Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 121)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
116
117
118
119
120
121
122
123
124
125
…
»
»»

Question 597

Which of the following tools is NOT likely to be used by a hacker?

A.Nessus
B.Saint
C.Tripwire
D.Nmap

Correct Answer: C

Explanation/Reference:
It is a data integrity assurance software aimed at detecting and reporting accidental or malicious changes to data.
The following answers are incorrect :
Nessus is incorrect as it is a vulnerability scanner used by hackers in discovering vulnerabilities in a system.
Saint is also incorrect as it is also a network vulnerability scanner likely to be used by hackers.
Nmap is also incorrect as it is a port scanner for network exploration and likely to be used by hackers.
Reference :
Tripwire : http://www.tripwire.com
Nessus : http://www.nessus.org
Saint : http://www.saintcorporation.com/saint
Nmap : http://insecure.org/nmap

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 598

Select the major difference(s) between block and stream ciphers. (Choose all that apply)

A.Stream = hardware driven; block = software driven
B.Streams = bit by bit; block = encrypted in equal sections
C.Block = bit by bit = encrypted in equal sections
D.Block = hardware driven; stream = software driven
E.Block = slower encryption; stream = fast encryption

Correct Answer: A,B,E

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 599

Which protocol of the TCP/IP suite addresses reliable data transport?

A.Transmission control protocol (TCP)
B.User datagram protocol (UDP)
C.Internet protocol (IP)
D.Internet control message protocol (ICMP)

Correct Answer: A

Explanation/Reference:
TCP provides a full-duplex, connection-oriented, reliable, virtual circuit. It handles the sequencing and retransmission of lost packets.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
85).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 600

What kind of Encryption technology does SSL utilize?

A.Secret or Symmetric key
B.Hybrid (both Symmetric and Asymmetric)
C.Public Key
D.Private key

Correct Answer: B

SSL use public-key cryptography to secure session key, while the session key (secret key) is used to secure the whole session taking place between both parties communicating with each other.
The SSL protocol was originally developed by Netscape. Version 1.0 was never publicly released; version 2.0 was released in February 1995 but "contained a number of security flaws which ultimately led to the design of SSL version 3.0." SSL version 3.0, released in 1996, was a complete redesign of the protocol produced by Paul Kocher working with Netscape engineers Phil Karlton and Alan Freier.
All of the other answers are incorrect

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 601

Which of the following countermeasures would be the most appropriate to prevent possible intrusion or damage from wardialing attacks?

A.Monitoring and auditing for such activity
B.Require user authentication
C.Making sure only necessary phone numbers are made public
D.Using completely different numbers for voice and data accesses

Correct Answer: B

Explanation/Reference:
Knowlege of modem numbers is a poor access control method as an attacker can discover modem numbers by dialing all numbers in a range. Requiring user authentication before remote access is granted will help in avoiding unauthorized access over a modem line.
"Monitoring and auditing for such activity" is incorrect. While monitoring and auditing can assist in detecting a wardialing attack, they do not defend against a successful wardialing attack.
"Making sure that only necessary phone numbers are made public" is incorrect. Since a wardialing attack blindly calls all numbers in a range, whether certain numbers in the range are public or not is irrelevant.
"Using completely different numbers for voice and data accesses" is incorrect. Using different number ranges for voice and data access might help prevent an attacker from stumbling across the data lines while wardialing the public voice number range but this is not an adequate countermeaure.
References:
CBK, p. 214
AIO3, p. 534-535

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
116
117
118
119
120
121
122
123
124
125
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics