ISC SSCP Online Practice Questions and Exam Preparation

ISC SSCP Online Questions & Answers

• Question 1031:

  The IP header contains a protocol field. If this field contains the value of 1, what type of data is contained within the IP datagram?

  A. TCP.
  B. ICMP.
  C. UDP.
  D. IGMP.
  B. ICMP.

  ---

  If the protocol field has a value of 1 then it would indicate it was ICMP.

  The following answers are incorrect:

  TCP. Is incorrect because the value for a TCP protocol would be 6.

  UDP. Is incorrect because the value for an UDP protocol would be 17.

  IGMP. Is incorrect because the value for an IGMP protocol would be 2.

• Question 1032:

  The IP header contains a protocol field. If this field contains the value of 17, what type of data is contained within the ip datagram?

  A. TCP.
  B. ICMP.
  C. UDP.
  D. IGMP.
  C. UDP.

  ---

  If the protocol field has a value of 17 then it would indicate it was UDP.

  The following answers are incorrect answers:

  TCP. Is incorrect because the value for a TCP protocol would be 6.

  ICMP. Is incorrect because the value for an ICMP protocol would be 1. IGMP. Is incorrect because the value for an IGMP protocol would be 2.

  The protocol field of the IP packet dictates what protocol the IP packet is using.

  TCP=6, ICMP=1, UDP=17, IGMP=2

  Reference(s) used for this question:

  SANS http://www.sans.org/resources/tcpip.pdf?ref=3871

• Question 1033:

  Why is traffic across a packet switched network difficult to monitor?

  A. Packets are link encrypted by the carrier
  B. Government regulations forbids monitoring
  C. Packets can take multiple paths when transmitted
  D. The network factor is too high
  C. Packets can take multiple paths when transmitted

  ---

  With a packet switched network, packets are difficult to monitor because they can be transmitted using different paths. A packet-switched network is a digital communications network that groups all transmitted data, irrespective of content, type, or structure into suitably sized blocks, called packets. The network over which packets are transmitted is a shared network which routes each packet independently from all others and allocates transmission resources as needed. The principal goals of packet switching are to optimize utilization of available link capacity, minimize response times and increase the robustness of communication. When traversing network adapters, switches and other network nodes, packets are buffered and queued, resulting in variable delay and throughput, depending on the traffic load in the network. Most modern Wide Area Network (WAN) protocols, including TCP/IP, X.25, and Frame Relay, are based on packet-switching technologies. In contrast, normal telephone service is based on a circuit- switching technology, in which a dedicated line is allocated for transmission between two parties. Circuit- switching is ideal when data must be transmitted quickly and must arrive in the same order in which it's sent. This is the case with most real-time data, such as live audio and video. Packet switching is more efficient and robust for data that can withstand some delays in transmission, such as e-mail messages and Web pages. All of the other answer are wrong Reference(s) used for this question: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation. and https://en.wikipedia.org/wiki/Packet-switched_network and http://www.webopedia.com/TERM/P/packet_switching.html

• Question 1034:

  Which encryption algorithm is BEST suited for communication with handheld wireless devices?

  A. ECC (Elliptic Curve Cryptosystem)
  B. RSA
  C. SHA
  D. RC4
  A. ECC (Elliptic Curve Cryptosystem)

  ---

  As it provides much of the same functionality that RSA provides: digital signatures, secure key distribution,and encryption. One differing factor is ECC's efficiency. ECC is more efficient that RSA and any other asymmetric algorithm.

  The following answers are incorrect because :

  RSA is incorrect as it is less efficient than ECC to be used in handheld devices.

  SHA is also incorrect as it is a hashing algorithm.

  RC4 is also incorrect as it is a symmetric algorithm.

  Reference : Shon Harris AIO v3 , Chapter-8 : Cryptography , Page : 631 , 638.

• Question 1035:

  Which of the following are the steps usually followed in the development of documents such as security policy, standards and procedures?

  A. design, development, publication, coding, and testing.
  B. design, evaluation, approval, publication, and implementation.
  C. initiation, evaluation, development, approval, publication, implementation, and maintenance.
  D. feasibility, development, approval, implementation, and integration.
  C. initiation, evaluation, development, approval, publication, implementation, and maintenance.

  ---

  The common steps used the the development of security policy are initiation of the project, evaluation, development, approval, publication, implementation, and maintenance. The other choices listed are the phases of the software development life cycle and not the step used to develop ducuments such as Policies, Standards, etc...

