[Apr 28, 2023] Updates Up to 365 days On Valid SSCP Braindumps
Best QualitySSCP Exam Questions ISC Test To Gain Brilliante Result
NEW QUESTION 172
Which of the following is a symmetric encryption algorithm?
- A. Elliptic Curve
- B. El Gamal
- C. RSA
- D. RC5
Answer: D
Explanation:
RC5 is a symmetric encryption algorithm. It is a block cipher of variable block length, encrypts through integer addition, the application of a bitwise Exclusive OR (XOR), and variable rotations.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 4: Cryptography (page 153).
NEW QUESTION 173
Which of the following biometric characteristics cannot be used to uniquely authenticate an individual's identity?
- A. Skin scans
- B. Iris scans
- C. Retina scans
- D. Palm scans
Answer: A
Explanation:
The following are typical biometric characteristics that are used to uniquely authenticate an individual's identity:
Fingerprints Retina scans Iris scans Facial scans Palm scans Hand geometry Voice Handwritten signature dynamics
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 39.
And: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne,
2002, chapter 4: Access Control (pages 127-131).
NEW QUESTION 174
CORRECT TEXT
Passwords should be changed every ________ days at a minimum. 90 days is the recommended minimum, but some resources will tell you that 30-60 days is ideal.
Answer:
NEW QUESTION 175
Vulnerability x Threat = RISK is an example of the _______________.
- A. Disaster Recovery Equation
- B. Threat Assessment
- C. Risk Equation
- D. Calculation of Annual Loss Expectancy
Answer: C
NEW QUESTION 176
Which of the following backup method must be made regardless of whether Differential or Incremental methods are used?
- A. Supplemental backup method.
- B. Incremental backup method.
- C. Tape backup method.
- D. Full Backup Method.
Answer: D
Explanation:
Explanation/Reference:
A Full Backup must be made regardless of whether Differential or Incremental methods are used.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 69.
And: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 9:
Disaster Recovery and Business continuity (pages 617-619).
NEW QUESTION 177
Related to information security, confidentiality is the opposite of which of the following?
- A. disposal
- B. disaster
- C. closure
- D. disclosure
Answer: D
Explanation:
Confidentiality is the opposite of disclosure.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 59.
NEW QUESTION 178
Which of the following statements pertaining to packet switching is incorrect?
- A. All packets from a message travel through the same route.
- B. Most data sent today uses digital signals over network employing packet switching.
- C. Each network node or point examines each packet for routing.
- D. Messages are divided into packets.
Answer: A
Explanation:
Explanation/Reference:
When using packet switching, messages are broken down into packets. Source and destination address are added to each packet so that when passing through a network node, they can be examined and eventually rerouted through different paths as conditions change. All message packets may travel different paths and not arrive in the same order as sent. Packets need to be collected and reassembled into the original message at destination.
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
NEW QUESTION 179
Who should measure the effectiveness of Information System security related controls in an organization?
- A. The systems auditor
- B. The central security manager
- C. The local security specialist
- D. The business manager
Answer: A
Explanation:
It is the systems auditor that should lead the effort to ensure that the security controls are in place and effective. The audit would verify that the controls comply with polices, procedures, laws, and regulations where applicable. The findings would provide these to senior management.
The following answers are incorrect: the local security specialist. Is incorrect because an independent review should take place by a third party. The security specialist might offer mitigation strategies but it is the auditor that would ensure the effectiveness of the controls
the business manager. Is incorrect because the business manager would be responsible that the controls are in place, but it is the auditor that would ensure the effectiveness of the controls.
the central security manager. Is incorrect because the central security manager would be responsible for implementing the controls, but it is the auditor that is responsibe for ensuring their effectiveness.
NEW QUESTION 180
Who of the following is responsible for ensuring that proper controls are in place to address integrity, confidentiality, and availability of IT systems and data?
- A. Business and functional managers
- B. IT Security practitioners
- C. System and information owners
- D. Chief information officer
Answer: C
Explanation:
Section: Security Operation Adimnistration
Explanation/Reference:
The system and information owners are responsible for ensuring that proper controls are in place to address integrity, confidentiality, and availability of the IT systems and data they own. IT security practitioners are responsible for proper implementation of security requirements in their IT systems.
Source: STONEBURNER, Gary et al., NIST Special publication 800-30, Risk management Guide for Information Technology Systems, 2001 (page 6).
NEW QUESTION 181
Which of the following statements pertaining to block ciphers is incorrect?
- A. Some Block ciphers can operate internally as a stream.
- B. It is more suitable for software than hardware implementations.
- C. Plain text is encrypted with a public key and decrypted with a private key.
- D. It operates on fixed-size blocks of plaintext.
Answer: C
Explanation:
Explanation/Reference:
Block ciphers do not use public cryptography (private and public keys).
Block ciphers is a type of symmetric-key encryption algorithm that transforms a fixed-size block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length. They are appropriate for software implementations and can operate internally as a stream. See more info below about DES in Output Feedback Mode (OFB), which makes use internally of a stream cipher.
The output feedback (OFB) mode makes a block cipher into a synchronous stream cipher. It generates keystream blocks, which are then XORed with the plaintext blocks to get the ciphertext. Just as with other stream ciphers, flipping a bit in the ciphertext produces a flipped bit in the plaintext at the same location.
This property allows many error correcting codes to function normally even when applied before encryption.
Reference(s) used for this question:
Wikipedia on Block Cipher mode at: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation and
http://www.itl.nist.gov/fipspubs/fip81.htm
NEW QUESTION 182
What is Kerberos?
- A. A trusted third-party authentication protocol.
- B. A three-headed dog from the egyptian mythology.
- C. A remote authentication dial in user server.
- D. A security model.
Answer: A
Explanation:
Explanation/Reference:
Is correct because that is exactly what Kerberos is.
The following answers are incorrect:
A three-headed dog from Egyptian mythology. Is incorrect because we are dealing with Information Security and not the Egyptian mythology but the Greek Mythology.
A security model. Is incorrect because Kerberos is an authentication protocol and not just a security model.
A remote authentication dial in user server. Is incorrect because Kerberos is not a remote authentication dial in user server that would be called RADIUS.
NEW QUESTION 183
What prevents a process from accessing another process' data?
- A. Data hiding
- B. Memory segmentation
- C. Process isolation
- D. The reference monitor
Answer: C
Explanation:
Explanation/Reference:
Process isolation is where each process has its own distinct address space for its application code and data. In this way, it is possible to prevent each process from accessing another process' data. This prevents data leakage, or modification to the data while it is in memory. Memory segmentation is a virtual memory management mechanism. The reference monitor is an abstract machine that mediates all accesses to objects by subjects. Data hiding, also known as information hiding, is a mechanism that makes information available at one processing level is not available at another level.
Source: HARE, Chris, Security Architecture and Models, Area 6 CISSP Open Study Guide, January 2002.
NEW QUESTION 184
At which layer of ISO/OSI does the fiber optics work?
- A. Transport layer
- B. Physical layer
- C. Data link layer
- D. Network layer
Answer: B
Explanation:
Explanation/Reference:
Physical layer The Physical layer is responsible for the transmission of the data through the physical medium. This includes such things as cables. Fiber optics is a cabling mechanism which works at Physical layer of OSI model
All of the other answers are incorrect.
The following reference(s) were/was used to create this question:
Shon Harris all in one - Chapter 7 (Cabling)
NEW QUESTION 185
Which of the following can best be defined as a key distribution protocol that uses hybrid encryption to convey session keys. This protocol establishes a long-term key once, and then requires no prior communication in order to establish or exchange keys on a session-by-session basis?
- A. IPsec Key exchange (IKE)
- B. Diffie-Hellman Key Distribution Protocol
- C. Internet Security Association and Key Management Protocol (ISAKMP)
- D. Simple Key-management for Internet Protocols (SKIP)
Answer: D
Explanation:
RFC 2828 (Internet Security Glossary) defines Simple Key Management for Internet Protocols (SKIP) as:
A key distribution protocol that uses hybrid encryption to convey session keys that are used to encrypt data in IP packets.
SKIP is an hybrid Key distribution protocol similar to SSL, except that it establishes a long-term key once, and then requires no prior communication in order to establish or exchange keys on a session-by-session basis. Therefore, no connection setup overhead exists and new keys values are not continually generated. SKIP uses the knowledge of its own secret key or private component and the destination's public component to calculate a unique key that can only be used between them.
IKE stand for Internet Key Exchange, it makes use of ISAKMP and OAKLEY internally. Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol suite. IKE builds upon the Oakley protocol and ISAKMP. IKE uses X.509 certificates for authentication and a Diffie-Hellman key exchange to set up a shared session secret from which cryptographic keys are derived.
