CISSP-ISSAP Exam Details

  • Exam Code
    :CISSP-ISSAP
  • Exam Name
    :ISSAP - Information Systems Security Architecture Professional (ISSAP)
  • Certification
    :ISC Certifications
  • Vendor
    :ISC
  • Total Questions
    :237 Q&As
  • Last Updated
    :Jul 14, 2026

ISC CISSP-ISSAP Online Questions & Answers

  • Question 141:

    Access control systems enable an authority to control access to areas and resources in a given physical facility or computer-based information system. Which of the following services provided by access control systems is used to determine what a subject can do?

    A. Authentication
    B. Authorization
    C. Accountability
    D. Identification

  • Question 142:

    Which of the following decides access control on an object in the mandatory access control (MAC) environment?

    A. Sensitivity label
    B. Event log
    C. System Access Control List (SACL)
    D. Security log

  • Question 143:

    Shoulder surfing is a type of in-person attack in which the attacker gathers information about the premises of an organization. This attack is often performed by looking surreptitiously at the keyboard of an employee's computer while he is typing in his password at any access point such as a terminal/Web site. Which of the following is violated in a shoulder surfing attack?

    A. Integrity
    B. Availability
    C. Authenticity
    D. Confidentiality

  • Question 144:

    Which of the following LAN protocols use token passing for exchanging signals among various stations on the network? Each correct answer represents a complete solution. Choose two.

    A. Ethernet (IEEE 802.3)
    B. Token ring (IEEE 802.5)
    C. Fiber Distributed Data Interface (FDDI)
    D. Wireless LAN (IEEE 802.11b)

  • Question 145:

    Which of the following are the primary components of a discretionary access control (DAC) model? Each correct answer represents a complete solution. Choose two.

    A. User's group
    B. File and data ownership
    C. Smart card
    D. Access rights and permissions

  • Question 146:

    Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?

    A. Kerberos
    B. Cryptography
    C. Cryptographer
    D. Cryptanalysis

  • Question 147:

    The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the following components reduces the size of data transmitted over congested network connections and increases the speed of such networks without losing data?

    A. AH
    B. ESP
    C. IPcomp
    D. IKE

  • Question 148:

    Which of the following protocols work at the Network layer of the OSI model?

    A. Routing Information Protocol (RIP)
    B. File Transfer Protocol (FTP)
    C. Simple Network Management Protocol (SNMP)
    D. Internet Group Management Protocol (IGMP)

  • Question 149:

    Which of the following plans is designed to protect critical business processes from natural or man- made failures or disasters and the resultant loss of capital due to the unavailability of normal business processes?

    A. Disaster recovery plan
    B. Contingency plan
    C. Business continuity plan
    D. Crisis communication plan

  • Question 150:

    Which of the following authentication methods prevents unauthorized execution of code on remote systems?

    A. TACACS
    B. S-RPC
    C. RADIUS
    D. CHAP

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only ISC exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CISSP-ISSAP exam preparations and ISC certification application, do not hesitate to visit our Vcedump.com to find your solutions here.