ISC CISSP Practice Test - Questions Answers, Page 34
Question list
List of questions
Related questions
Which of the following methods can be used to achieve confidentiality and integrity for data in transit?
A.
Multiprotocol Label Switching (MPLS)
B.
Internet Protocol Security (IPSec)
C.
Federated identity management
D.
Multi-factor authentication
Secure Sockets Layer (SSL) encryption protects
A.
data at rest.
B.
the source IP address.
C.
data transmitted.
D.
data availability.
Which of the following are Systems Engineering Life Cycle (SELC) Technical Processes?
A.
Concept, Development, Production, Utilization, Support, Retirement
B.
Stakeholder Requirements Definition, Architectural Design, Implementation, Verification, Operation
C.
Acquisition, Measurement, Configuration Management, Production, Operation, Support
D.
Concept, Requirements, Design, Implementation, Production, Maintenance, Support, Disposal
Which of the following BEST describes a Protection Profile (PP)?
A.
A document that expresses an implementation independent set of security requirements for an IT product that meets specific consumer needs.
B.
A document that is used to develop an IT security product from its security requirements definition.
C.
A document that expresses an implementation dependent set of security requirements which contains only the security functional requirements.
D.
A document that represents evaluated products where there is a one-to-one correspondence between a PP and a Security Target (ST).
Which of the following BEST describes a rogue Access Point (AP)?
A.
An AP that is not protected by a firewall
B.
An AP not configured to use Wired Equivalent Privacy (WEP) with Triple Data Encryption Algorithm (3DES)
C.
An AP connected to the wired infrastructure but not under the management of authorized network administrators
D.
An AP infected by any kind of Trojan or Malware
The 802.1x standard provides a framework for what?
A.
Network authentication for only wireless networks
B.
Network authentication for wired and wireless networks
C.
Wireless encryption using the Advanced Encryption Standard (AES)
D.
Wireless network encryption using Secure Sockets Layer (SSL)
Single Sign-On (SSO) is PRIMARILY designed to address which of the following?
A.
Confidentiality and Integrity
B.
Availability and Accountability
C.
Integrity and Availability
D.
Accountability and Assurance
Which of the following is the PRIMARY security concern associated with the implementation of smart cards?
A.
The cards have limited memory
B.
Vendor application compatibility
C.
The cards can be misplaced
D.
Mobile code can be embedded in the card
Which of the following is a function of Security Assertion Markup Language (SAML)?
A.
File allocation
B.
Redundancy check
C.
Extended validation
D.
Policy enforcement
What is an important characteristic of Role Based Access Control (RBAC)?
A.
Supports Mandatory Access Control (MAC)
B.
Simplifies the management of access rights
C.
Relies on rotation of duties
D.
Requires two factor authentication
Question