Which of the following can be configured so that when an alarm is activated, all doors lock and the suspect or intruder is caught between the doors in the dead-space?

Host Intrusion Detection System (HIDS)

Network Intrusion Detection System (NIDS)

Which of the following are the initial steps required to perform a risk analysis process? Each correct answer represents a part of the solution. Choose three.

Estimate the potential losses to assets by determining their value.

Establish the threats likelihood and regularity.

Evaluate potential threats to the assets.

Estimate the potential losses to assets by determining their value.

Establish the threats likelihood and regularity.

Valuations of the critical assets in hard costs.

Evaluate potential threats to the assets.

You are the Network Administrator for a college. You watch a large number of people (some not even students) going in and out of areas with campus computers (libraries, computer labs, etc.). You have had a problem with laptops being stolen. What is the most cost effective method to prevent this?

Smart card access to all areas with computers.

Video surveillance on all areas with computers.

Which of the following are the countermeasures against a man-in-the-middle attack? Each correct answer represents a complete solution. Choose all that apply.

Using public key infrastructure authentication.

Using Secret keys for authentication.

Using Off-channel verification.

Using public key infrastructure authentication.

Using Secret keys for authentication.

Using Off-channel verification.

Which of the following statements best describes a certification authority?

A certification authority is an entity that issues digital certificates for use by other parties.

A certification authority is a technique to authenticate digital documents by using computer cryptography.

A certification authority is a type of encryption that uses a public key and a private key pair for data encryption.

A certification authority is an entity that issues digital certificates for use by other parties.

A certification authority is a type of encryption that uses a single key to encrypt and decrypt data.

Which of the following should the administrator ensure during the test of a disaster recovery plan?

Ensure that the plan works properly

Ensure that each member of the disaster recovery team is aware of their responsibility.

Ensure that the plan works properly

Ensure that all the servers in the organization are shut down.

Ensure that each member of the disaster recovery team is aware of their responsibility.

Ensure that all client computers in the organization are shut down.

The service-oriented modeling framework (SOMF) provides a common modeling notation to address alignment between business and IT organizations. Which of the following principles does the SOMF concentrate on? Each correct answer represents a part of the solution. Choose all that apply.

Architectural components abstraction

Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Which of the following statements are true about the Kerberos authentication scheme? Each correct answer represents a complete solution.Choose all that apply.

Kerberos requires continuous availability of a central server.

Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.

Kerberos requires the clocks of the involved hosts to be synchronized.

Kerberos requires continuous availability of a central server.

Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.

Kerberos builds on Asymmetric key cryptography and requires a trusted third party.

Kerberos requires the clocks of the involved hosts to be synchronized.

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following tasks: Develop a risk-driven enterprise information security architecture. Deliver security infrastructure solutions that support critical business initiatives. Which of the following methods will you use to accomplish these tasks?

Sherwood Applied Business Security Architecture

Service-oriented modeling framework

Service-oriented modeling and architecture

A network is configured on a Bus topology. Which of the following conditions could cause a network failure? Each correct answer represents a complete solution.Choose all that apply.

75 ohm terminators at open ends

An open-ended cable without terminators

75 ohm terminators at open ends

An open-ended cable without terminators

ISC CISSP-ISSAP Practice Test 2 - Free Online Exam Prep & Questions

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disable to ensure that the password is encrypted during remote access?

SPAP

MSCHAP

PAP

MSCHAP V2

Comment (0)

ISC CISSP-ISSAP Practice Test 2

Question

ISC CISSP-ISSAP Practice Tests

Practice Tests