Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Annualized Rate of Occurrence (ARO)

You work as a Chief Security Officer for Tech Perfect Inc. The company has a TCP/IP based network. You want to use a firewall that can track the state of active connections of the network and then determine which network packets are allowed to enter through the firewall. Which of the following firewalls has this feature?

Dynamic packet-filtering firewall

Stateful packet inspection firewall

Dynamic packet-filtering firewall

You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and easy recovery of data. Which of the following options will you choose to accomplish this?

Take a full backup daily with the previous night's tape taken offsite.

Take a full backup daily and use six-tape rotation.

Take a full backup on Monday and a differential backup on each of the following weekdays. Keep Monday's backup offsite.

Take a full backup daily with the previous night's tape taken offsite.

Take a full backup on alternate days and keep rotating the tapes.

Take a full backup on Monday and an incremental backup on each of the following weekdays. Keep Monday's backup offsite.

Take a full backup daily with one tape taken offsite weekly.

You are the Network Administrator at a large company. Your company has a lot of contractors and other outside parties that come in and out of the building. For this reason you are concerned that simply having usernames and passwords is not enough and want to have employees use tokens for authentication. Which of the following is not an example of tokens?

USB device with cryptographic data

Which of the following LAN protocols use token passing for exchanging signals among various stations on the network? Each correct answer represents a complete solution. Choose two.

Fiber Distributed Data Interface (FDDI)

Which of the following statements about Discretionary Access Control List (DACL) is true?

It is a list containing user accounts, groups, and computers that are allowed (or denied) access to the object.

It specifies whether an audit activity should be performed when an object attempts to access a resource.

It is a unique number that identifies a user, group, and computer account.

It is a list containing user accounts, groups, and computers that are allowed (or denied) access to the object.

It is a rule list containing access control entries.

You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to keep track of the state of network connections traveling across the network. Which of the following types of firewalls will you configure to accomplish the task?

Host-based application firewall

A network-based application layer firewall

Which of the following statements are true about Public-key cryptography? Each correct answer represents a complete solution. Choose two.

The secret key can encrypt a message, and anyone with the public key can decrypt it.

Data encrypted by the public key can only be decrypted by the secret key.

Data encrypted with the secret key can only be decrypted by another secret key.

The secret key can encrypt a message, and anyone with the public key can decrypt it.

The distinguishing technique used in public key-private key cryptography is the use of symmetric key algorithms.

Data encrypted by the public key can only be decrypted by the secret key.

You are responsible for security at a hospital. Since many computers are accessed by multiple employees 24 hours a day, 7 days a week, controlling physical access to computers is very difficult. This is compounded by a high number of non employees moving through the building. You are concerned about unauthorized access to patient records. What would best solve this problem?

Video surveillance of all computers.

ISC CISSP-ISSAP Practice Test 4 - Free Online Exam Prep & Questions

In which of the following types of tests are the disaster recovery checklists distributed to the members of disaster recovery team and asked to review the assigned checklist?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP-ISSAP Practice Test 4

Question

ISC CISSP-ISSAP Practice Tests

Practice Tests