Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 12

Question list

List of questions

Question 111

(0)

The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using

Question 112

(0)

Which layer of the Open Systems Interconnections (OSI) model implementation adds information concerning the logical connection between the sender and receiver?

Question 113

(0)

Which of the following is a network intrusion detection technique?

Question 114

(0)

Internet Protocol (IP) source address spoofing is used to defeat

Question 115

(0)

Which of the following is an authentication protocol in which a new random number is generated uniquely for each login session?

Question 116

(0)

What security management control is MOST often broken by collusion?

Question 117

(0)

An Intrusion Detection System (IDS) is generating alarms that a user account has over 100 failed login attempts per minute. A sniffer is placed on the network, and a variety of passwords for that us

Question 118

(0)

An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to t

Question 119

(0)

Which of the following Disaster Recovery (DR) sites is the MOST difficult to test?

Question 120

(0)

Which of the following statements is TRUE for point-to-point microwave transmissions?

Question 111

The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using

INSERT and DELETE.

GRANT and REVOKE.

PUBLIC and PRIVATE.

ROLLBACK and TERMINATE.

Show Answer Comment (0)

Question 112

Which layer of the Open Systems Interconnections (OSI) model implementation adds information concerning the logical connection between the sender and receiver?

Physical

Session

Transport

Data-Link

Show Answer Comment (0)

Question 113

Which of the following is a network intrusion detection technique?

Statistical anomaly

Perimeter intrusion

Port scanning

Network spoofing

Show Answer Comment (0)

Question 114

Internet Protocol (IP) source address spoofing is used to defeat

address-based authentication.

Address Resolution Protocol (ARP).

Reverse Address Resolution Protocol (RARP).

Transmission Control Protocol (TCP) hijacking.

Show Answer Comment (0)

Question 115

Which of the following is an authentication protocol in which a new random number is generated uniquely for each login session?

Challenge Handshake Authentication Protocol (CHAP)

Point-to-Point Protocol (PPP)

Extensible Authentication Protocol (EAP)

Password Authentication Protocol (PAP)

Show Answer Comment (0)

Question 116

What security management control is MOST often broken by collusion?

Job rotation

Separation of duties

Least privilege model

Increased monitoring

Show Answer Comment (0)

An Intrusion Detection System (IDS) is generating alarms that a user account has over 100 failed login attempts per minute. A sniffer is placed on the network, and a variety of passwords for that user are noted. Which of the following is

MOST likely occurring?

A dictionary attack

A Denial of Service (DoS) attack

A spoofing attack

A backdoor installation

Show Answer Comment (0)

Question 118

An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to test the company's next generation virus scanning software. Which would BEST describe the behavior of the engineer and why?

The behavior is ethical because the tool will be used to create a better virus scanner.

The behavior is ethical because any experienced programmer could create such a tool.

The behavior is not ethical because creating any kind of virus is bad.

The behavior is not ethical because such a tool could be leaked on the Internet.

Show Answer Comment (0)