CISSP-ISSAP Practice Questions

(ISC)2 CISSP-ISSAP Exam You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to...

Which of the following are the centralized administration technologies? Each correct answer represents a complete solution. Choose all that apply.

You are implementing some security services in an organization, such as smart cards, biometrics, access control lists, firewalls, intrusion detection systems, and clipping levels....

You work as a Network Administrator for Net World Inc. You are required to configure a VLAN for the company. Which of the following devices will you use to physically connect the c...

Which of the following protocols work at the Network layer of the OSI model? (ISC)2 CISSP-ISSAP Exam

Which of the following are used to suppress paper or wood fires? Each correct answer represents a complete solution. Choose two.

Mark works as a Network Administrator for NetTech Inc. He wants to connect the company's headquarter and its regional offices using a WAN technology. For this, he uses packet-switc...

Fill in the blank with the appropriate security method. ____________ is a system, which enables an authority to control access to areas and resources in a given physical facility,...

In which of the following types of tests are the disaster recovery checklists distributed to the members of disaster recovery team and asked to review the assigned checklist?

Which of the following heights of fence deters only casual trespassers?

In which of the following cryptographic attacking techniques does an attacker obtain encrypted messages that have been encrypted using the same encryption algorithm?

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

You work as a Chief Security Officer for Tech Perfect Inc. The company has a TCP/IP based network. You want to use a firewall that can track the state of active connections of the...

Which of the following uses a Key Distribution Center (KDC) to authenticate a principle?

Which of the following is a network service that stores and organizes information about a network users and network resources and that allows administrators to manage users' access...

You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and e...

Which of the following are types of asymmetric encryption algorithms? Each correct answer represents a complete solution. Choose two.

Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution...

You are the Network Administrator at a large company. Your company has a lot of contractors and other outside parties that come in and out of the building. For this reason you are...

Which of the following LAN protocols use token passing for exchanging signals among various stations on the network? Each correct answer represents a complete solution. Choose two.

Which of the following components come under the network layer of the OSI model? Each correct answer represents a complete solution. Choose two.

Which of the following are examples of physical controls used to prevent unauthorized access to sensitive materials?

At which of the following layers of the Open System Interconnection (OSI) model the Internet Control Message Protocol (ICMP) and the Internet Group Management Protocol (IGMP) work?

Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?

Which of the following statements about Discretionary Access Control List (DACL) is true?

(ISC)2 CISSP-ISSAP Exam Which of the following methods will allow data to be sent on the Internet in a secure format?

Which of the following are used to suppress electrical and computer fires? Each correct answer represents a complete solution. Choose two.

Which of the following are natural environmental threats that an organization faces? Each correct answer represents a complete solution. Choose two.

Which of the following keys are included in a certificate revocation list (CRL) of a public key infrastructure (PKI)? Each correct answer represents a complete solution. Choose two...

Which of the following SDLC phases consists of the given security controls: Misuse Case Modeling Security Design and Architecture Review Threat and Risk Modeling Security Requireme...

A company named Money Builders Inc., hires you to provide consultancy for setting up their Windows network. The company's server room will be in a highly secured environment. You a...

You are the Security Consultant and have been contacted by a client regarding their encryption and hashing algorithms. Their in-house network administrator tells you that their cur...

You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to kee...

Shoulder surfing is a type of in-person attack in which the attacker gathers information about the premises of an organization. This attack is often performed by looking surreptiti...

Which of the following plans is designed to protect critical business processes from natural or man-made failures or disasters and the resultant loss of capital due to the unavaila...

Which of the following processes is used by remote users to make a secure connection to internal resources after establishing an Internet connection?

You work as a Security Manager for Tech Perfect Inc. A number of people are involved with you in the DRP efforts. You have maintained several different types of plan documents, int...

Which of the following protects against unauthorized access to confidential information via encryption and works at the network layer? (ISC)2 CISSP-ISSAP Exam

Which of the following statements are true about Public-key cryptography? Each correct answer represents a complete solution. Choose two.

Which of the following backup types backs up files that have been added and all data that have been modified since the most recent backup was performed?

You are responsible for security at a hospital. Since many computers are accessed by multiple employees 24 hours a day, 7 days a week, controlling physical access to computers is v...

In which of the following cryptographic attacking techniques does the attacker pick up the information to be encrypted and take a copy of it with the encrypted data?

Which of the following are the goals of a public key infrastructure (PKI)? Each correct answer represents a part of the solution. Choose all that apply.

Which of the following encryption modes has the property to allow many error correcting codes to function normally even when applied before encryption?

In which of the following phases of the SDLC does the software and other components of the system faithfully incorporate the design specifications and provide proper documentation...

You are the administrator for YupNo.com. You want to increase and enhance the security of your computers and simplify deployment. You are especially concerned with any portable com...

You have just set up a wireless network for customers at a coffee shop. Which of the following are good security measures to implement? Each correct answer represents a complete so...

Which of the following protocols provides the highest level of VPN security with a VPN connection that uses the L2TP protocol?

Which of the following encryption methods comes under symmetric encryption algorithm? Each correct answer represents a complete solution. Choose three.

Which of the following uses public key cryptography to encrypt the contents of files?