Free ISC2 CISSP-ISSAP Practice Questions

Question 1

A security architect applying SABSA must turn vague stakeholder statements, such as a demand that a service be trustworthy, into normalized business requirements, each with a definition and a measurable performance target, so that every control can be traced back to a business need. Which SABSA component is designed for this work?

1. Attributes Profiling, the Business Requirements Engineering Framework
2. The Policy Architecture Framework
3. The Security Domain Framework
4. The Through-life Security Service Management and Performance Management Framework

Question 2

Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

1. Hacking
2. Packet filtering
3. Web caching
4. Spoofing

Question 3

You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails.

Which of the following will you use to accomplish this?

1. PGP
2. PPTP
3. IPSec
4. NTFS

Question 4

Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the data will be sent across a public network. For security reasons, the management wants the data sent through the Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.

Which communication protocol will Peter use to accomplish the task?

1. IP Security (IPSec)
2. Microsoft Point-to-Point Encryption (MPPE)
3. Pretty Good Privacy (PGP)
4. Data Encryption Standard (DES)

Question 5

Which of the following protocols multicasts messages and information among all member devices in an IP multicast group?

1. ARP
2. ICMP
3. TCP
4. IGMP

Question 6

Which of the following security devices is presented to indicate some feat of service, a special accomplishment, a symbol of authority granted by taking an oath, a sign of legitimate employment or student status, or as a simple means of identification?

1. Sensor
2. Alarm
3. Motion detector
4. Badge

Question 7

Which of the following is a method for transforming a message into a masked form, together with a way of undoing the transformation to recover the message?

1. Cipher
2. CrypTool
3. Steganography
4. MIME

Question 8

Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them.

Which of the following access control models will he use?

1. Policy Access Control
2. Mandatory Access Control
3. Discretionary Access Control
4. Role-Based Access Control

Question 9

Which of the following is used to authenticate asymmetric keys?

1. Digital signature
2. MAC Address
3. Demilitarized zone (DMZ)
4. Password

Question 10

A security architect is replacing a flat remote-access VPN design with a zero trust architecture based on NIST SP 800-207. Which logical component makes the final decision to grant, deny, or revoke a subject's access to a resource, using enterprise policy and inputs such as threat intelligence?

1. Policy administrator (PA)
2. Policy engine (PE)
3. Policy enforcement point (PEP)
4. Continuous diagnostics and mitigation (CDM) system

Question 11

Which of the following protocols provides certificate-based authentication for virtual private networks (VPNs)?

1. PPTP
2. SMTP
3. HTTPS
4. L2TP

Question 12

Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

1. Risk analysis
2. OODA loop
3. Cryptography
4. Firewall security

Question 13

Which of the following security protocols provides confidentiality, integrity, and authentication of network traffic with end-to-end and intermediate-hop security?

1. IPSec
2. SET
3. SWIPE
4. SKIP

Question 14

Which of the following layers of the OSI model corresponds to the Host-to-Host layer of the TCP/IP model?

1. The transport layer
2. The presentation layer
3. The session layer
4. The application layer

Question 15

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress,

Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail.

Which of the following techniques is he performing to accomplish his task?

1. Email spoofing
2. Social engineering
3. Web ripping
4. Steganography

Question 16

Which of the following schemes is used by the Kerberos authentication?

1. Public key cryptography
2. One time password
3. Private key cryptography
4. OPIE

Question 17

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services.

Which type of attack is this?

1. Denial-of-Service attack
2. Vulnerability attack
3. Social Engineering attack
4. Impersonation attack

Question 18

Which of the following types of ciphers are included in the historical ciphers? Each correct answer represents a complete solution.

Choose two.

1. Block ciphers
2. Transposition ciphers
3. Stream ciphers
4. Substitution ciphers

Question 19

A security architect is starting a new customer portal project under the NIST Risk Management Framework (SP 800-37r2). Before any security categorization, the team must identify the stakeholders with an interest in the system and the assets that require protection. In which RMF step are these tasks performed?

1. Prepare
2. Categorize
3. Select
4. Monitor

Question 20

Which of the following protocols uses public-key cryptography to authenticate the remote computer?

1. SSH
2. Telnet
3. SCP
4. SSL

Question 21

Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

1. Structured walk-through test
2. Simulation test
3. Full-interruption test
4. Parallel test

Question 22

Which of the following types of attack can be used to break the best physical and logical security mechanism to gain access to a system?

1. Social engineering attack
2. Cross site scripting attack
3. Mail bombing
4. Password guessing attack

Question 23

Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

1. RSTP
2. SKIP
3. OCSP
4. HTTP

Question 24

In which of the following access control models can a user not grant permissions to other users to see a copy of an object marked as secret that he has received, unless they have the appropriate permissions?

1. Discretionary Access Control (DAC)
2. Role Based Access Control (RBAC)
3. Mandatory Access Control (MAC)
4. Access Control List (ACL)

Question 25

An organization is seeking to implement a hot site and wants to maintain a live database server at the backup site.

Which of the following solutions will be the best for the organization?

1. Electronic vaulting
2. Remote journaling
3. Remote mirroring
4. Transaction logging

Question 26

The network you administer allows owners of objects to manage the access to those objects via access control lists. This is an example of what type of access control?

1. RBAC
2. MAC
3. CIA
4. DAC

Question 27

Which of the following electrical events shows a sudden drop of power source that can cause a wide variety of problems on a PC or a network?

1. Blackout
2. Power spike
3. Power sag
4. Power surge

Question 28

Which of the following life cycle modeling activities establishes service relationships and message exchange paths?

1. Service-oriented logical design modeling
2. Service-oriented conceptual architecture modeling
3. Service-oriented discovery and analysis modeling
4. Service-oriented business integration modeling

Question 29

Which of the following refers to a location away from the computer center where document copies and backup media are kept?

1. Storage Area network
2. Off-site storage
3. On-site storage
4. Network attached storage

Question 30

The ATM of a bank is robbed by breaking the ATM machine.

Which of the following physical security devices can now be used for verification and historical analysis of the ATM robbery?

1. Key card
2. Biometric devices
3. Intrusion detection systems
4. CCTV Cameras

Question 31

Computer networks and the Internet are the prime mode of Information transfer today.

Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

1. Risk analysis
2. Firewall security
3. Cryptography
4. OODA loop

Question 32

Which of the following tenets does the CIA triad provide for which security practices are measured? Each correct answer represents a part of the solution.

Choose all that apply.

1. Integrity
2. Accountability
3. Availability
4. Confidentiality

Question 33

Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner.

Which of the following statements are true about the Kerberos authentication scheme? Each correct answer represents a complete solution.

Choose all that apply.

1. Kerberos requires continuous availability of a central server.
2. Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.
3. Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
4. Kerberos requires the clocks of the involved hosts to be synchronized.

Question 34

Which of the following are the countermeasures against a man-in-the-middle attack? Each correct answer represents a complete solution.

Choose all that apply.

1. Using public key infrastructure authentication.
2. Using basic authentication.
3. Using Secret keys for authentication.
4. Using Off-channel verification.

Question 35

Which of the following statements best describes a certification authority?

1. A certification authority is a technique to authenticate digital documents by using computer cryptography.
2. A certification authority is a type of encryption that uses a public key and a private key pair for data encryption.
3. A certification authority is an entity that issues digital certificates for use by other parties.
4. A certification authority is a type of encryption that uses a single key to encrypt and decrypt data.

Question 36

You work as a Network Administrator of a TCP/IP network. You are having DNS resolution problem.

Which of the following utilities will you use to diagnose the problem?

1. TRACERT
2. PING
3. IPCONFIG
4. NSLOOKUP

Question 37

Which of the following should the administrator ensure during the test of a disaster recovery plan? (Choose two.)

1. Ensure that the plan works properly
2. Ensure that all the servers in the organization are shut down.
3. Ensure that each member of the disaster recovery team is aware of their responsibility.
4. Ensure that all client computers in the organization are shut down.

Question 38

The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications.

IPSec uses four components for this.

Which of the following components reduces the size of data transmitted over congested network connections and increases the speed of such networks without losing data?

1. AH
2. ESP
3. IPcomp
4. IKE

Question 39

A helpdesk technician received a phone call from an administrator at a remote branch office. The administrator claimed to have forgotten the password for the root account on UNIX servers and asked for it. Although the technician didn't know any administrator at the branch office, the guy sounded really friendly and since he knew the root password himself, he supplied the caller with the password.

What type of attack has just occurred?

1. Social Engineering attack
2. Brute Force attack
3. War dialing attack
4. Replay attack

Question 40

Which of the following statements about incremental backup are true? Each correct answer represents a complete solution.

Choose two.

1. It is the fastest method of backing up data.
2. It is the slowest method for taking a data backup.
3. It backs up the entire database, including the transaction log.
4. It backs up only the files changed since the most recent backup and clears the archive bit.

Question 41

Maria works as a Network Security Officer for Gentech Inc. She wants to encrypt her network traffic. The specific requirement for the encryption algorithm is that it must be a symmetric key block cipher.

Which of the following techniques will she use to fulfill this requirement?

1. IDEA
2. PGP
3. DES
4. AES

Question 42

Which of the following are the centralized administration technologies? Each correct answer represents a complete solution.

Choose all that apply.

1. RADIUS
2. TACACS+
3. Media Access control
4. Peer-to-Peer

Question 43

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network.

Which of the following phases of the Incident handling process should you follow next to handle this incident?

1. Containment
2. Preparation
3. Recovery
4. Identification

Question 44

A government agency wants one intermediary to combine services from a fixed set of three cloud providers into a single integrated service and to ensure secure data movement between the agency and those providers. In the NIST Cloud Computing Reference Architecture, which role and category does this describe?

1. A cloud carrier providing transport between the agency and the providers
2. A cloud auditor conducting independent assessments of the providers
3. A cloud broker performing service arbitrage
4. A cloud broker performing service aggregation

Question 45

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

1. Buffer-overflow attack
2. Man-in-the-middle attack
3. Shoulder surfing attack
4. Denial-of-Service (DoS) attack

Question 46

Which of the following keys is derived from a preshared key and Extensible Authentication Protocol (EAP)?

1. Pairwise Transient Key
2. Group Temporal Key
3. Private Key
4. Pairwise Master Key

Question 47

An agency's prime contractor will use two subcontractors to build and host parts of a new system. The security architect must ensure that the agency's access control and incident reporting requirements reach every organization that touches the system. Following NIST SP 800-161r1, what should the contract require?

1. Only the prime contractor is bound, because the agency has no direct contract with the subcontractors
2. The prime contractor implements the requirements and flows them down to relevant sub-tier contractors
3. Subcontractor compliance is checked once at contract award, with no later revalidation
4. Subcontractors are excluded from incident reporting so that disruptions are reported only by the prime

Question 48

An organization wants to allow a certificate authority to gain access to the encrypted data and create digital signatures on behalf of the user. The data is encrypted using the public key from a user's certificate.

Which of the following processes fulfills the above requirements?

1. Key escrow
2. Key storage
3. Key revocation
4. Key recovery

Question 49

Which of the following attacks can be overcome by applying cryptography?

1. Web ripping
2. DoS
3. Sniffing
4. Buffer overflow

Question 50

Which of the following processes identifies the threats that can impact the business continuity of operations?

1. Function analysis
2. Risk analysis
3. Business impact analysis
4. Requirement analysis

Question 51

You want to connect a twisted pair cable segment to a fiber-optic cable segment.

Which of the following networking devices will you use to accomplish the task?

1. Hub
2. Switch
3. Repeater
4. Router

Question 52

You work as a technician for Trade Well Inc. The company is in the business of share trading. To enhance security, the company wants users to provide a third key (apart from ID and password) to access the company's Web site.

Which of the following technologies will you implement to accomplish the task?

1. Smart cards
2. Key fobs
3. VPN
4. Biometrics

Question 53

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. John notices that the We-are-secure network is vulnerable to a man-in-the-middle attack since the key exchange process of the cryptographic algorithm it is using does not thenticate participants.

Which of the following cryptographic algorithms is being used by the We-are-secure server?

1. Blowfish
2. Twofish
3. RSA
4. Diffie-Hellman

Question 54

An enterprise architect needs risk assessment results that determine the protection and resiliency requirements for a group of mission/business processes and allocate those requirements to enterprise architecture segments, including the choice of common controls. According to NIST SP 800-30r1, at which tier should this risk assessment be conducted?

1. Tier 1, the organization level
2. Tier 2, the mission/business process level
3. Tier 3, the information system level
4. No tier, because SP 800-30r1 limits risk assessments to individual information systems

Question 55

You work as a Network Administrator for Blue Bell Inc. The company has a TCP-based network. The company has two offices in different cities.

The company wants to connect the two offices by using a public network. You decide to configure a virtual private network (VPN) between the offices.

Which of the following protocols is used by VPN for tunneling?

1. L2TP
2. HTTPS
3. SSL
4. IPSec

Question 56

John works as a Network Administrator for NetPerfect Inc. The company has a Windows-based network. John has been assigned a project to build a network for the sales department of the company. It is important for the LAN to continue working even if there is a break in the cabling.

Which of the following topologies should John use to accomplish the task?

1. Star
2. Mesh
3. Bus
4. Ring

Question 57

You work as a Project Manager for Tech Perfect Inc. You are creating a document which emphasizes the formal study of what your organization is doing currently and where it will be in the future.

Which of the following analysis will help you in accomplishing the task?

1. Cost-benefit analysis
2. Gap analysis
3. Requirement analysis
4. Vulnerability analysis

Question 58

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop.

Which of the following protocols should he disable to ensure that the password is encrypted during remote access?

1. SPAP
2. MSCHAP
3. PAP
4. MSCHAP V2

Question 59

Which of the following firewalls inspects the actual contents of packets?

1. Packet filtering firewall
2. Stateful inspection firewall
3. Application-level firewall
4. Circuit-level firewall