CISSP-ISSAP practice test

1. Question 1 · 1

   Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market?

   Choose one answer.

   • Project gap
   • Product gap
   • Competitive gap
   • Usage gap

2. Question 2 · 1

   IPsec VPN provides a high degree of data privacy by establishing trust points between communicating devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each correct answer represents a complete solution. Choose two.

   Choose all answers that apply.

   • MD5
   • LEAP
   • AES
   • 3DES

3. Question 3 · 1

   A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

   Choose one answer.

   • Denial-of-Service attack
   • Vulnerability attack
   • Social Engineering attack
   • Impersonation attack

4. Question 4 · 1

   Which of the following types of firewall functions at the Session layer of OSI model?

   Choose one answer.

   • Circuit-level firewall
   • Application-level firewall
   • Packet filtering firewall
   • Switch-level firewall

5. Question 5 · 1

   Which of the following types of attack can be used to break the best physical and logical security mechanism to gain access to a system?

   Choose one answer.

   • Social engineering attack
   • Cross site scripting attack
   • Mail bombing
   • Password guessing attack

6. Question 6 · 1

   You are the Security Consultant advising a company on security methods. This is a highly secure location that deals with sensitive national defense related data. They are very concerned about physical security as they had a breach last month. In that breach an individual had simply grabbed a laptop and ran out of the building. Which one of the following would have been most effective in preventing this?

   Choose one answer.

   • Not using laptops.
   • Keeping all doors locked with a guard.
   • Using a man-trap.
   • A sign in log.

7. Question 7 · 1

   You want to implement a network topology that provides the best balance for regional topologies in terms of the number of virtual circuits, redundancy, and performance while establishing a WAN network. Which of the following network topologies will you use to accomplish the task?

   Choose one answer.

   • Bus topology
   • Fully meshed topology
   • Star topology
   • Partially meshed topology

8. Question 8 · 1

   Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

   Choose one answer.

   • RSTP
   • SKIP
   • OCSP
   • HTTP

9. Question 9 · 1

   Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each correct answer represents a complete solution. Choose two.

   Choose all answers that apply.

   • GTC
   • MS-CHAP v2
   • AES
   • RC4

10. Question 10 · 1

    Which of the following terms refers to a mechanism which proves that the sender really sent a particular message?

    Choose one answer.

    • Integrity
    • Confidentiality
    • Authentication
    • Non-repudiation

11. Question 11 · 1

    Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

    Choose one answer.

    • Hacking
    • Packet filtering
    • Web caching
    • Spoofing

12. Question 12 · 1

    Maria works as a Network Security Officer for Gentech Inc. She wants to encrypt her network traffic. The specific requirement for the encryption algorithm is that it must be a symmetric key block cipher. Which of the following techniques will she use to fulfill this requirement?

    Choose one answer.

    • IDEA
    • PGP
    • DES
    • AES

13. Question 13 · 1

    Which of the following protocols uses public-key cryptography to authenticate the remote computer?

    Choose one answer.

    • SSH
    • Telnet
    • SCP
    • SSL

14. Question 14 · 1

    Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

    Choose one answer.

    • Authentication
    • Non-repudiation
    • Integrity
    • Confidentiality

15. Question 15 · 1

    Which of the following tenets does the CIA triad provide for which security practices are measured? Each correct answer represents a part of the solution. Choose all that apply.

    Choose all answers that apply.

    • Integrity
    • Accountability
    • Availability
    • Confidentiality

Paid access to all 90 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.