ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 71:

  Which of the following statements about Discretionary Access Control List (DACL) is true?

  A. It specifies whether an audit activity should be performed when an object attempts to access a resource.
  B. It is a unique number that identifies a user, group, and computer account.
  C. It is a list containing user accounts, groups, and computers that are allowed (or denied) access to the object.
  D. It is a rule list containing access control entries.
  C. It is a list containing user accounts, groups, and computers that are allowed (or denied) access to the object.

• Question 72:

  Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

  A. Structured walk-through test
  B. Simulation test
  C. Full-interruption test
  D. Parallel test
  C. Full-interruption test

• Question 73:

  Which of the following layers of the OSI model corresponds to the Host-to-Host layer of the TCP/IP model?

  A. The transport layer
  B. The presentation layer
  C. The session layer
  D. The application layer
  A. The transport layer

• Question 74:

  You are responsible for security at a defense contracting firm. You are evaluating various possible encryption algorithms to use. One of the algorithms you are examining is not integer based, uses shorter keys, and is public key based. What type of algorithm is this?

  A. Symmetric
  B. None - all encryptions are integer based.
  C. Elliptic Curve
  D. RSA
  C. Elliptic Curve

• Question 75:

  Which of the following encryption modes has the property to allow many error correcting codes to function normally even when applied before encryption?

  A. OFB mode
  B. CFB mode
  C. CBC mode
  D. PCBC mode
  A. OFB mode

• Question 76:

  You are the administrator for YupNo.com. You want to increase and enhance the security of your computers and simplify deployment. You are especially concerned with any portable computers that are used by remote employees. What can you use to increase security, while still allowing your users to perform critical tasks?

  A. BitLocker
  B. Smart Cards
  C. Service Accounts
  D. AppLocker
  B. Smart Cards

• Question 77:

  Fill in the blank with the appropriate security device. ___________ is a device that contains a physical mechanism or electronic sensor that quantifies motion that can be either integrated with or connected to other devices that alert the user of the presence of a moving object within the field of view.

  Motion detector

• Question 78:

  Which of the following protects against unauthorized access to confidential information via encryption and works at the network layer?

  A. Firewall
  B. NAT
  C. MAC address
  D. IPSec
  D. IPSec

• Question 79:

  Which of the following protocols should a Chief Security Officer configure in the network of his company to protect sessionless datagram protocols?

  A. SWIPE
  B. S/MIME
  C. SKIP
  D. SLIP
  C. SKIP

• Question 80:

  Which of the following processes is used by remote users to make a secure connection to internal resources after establishing an Internet connection?

  A. Spoofing
  B. Packet sniffing
  C. Tunneling
  D. Packet filtering
  C. Tunneling