Instant Access ISC.CISSP.v2022-03-15.q465 Actual Practice Test Engine for Free (Page 34)

Question 161

What is the proper term to refer to a single unit of Ethernet data?

A.Ethernet segment
B.Ethernet datagram
C.Ethernet frame
D.Ethernet packet

Question 162

Which of the following services is provided by S-RPC?

A.Availability
B.Accountability
C.Integrity
D.Authentication

Correct Answer: D

Secure RPC provides authentication services. Secure RPC (Remote
Procedure Call) protects remote procedures with an authentication mechanism. The Diffie-
Hellman authentication mechanism authenticates both the host and the user who is making a request for a service. The authentication mechanism uses Data Encryption Standard
(DES) encryption. Applications that use Secure RPC include NFS and the naming services,
NIS and NIS+.
WHAT IS RPC?
Remote Procedure Call (RPC) is a protocol that one program can use to request a service from a program located in another computer in a network without having to understand network details. (A procedure call is also sometimes known as a function call or a subroutine call.) RPC uses the client/server model. The requesting program is a client and the service-providing program is the server. Like a regular or local procedure call, an RPC is a synchronous operation requiring the requesting program to be suspended until the results of the remote procedure are returned. However, the use of lightweight processes or threads that share the same address space allows multiple RPCs to be performed concurrently.
When program statements that use RPC are compiled into an executable program, a stub is included in the compiled code that acts as the representative of the remote procedure code. When the program is run and the procedure call is issued, the stub receives the request and forwards it to a client runtime program in the local computer. The client runtime program has the knowledge of how to address the remote computer and server application and sends the message across the network that requests the remote procedure. Similarly, the server includes a runtime program and stub that interface with the remote procedure itself. Results are returned the same way.
There are several RPC models and implementations. A popular model and implementation is the Open Software Foundation's Distributed Computing Environment (DCE). The
Institute of Electrical and Electronics Engineers defines RPC in its ISO Remote Procedure
Call Specification, ISO/IEC CD 11578 N6561, ISO/IEC, November 1991.
RPC spans the Transport layer and the Application layer in the Open Systems
Interconnection (OSI) model of network communication. RPC makes it easier to develop an application that includes multiple programs distributed in a network.
All of the other answers are not features of S/RPC.
Reference(s) used for this Question:
http://docs.sun.com/app/docs/doc/816-4883/6mb2joane?a=view
and
http://docs.oracle.com/cd/E23823_01/html/816-4557/auth-2.html
and

Question 163

Although code using a specific program language may not be susceptible to a buffer overflow attack,

A.most calls to plug-in programs are susceptible.
B.most supporting application code is susceptible.
C.the graphical images used by the application could be susceptible.
D.the supporting virtual machine could be susceptible.

Question 164

The following concerns usually apply to what type of architecture?
Desktop systems can contain sensitive information that may be at
risk of being exposed.
Users may generally lack security awareness.
Modems present a vulnerability to dial-in attacks.
Lack of proper backup may exist.

A.Centralized
B.Open system
C.Distributed
D.Symmetric

Question 165

What is an error called that causes a system to be vulnerable because of the environment in which it is installed?

A.Exceptional condition handling error
B.Configuration error
C.Environmental error
D.Access validation error

Question 161

Question 162

Question 163

Question 164

Question 165

Download PDF File