ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 221:

  Which of the following are the goals of a public key infrastructure (PKI)? Each correct answer represents a part of the solution. Choose all that apply.

  A. Authenticity
  B. Globalization
  C. Mobility
  D. Integrity
  E. Confidentiality
  F. Nonrepudiation
  A. Authenticity
  D. Integrity
  E. Confidentiality
  F. Nonrepudiation

• Question 222:

  An organization has implemented a hierarchical-based concept of privilege management in which administrators have full access, HR managers have less permission than the administrators, and data entry operators have no access to resources. Which of the following access control models is implemented in the organization?

  A. Role-based access control (RBAC)
  B. Network-based access control (NBAC)
  C. Mandatory Access Control (MAC)
  D. Discretionary access control (DAC)
  A. Role-based access control (RBAC)

• Question 223:

  Which of the following layers of the OSI model provides non-repudiation services?

  A. The application layer
  B. The data-link layer
  C. The presentation layer
  D. The physical layer
  A. The application layer

• Question 224:

  Which of the following devices is a least expensive power protection device for filtering the electrical stream to control power surges, noise, power sags, and power spikes?

  A. Line Conditioner
  B. Surge Suppressor
  C. Uninterrupted Power Supply (UPS)
  D. Expansion Bus
  C. Uninterrupted Power Supply (UPS)

• Question 225:

  You are the Network Administrator for a small business. You need a widely used, but highly secure hashing algorithm. Which of the following should you choose?

  A. AES
  B. SHA
  C. EAP
  D. CRC32
  B. SHA

• Question 226:

  The service-oriented modeling framework (SOMF) provides a common modeling notation to address alignment between business and IT organizations. Which of the following principles does the SOMF concentrate on? Each correct answer represents a part of the solution. Choose all that apply.

  A. Disaster recovery planning
  B. SOA value proposition
  C. Software assets reuse
  D. Architectural components abstraction
  E. Business traceability
  B. SOA value proposition
  C. Software assets reuse
  D. Architectural components abstraction
  E. Business traceability

• Question 227:

  Which of the following protocols supports encapsulation of encrypted packets in secure wrappers that can be transmitted over a TCP/IP connection?

  A. PPTP
  B. UDP
  C. IPSec
  D. PAP
  A. PPTP

• Question 228:

  Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.

  A. Dictionary attack
  B. Mail bombing
  C. Spoofing
  D. Brute force attack
  B. Mail bombing
  C. Spoofing
  D. Brute force attack

• Question 229:

  Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?

  A. Twofish
  B. Digital certificates
  C. Public key
  D. RSA
  B. Digital certificates
  C. Public key

• Question 230:

  An access control secures the confidentiality, integrity, and availability of the information and data of an organization. In which of the following categories can you deploy the access control? Each correct answer represents a part of the solution. Choose all that apply.

  A. Detective access control
  B. Corrective access control
  C. Administrative access control
  D. Preventive access control
  A. Detective access control
  B. Corrective access control
  D. Preventive access control