CISSP-ISSAP Practice Questions

You are the Security Consultant advising a company on security methods. This is a highly secure location that deals with sensitive national defense related data. They are very conc...

You want to implement a network topology that provides the best balance for regional topologies in terms of the number of virtual circuits, redundancy, and performance while establ...

Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each correct answer represents a complete solution. Choose two.

(ISC)2 CISSP-ISSAP Exam Which of the following terms refers to a mechanism which proves that the sender really sent a particular message?

Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement two-factor authentication for the employees to access their networks. He has told him...

Maria works as a Network Security Officer for Gentech Inc. She wants to encrypt her network traffic. The specific requirement for the encryption algorithm is that it must be a symm...

Which of the following protocols uses public-key cryptography to authenticate the remote computer?

Which of the following cryptographic system services ensures that information will not be (ISC)2 CISSP-ISSAP Exam disclosed to any unauthorized person on a local network?

Which of the following are the examples of technical controls? Each correct answer represents a complete solution. Choose three.

Which of the following tenets does the CIA triad provide for which security practices are measured? Each correct answer represents a part of the solution. Choose all that apply.

A helpdesk technician received a phone call from an administrator at a remote branch office. The administrator claimed to have forgotten the password for the root account on UNIX s...

You work as a Network Administrator of a TCP/IP network. You are having DNS resolution problem. Which of the following utilities will you use to diagnose the problem? (ISC)2 CISSP-...

The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this...

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following tasks: Develop a risk-driven enterprise information security architecture. Delive...

A network is configured on a Bus topology. Which of the following conditions could cause a network failure? Each correct answer represents a complete solution. Choose all that appl...

Which of the following is an input device that is used for controlling machines such as cranes, trucks, underwater unmanned vehicles, wheelchairs, surveillance cameras, and zero tu...

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

A digital signature is a type of public key cryptography. Which of the following statements are true about digital signatures? Each correct answer represents a complete solution. C...

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

You work as an Incident handling manager for Orangesect Inc. You detect a virus attack incident in the network of your company. You develop a signature based on the characteristics...

In which of the following access control models can a user not grant permissions to other users to see a copy of an object marked as secret that he has received, unless they have t...

Which of the following protocols provides connectionless integrity and data origin authentication of IP packets?

The network you administer allows owners of objects to manage the access to those objects via access control lists. This is an example of what type of access control?

Which of the following processes is used to identify relationships between mission critical applications, processes, and operations and all supporting elements?

Which of the following devices is a least expensive power protection device for filtering the electrical stream to control power surges, noise, power sags, and power spikes?

You work as a Project Manager for Tech Perfect Inc. You are creating a document which emphasizes the formal study of what your organization is doing currently and where it will be...

SSH is a network protocol that allows data to be exchanged between two networks using a secure channel. Which of the following encryption algorithms can be used by the SSH protocol...

Sam is creating an e-commerce site. He wants a simple security solution that does not require each customer to have an individual key. Which of the following encryption methods wil...

(ISC)2 CISSP-ISSAP Exam Computer networks and the Internet are the prime mode of Information transfer today. Which of the following is a technique used for modifying messages, prov...

You work as a Network Administrator for Blue Bell Inc. The company has a TCP-based network. The company has two offices in different cities. The company wants to connect the two of...

John works as a Network Administrator for NetPerfect Inc. The company has a Windows-based network. John has been assigned a project to build a network for the sales department of t...

Which of the following encryption algorithms are based on block ciphers?

(ISC)2 CISSP-ISSAP Exam Adam works as a Network Administrator. He discovers that the wireless AP transmits 128 bytes of plaintext, and the station responds by encrypting the plaint...

The OSI model is the most common networking model used in the industry. Applications, network functions, and protocols are typically referenced using one or more of the seven OSI l...

Which of the following is the technology of indoor or automotive environmental comfort?

Which of the following protocols provides certificate-based authentication for virtual private networks (VPNs)?

Which of the following types of ciphers are included in the historical ciphers? Each correct answer represents a complete solution. Choose two.

Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.

Which of the following authentication protocols sends a user certificate inside an encrypted tunnel?

You are calculating the Annualized Loss Expectancy (ALE) using the following formula: ALE=AV * EF * ARO What information does the AV (Asset Value) convey?

browser's address bar, you are able to access the site. But, you are unable to access the site (ISC)2 CISSP-ISSAP Exam

In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need...

Which of the following processes identifies the threats that can impact the business continuity of operations?

What are the benefits of using AAA security service in a network? Each correct answer represents a part of the solution. Choose all that apply.

In which of the following SDLC phases are the software and other components of the system faithfully incorporated into the design specifications?

Which of the following life cycle modeling activities establishes service relationships and message exchange paths?

Which of the following authentication methods support mutual authentication? Each correct answer represents a complete solution. Choose two.

Which of the following keys is derived from a preshared key and Extensible Authentication Protocol (EAP)?

Which of the following schemes is used by the Kerberos authentication?