ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 1:

  Which of the following is an input device that is used for controlling machines such as cranes, trucks, underwater unmanned vehicles, wheelchairs, surveillance cameras, and zero turning radius lawn mowers?

  A. PS/2
  B. Joystick
  C. Microphone
  D. AGP
  B. Joystick

• Question 2:

  Which of the following statements about incremental backup are true? Each correct answer represents a complete solution. Choose two.

  A. It is the fastest method of backing up data.
  B. It is the slowest method for taking a data backup.
  C. It backs up the entire database, including the transaction log.
  D. It backs up only the files changed since the most recent backup and clears the archive bit.
  A. It is the fastest method of backing up data.
  D. It backs up only the files changed since the most recent backup and clears the archive bit.

• Question 3:

  Which of the following statements about a stream cipher are true? Each correct answer represents a complete solution. Choose three.

  A. It typically executes at a higher speed than a block cipher.
  B. It divides a message into blocks for processing.
  C. It typically executes at a slower speed than a block cipher.
  D. It divides a message into bits for processing.
  E. It is a symmetric key cipher.
  A. It typically executes at a higher speed than a block cipher.
  D. It divides a message into bits for processing.
  E. It is a symmetric key cipher.

• Question 4:

  In which of the following Person-to-Person social engineering attacks does an attacker pretend to be an outside contractor, delivery person, etc., in order to gain physical access to the organization?

  A. In person attack
  B. Third-party authorization attack
  C. Impersonation attack
  D. Important user posing attack
  C. Impersonation attack

• Question 5:

  You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network. Which of the following phases of the Incident handling process should you follow next to handle this incident?

  A. Containment
  B. Preparation
  C. Recovery
  D. Identification
  A. Containment

• Question 6:

  A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

  A. Denial-of-Service attack
  B. Vulnerability attack
  C. Social Engineering attack
  D. Impersonation attack
  A. Denial-of-Service attack

• Question 7:

  Which of the following statements are true about Public-key cryptography? Each correct answer represents a complete solution. Choose two.

  A. Data encrypted with the secret key can only be decrypted by another secret key.
  B. The secret key can encrypt a message, and anyone with the public key can decrypt it.
  C. The distinguishing technique used in public key-private key cryptography is the use of symmetric key algorithms.
  D. Data encrypted by the public key can only be decrypted by the secret key.
  B. The secret key can encrypt a message, and anyone with the public key can decrypt it.
  D. Data encrypted by the public key can only be decrypted by the secret key.

• Question 8:

  Which of the following should the administrator ensure during the test of a disaster recovery plan?

  A. Ensure that the plan works properly
  B. Ensure that all the servers in the organization are shut down.
  C. Ensure that each member of the disaster recovery team is aware of their responsibility.
  D. Ensure that all client computers in the organization are shut down.
  A. Ensure that the plan works properly
  C. Ensure that each member of the disaster recovery team is aware of their responsibility.

• Question 9:

  Which of the following techniques can be used by an administrator while working with the symmetric encryption cryptography? Each correct answer represents a complete solution. Choose all that apply.

  A. Block cipher
  B. Stream cipher
  C. Transposition cipher
  D. Message Authentication Code
  A. Block cipher
  B. Stream cipher
  D. Message Authentication Code

• Question 10:

  Your customer is concerned about security. He wants to make certain no one in the outside world can see the IP addresses inside his network. What feature of a router would accomplish this?

  A. Port forwarding
  B. NAT
  C. MAC filtering
  D. Firewall
  B. NAT