The following are incorrect answers:
ISAKMP is an Internet IPsec protocol to negotiate, establish, modify, and delete security associations, and to exchange key generation and authentication data, independent of the details of any specific key generation technique, key establishment protocol, encryption algorithm, or authentication mechanism.
IKE is an Internet, IPsec, key-establishment protocol (partly based on OAKLEY) that is intended for putting in place authenticated keying material for use with ISAKMP and for other security associations, such as in AH and ESP.
IPsec Key exchange (IKE) is only a detracto.
Reference(s) used for this question:
SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000. and http://en.wikipedia.org/wiki/Simple_Key-Management_for_Internet_Protocol and http://en.wikipedia.org/wiki/Simple_Key-Management_for_Internet_Protocol
NEW QUESTION 186
Which of the following backup methods is most appropriate for off-site archiving?
- A. Full backup method
- B. Incremental backup method
- C. Off-site backup method
- D. Differential backup method
Answer: A
Explanation:
Section: Risk, Response and Recovery
Explanation/Reference:
The full backup makes a complete backup of every file on the system every time it is run. Since a single backup set is needed to perform a full restore, it is appropriate for off-site archiving.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
69).
NEW QUESTION 187
Which of the following can be defined as the process of rerunning a portion of the test scenario or test plan to ensure that changes or corrections have not introduced new errors?
- A. Pilot testing
- B. Unit testing
- C. Parallel testing
- D. Regression testing
Answer: D
Explanation:
Section: Security Operation Adimnistration
Explanation
Explanation/Reference:
Regression testing is the process of rerunning a portion of the test scenario or test plan to ensure that changes or corrections have not introduced new errors. The data used in regression testing should be the same as the data used in the original test. Unit testing refers to the testing of an individual program or module. Pilot testing is a preliminary test that focuses only on specific and predetermined aspects of a system. Parallel testing is the process of feeding test data into two systems and comparing the results.
Source: Information Systems Audit and Control Association, Certified Information Systems Auditor 2002 review manual, Chapter 6: Business Application System Development, Acquisition, Implementation and Maintenance (page 300).
NEW QUESTION 188
Controls like guards and general steps to maintain building security, securing of server rooms or laptops, the protection of cables, and usage of magnetic switches on doors and windows are some of the examples of:
- A. Technical controls
- B. Physical controls
- C. Administrative controls
- D. Logical controls
Answer: B
Explanation:
Controls like guards and general steps to maintain building security, securing of server rooms or laptops, the protection of cables, and usage of magnetic switches on doors and windows are all examples of Physical Security.
Reference(s) used for this question:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 33.
NEW QUESTION 189
......
Following are the tips for ISC SSCP Certification Exam
Prepare your time well. It is recommended that you time yourself to know the amount of time that you should allow for each section. Practice taking notes during your study sessions. This will be beneficial when it comes to taking the exam because it will help you take in what you have learned and remind yourself of key points or concepts. Take an extensive break after every 2 hours of studying, but not before 15 minutes. Be patient with your preparation process. Sometimes getting things down on paper can be helpful, but sometimes it may be very difficult to sit down and write things out word for word. Focus on making good use of all the resources that are available to you. Create a schedule that will allow you to dedicate time for review and to take practice exams. You can check out sample test questions online.
Preparing for ISC SSCP Certification Exam As soon as a student decides that he wishes to take a certification exam, he should prepare himself in advance by arranging all the materials he'll need in preparation for the exam date. In general, the student will need anything from 3-6 months in order to organize his studies and organize his thoughts in order to create study scenarios. The student will also be required to spend an extensive number of hours during these days in order to prepare himself for all features of the certifications. It is good to know that the certification is not only a test of a student's knowledge and ability in terms of security, but it is also a test of the student's stamina and perseverance. The basic requirement for the exam will include the candidate's presentation on an actual project that he has worked on or that he will work on in the future. This means that he will have to choose an actual problem that has been presented to him in his work environment and apply all his knowledge and skills to solve it. SSCP Dumps can help candidates, by providing PDF (portable document format) files of braindumps.
Focus on SSCP All-in-One Exam Guide For Quick Preparation: https://www.prep4king.com/SSCP-exam-prep-material.html
Tested Material Used To SSCP: https://drive.google.com/open?id=1myo2IMo_u6_s2PnC6IAsLlmRv4EHHec4
