Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 14)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
9
10
11
12
13
14
15
16
17
18
…
»
»»

Question 61

In order to be able to successfully prosecute an intruder:

A.A point of contact should be designated to be responsible for communicating with law enforcement and other external agencies.
B.A proper chain of custody of evidence has to be preserved.
C.Collection of evidence has to be done following predefined procedures.
D.Whenever possible, analyze a replica of the compromised resource, not the original, thereby avoiding inadvertently tamping with evidence.

Correct Answer: B

If you intend on prosecuting an intruder, evidence has to be collected in a lawful manner and, most importantly, protected through a secure chain-of-custody procedure that tracks who has been involved in handling the evidence and where it has been stored. All other choices are all important points, but not the best answer, since no prosecution is possible without a proper, provable chain of custody of evidence. Source: ALLEN, Julia H., The CERT Guide to System and Network Security Practices, Addison-Wesley, 2001, Chapter 7: Responding to Intrusions (pages 282-285).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 62

In an organization, an Information Technology security function should:

A.Be a function within the information systems function of an organization.
B.Report directly to a specialized business unit such as legal, corporate security or insurance.
C.Be lead by a Chief Security Officer and report directly to the CEO.
D.Be independent but report to the Information Systems function.

Correct Answer: C

In order to offer more independence and get more attention from management, an IT security function should be independent from IT and report directly to the CEO. Having it report to a specialized business unit (e.g. legal) is not recommended as it promotes a low technology view of the function and leads people to believe that it is someone else's problem. Source: HARE, Chris, Security management Practices CISSP Open Study Guide, version 1.0, april 1999.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 63

Which type of attack involves impersonating a user or a system?

A.Smurfing attack
B.Spoofing attack
C.Spamming attack
D.Sniffing attack

Correct Answer: B

A spoofing attack is when an attempt is made to gain access to a computer system by posing as an authorized user or system. Spamming refers to sending out or posting junk advertising and unsolicited mail. A smurf attack is a type of denial-of-service attack using PING and a spoofed address. Sniffing refers to observing packets passing on a network. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 77).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 64

A server cluster looks like a:

A.single server from the user's point of view
B.dual server from the user's point of view
C.triple server from the user's point of view
D.quardle server from the user's point of view

Correct Answer: A

Explanation/Reference:
The cluster looks like a single server from the user's point of view.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 67.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 65

What is a common problem when using vibration detection devices for perimeter control?

A.They are vulnerable to non-adversarial disturbances.
B.They can be defeated by electronic means.
C.Signal amplitude is affected by weather conditions.
D.They must be buried below the frost line.

Correct Answer: A

Section: Access Control
Explanation/Reference:
Vibration sensors are similar and are also implemented to detect forced entry. Financial institutions may choose to implement these types of sensors on exterior walls, where bank robbers may attempt to drive a vehicle through. They are also commonly used around the ceiling and flooring of vaults to detect someone trying to make an unauthorized bank withdrawal.
Such sensors are proned to false positive. If there is a large truck with heavy equipment driving by it may trigger the sensor. The same with a storm with thunder and lighting, it may trigger the alarm even thou there are no adversarial threat or disturbance.
The following are incorrect answers:
All of the other choices are incorrect.
Reference used for this question:
Harris, Shon (2012-10-18). CISSP All-in-One Exam Guide, 6th Edition (pp. 495-496). McGraw-Hill . Kindle Edition.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
9
10
11
12
13
14
15
16
17
18
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics