Instant Access ISC.CISSP.v2022-03-15.q465 Actual Practice Test Engine for Free (Page 50)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
CISSP Exam
ISC.CISSP.v2022-03-15.q465 Dumps

««
«
…
45
46
47
48
49
50
51
52
53
54
…
»
»»

Question 241

Which of the following techniques BEST prevents buffer overflows?

A.Boundary and perimeter offset
B.Character set encoding
C.Code auditing
D.Variant type and bit length

Correct Answer: B

Section: Mixed questions
Explanation:
Some products installed on systems can also watch for input values that might result in buffer overflows, but the best countermeasure is proper programming. This means use bounds checking. If an input value is only sup-posed to be nine characters, then the application should only accept nine characters and no more.
Some languages are more susceptible to buffer overflows than others, so programmers should understand these issues, use the right languages for the right purposes, and carry out code review to identify buffer overflow vulnerabilities.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 242

Which of the following encryption methods is known to be unbreakable?

A.Symmetric ciphers.
B.DES codebooks.
C.One-time pads.
D.Elliptic Curve Cryptography.

Correct Answer: C

A One-Time Pad uses a keystream string of bits that is generated completely at random that is used only once. Because it is used only once it is considered unbreakable.
The following answers are incorrect:
Symmetric ciphers. This is incorrect because a Symmetric Cipher is created by substitution and transposition. They can and have been broken
DES codebooks. This is incorrect because Data Encryption Standard (DES) has been broken, it was replaced by Advanced Encryption Standard (AES).
Elliptic Curve Cryptography. This is incorrect because Elliptic Curve Cryptography or ECC is typically used on wireless devices such as cellular phones that have small processors.
Because of the lack of processing power the keys used at often small. The smaller the key, the easier it is considered to be breakable. Also, the technology has not been around long enough or tested thourough enough to be considered truly unbreakable.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 243

What principle requires that for particular sets of transactions, no single individual be allowed to execute all transactions within the set?

A.Use of rights
B.Balance of power
C.Separation of duties
D.Fair use

Correct Answer: C

Separation of duties is considered valuable in deterring fraud since fraud can occur if an opportunity exists for collaboration between various jobs related capabilities. Separation of duty requires that for particular sets of transactions, no single individual be allowed to execute all transactions within the set. The most commonly used examples are the separate transactions needed to initiate a payment and to authorize a payment. No single individual should be capable of executing both transactions.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 244

A type of access control that supports the management of access rights
for groups of subjects is:

A.Discretionary
B.Rule-based
C.Role-based
D.Mandatory

Correct Answer: C

Role-based access control assigns identical privileges to groups of users. This approach simplifies the management of access rights, particularly when members of the group change. Thus, access rights are assigned to a role, not to an individual. Individuals are entered as members of specific groups and are assigned the access privileges of that group. In answer Discretionary, the access rights to an object are assigned by the owner at the owner's discretion. For large numbers of people whose duties and participation may change frequently, this type of access control can become unwieldy. Mandatory access control, answer c, uses security labels or classifications assigned to data items and clearances assigned to users. A user has access rights to data items with a classification equal to or less than the user's clearance. Another restriction is that the user has to have a need-to-know the information; this requirement is identical to the principle of least privilege. Answer 'rule-based access control' assigns access rights based on stated rules. An example of a rule is Access to trade-secret data is restricted to corporate officers, the data owner and the legal department.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 245

The Data Encryption Algorithm performs how many rounds of substitution and permutation?

A.4
B.16
C.54
D.64

Correct Answer: B

Explanation/Reference:
Explanation:
International Data Encryption Algorithm (IDEA) is a block cipher and operates on 64-bit blocks of data, which is divided into 16 smaller blocks, and each has eight rounds of mathematical functions performed on it.
Incorrect Answers:
A: This is the size of one of the smaller blocks.
C: This is not a valid block size for block ciphers.
D: This is incorrect as it is the initial size of the block.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 809, 810

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
45
46
47
48
49
50
51
52
53
54
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.CISSP.v2022-03-15.q465 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics