B. ICMP
C. TCP
D. IGMP
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP

Aujourd'hui, c'est une société pleine de gens talentueux, la meilleure façon de suivre et assurer la place dans votre carrière est de s'améliorer sans arrêt. Si vous n'augmentez pas dans votre carrière, vous êtes juste sous-développé parce que les autres sont meilleurs que vous. Pour éviter ce cas, vous devez vous former successivement.

Le dernier examen ISC CISSP-ISSAP gratuit Télécharger

Pass4Test est un site particulier d'offrir la formation à propos de test Certification IT. C'est un bon choix pour vous aider à réussir le test ISC CISSP-ISSAP. Pass4Test offre toutes les informations et les documentations plus nouvelles qui peut vous donner plus de chances à réussir le test.

Être un travailleur IT, est-ce que vous vous souciez encore pour passer le test Certificat IT? Le test examiner les techniques et connaissances professionnelles, donc c'est pas facile à réussir. Pour les candidats qui participent le test à la première fois, une bonne formation est très importante. Pass4Test offre les outils de formation particulier au test et bien proche de test réel, n'hésitez plus d'ajouter la Q&A au panier.

Dépenser assez de temps et d'argent pour réussir le test ISC CISSP-ISSAP ne peut pas vous assurer à passer le test ISC CISSP-ISSAP sans aucune doute. Choisissez le Pass4Test, moins d'argent coûtés mais plus sûr pour le succès de test. Dans cette société, le temps est tellement précieux que vous devez choisir un bon site à vous aider. Choisir le Pass4Test symbole le succès dans le future.

La Q&A ISC CISSP-ISSAP de Pass4Test est liée bien avec le test réel de ISC CISSP-ISSAP. La mise à jour gratuite est pour vous après vendre. Nous avons la capacité à vous assurer le succès de test ISC CISSP-ISSAP 100%. Si malheureusement vous échouerez le test, votre argent sera tout rendu.

Code d'Examen: CISSP-ISSAP

Nom d'Examen: ISC (CISSP-ISSAP - Information Systems Security Architecture Professional)

Questions et réponses: 237 Q&As

Vous pouvez s'exercer en Internet avec le démo gratuit. Vous allez découvrir que la Q&A de Pass4Test est laquelle le plus complète. C'est ce que vous voulez.

Participer au test ISC CISSP-ISSAP est un bon choix, parce que dans l'Industire IT, beaucoup de gens tirent un point de vue que le Certificat ISC CISSP-ISSAP symbole bien la professionnalité d'un travailleur dans cette industrie.

CISSP-ISSAP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSAP.html

NO.1 Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each
correct answer represents a complete solution. Choose two.
A. GTC
B. MS-CHAP v2
C. AES
D. RC4
Answer: A,B

ISC   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.2 Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to
connect and access its private network through a dial-up connection via the Internet. All the data will be
sent across a public network. For security reasons, the management wants the data sent through the
Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.
Which communication protocol will Peter use to accomplish the task?
A. IP Security (IPSec)
B. Microsoft Point-to-Point Encryption (MPPE)
C. Pretty Good Privacy (PGP)
D. Data Encryption Standard (DES)
Answer: A

ISC   certification CISSP-ISSAP   CISSP-ISSAP

NO.3 IPsec VPN provides a high degree of data privacy by establishing trust points between communicating
devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each
correct answer represents a complete solution. Choose two.
A. MD5
B. LEAP
C. AES
D. 3DES
Answer: C,D

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.4 You are the Security Consultant advising a company on security methods. This is a highly secure
location that deals with sensitive national defense related data. They are very concerned about physical
security as they had a breach last month. In that breach an individual had simply grabbed a laptop and
ran out of the building. Which one of the following would have been most effective in preventing this?
A. Not using laptops.
B. Keeping all doors locked with a guard.
C. Using a man-trap.
D. A sign in log.
Answer: C

ISC examen   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.5 Which of the following types of attack can be used to break the best physical and logical security
mechanism to gain access to a system?
A. Social engineering attack
B. Cross site scripting attack
C. Mail bombing
D. Password guessing attack
Answer: A

ISC examen   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.6 Which of the following statements about a stream cipher are true? Each correct answer represents a
complete solution. Choose three.
A. It typically executes at a higher speed than a block cipher.
B. It divides a message into blocks for processing.
C. It typically executes at a slower speed than a block cipher.
D. It divides a message into bits for processing.
E. It is a symmetric key cipher.
Answer: A,D,E

ISC   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP   CISSP-ISSAP examen

NO.7 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Policy Access Control
B. Mandatory Access Control
C. Discretionary Access Control
D. Role-Based Access Control
Answer: D

ISC examen   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP

NO.8 You want to implement a network topology that provides the best balance for regional topologies in
terms of the number of virtual circuits, redundancy, and performance while establishing a WAN network.
Which of the following network topologies will you use to accomplish the task?
A. Bus topology
B. Fully meshed topology
C. Star topology
D. Partially meshed topology
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.9 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which
of the following will you use to accomplish this?
A. PGP
B. PPTP
C. IPSec
D. NTFS
Answer: A

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.10 Which of the following is a method for transforming a message into a masked form, together with a way
of undoing the transformation to recover the message?
A. Cipher
B. CrypTool
C. Steganography
D. MIME
Answer: A

ISC   CISSP-ISSAP examen   CISSP-ISSAP examen

NO.11 Which of the following is used to authenticate asymmetric keys?
A. Digital signature
B. MAC Address
C. Demilitarized zone (DMZ)
D. Password
Answer: A

certification ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.12 A user is sending a large number of protocol packets to a network in order to saturate its resources and
to disrupt connections to prevent communications between services. Which type of attack is this?
A. Denial-of-Service attack
B. Vulnerability attack
C. Social Engineering attack
D. Impersonation attack
Answer: A

certification ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP

NO.13 Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the
authenticity of a certificate to be immediately verified?
A. RSTP
B. SKIP
C. OCSP
D. HTTP
Answer: C

certification ISC   CISSP-ISSAP examen   CISSP-ISSAP examen   CISSP-ISSAP

NO.14 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Integrity
B. Confidentiality
C. Authentication
D. Non-repudiation
Answer: D

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen

NO.15 Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement
two-factor authentication for the employees to access their networks. He has told him that he would like to
use some type of hardware device in tandem with a security or identifying pin number. Adam decides to
implement smart cards but they are not cost effective. Which of the following types of hardware devices
will Adam use to implement two-factor authentication?
A. Biometric device
B. One Time Password
C. Proximity cards
D. Security token
Answer: D

certification ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP

NO.16 Which of the following security devices is presented to indicate some feat of service, a special
accomplishment, a symbol of authority granted by taking an oath, a sign of legitimate employment or
student status, or as a simple means of identification?
A. Sensor
B. Alarm
C. Motion detector
D. Badge
Answer: D

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.17 Which of the following protocols multicasts messages and information among all member devices in an
IP multicast group?
A. ARP
B. ICMP
C. TCP
D. IGMP
Answer: D

certification ISC   CISSP-ISSAP examen   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.18 Which of the following elements of planning gap measures the gap between the total potential for the
market and the actual current usage by all the consumers in the market?
A. Project gap
B. Product gap
C. Competitive gap
D. Usage gap
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.19 Which of the following terms refers to the method that allows or restricts specific types of packets from
crossing over the firewall.?
A. Hacking
B. Packet filtering
C. Web caching
D. Spoofing
Answer: B

ISC   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.20 Which of the following types of firewall functions at the Session layer of OSI model?
A. Circuit-level firewall
B. Application-level firewall
C. Packet filtering firewall
D. Switch-level firewall
Answer: A

ISC examen   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

Est-que vous s'inquiétez encore à passer le test Certification CISSP-ISSAP qui demande beaucoup d'efforts? Est-que vous travaillez nuit et jour juste pour préparer le test de ISC CISSP-ISSAP? Si vous voulez réussir le test ISC CISSP-ISSAP plus facilement? N'hésitez plus à nous choisir. Pass4Test vous aidera à réaliser votre rêve.

