ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 51:

  In which of the following SDLC phases are the software and other components of the system faithfully incorporated into the design specifications?

  A. Programming and training
  B. Evaluation and acceptance
  C. Definition
  D. Initiation
  A. Programming and training

• Question 52:

  Which of the following security protocols provides confidentiality, integrity, and authentication of network traffic with end-to-end and intermediate-hop security?

  A. IPSec
  B. SET
  C. SWIPE
  D. SKIP
  C. SWIPE

• Question 53:

  Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

  A. Hacking
  B. Packet filtering
  C. Web caching
  D. Spoofing
  B. Packet filtering

• Question 54:

  Which of the following refers to a location away from the computer center where document copies and backup media are kept?

  A. Storage Area network
  B. Off-site storage
  C. On-site storage
  D. Network attached storage
  B. Off-site storage

• Question 55:

  Which of the following are the initial steps required to perform a risk analysis process? Each correct answer represents a part of the solution. Choose three.

  A. Estimate the potential losses to assets by determining their value.
  B. Establish the threats likelihood and regularity.
  C. Valuations of the critical assets in hard costs.
  D. Evaluate potential threats to the assets.
  A. Estimate the potential losses to assets by determining their value.
  B. Establish the threats likelihood and regularity.
  D. Evaluate potential threats to the assets.

• Question 56:

  Which of the following backup types backs up files that have been added and all data that have been modified since the most recent backup was performed?

  A. Differential backup
  B. Incremental backup
  C. Daily backup
  D. Full backup
  B. Incremental backup

• Question 57:

  Which of the following types of attacks cannot be prevented by technical measures only?

  A. Social engineering
  B. Brute force
  C. Smurf DoS
  D. Ping flood attack
  A. Social engineering

• Question 58:

  You are the Network Administrator for a college. You watch a large number of people (some not even students) going in and out of areas with campus computers (libraries, computer labs, etc.). You have had a problem with laptops being stolen. What is the most cost effective method to prevent this?

  A. Smart card access to all areas with computers.
  B. Use laptop locks.
  C. Video surveillance on all areas with computers.
  D. Appoint a security guard.
  B. Use laptop locks.

• Question 59:

  In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?

  A. Gap analysis
  B. Requirement analysis
  C. Cost-benefit analysis
  D. Vulnerability analysis
  A. Gap analysis

• Question 60:

  John works as an Ethical Hacker for company Inc. He wants to find out the ports that are open in company's server using a port scanner. However, he does not want to establish a full TCP connection. Which of the following scanning techniques will he use to accomplish this task?

  A. TCP FIN
  B. Xmas tree
  C. TCP SYN/ACK
  D. TCP SYN
  D. TCP SYN