ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 171:

  You are responsible for security at a building that has a lot of traffic. There are even a significant number of non-employees coming in and out of the building. You are concerned about being able to find out who is in the building at a particular time. What is the simplest way to accomplish this?

  A. Implement a sign in sheet at the main entrance and route all traffic through there.
  B. Have all people entering the building use smart cards for access.
  C. Implement biometric access.
  D. Implement cameras at all entrances.
  A. Implement a sign in sheet at the main entrance and route all traffic through there.

• Question 172:

  You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?

  A. Warm site
  B. Cold site
  C. Off site
  D. Hot site
  B. Cold site

• Question 173:

  Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

  A. RSTP
  B. SKIP
  C. OCSP
  D. HTTP
  C. OCSP

• Question 174:

  The security controls that are implemented to manage physical security are divided in various groups. Which of the following services are offered by the administrative physical security control group? Each correct answer represents a part of the solution. Choose all that apply.

  A. Construction and selection
  B. Site management
  C. Awareness training
  D. Access control
  E. Intrusion detection
  F. Personnel control
  A. Construction and selection
  B. Site management
  C. Awareness training
  F. Personnel control

• Question 175:

  You are calculating the Annualized Loss Expectancy (ALE) using the following formula: ALE=AV * EF * ARO What information does the AV (Asset Value) convey?

  A. It represents how many times per year a specific threat occurs.
  B. It represents the percentage of loss that an asset experiences if an anticipated threat occurs.
  C. It is expected loss for an asset due to a risk over a one year period.
  D. It represents the total cost of an asset, including the purchase price, recurring maintenance, expenses, and all other costs.
  D. It represents the total cost of an asset, including the purchase price, recurring maintenance, expenses, and all other costs.

• Question 176:

  You work as a Security Manager for Tech Perfect Inc. The management tells you to implement a hashing method in the organization that can resist forgery and is not open to the man-in-the-middle attack. Which of the following methods will you use to accomplish the task?

  A. MD
  B. NTLM
  C. MAC
  D. SHA
  C. MAC

• Question 177:

  Which of the following protocols uses public-key cryptography to authenticate the remote computer?

  A. SSH
  B. Telnet
  C. SCP
  D. SSL
  A. SSH

• Question 178:

  Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.

  A. Synchronous
  B. Secret
  C. Asymmetric
  D. Symmetric
  C. Asymmetric
  D. Symmetric

• Question 179:

  Mark works as a Network Administrator for NetTech Inc. He wants to connect the company's headquarter and its regional offices using a WAN technology. For this, he uses packet-switched connection. Which of the following WAN technologies will Mark use to connect the offices? Each correct answer represents a complete solution. Choose two.

  A. ISDN
  B. X.25
  C. Frame Relay
  D. Leased line
  B. X.25
  C. Frame Relay

• Question 180:

  Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

  A. Risk analysis
  B. OODA loop
  C. Cryptography
  D. Firewall security
  C. Cryptography