Le meilleur matériel de formation examen ISC CISSP-ISSMP

Obtenez la Q&A de test ISC CISSP-ISSMP de Pass4Test plus tôt, vous pouvez réussir le test Certification ISC CISSP-ISSMP plus tôt.

Choisir le Pass4Test vous permet non seulement à réussir le test ISC CISSP-ISSMP, mais encore à enjouir le service en ligne 24h et la mise à jour gratuite pendant un an. Nous allons lancer au premier temps la Q&A ISC CISSP-ISSMP plus nouvelle. Si vous ne passez pas le test, votre argent sera tout rendu.

Pass4Test, où vous pouvez trouver les conseils et les documentations de test Certification ISC CISSP-ISSMP, est un siteweb remarquable offrant les données à préparer le test IT. Les documentations partiels et les mis en nouveau sont offerts gratuitement dans le site de Pass4Test. D'ailleurs, nos experts profitent de leurs expériences et leurs efforts à lancer sans arrêts les Q&A plus proches au test réel. Vous allez passer votre examen plus facile.

Code d'Examen: CISSP-ISSMP

Nom d'Examen: ISC (CISSP-ISSMP - Information Systems Security Management Professional)

Questions et réponses: 218 Q&As

Si vous voulez se prouver une compétition et s'enraciner le statut dans l'industrie IT à travers de test Certification ISC CISSP-ISSMP, c'est obligatoire que vous devez avior les connaissances professionnelles. Mais il demande pas mal de travaux à passer le test Certification ISC CISSP-ISSMP. Peut-être d'obtenir le Certificat ISC CISSP-ISSMP peut promouvoir le tremplin vers l'Industrie IT, mais vous n'avez pas besoin de travailler autant dur à préparer le test. Vous avez un autre choix à faire toutes les choses plus facile : prendre le produit de Pass4Test comme vos matériaux avec qui vous vous pratiquez avant le test réel. La Q&A de Pass4Test est recherchée particulièrement pour le test IT.

Quand vous hésitez même à choisir Pass4Test, le démo gratuit dans le site Pass4Test est disponible pour vous à essayer avant d'acheter. Nos démos vous feront confiant à choisir Pass4Test. Pass4Test est votre meilleur choix à passer l'examen de Certification ISC CISSP-ISSMP, et aussi une meilleure assurance du succès du test CISSP-ISSMP. Vous choisissez Pass4Test, vous choisissez le succès.

Vous pouvez télécharger tout d'abord une partie de Q&A Certification ISC CISSP-ISSMP pour tester si Pass4Test est vraiment professionnel. Nous pouvons vous aider à réussir 100% le test ISC CISSP-ISSMP. Si malheureusement, vous ratez le test, votre argent sera 100% rendu.

C'est un bon choix si vous prendre l'outil de formation de Pass4Test. Vous pouvez télécharger tout d'abord le démo gratuit pour prendre un essai. Vous aurez plus confiances sur Pass4Test après l'essai de notre démo. Si malheureusement, vous ne passe pas le test, votre argent sera tout rendu.

CISSP-ISSMP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSMP.html

NO.1 Which of the following fields of management focuses on establishing and maintaining consistency of a
system's or product's performance and its functional and physical attributes with its requirements, design,
and operational information throughout its life?
A. Configuration management
B. Risk management
C. Procurement management
D. Change management
Answer: A

ISC   CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.2 Which of the following security models dictates that subjects can only access objects through
applications?
A. Biba-Clark model
B. Bell-LaPadula
C. Clark-Wilson
D. Biba model
Answer: C

certification ISC   CISSP-ISSMP   certification CISSP-ISSMP

NO.3 You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software
applications on the systems were malfunctioning and also you were not able to access your remote
desktop session. You suspected that some malicious attack was performed on the network of the
company. You immediately called the incident response team to handle the situation who enquired the
Network Administrator to acquire all relevant information regarding the malfunctioning. The Network
Administrator informed the incident response team that he was reviewing the security of the network
which caused all these problems. Incident response team announced that this was a controlled event not
an incident. Which of the following steps of an incident handling process was performed by the incident
response team?
A. Containment
B. Eradication
C. Preparation
D. Identification
Answer: D

