ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 151:

  An organization is seeking to implement a hot site and wants to maintain a live database server at the backup site. Which of the following solutions will be the best for the organization?

  A. Electronic vaulting
  B. Remote journaling
  C. Remote mirroring
  D. Transaction logging
  C. Remote mirroring

• Question 152:

  Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of information systems resources?

  A. Disaster recovery plan
  B. Contingency plan
  C. Business Continuity plan
  D. Continuity of Operations plan
  A. Disaster recovery plan

• Question 153:

  Kerberos is a computer network authentication protocol that allows individuals communicating over a non- secure network to prove their identity to one another in a secure manner. Which of the following statements are true about the Kerberos authentication scheme? Each correct answer represents a complete solution. Choose all that apply.

  A. Kerberos requires continuous availability of a central server.
  B. Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.
  C. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
  D. Kerberos requires the clocks of the involved hosts to be synchronized.
  A. Kerberos requires continuous availability of a central server.
  B. Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.
  D. Kerberos requires the clocks of the involved hosts to be synchronized.

• Question 154:

  Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.

  A. TIS authentication
  B. Rhosts (rsh-style) authentication
  C. Kerberos authentication
  D. Password-based authentication
  A. TIS authentication
  B. Rhosts (rsh-style) authentication
  C. Kerberos authentication

• Question 155:

  You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following tasks:

  Develop a risk-driven enterprise information security architecture. Deliver security infrastructure solutions that support critical business initiatives. Which of the following methods will you use to accomplish these tasks?

  A. Service-oriented architecture
  B. Sherwood Applied Business Security Architecture
  C. Service-oriented modeling framework
  D. Service-oriented modeling and architecture
  B. Sherwood Applied Business Security Architecture

• Question 156:

  Which of the following encryption methods does the SSL protocol use in order to provide communication privacy, authentication, and message integrity? Each correct answer represents a part of the solution. Choose two.

  A. Public key
  B. IPsec
  C. MS-CHAP
  D. Symmetric
  A. Public key
  D. Symmetric

• Question 157:

  Which of the following is the most secure method of authentication?

  A. Smart card
  B. Anonymous
  C. Username and password
  D. Biometrics
  D. Biometrics

• Question 158:

  Which of the following components come under the network layer of the OSI model? Each correct answer represents a complete solution. Choose two.

  A. Routers
  B. MAC addresses
  C. Firewalls
  D. Hub
  A. Routers
  C. Firewalls

• Question 159:

  What are the benefits of using AAA security service in a network? Each correct answer represents a part of the solution. Choose all that apply.

  A. It provides scalability.
  B. It supports a single backup system.
  C. It increases flexibility and control of access configuration.
  D. It supports RADIUS, TACACS+, and Kerberos authentication methods.
  A. It provides scalability.
  C. It increases flexibility and control of access configuration.
  D. It supports RADIUS, TACACS+, and Kerberos authentication methods.

• Question 160:

  Which of the following protocols uses the Internet key Exchange (IKE) protocol to set up security associations (SA)?

  A. IPSec
  B. L2TP
  C. LEAP
  D. ISAKMP
  D. ISAKMP