Which one of these risk factors would be the LEAST important consideration in choosing a building site for a new computer facility?

Proximity to an airline flight path

Adjacent buildings and businesses

Proximity to an airline flight path

Vulnerability to natural disasters

Which security action should be taken FIRST when computer personnel are terminated from their jobs?

Require them to turn in their badge

Reduce their physical access level to the facility

A practice that permits the owner of a data object to grant other users access to that object would usually provide

Discretionary Access Control (DAC).

Mandatory Access Control (MAC).

owner-dependent access control.

Discretionary Access Control (DAC).

Why MUST a Kerberos server be well protected from unauthorized access?

It contains the keys of all clients.

It always operates at root privilege.

It contains all the tickets for services.

It contains the Internet Protocol (IP) address of all network entities.

Which one of the following effectively obscures network addresses from external exposure when implemented on a firewall or router?

Network Address Translation (NAT)

Routing Information Protocol (RIP) Version 2

Why must all users be positively identified prior to using multi-user computers?

To ensure that unauthorized persons cannot access the computers

To provide access to system privileges

To provide access to the operating system

To ensure that unauthorized persons cannot access the computers

To ensure that management knows what users are currently logged on

An advantage of link encryption in a communications network is that it

encrypts all information, including headers and routing information.

makes key management and distribution easier.

protects data from start to finish through the entire network.

improves the efficiency of the transmission.

encrypts all information, including headers and routing information.

What is the term commonly used to refer to a technique of authenticating one machine to another by forging packets from a trusted source?

Man-in-the-Middle (MITM) attack

The PRIMARY purpose of a security awareness program is to

ensure that everyone understands the organization's policies and procedures.

communicate that access to information will be granted on a need-to-know basis.

warn all users that access to all systems will be monitored on a daily basis.

comply with regulations related to data and information protection.

As one component of a physical security system, an Electronic Access Control (EAC) token is BEST known for its ability to

overcome the problems of key assignments.

monitor the opening of windows and doors.

trigger alarms when intruders are detected.

lock down a facility during an emergency.

Which one of the following is a fundamental objective in handling an incident?

To restore control of the affected systems

To confiscate the suspect's computers

To perform full backups of the system

The process of mutual authentication involves a computer system authenticating a user and authenticating the

user's access to all authorized objects.

computer system to the audit process.

Which one of the following describes granularity?

Fineness to which an access control system can be adjusted

Maximum number of entries available in an Access Control List (ACL)

Fineness to which a trusted system can authenticate users

Number of violations divided by the number of total accesses

Fineness to which an access control system can be adjusted

In a basic SYN flood attack, what is the attacker attempting to achieve?

Exceed the threshold limit of the connection queue for a given service

Set the threshold to zero for a given service

Cause the buffer to overflow, allowing root access

Flush the register stack, allowing hijacking of the root account

The FIRST step in building a firewall is to

perform a risk analysis to identify issues to be addressed.

assign the roles and responsibilities of the firewall administrators.

define the intended audience who will read the firewall policy.

identify mechanisms to encourage compliance with the policy.

perform a risk analysis to identify issues to be addressed.

Which of the following defines the key exchange for Internet Protocol Security (IPSec)?

Secure Sockets Layer (SSL) key exchange

Internet Control Message Protocol (ICMP)

The overall goal of a penetration test is to determine a system's

ability to withstand an attack.

Which of the following is a security limitation of File Transfer Protocol (FTP)?

Authentication is not encrypted.

Passive FTP is not compatible with web browsers.

FTP uses Transmission Control Protocol (TCP) ports 20 and 21.

Authentication is not encrypted.

In Business Continuity Planning (BCP), what is the importance of documenting business processes?

Provides an understanding of the organization's interdependencies

Provides senior management with decision-making tools

Establishes and adopts ongoing testing and maintenance strategies

Defines who will perform which functions during a disaster or emergency

Provides an understanding of the organization's interdependencies

Internet Protocol (IP) source address spoofing is used to defeat

Address Resolution Protocol (ARP).

Reverse Address Resolution Protocol (RARP).

Transmission Control Protocol (TCP) hijacking.

Which of the following is an authentication protocol in which a new random number is generated uniquely for each login session?

Challenge Handshake Authentication Protocol (CHAP)

Extensible Authentication Protocol (EAP)

Password Authentication Protocol (PAP)

An Intrusion Detection System (IDS) is generating alarms that a user account has over 100 failed login attempts per minute. A sniffer is placed on the network, and a variety of passwords for that user are noted. Which of the following isMOST likely occurring?

A Denial of Service (DoS) attack

An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to test the company's next generation virus scanning software. Which would BEST describe the behavior of the engineer and why?

The behavior is ethical because the tool will be used to create a better virus scanner.

The behavior is ethical because any experienced programmer could create such a tool.

The behavior is not ethical because creating any kind of virus is bad.

The behavior is not ethical because such a tool could be leaked on the Internet.

Which of the following statements is TRUE for point-to-point microwave transmissions?

They are subject to interception by an antenna within proximity.

They are not subject to interception due to encryption.

Interception only depends on signal strength.

They are too highly multiplexed for meaningful interception.

They are subject to interception by an antenna within proximity.

ISC CISSP Practice Test 3 - Free Online Exam Prep & Questions

What principle requires that changes to the plaintext affect many parts of the ciphertext?

Diffusion

Encapsulation

Obfuscation

Permutation

Comment (0)

ISC CISSP Practice Test 3

Question

ISC CISSP Practice Tests

Practice Tests