ISC examen   certification CISSP-ISSMP   CISSP-ISSMP examen   certification CISSP-ISSMP   certification CISSP-ISSMP

NO.4 Which of the following subphases are defined in the maintenance phase of the life cycle models?
A. Change control
B. Configuration control
C. Request control
D. Release control
Answer: A,C,D

ISC   CISSP-ISSMP   certification CISSP-ISSMP

NO.5 Which of the following BCP teams is the first responder and deals with the immediate effects of the
disaster?
A. Emergency-management team
B. Damage-assessment team
C. Off-site storage team
D. Emergency action team
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP

NO.6 Joseph works as a Software Developer for Web Tech Inc. He wants to protect the algorithms and the
techniques of programming that he uses in developing an application. Which of the following laws are
used to protect a part of software?
A. Code Security law
B. Trademark laws
C. Copyright laws
D. Patent laws
Answer: D

ISC   certification CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP

NO.7 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Non-repudiation
B. Confidentiality
C. Authentication
D. Integrity
Answer: A

ISC examen   CISSP-ISSMP examen   CISSP-ISSMP

NO.8 Which of the following relies on a physical characteristic of the user to verify his identity?
A. Social Engineering
B. Kerberos v5
C. Biometrics
D. CHAP
Answer: C

ISC   CISSP-ISSMP examen   CISSP-ISSMP

NO.9 Which of the following are the ways of sending secure e-mail messages over the Internet.? Each correct
answer represents a complete solution. (Choose two.)
A. TLS
B. PGP
C. S/MIME
D. IPSec
Answer: B,C

ISC   certification CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.10 You work as a Network Administrator for ABC Inc. The company uses a secure wireless network. John
complains to you that his computer is not working properly. What type of security audit do you need to
conduct to resolve the problem?
A. Operational audit
B. Dependent audit
C. Non-operational audit
D. Independent audit
Answer: D

ISC   CISSP-ISSMP   CISSP-ISSMP examen   certification CISSP-ISSMP   certification CISSP-ISSMP

NO.11 Which of the following recovery plans includes specific strategies and actions to deal with specific
variances to assumptions resulting in a particular security problem, emergency, or state of affairs?
A. Business continuity plan
B. Disaster recovery plan
C. Continuity of Operations Plan
D. Contingency plan
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP   certification CISSP-ISSMP

NO.12 Which of the following penetration testing phases involves reconnaissance or data gathering?
A. Attack phase
B. Pre-attack phase
C. Post-attack phase
D. Out-attack phase
Answer: B

ISC   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP

NO.13 Which of the following characteristics are described by the DIAP Information Readiness Assessment
function? Each correct answer represents a complete solution. Choose all that apply.
A. It performs vulnerability/threat analysis assessment.
B. It identifies and generates IA requirements.
C. It provides data needed to accurately assess IA readiness.
D. It provides for entry and storage of individual system data.
Answer: A,B,C

ISC examen   certification CISSP-ISSMP   certification CISSP-ISSMP   CISSP-ISSMP   certification CISSP-ISSMP

NO.14 Which of the following protocols is used with a tunneling protocol to provide security?
A. FTP
B. IPX/SPX
C. IPSec
D. EAP
Answer: C

ISC   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP examen   CISSP-ISSMP examen

NO.15 Which of the following is the best method to stop vulnerability attacks on a Web server?
A. Using strong passwords
B. Configuring a firewall
C. Implementing the latest virus scanner
D. Installing service packs and updates
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP examen

NO.16 Which of the following is the process performed between organizations that have unique hardware or
software that cannot be maintained at a hot or warm site?
A. Cold sites arrangement
B. Business impact analysis
C. Duplicate processing facilities
D. Reciprocal agreements
Answer: D

ISC   CISSP-ISSMP examen   CISSP-ISSMP   CISSP-ISSMP examen

NO.17 Which of the following involves changing data prior to or during input to a computer in an effort to
commit fraud?
A. Data diddling
B. Wiretapping
C. Eavesdropping
D. Spoofing
Answer: A

ISC   certification CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP examen

NO.18 Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?
A. Managed level
B. Defined level
C. Fundamental level
D. Repeatable level
Answer: C

certification ISC   CISSP-ISSMP   CISSP-ISSMP examen

NO.19 Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a
document to be used to help understand what impact a disruptive event would have on the business. The
impact might be financial or operational. Which of the following are the objectives related to the above
phase in which Mark is involved? Each correct answer represents a part of the solution. Choose three.
A. Resource requirements identification
B. Criticality prioritization
C. Down-time estimation
D. Performing vulnerability assessment
Answer: A,B,C

ISC   CISSP-ISSMP examen   CISSP-ISSMP examen

NO.20 Which of the following types of activities can be audited for security? Each correct answer represents a
complete solution. Choose three.
A. Data downloading from the Internet
B. File and object access
C. Network logons and logoffs
D. Printer access
Answer: B,C,D

certification ISC   certification CISSP-ISSMP   CISSP-ISSMP   CISSP-ISSMP examen

Pass4Test est un site à offrir particulièrement la Q&A ISC CISSP-ISSMP, vous pouvez non seulement aprrendre plus de connaissances professionnelles, et encore obtenir le Passport de Certification ISC CISSP-ISSMP, et trouver un meilleur travail plus tard. Les documentations offertes par Pass4Test sont tout étudiés par les experts de Pass4Test en profitant leurs connaissances et expériences, ces Q&As sont impresionnées par une bonne qualité. Il ne faut que choisir Pass4Test, vous pouvez non seulement passer le test ISC CISSP-ISSMP et même se renforcer vos connaissances professionnelles IT.

Les meilleures ISC CSSLP CAP SSCP CISSP examen pratique questions et réponses

Il faut une bonne préparation et aussi une série de connaissances professionnelles complètes pour réussir le test ISC CSSLP CAP SSCP CISSP. La ressourece providée par Pass4Test peut juste s'accorder votre demande.

L'équipe de Pass4Test rehcerche la Q&A de test certification ISC CSSLP CAP SSCP CISSP en visant le test ISC CSSLP CAP SSCP CISSP. Cet outil de formation peut vous aider à se préparer bien dans une courte terme. Vous vous renforcerez les connaissances de base et même prendrez tous essences de test Certification. Pass4Test vous assure à réussir le test ISC CSSLP CAP SSCP CISSP sans aucune doute.

Il demande les connaissances professionnelles pour passer le test ISC CSSLP CAP SSCP CISSP. Si vous manquez encore ces connaissances, vous avez besoin de Pass4Test comme une resourece de ces connaissances essentielles pour le test. Pass4Test et ses experts peuvent vous aider à renfocer ces connaissances et vous offrir les Q&As. Pass4Test fais tous efforts à vous aider à se renforcer les connaissances professionnelles et à passer le test. Choisir le Pass4Test peut non seulement à obtenir le Certificat ISC CSSLP CAP SSCP CISSP, et aussi vous offrir le service de la mise à jour gratuite pendant un an. Si malheureusement, vous ratez le test, votre argent sera 100% rendu.

Le produit de Pass4Test que vous choisissez vous met le pied sur la première marche du pic de l'Industrie IT, et vous serez plus proche de votre rêve. Les matériaux offerts par Pass4Test peut non seulement vous aider à réussir le test ISC CSSLP CAP SSCP CISSP, mais encore vous aider à se renforcer les connaissances professionnelles. Le service de la mise à jour pendant un an est aussi gratuit pour vous.

Peut-être vous voyez les guides d'études similaires pour le test ISC CSSLP CAP SSCP CISSP, mais nous avons la confiance que vous allez nous choisir finalement grâce à notre gravité d'état dans cette industrie et notre profession. Pass4Test se contribue à amérioler votre carrière. Vous saurez que vous êtes bien préparé à passer le test ISC CSSLP CAP SSCP CISSP lorsque vous choisissez la Q&A de Pass4Test. De plus, un an de service gratuit en ligne après vendre est aussi disponible pour vous.

Code d'Examen: CSSLP

Nom d'Examen: ISC (Certified Secure Software Lifecycle Professional Practice Test)

Questions et réponses: 349 Q&As

Code d'Examen: CAP

Nom d'Examen: ISC (CAP – Certified Authorization Professional)

Questions et réponses: 395 Q&As

Code d'Examen: SSCP

Nom d'Examen: ISC (System Security Certified Practitioner (SSCP) )

Questions et réponses: 254 Q&As

Code d'Examen: CISSP

Nom d'Examen: ISC (Certified Information Systems Security Professional )

Questions et réponses: 2137 Q&As

SSCP Démo gratuit à télécharger: http://www.pass4test.fr/SSCP.html

NO.1 An attempt to break an encryption algorithm is called _____________.
Answer: Cryptanalysis

ISC   certification SSCP   certification SSCP

NO.2 One method that can reduce exposure to malicious code is to run
applications as generic accounts with little or no privileges.
A. True
B. False
Answer: A

ISC   SSCP examen   SSCP examen   SSCP examen

NO.3 What security principle is based on the division of job responsibilities - designed to prevent
fraud?
A. Mandatory Access Control
B. Separation of Duties
C. Information Systems Auditing
D. Concept of Least Privilege
Answer: B

ISC   SSCP examen   certification SSCP   SSCP   SSCP

NO.4 A standardized list of the most common security weaknesses and exploits is the
__________.
A. SANS Top 10
B. CSI/FBI Computer Crime Study
C. CVE - Common Vulnerabilities and Exposures
D. CERT Top 10
Answer: C

ISC   certification SSCP   certification SSCP   certification SSCP

NO.5 Passwords should be changed every ________ days at a minimum.
90 days is the recommended minimum, but some resources will tell you that 30-60 days is
ideal.
Answer: 90

NO.6 ____________ is a file system that was poorly designed and has numerous security flaws.
A. NTS
B. RPC
C. TCP
D. NFS
E. None of the above
Answer: D

certification ISC   certification SSCP   SSCP examen   SSCP   SSCP examen

NO.7 Wiretapping is an example of a passive network attack?
A. True
B. False
Answer: A

ISC   SSCP   certification SSCP   SSCP   SSCP   SSCP examen

NO.8 Instructions or code that executes on an end user's machine from a web browser is known
as __________ code.
A. Active X
B. JavaScript
C. Malware
D. Windows Scripting
E. Mobile
Answer: E

certification ISC   certification SSCP   certification SSCP   SSCP

NO.9 Layer 4 in the DoD model overlaps with which layer(s) of the
OSI model?
A. Layer 7 - Application Layer
B. Layers 2, 3, & 4 - Data Link, Network, and Transport Layers
C. Layer 3 - Network Layer
D. Layers 5, 6, & 7 - Session, Presentation, and Application Layers
Answer: D

ISC examen   certification SSCP   certification SSCP

NO.10 Which form of media is handled at the Physical Layer (Layer 1) of the OSI Reference
Model?
A. MAC
B. L2TP
C. SSL
D. HTTP
E. Ethernet
Answer: E

certification ISC   SSCP   SSCP   SSCP   SSCP

NO.11 If Big Texastelephone company suddenly started billing you for caller ID and call
forwarding without your permission, this practice is referred to as __________________.
Answer: Cramming

ISC examen   certification SSCP   certification SSCP   SSCP examen

NO.12 Is the person who is attempting to log on really who they say they are? What form of access
control does this questions stem from?
A. Authorization
B. Authentication
C. Kerberos
D. Mandatory Access Control
Answer: B

ISC   certification SSCP   certification SSCP

NO.13 IKE - Internet Key Exchange is often used in conjunction with
what security standard?
A. SSL
B. OPSEC
C. IPSEC
D. Kerberos
E. All of the above
Answer: C

certification ISC   certification SSCP   SSCP examen   SSCP

NO.14 A salami attack refers to what type of activity?
A. Embedding or hiding data inside of a legitimate communication - a picture, etc.
B. Hijacking a session and stealing passwords
C. Committing computer crimes in such small doses that they almost go unnoticed
D. Setting a program to attack a website at 11:59 am on New Year's Eve
Answer: C

ISC   SSCP examen   SSCP examen

NO.15 ______________ is a major component of an overall risk management program.
Answer: Risk assessment

ISC   SSCP   SSCP   certification SSCP   SSCP

NO.16 Which of the concepts best describes Availability in relation to
computer resources?
A. Users can gain access to any resource upon request (assuming they have proper permissions)
B. Users can make authorized changes to data
C. Users can be assured that the data content has not been altered
D. None of the concepts describes Availability properly
Answer: A

ISC   SSCP examen   SSCP   SSCP

NO.17 _____ is the authoritative entity which lists port assignments
A. IANA
B. ISSA
C. Network Solutions
D. Register.com
E. InterNIC
Answer: A

certification ISC   SSCP   SSCP   certification SSCP

NO.18 There are 5 classes of IP addresses available, but only 3 classes are in common use today,
identify the three: (Choose three)
A. Class A: 1-126
B. Class B: 128-191
C. Class C: 192-223
D. Class D: 224-255
E. Class E: 0.0.0.0 - 127.0.0.1
Answer: A, B, C

ISC   certification SSCP   SSCP

NO.19 Cable modems are less secure than DSL connections because cable modems are shared
with other subscribers?
A. True
B. False
Answer: B

ISC examen   SSCP   SSCP examen   SSCP

NO.20 The act of intercepting the first message in a public key exchange and substituting a bogus key
for the original key is an example of which style of attack?
A. Spoofing
B. Hijacking
C. Man In The Middle
D. Social Engineering
E. Distributed Denial of Service (DDoS)
Answer: C

ISC   SSCP   certification SSCP

NO.21 What are some of the major differences of Qualitative vs. Quantitative methods of performing
risk analysis? (Choose all that apply)
A. Quantitative analysis uses numeric values
B. Qualitative analysis uses numeric values
C. Quantitative analysis is more time consuming
D. Qualitative analysis is more time consuming
E. Quantitative analysis is based on Annualized Loss Expectancy (ALE) formulas
F. Qualitative analysis is based on Annualized Loss Expectancy (ALE) formulas
Answer: A, C, E

ISC   SSCP   SSCP   SSCP

NO.22 What is the main difference between computer abuse and
computer crime?
A. Amount of damage
B. Intentions of the perpetrator
C. Method of compromise
D. Abuse = company insider; crime = company outsider
Answer: B

certification ISC   certification SSCP   certification SSCP

NO.23 Trend Analysis involves analyzing historical ___________ files in order to look for patterns
of abuse or misuse.
Answer: Log files

ISC   SSCP examen   SSCP   SSCP

NO.24 HTTP, FTP, SMTP reside at which layer of the OSI model?
A. Layer 1 - Physical
B. Layer 3 - Network
C. Layer 4 - Transport
D. Layer 7 - Application
E. Layer 2 - Data Link
Answer: D

ISC examen   SSCP   SSCP   SSCP   certification SSCP

NO.25 A Security Reference Monitor relates to which DoD security
standard?
A. LC3
B. C2
C. D1
D. L2TP
E. None of the items listed
Answer: B

ISC   SSCP examen   certification SSCP   certification SSCP

NO.26 DES - Data Encryption standard has a 128 bit key and is very difficult to break.
A. True
B. False
Answer: B

ISC   SSCP   certification SSCP   SSCP

NO.27 Multi-partite viruses perform which functions?
A. Infect multiple partitions
B. Infect multiple boot sectors
C. Infect numerous workstations
D. Combine both boot and file virus behavior
Answer: D

ISC examen   SSCP   SSCP   SSCP

NO.28 The ultimate goal of a computer forensics specialist is to ___________________.
A. Testify in court as an expert witness
B. Preserve electronic evidence and protect it from any alteration
C. Protect the company's reputation
D. Investigate the computer crime
Answer: B

ISC   SSCP   SSCP examen   certification SSCP   certification SSCP

NO.29 When an employee leaves the company, their network access account should be
__________?
Answer: Disable

ISC   certification SSCP   SSCP examen   SSCP

NO.30 The ability to identify and audit a user and his / her actions is known as ____________.
A. Journaling
B. Auditing
C. Accessibility
D. Accountability
E. Forensics
Answer: D

ISC   SSCP   SSCP examen   certification SSCP