Instant Access ISC.CISSP.v2022-03-15.q465 Actual Practice Test Engine for Free (Page 29)

Question 136

The Wired Equivalency Privacy algorithm (WEP) of the 802.11 Wireless
LAN Standard uses which of the following to protect the confidentiality
of information being transmitted on the LAN?

A.A digital signature that is sent between a mobile station (e.g., a laptop with a wireless Ethernet card) and a base station access point
B.A public/private key pair that is shared between a mobile station (e.g., a laptop with a wireless Ethernet card) and a base station access point
C.A secret key that is shared between a mobile station (e.g., a laptop with a wireless Ethernet card) and a base station access point
D.Frequency shift keying (FSK) of the message that is sent between a mobile station (e.g., a laptop with a wireless Ethernet card) and a base station access point

Question 137

This OSI layer has a service that negotiates transfer syntax and translates data to and from the transfer syntax for users, which may represent data using different syntaxes. At which of the following layers would you find such service?

A.Session
B.Transport
C.Presentation
D.Application

Correct Answer: C

It is responsible for taking information from the "Application layer protocols" and putting it in a form suitable for the application to process.
The presentation-layer implementation of the OSI protocol suite consists of a presentation protocol and a presentation service. The presentation protocol allows presentation-service users (PSusers) to communicate with the presentation service.
A PS-user is an entity that requests the services of the presentation layer. Such requests are made at Presentation-Service Access Points (PSAPs). PS-users are uniquely identified by using PSAP addresses.
Presentation service negotiates transfer syntax and translates data to and from the transfer syntax
for PS-users, which represent data using different syntaxes. The presentation service is used by
two PS-users to agree upon the transfer syntax that will be used. When a transfer syntax is agreed
upon, presentation-service entities must translate the data from the PS-user to the correct transfer
syntax.
The OSI presentation-layer service is defined in the ISO 8822 standard and in the ITU-T X.216
recommendation. The OSI presentation protocol is defined in the ISO 8823 standard and in the
ITU-T X.226 recommendation. A connectionless version of the presentation protocol is specified in
the ISO 9576 standard.
To remember the OSI layers you can use the following Mnemonics:
The first one is from the bottom (Physical Layer - Layer 1) up (Application - Layer 7):
Please Do Not Throw Sausage Pizza Away
There is another mnemonic from the top down:
All People Seem To Need Data Processing
Both maps to:
1. Physical - 2. Data link - 3. Network - 4. Transport - 5. Session - 6. Presentation - 7. Application
The following answers are incorrect: Transport: Responsible for providing end to end data transport services and establish the logical connection between COMPUTERS for example TCP and UDP
Session: Responsible for maintaing the connection between two APPLICATIONS during the data transfer for example NFS , RPC protocol Application : Works closest to the application , it does not itself contain applications but rather the protocols that support the applications. for example HTTP work at this layer but the application it support is IE , Mozilla , opera , chrome ...
The following reference(s) were/was used to create this question: http://www.cisco.com/cpress/cc/td/cpress/fund/ith2nd/it2432.htm and http://en.wikipedia.org/wiki/List_of_network_protocols_%28OSI_model%29

Question 138

What is necessary for a subject to have write access to an object in a Multi-Level Security
Policy?

A.The subject's sensitivity label is dominated by the object's sensitivity label.
B.The subject's sensitivity label subordinates the object's sensitivity label.
C.The subject's sensitivity label is subordinated by the object's sensitivity label.
D.The subject's sensitivity label must dominate the object's sensitivity label.

Question 139

Which Orange book security rating introduces security labels?

A.C2
B.B1
C.B2
D.B3

Question 140

Fault tolerance countermeasures are designed to combat threats to

A.data integrity
B.an uninterruptible power supply
C.design reliability
D.backup and retention capability

Question 136

Question 137

Question 138

Question 139

Question 140

Download PDF File