Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

What is the second phase of Public Key Infrastructure (PKI) key/certificate life-cycle management?

Question 22

(0)

Which component of the Security Content Automation Protocol (SCAP) specification contains the data required to estimate the severity of vulnerabilities identified automated vulnerability assessments

Question 23

(0)

Who in the organization is accountable for classification of data information assets?

Question 24

(0)

The use of private and public encryption keys is fundamental in the implementation of which of the following?

Question 25

(0)

What is the purpose of an Internet Protocol (IP) spoofing attack?

Question 26

(0)

At what level of the Open System Interconnection (OSI) model is data at rest on a Storage Area Network (SAN) located?

Question 27

(0)

In a Transmission Control Protocol/Internet Protocol (TCP/IP) stack, which layer is responsible for negotiating and establishing a connection with another node?

Question 28

(0)

Which of the following is used by the Point-to-Point Protocol (PPP) to determine packet formats?

Question 29

(0)

Which of the following operates at the Network Layer of the Open System Interconnection (OSI) model?

Question 30

(0)

An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the

Question 21

What is the second phase of Public Key Infrastructure (PKI) key/certificate life-cycle management?

Implementation Phase

Initialization Phase

Cancellation Phase

Issued Phase

Show Answer Comment (0)

Question 22

Which component of the Security Content Automation Protocol (SCAP) specification contains the data required to estimate the severity of vulnerabilities identified automated vulnerability assessments?

Common Vulnerabilities and Exposures (CVE)

Common Vulnerability Scoring System (CVSS)

Asset Reporting Format (ARF)

Open Vulnerability and Assessment Language (OVAL)

Show Answer Comment (0)

Question 23

Who in the organization is accountable for classification of data information assets?

Data owner

Data architect

Chief Information Security Officer (CISO)

Chief Information Officer (CIO)

Show Answer Comment (0)

Question 24

The use of private and public encryption keys is fundamental in the implementation of which of the following?

Diffie-Hellman algorithm

Secure Sockets Layer (SSL)

Advanced Encryption Standard (AES)

Message Digest 5 (MD5)

Show Answer Comment (0)

Question 25

What is the purpose of an Internet Protocol (IP) spoofing attack?

To send excessive amounts of data to a process, making it unpredictable

To intercept network traffic without authorization

To disguise the destination address from a target's IP filtering devices

To convince a system that it is communicating with a known entity

Show Answer Comment (0)

Question 26

At what level of the Open System Interconnection (OSI) model is data at rest on a Storage Area Network (SAN) located?

Link layer

Physical layer

Session layer

Application layer

Show Answer Comment (0)

Question 27

In a Transmission Control Protocol/Internet Protocol (TCP/IP) stack, which layer is responsible for negotiating and establishing a connection with another node?

Transport layer

Application layer

Network layer

Session layer

Show Answer Comment (0)

Question 28

Which of the following is used by the Point-to-Point Protocol (PPP) to determine packet formats?

Layer 2 Tunneling Protocol (L2TP)

Link Control Protocol (LCP)

Challenge Handshake Authentication Protocol (CHAP)

Packet Transfer Protocol (PTP)

Show Answer Comment (0)

Question 29

Which of the following operates at the Network Layer of the Open System Interconnection (OSI) model?

Packet filtering

Port services filtering

Content filtering

Application access control

Show Answer Comment (0)

An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

Implement packet filtering on the network firewalls

Install Host Based Intrusion Detection Systems (HIDS)

Require strong authentication for administrators

Implement logical network segmentation at the switches

Show Answer Comment (0)

Total 1.482 questions