CISSP-ISSAP Practice Questions

An access control secures the confidentiality, integrity, and availability of the information and data of an organization. In which of the following categories can you deploy the a...

You are the Network Administrator for a bank. In addition to the usual security issues, you are concerned that your customers could be the victim of phishing attacks that use fake...

You are responsible for security at a defense contracting firm. You are evaluating various possible encryption algorithms to use. One of the algorithms you are examining is not int...

Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the following formulas best describes the Single Loss Expectancy (SLE)?

Which of the following are man-made threats that an organization faces? Each correct answer represents a complete solution. Choose three.

Which of the following methods for identifying appropriate BIA interviewees' includes examining the organizational chart of the enterprise to understand the functional positions?

Which of the following describes the acceptable amount of data loss measured in time?

In which of the following access control models, owner of an object decides who is allowed to access the object and what privileges they have?

Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?

Which of the following encryption algorithms is used by the Clipper chip, which supports the escrowed encryption standard?

Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose three.

An organization has implemented a hierarchical-based concept of privilege management in which administrators have full access, HR managers have less permission than the administrat...

Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an ente...

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

Access control systems enable an authority to control access to areas and resources in a given physical facility or computer-based information system. Which of the following servic...

You work as a Security Manager for Tech Perfect Inc. The management tells you to implement a hashing method in the organization that can resist forgery and is not open to the man-i...

You work as a Network Administrator for company Inc. The company has deployed an ASA at the network perimeter. Which of the following types of firewall will you use to create two d...

You are the Security Administrator for a consulting firm. One of your clients needs to encrypt traffic. However, he has specific requirements for the encryption algorithm. It must...

You work as an administrator for Techraft Inc. Employees of your company create 'products', which are supposed to be given different levels of access. You need to configure a secur...

Which of the following decides access control on an object in the mandatory access control (MAC) environment?

Which of the following protocols should a Chief Security Officer configure in the network of his company to protect sessionless datagram protocols?

Which of the following protocols supports encapsulation of encrypted packets in secure wrappers that can be transmitted over a TCP/IP connection?

You work as a remote support technician. A user named Rick calls you for support. Rick wants to connect his LAN connection to the Internet. Which of the following devices will you...

Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that a...

Fill in the blank with the appropriate encryption system. The ______ encryption system is an asymmetric key encryption algorithm for the public-key cryptography, which is based on...

You are the Network Administrator for a large corporate network. You want to monitor all network traffic on your local network for suspicious activities and receive a notification...

You work as a Network Administrator for McRoberts Inc. You are expanding your company's network. After you have implemented the network, you test the connectivity to a remote host...

In which of the following Person-to-Person social engineering attacks does an attacker pretend to be an outside contractor, delivery person, etc., in order to gain physical access...

You work as a Chief Security Officer for Tech Perfect Inc. The company has an internal room without any window and is totally in darkness. For security reasons, you want to place a...

John works as an Ethical Hacker for company Inc. He wants to find out the ports that are open in company's server using a port scanner. However, he does not want to establish a ful...

Which of the following layers of the OSI model provides non-repudiation services?

You work as a Network Administrator for McNeil Inc. The company has a TCP/IP-based network. Performance of the network is slow because of heavy traffic. A hub is used as a central...

Which of the following categories of access controls is deployed in the organization to prevent all direct contacts with systems?

Which of the following is an infrastructure system that allows the secure exchange of data over an unsecured network?

Which of the following algorithms is found to be suitable for both digital signature and encryption?

Which of the following is responsible for maintaining certificates in a public key infrastructure (PKI)?

Which of the following authentication methods is based on physical appearance of a user?

Which of the following is a correct sequence of different layers of Open System Interconnection (OSI) model?

Which of the following are used to suppress gasoline and oil fires? Each correct answer represents a complete solution. Choose three.

Fill in the blank with the appropriate phrase. The is a simple document that provides a high-level view of the entire organization's disaster recovery efforts. Answer: Executive su...

You work as a Chief Security Officer for Tech Perfect Inc. You have configured IPSec and ISAKMP protocol in the company's network in order to establish a secure communication infra...

Which of the following methods offers a number of modeling practices and disciplines that contribute to a successful service-oriented life cycle management and modeling?

The Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificat...

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it i...

Which of the following ports must be opened on the firewall for the VPN connection using Point-to- Point Tunneling Protocol (PPTP)?

Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of informati...

Perfect World Inc., provides its sales managers access to the company's network from remote locations. The sales managers use laptops to connect to the network. For security purpos...

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You have a disaster scenario and you want to discuss it with your team members for getting appropriate responses of...

Your customer is concerned about security. He wants to make certain no one in the outside world can see the IP addresses inside his network. What feature of a router would accompli...

You are responsible for a Microsoft based network. Your servers are all clustered. Which of the following are the likely reasons for the clustering? Each correct answer represents...