ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 81:

  Which of the following is the duration of time and a service level within which a business process must be restored after a disaster in order to avoid unacceptable consequences associated with a break in business continuity?

  A. RCO
  B. RTO
  C. RPO
  D. RTA
  B. RTO

• Question 82:

  Which of the following are used to suppress gasoline and oil fires? Each correct answer represents a complete solution. Choose three.

  A. Water
  B. CO2
  C. Halon
  D. Soda acid
  B. CO2
  C. Halon
  D. Soda acid

• Question 83:

  Which of the following types of attack can be used to break the best physical and logical security mechanism to gain access to a system?

  A. Social engineering attack
  B. Cross site scripting attack
  C. Mail bombing
  D. Password guessing attack
  A. Social engineering attack

• Question 84:

  You work as a Network Administrator for Blue Bell Inc. The company has a TCP-based network. The company has two offices in different cities. The company wants to connect the two offices by using a public network. You decide to configure a virtual private network (VPN) between the offices. Which of the following protocols is used by VPN for tunneling?

  A. L2TP
  B. HTTPS
  C. SSL
  D. IPSec
  A. L2TP

• Question 85:

  You are implementing some security services in an organization, such as smart cards, biometrics, access control lists, firewalls, intrusion detection systems, and clipping levels. Which of the following categories of implementation of the access control includes all these security services?

  A. Administrative access control
  B. Logical access control
  C. Physical access control
  D. Preventive access control
  B. Logical access control

• Question 86:

  You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution? Each correct answer represents a part of the solution. Choose all that apply.

  A. Identification
  B. Eradication
  C. Recovery
  D. Contamination
  E. Preparation
  B. Eradication
  C. Recovery
  D. Contamination

• Question 87:

  Which of the following are the phases of the Certification and Accreditation (CandA) process? Each correct answer represents a complete solution. Choose two.

  A. Detection
  B. Continuous Monitoring
  C. Initiation
  D. Auditing
  B. Continuous Monitoring
  C. Initiation

• Question 88:

  Which of the following protocols provides connectionless integrity and data origin authentication of IP packets?

  A. ESP
  B. AH
  C. IKE
  D. ISAKMP
  B. AH

• Question 89:

  Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market?

  A. Project gap
  B. Product gap
  C. Competitive gap
  D. Usage gap
  D. Usage gap

• Question 90:

  Sonya, a user, reports that she works in an electrically unstable environment where brownouts are a regular occurrence. Which of the following will you tell her to use to protect her computer?

  A. UPS
  B. Multimeter
  C. SMPS
  D. CMOS battery
  A. UPS