ISC SSCP Online Practice Questions and Exam Preparation

ISC SSCP Online Questions & Answers

• Question 341:

  Contracts and agreements are often times unenforceable or hard to enforce in which of the following alternate facility recovery agreement?

  A. hot site
  B. warm site
  C. cold site
  D. reciprocal agreement
  D. reciprocal agreement

  ---

  A reciprocal agreement is where two or more organizations mutually agree to provide facilities to the other if a disaster occurs. The organizations must have similiar hardware and software configurations.

  Reciprocal agreements are often not legally binding.

  Reciprocal agreements are not contracts and cannot be enforced. You cannot force someone you have such an agreement with to provide processing to you. Government regulators do not accept reciprocal agreements as valid disaster

  recovery sites.

  Cold sites are empty computer rooms consisting only of environmental systems, such as air conditioning and raised floors, etc. They do not meet the requirements of most regulators and boards of directors that the disaster plan be tested at

  least annually.

  Time Brokers promise to deliver processing time on other systems. They charge a fee, but cannot guaranty that processing will always be available, especially in areas that experienced multiple disasters.

  With the exception of providing your own hot site, commercial hot sites provide the greatest protection. Most will allow you up to six weeks to restore your sites if you declare a disaster. They also permit an annual amount of time to test the

  Disaster Plan.

  References:

  OIG CBK Business Continuity and Disaster Recovery Planning (pages 368 - 369)

  The following answers are incorrect:

  hot site. Is incorrect because you have a contract in place stating what services are to be provided.

  warm site. Is incorrect because you have a contract in place stating what services are to be provided.

  cold site. Is incorrect because you have a contract in place stating what services are to be provided.

• Question 342:

  The computations involved in selecting keys and in enciphering data are complex, and are not practical for manual use. However, using mathematical properties of modular arithmetic and a method known as "_________________," RSA is quite feasible for computer use.

  A. computing in Galois fields
  B. computing in Gladden fields
  C. computing in Gallipoli fields
  D. computing in Galbraith fields
  A. computing in Galois fields

  ---

  The computations involved in selecting keys and in enciphering data are complex, and are not practical for manual use. However, using mathematical properties of modular arithmetic and a method known as computing in Galois fields, RSA is quite feasible for computer use.

  Source: FITES, Philip E., KRATZ, Martin P., Information Systems Security: A Practitioner's Reference, 1993, Van Nostrand Reinhold, page 44.

• Question 343:

  Why are coaxial cables called "coaxial"?

  A. it includes two physical channels that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis.
  B. it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis
  C. it includes two physical channels that carries the signal surrounded (after a layer of insulation) by another two concentric physical channels, both running along the same axis.
  D. it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running perpendicular and along the different axis
  B. it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis

  ---

  Coaxial cable is called "coaxial" because it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis.

  The outer channel serves as a ground. Many of these cables or pairs of coaxial tubes can be placed in a single outer sheathing and, with repeaters, can carry information for a great distance.

  Source: STEINER, Kurt, Telecommunications and Network Security, Version 1, May 2002, CISSP Open Study Group (Domain Leader: skottikus), Page 14.

• Question 344:

  What is the main characteristic of a multi-homed host?

  A. It is placed between two routers or firewalls.
  B. It allows IP routing.
  C. It has multiple network interfaces, each connected to separate networks.
  D. It operates at multiple layers.
  C. It has multiple network interfaces, each connected to separate networks.

  ---

  The main characteristic of a multi-homed host is that is has multiple network interfaces, each connected to logically and physically separate networks. IP routing should be disabled to prevent the firewall from routing packets directly from one interface to the other.

  Source: FERREL, Robert G, Questions and Answers for the CISSP Exam, domain 2 (derived from the Information Security Management Handbook, 4th Ed., by Tipton and Krause).

• Question 345:

  Guards are appropriate whenever the function required by the security program involves which of the following?

  A. The use of discriminating judgment
  B. The use of physical force
  C. The operation of access control devices
  D. The need to detect unauthorized access
  A. The use of discriminating judgment

  ---

  The Answer: The use of discriminating judgment, a guard can make the determinations that hardware or other automated security devices cannot make due to its ability to adjust to rapidly changing conditions, to learn and alter recognizable

  patterns, and to respond to various conditions in the environment. Guards are better at making value decisions at times of incidents. They are appropriate whenever immediate, discriminating judgment is required by the security entity.

  The following answers are incorrect:

  The use of physical force This is not the best answer. A guard provides discriminating judgment, and the ability to discern the need for physical force. The operation of access control devices A guard is often uninvolved in the operations of an

  automated access control device such as a biometric reader, a smart lock, mantrap, etc. The need to detect unauthorized access The primary function of a guard is not to detect unauthorized access, but to prevent unauthorized physical

  access attempts and may deter social engineering attempts.

  The following reference(s) were/was used to create this question:

  Source: KRUTZ, Ronald L. and VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley and Sons, 2001, Chapter 10: Physical security (page 339).

  Source: ISC2 Offical Guide to the CBK page 288-289.

• Question 346:

  Which of the following is the most important consideration in locating an alternate computing facility during the development of a disaster recovery plan?

  A. It is unlikely to be affected by the same disaster.
  B. It is close enough to become operational quickly.
  C. It is close enough to serve its users.
  D. It is convenient to airports and hotels.
  A. It is unlikely to be affected by the same disaster.

  ---

  You do not want the alternate or recovery site located in close proximity to the original site because the same event that create the situation in the first place might very well impact that site also.

  From NIST: "The fixed site should be in a geographic area that is unlikely to be negatively affected by the same disaster event (e.g., weather-related impacts or power grid failure) as the organization's primary site.

  The following answers are incorrect:

  It is close enough to become operational quickly. Is incorrect because it is not the best answer. You'd want the alternate site to be close but if it is too close the same event could impact that site as well.

  It is close enough to serve its users. Is incorrect because it is not the best answer. You'd want the alternate site to be close to users if applicable, but if it is too close the same event could impact that site as well It is convenient to airports and

  hotels. Is incorrect because it is not the best answer, it is more important that the same event does not impact the alternate site then convenience.

  References:

  OIG CBK Business Continuity and Disaster Recovery Planning (pages 368 - 369)

  NIST document 800-34 pg 21

• Question 347:

  In a SSL session between a client and a server, who is responsible for generating the master secret that will be used as a seed to generate the symmetric keys that will be used during the session?

  A. Both client and server
  B. The client's browser
  C. The web server
  D. The merchant's Certificate Server
  B. The client's browser

  ---

  Once the merchant server has been authenticated by the browser client, the browser generates a master secret that is to be shared only between the server and client. This secret serves as a seed to generate the session (private) keys. The master secret is then encrypted with the merchant's public key and sent to the server. The fact that the master secret is generated by the client's browser provides the client assurance that the server is not reusing keys that would have been used in a previous session with another client. Source: ANDRESS, Mandy, Exam Cram CISSP, Coriolis, 2001, Chapter 6: Cryptography (page 112). Also: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2001, page 569.

• Question 348:

  Related to information security, the guarantee that the message sent is the message received with the assurance that the message was not intentionally or unintentionally altered is an example of which of the following?

  A. integrity
  B. confidentiality
  C. availability
  D. identity
  A. integrity

  ---

  Integrity is the guarantee that the message sent is the message received, and that the message was not intentionally or unintentionally altered.

  Source: KRUTZ, Ronald L. and VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley and Sons, Page 60.

• Question 349:

  Which of the following is a device that is used to regenerate or replicate the received signals?

  A. Bridge
  B. Router
  C. Repeater
  D. Brouter
  C. Repeater

  ---

  Repeaters offer the simplest form of connectivity. They regenerate received electrical signals at their original strength between cable segments. Bridges are devices used to connect similar or dissimilar LANs together to form an extended LAN. Routers provide packet routing between network segments. Brouter are devices that combine router and bridge functionality.

  Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter

  7: Telecommunications and Network Security (page 397).

• Question 350:

  What refers to legitimate users accessing networked services that would normally be restricted to them?

  A. Spoofing
  B. Piggybacking
  C. Eavesdropping
  D. Logon abuse
  D. Logon abuse

  ---

  Unauthorized access of restricted network services by the circumvention of security access controls is known as logon abuse. This type of abuse refers to users who may be internal to the network but access resources they would not normally be allowed.

  Source: KRUTZ, Ronald L. and VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley and Sons, 2001, Chapter 3: Telecommunications and Network Security (page 74).