Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 101)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
96
97
98
99
100
101
102
103
104
105
…
»
»»

Question 497

Which of the following is an unintended communication path that is NOT protected by the system's normal security mechanisms?

A.A trusted path
B.A protection domain
C.A covert channel
D.A maintenance hook

Correct Answer: C

Explanation/Reference:
A covert channel is an unintended communication path within a system, therefore it is not protected by the system's normal security mechanisms. Covert channels are a secret way to convey information.
Covert channels are addressed from TCSEC level B2.
The following are incorrect answers:
A trusted path is the protected channel that allows a user to access the Trusted Computing Base (TCB) without being compromised by other processes or users.
A protection domain consists of the execution and memory space assigned to each process.
A maintenance hook is a hardware or software mechanism that was installed to permit system maintenance and to bypass the system's security protections.
Reference used for this question:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 6: Operations Security (page 219).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 498

Which of the following is an example of a connectionless communication protocol?

A.UDP
B.X.25
C.Packet switching
D.TCP

Correct Answer: A

Explanation/Reference:
UDP is an example of connectionless communication protocol, wherein no connection needs to be established before data can be exchanged.
In telecommunications, connectionless describes communication between two network end points in which a message can be sent from one end point to another without prior arrangement. The device at one end of the communication transmits data addressed to the other, without first ensuring that the recipient is available and ready to receive the data. Some protocols allow for error correction by requested retransmission. Internet Protocol (IP) and User Datagram Protocol (UDP) are connectionless protocols.
Connectionless protocols are also described as stateless because the endpoints have no protocol-defined way to remember where they are in a "conversation" of message exchanges.
List of connectionless protocols
Hypertext Transfer Protocol
IP
UDP
ICMP
IPX
TIPC
NetBEUI
References:
KRUTZ, Ronald L & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 86).
and
https://secure.wikimedia.org/wikipedia/en/wiki/Connectionless_protocol

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 499

What is the main difference between a Smurf and a Fraggle attack?

A.A Smurf attack is ICMP-based and a Fraggle attack is UDP-based.
B.A Smurf attack is UDP-based and a Fraggle attack is TCP-based.
C.Smurf attack packets cannot be spoofed.
D.A Smurf attack is UDP-based and a Fraggle attack is ICMP-based.

Correct Answer: A

Section: Network and Telecommunications
Explanation/Reference:
Fraggle is an attack similar to Smurf, but instead of using ICMP, it uses UDP.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 11:
Application and System Development (page 790).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 500

The control of communications test equipment should be clearly addressed by security policy for which of the following reasons?

A.Test equipment is easily damaged.
B.Test equipment can be used to browse information passing on a network.
C.Test equipment is difficult to replace if lost or stolen.
D.Test equipment must always be available for the maintenance personnel.

Correct Answer: B

Explanation/Reference:
Test equipment must be secured. There are equipment and other tools that if in the wrong hands could be used to "sniff" network traffic and also be used to commit fraud. The storage and use of this equipment should be detailed in the security policy for this reason.
The following answers are incorrect:
Test equipment is easily damaged. Is incorrect because it is not the best answer, and from a security point of view not relevent.
Test equipment is difficult to replace if lost or stolen. Is incorrect because it is not the best answer, and from a security point of view not relevent.
Test equipment must always be available for the maintenance personnel. Is incorrect because it is not the best answer, and from a security point of view not relevent.
References:
OIG CBK Operations Security (pages 642 - 643)

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 501

How do you distinguish between a bridge and a router?

A.A bridge simply connects multiple networks, a router examines each packet to determine which network to forward it to.
B."Bridge" and "router" are synonyms for equipment used to join two networks.
C.The bridge is a specific type of router used to connect a LAN to the global Internet.
D.The bridge connects multiple networks at the data link layer, while router connects multiple networks at the network layer.

Correct Answer: D

A bridge operates at the Data Link Layer and a router operates at the Network Layer.
The following answers are incorrect:
A bridge simply connects multiple networks, a router examines each packet to determine which network to forward it to. Is incorrect because both forward packets this is not distinctive enough.
"Bridge" and "router" are synonyms for equipment used to join two networks. Is incorrect because the two are unique and operate at different layers of the OSI model.
The bridge is a specific type of router used to connect a LAN to the global Internet. Is incorrect because a bridge does not connect a LAN to the global internet, but connects networks together creating a LAN.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
96
97
98
99
100
101
102
103
104
105
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics