ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 101:

  Which of the following heights of fence deters only casual trespassers?

  A. 8 feet
  B. 3 to 4 feet
  C. 2 to 2.5 feet
  D. 6 to 7 feet
  B. 3 to 4 feet

• Question 102:

  Which of the following authentication methods support mutual authentication? Each correct answer represents a complete solution. Choose two.

  A. MS-CHAP v2
  B. NTLM
  C. EAP-MD5
  D. EAP-TLS
  A. MS-CHAP v2
  D. EAP-TLS

• Question 103:

  You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to keep track of the state of network connections traveling across the network. Which of the following types of firewalls will you configure to accomplish the task?

  A. Stateful firewall
  B. Host-based application firewall
  C. A network-based application layer firewall
  D. An application firewall
  A. Stateful firewall

• Question 104:

  You are the Network Administrator at a large company. Your company has a lot of contractors and other outside parties that come in and out of the building. For this reason you are concerned that simply having usernames and passwords is

  not enough and want to have employees use tokens for authentication.

  Which of the following is not an example of tokens?

  A. Smart card
  B. USB device with cryptographic data
  C. CHAP
  D. Key fob
  C. CHAP

• Question 105:

  In which of the following access control models, owner of an object decides who is allowed to access the object and what privileges they have?

  A. Access Control List (ACL)
  B. Mandatory Access Control (MAC)
  C. Role Based Access Control (RBAC)
  D. Discretionary Access Control (DAC)
  D. Discretionary Access Control (DAC)

• Question 106:

  You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You have a disaster scenario and you want to discuss it with your team members for getting appropriate responses of the disaster. In which of the following disaster recovery tests can this task be performed?

  A. Full-interruption test
  B. Parallel test
  C. Simulation test
  D. Structured walk-through test
  C. Simulation test

• Question 107:

  Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.

  A. It uses symmetric key pairs.
  B. It provides security using data encryption and digital signature.
  C. It uses asymmetric key pairs.
  D. It is a digital representation of information that identifies users.
  B. It provides security using data encryption and digital signature.
  C. It uses asymmetric key pairs.

• Question 108:

  Which of the following is the technology of indoor or automotive environmental comfort?

  A. HIPS
  B. HVAC
  C. NIPS
  D. CCTV
  B. HVAC

• Question 109:

  You work as a Chief Security Officer for Tech Perfect Inc. The company has an internal room without any window and is totally in darkness. For security reasons, you want to place a device in the room. Which of the following devices is best for that room?

  A. Photoelectric motion detector
  B. Badge
  C. Closed-circuit television
  D. Alarm
  A. Photoelectric motion detector

• Question 110:

  Which of the following SDLC phases consists of the given security controls: Misuse Case Modeling Security Design and Architecture Review Threat and Risk Modeling Security Requirements and Test Cases Generation

  A. Design
  B. Maintenance
  C. Deployment
  D. Requirements Gathering
  A. Design