ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 201:

  In which of the following phases of the SDLC does the software and other components of the system faithfully incorporate the design specifications and provide proper documentation and training?

  A. Initiation
  B. Programming and training
  C. Design
  D. Evaluation and acceptance
  B. Programming and training

• Question 202:

  You work as a Project Manager for Tech Perfect Inc. You are creating a document which emphasizes the formal study of what your organization is doing currently and where it will be in the future. Which of the following analysis will help you in accomplishing the task?

  A. Cost-benefit analysis
  B. Gap analysis
  C. Requirement analysis
  D. Vulnerability analysis
  B. Gap analysis

• Question 203:

  In which of the following cryptographic attacking techniques does an attacker obtain encrypted messages that have been encrypted using the same encryption algorithm?

  A. Chosen plaintext attack
  B. Ciphertext only attack
  C. Chosen ciphertext attack
  D. Known plaintext attack
  B. Ciphertext only attack

• Question 204:

  Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the data will be sent across a public network. For security reasons, the management wants the data sent through the Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection. Which communication protocol will Peter use to accomplish the task?

  A. IP Security (IPSec)
  B. Microsoft Point-to-Point Encryption (MPPE)
  C. Pretty Good Privacy (PGP)
  D. Data Encryption Standard (DES)
  A. IP Security (IPSec)

• Question 205:

  Which of the following two components does Kerberos Key Distribution Center (KDC) consist of? Each correct answer represents a complete solution. Choose two.

  A. Data service
  B. Ticket-granting service
  C. Account service
  D. Authentication service
  B. Ticket-granting service
  D. Authentication service

• Question 206:

  You work as a Network Administrator for company Inc. The company has deployed an ASA at the network perimeter. Which of the following types of firewall will you use to create two different communications, one between the client and the firewall, and the other between the firewall and the end server?

  A. Stateful firewall
  B. Endian firewall
  C. Packet filter firewall
  D. Proxy-based firewall
  D. Proxy-based firewall

• Question 207:

  Which of the following encryption methods comes under symmetric encryption algorithm? Each correct answer represents a complete solution. Choose three.

  A. DES
  B. Blowfish
  C. RC5
  D. Diffie-Hellman
  A. DES
  B. Blowfish
  C. RC5

• Question 208:

  You work as a Security Manager for Tech Perfect Inc. A number of people are involved with you in the DRP efforts. You have maintained several different types of plan documents, intended for different audiences. Which of the following documents will be useful for you as well as public relations personnel who require a non-technical perspective on the entire organization's disaster recovery efforts?

  A. Technical guide
  B. Executive summary
  C. Checklist
  D. Department-specific plan
  B. Executive summary

• Question 209:

  You work as a Network Consultant. A company named Tech Perfect Inc. hires you for security reasons. The manager of the company tells you to establish connectivity between clients and servers of the network which prevents eavesdropping and tampering of data on the Internet. Which of the following will you configure on the network to perform the given task?

  A. WEP
  B. IPsec
  C. VPN
  D. SSL
  D. SSL

• Question 210:

  You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and easy recovery of data. Which of the following options will you choose to accomplish this?

  A. Take a full backup daily and use six-tape rotation.
  B. Take a full backup on Monday and a differential backup on each of the following weekdays. Keep Monday's backup offsite.
  C. Take a full backup daily with the previous night's tape taken offsite.
  D. Take a full backup on alternate days and keep rotating the tapes.
  E. Take a full backup on Monday and an incremental backup on each of the following weekdays. Keep Monday's backup offsite.
  F. Take a full backup daily with one tape taken offsite weekly.
  C. Take a full backup daily with the previous night's tape taken offsite.