  Reference: TIPTON, Harold F. and KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 3, 2002, Auerbach Publications.

• Question 1036:

  Which of the following protocols operates at the session layer (layer 5)?

  A. RPC
  B. IGMP
  C. LPD
  D. SPX
  A. RPC

  ---

  Remotre Procedure Call (RPC) is the only of the above choices to operate at the session layer (layer 5).

  All of the other answers were wrong.

  LPD operates at layer 7

  SPX operates at layer 4

  IGMP operates at layer 3.

  Reference:

  WALLHOFF, John, CBK#2 Telecommunications and Network Security (CISSP Study Guide), April 2002 (page 1).

• Question 1037:

  Access control is the collection of mechanisms that permits managers of a system to exercise a directing or restraining influence over the behavior, use, and content of a system. It does not permit management to:

  A. specify what users can do
  B. specify which resources they can access
  C. specify how to restrain hackers
  D. specify what operations they can perform on a system.
  C. specify how to restrain hackers

  ---

  Access control is the collection of mechanisms that permits managers of a system to exercise a directing or restraining influence over the behavior, use, and content of a system. It permits management to specify what users can do, which resources they can access, and what operations they can perform on a system. Specifying HOW to restrain hackers is not directly linked to access control.

  Source: DUPUIS, Clement, Access Control Systems and Methodology, Version 1, May 2002, CISSP Open Study Group Study Guide for Domain 1, Page 12.

• Question 1038:

  Which of the following are required for Life-Cycle Assurance?

  A. System Architecture and Design specification.
  B. Security Testing and Covert Channel Analysis.
  C. Security Testing and Trusted distribution.
  D. Configuration Management and Trusted Facility Management.
  C. Security Testing and Trusted distribution.

  ---

  Security testing and trusted distribution are required for Life-Cycle Assurance.

  The following answers are incorrect:

  System Architecture and Design specification. Is incorrect because System Architecture is not requried for Life-Cycle Assurance.

  Security Testing and Covert Channel Analysis. Is incorrect because Covert Channel Analysis is not requried for Life-Cycle Assurance.

  Configuration Management and Trusted Facility Management. Is incorrect because Trusted Facility Management. is not requried for Life-Cycle Assurance.

• Question 1039:

  Which of the following exemplifies proper separation of duties?

  A. Operators are not permitted modify the system time.
  B. Programmers are permitted to use the system console.
  C. Console operators are permitted to mount tapes and disks.
  D. Tape operators are permitted to use the system console.
  A. Operators are not permitted modify the system time.

  ---

  This is an example of Separation of Duties because operators are prevented from modifying the system time which could lead to fraud. Tasks of this nature should be performed by they system administrators.

  AIO defines Separation of Duties as a security principle that splits up a critical task among two or more individuals to ensure that one person cannot complete a risky task by himself.

  The following answers are incorrect:

  Programmers are permitted to use the system console. Is incorrect because programmers should not be permitted to use the system console, this task should be performed by operators. Allowing programmers access to the system console

  could allow fraud to occur so this is not an example of Separation of Duties..

  Console operators are permitted to mount tapes and disks. Is incorrect because operators should be able to mount tapes and disks so this is not an example of Separation of Duties. Tape operators are permitted to use the system console. Is

  incorrect because operators should be able to use the system console so this is not an example of Separation of Duties.

  References:

  OIG CBK Access Control (page 98 - 101)

  AIOv3 Access Control (page 182)

• Question 1040:

  In Synchronous dynamic password tokens: A. The token generates a new password value at fixed time intervals (this password could be based on the time of day encrypted with a secret key).

  B. The token generates a new non-unique password value at fixed time intervals (this password could be based on the time of day encrypted with a secret key).
  C. The unique password is not entered into a system or workstation along with an owner's PIN.
  D. The authentication entity in a system or workstation knows an owner's secret key and PIN, and the entity verifies that the entered password is invalid and that it was entered during the invalid time window.
  A

  ---

  Synchronous dynamic password tokens:

  -

  The token generates a new password value at fixed time intervals (this password could be the time of day encrypted with a secret key).

  -

  the unique password is entered into a system or workstation along with an owner's PIN.

  -

  The authentication entity in a system or workstation knows an owner's secret key and PIN, and the entity verifies that the entered password is valid and that it was entered during the valid time window. Source: KRUTZ, Ronald L. and VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley and Sons, Page 37.