Instant Access ISC.CISSP.v2022-03-15.q465 Actual Practice Test Engine for Free (Page 68)

Question 331

Which term below BEST describes the concept of least privilege?

A.Active monitoring of facility entry access points.
B.Each user is granted the lowest clearance required for their tasks.
C.A formal separation of command, program, and interface functions.
D.A combination of classification and categories that represents the sensitivity of information.

Question 332

Which one of the following is a technical solution for the quality of service, speed, and security problems facing the Internet?

A.Random Early Detection (RED) queuing
B.Multi-protocol label-switching (MPLS)
C.Public Key Cryptography Standard (PKCS)
D.Resource Reservation Protocol (RSVP)

Correct Answer: B

The original answer to this question was RED however I think this is incorrect because of this reason. Both Red and MPLS deal with qos/cos issues, there by increasing speed. Mpls more so the RED. However I have not been able to find any documents that state RED is a security implementation while MPLS is heavy used in the ISP VPN market. See this link for MPLS security http://www.nwfusion.com/research/2001/0521feat2.html Below are the link that are formation of the ration for this answer of B (MPLS)
Congestion avoidance algorithm in which a small percentage of packets are dropped when congestion is detected and before the queue in question overflows completely http://www.cisco.com/univercd/cc/td/doc/cisintwk/ita/r12.htm Multiprotocol Label Switching. Switching method that forwards IP traffic using a label. This label instructs the routers and the switches in the network where to forward the packets based on preestablished IP routing information http://www.cisco.com/univercd/cc/td/doc/cisintwk/ita/m12.htm Resource Reservation Protocol. Protocol that supports the reservation of resources across an IP network. Applications running on IP end systems can use RSVP to indicate to other nodes the nature (bandwidth, jitter, maximum burst, and so on) of the packet streams they want to receive. RSVP depends on IPv6. Also known as Resource Reservation Setup Protocol. http://www.cisco.com/univercd/cc/td/doc/cisintwk/ita/r12.htm Random Early Detection (RED) is the recommended approach for queue congestion management in routers (Braden et al., 1998). Although in its basic form RED can be implemented in a relatively short C program, as the speed of ports and the number of queues per port increase, the implementation moves more and more into hardware. Different vendors choose different ways to implement and support RED in their silicon implementations. The degree of programmability, the number of queues, the granularity among queues, and the calculation methods of the RED parameters all vary from implementation to implementation. Some of these differences are irrelevant to the behavior of the algorithm-and hence to the resulting network behavior. Some of the differences, however, may result in a very different behavior of the RED algorithm-and hence of the network efficiency. http://www.cisco.com/en/US/products/hw/routers/ps167/products_white_paper09186a0080091fe4. shtml
Based on label swapping, a single forwarding mechanism provides opportunities for new control paradigms and applications. MPLS Label Forwarding is performed with a label lookup for an incoming label, which is then swapped with the outgoing label and finally sent to the next hop. Labels are imposed on the packets only once at the edge of the MPLS network and removed at the other end. These labels are assigned to packets based on groupings or forwarding equivalence classes (FECs). Packets belonging to the same FEC get similar treatment. The label is added between the Layer 2 and the Layer 3 header (in a packet environment) or in the virtual path identifier/virtual channel identifier (VPI/VCI) field (in ATM networks). The core network merely reads labels, applies appropriate services, and forwards packets based on the labels. This MPLS lookup and forwarding scheme offers the ability to explicitly control routing based on destination and source addresses, allowing easier introduction of new IP services. http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/xlsw_ds.htm

Question 333

What is the correct sequence which enables an authorized agency to use
the Law Enforcement Access Field (LEAF) to decrypt a message sent by
using the Clipper Chip? The following designations are used for the
respective keys involved Kf, the family key; Ks, the session key; U, a
unique identifier for each Clipper Chip and Ku, the unit key that is
unique to each Clipper Chip.

A.Decrypt the LEAF with the family key, Kf; recover U; obtain a court
order to obtain Ks, the session key. Use the session key to decrypt the message.
B.Decrypt the LEAF with the family key, Kf; recover U; obtain a court
order to obtain the two halves of Ku; recover Ku; and then recover Ks,
the session key. Use the session key to decrypt the message.
C.Obtain a court order to acquire the family key, Kf; recover U and Ku; then recover Ks, the session key. Use the session key to decrypt the message.
D.Obtain a court order to acquire the two halves of Ku, the unit key.
Recover Ku. Decrypt the LEAF with Ku and then recover Ks, the
session key. Use the session key to decrypt the message.

Question 334

When developing a business case for updating a security program, the security program owner MUST do which of the following?

A.Obtain resources for the security program
B.Interview executive management
C.Identify relevant metrics
D.Prepare performance test reports

Question 335

Which of the following mail standards relies on a "Web of Trust"?

A.Secure Multipurpose Internet Mail extensions (S/MIME)
B.Pretty Good Privacy (PGP)
C.MIME Object Security Services (MOSS)
D.Privacy Enhanced Mail (PEM)

Question 331

Question 332

Question 333

Question 334

Question 335

Download PDF File