Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 128)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
123
124
125
126
127
128
129
130
131
132
…
»
»»

Question 632

Kerberos can prevent which one of the following attacks?

A.tunneling attack.
B.playback (replay) attack.
C.destructive attack.
D.process attack.

Correct Answer: B

Explanation/Reference:
Each ticket in Kerberos has a timestamp and are subject to time expiration to help prevent these types of attacks.
The following answers are incorrect:
tunneling attack. This is incorrect because a tunneling attack is an attempt to bypass security and access low-level systems. Kerberos cannot totally prevent these types of attacks.
destructive attack. This is incorrect because depending on the type of destructive attack, Kerberos cannot prevent someone from physically destroying a server.
process attack. This is incorrect because with Kerberos cannot prevent an authorzied individuals from running processes.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 633

Good security is built on which of the following concept?

A.The concept of a pass-through device that only allows certain traffic in and out
B.The Concept of defense in depth
C.The Concept of Preventative controls
D.The Concept of Defensive Controls

Correct Answer: B

This the best of the four answers as a defense that depends on multiple layers is superior to one where all protection is embedded in a single layer (e.g., a firewall). Defense in depth would include all categories of controls.
The Following answers are incorrect:
"Concept of a pass through device that only allows certain traffic in and out" is incorrect. This is one definition of a firewall which can be a component of a defense in depth strategy in combination with other measures.
"Concept of preventative controls" is incorrect. This is a component of a defense in depth strategy but the core concept is that there must be multiple layers of defenses.
"Concept of defensive controls" is incorrect. This is a component of a defense in depth strategy but the core concept is that there must be multiple layers of defenses.
References:
http://en.wikipedia.org/wiki/Defense_in_depth_(computing) http://www.nsa.gov/snac/support/defenseindepth.pdf

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 634

Which of the following is NOT an advantage that TACACS+ has over TACACS?

A.Event logging
B.Use of two-factor password authentication
C.User has the ability to change his password
D.Ability for security tokens to be resynchronized

Correct Answer: A

Although TACACS+ provides better audit trails, event logging is a service
that is provided with TACACS.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3:
Telecommunications and Network Security (page 121).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 635

Which of the following is NOT a form of detective administrative control?

A.Rotation of duties
B.Required vacations
C.Separation of duties
D.Security reviews and audits

Correct Answer: C

Section: Access Control
Explanation/Reference:
Detective administrative controls warn of administrative control violations. Rotation of duties, required vacations and security reviews and audits are forms of detective administrative controls. Separation of duties is the practice of dividing the steps in a system function among different individuals, so as to keep a single individual from subverting the process, thus a preventive control rather than a detective control.
Source: DUPUIS, Cl?ment, Access Control Systems and Methodology CISSP Open Study Guide, version 1.0 (march 2002).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 636

Which OSI/ISO layer is the Media Access Control (MAC) sublayer part of?

A.Transport layer
B.Network layer
C.Data link layer
D.Physical layer

Correct Answer: C

Explanation/Reference:
The data link layer contains the Logical Link Control sublayer and the Media Access Control (MAC) sublayer.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
83).

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
123
124
125
126
127
128
129
130
131
132
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics