CISSP-ISSAP Exam Questions

Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.

Which of the following cryptographic algorithm uses public key and private key to encrypt or decrypt data ?

Sonya, a user, reports that she works in an electrically unstable environment where brownouts are a regular occurrence. Which of the following will you tell her to use to protect h...

You work as a Network Consultant. A company named Tech Perfect Inc. hires you for security reasons. The manager of the company tells you to establish connectivity between clients a...

The security controls that are implemented to manage physical security are divided in various groups. Which of the following services are offered by the administrative physical sec...

Jasmine is creating a presentation. She wants to ensure the integrity and authenticity of the presentation. Which of the following will she use to accomplish the task?

Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market?

Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which of the following will you use to accomplish this?

Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Int...

Which of the following protocols multicasts messages and information among all member devices in an IP multicast group?

Which of the following security devices is presented to indicate some feat of service, a special accomplishment, a symbol of authority granted by taking an oath, a sign of legitima...

Which of the following is a method for transforming a message into a masked form, together with a way of undoing the transformation to recover the message?

Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will h...

Which of the following is used to authenticate asymmetric keys? (ISC)2 CISSP-ISSAP Exam

IPsec VPN provides a high degree of data privacy by establishing trust points between communicating devices and data encryption. Which of the following encryption methods does IPse...

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which ty...

Which of the following types of firewall functions at the Session layer of OSI model?

Which of the following statements about a stream cipher are true? Each correct answer represents a complete solution. Choose three.

Which of the following types of attack can be used to break the best physical and logical security mechanism to gain access to a system?

Which of the following authentication methods prevents unauthorized execution of code on remote systems?

The simplest form of a firewall is a packet filtering firewall. Typically a router works as a packet- filtering firewall and has the capability to filter on some of the contents of...

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web...

John works as a professional Ethical Hacker. He has been assigned the project of testing the a man-in-the-middle attack since the key exchange process of the cryptographic algorith...

Which of the following electrical events shows a sudden drop of power source that can cause a wide variety of problems on a PC or a network?

Which of the following is the duration of time and a service level within which a business process must be restored after a disaster in order to avoid unacceptable consequences ass...

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) f...

You have decided to implement video surveillance in your company in order to enhance network security. Which of the following locations must have a camera in order to provide the m...

You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs. What will...

Which of the following protocols is used to compare two values calculated using the Message Digest (MD5) hashing function?

Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and mess...

Which of the following statements about Public Key Infrastructure (PKI) are true? Each correct answer represents a complete solution. Choose two.

Which of the following types of halon is found in portable extinguishers and is stored as a liquid?

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following proto...

Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery p...

In which of the following network topologies does the data travel around a loop in a single direction and pass through each device?

You are the Network Administrator for a small business. You need a widely used, but highly secure hashing algorithm. Which of the following should you choose?

Which of the following can be configured so that when an alarm is activated, all doors lock and the suspect or intruder is caught between the doors in the dead-space?

Which of the following refers to a location away from the computer center where document copies and backup media are kept?

Which of the following encryption methods does the SSL protocol use in order to provide communication privacy, authentication, and message integrity? Each correct answer represents...

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the c...

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

Which of the following are the initial steps required to perform a risk analysis process? Each correct answer represents a part of the solution. Choose three.

Which of the following protocols uses the Internet key Exchange (IKE) protocol to set up security associations (SA)? (ISC)2 CISSP-ISSAP Exam

Computer networks and the Internet are the prime mode of Information transfer today. Which of the following is a technique used for modifying messages, providing Information and Cy...

An organization wants to allow a certificate authority to gain access to the encrypted data and create digital signatures on behalf of the user. The data is encrypted using the pub...

Which of the following are the primary components of a discretionary access control (DAC) model? Each correct answer represents a complete solution. Choose two.

Which of the following encryption modes can make protocols without integrity protection even more susceptible to replay attacks, since each block gets decrypted in exactly the same...

You work as a technician for Trade Well Inc. The company is in the business of share trading. To enhance security, the company wants users to provide a third key (apart from ID and...

Which of the following layers of the OSI model corresponds to the Host-to-Host layer of the TCP/IP model?