Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 169)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
164
165
166
167
168
169
170
171
172
173
…
»
»»

Question 837

What is the RESULT of a hash algorithm being applied to a message ?

A.A digital signature
B.A ciphertext
C.A message digest
D.A plaintext

Correct Answer: C

Section: Cryptography
Explanation/Reference:
As when a hash algorithm is applied on a message , it produces a message digest.
The other answers are incorrect because :
A digital signature is a hash value that has been encrypted with a sender's private key.
A ciphertext is a message that appears to be unreadable.
A plaintext is a readable data.
Reference : Shon Harris , AIO v3 , Chapter-8 : Cryptography , Page : 593-594 , 640 , 648

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 838

Which of the following addresses a portion of the primary memory by specifying the actual address of the memory location?

A.direct addressing
B.Indirect addressing
C.implied addressing
D.indexed addressing

Correct Answer: A

Explanation/Reference:
Absolute/Direct
+------+-----+--------------------------------------+
|load | reg | address |
+------+-----+--------------------------------------+
(Effective address = address as given in instruction)
This requires space in an instruction for quite a large address. It is often available on CISC machines which have variable-length instructions, such as x86.
Some RISC machines have a special Load Upper Literal instruction which places a 16-bit constant in the top half of a register. An OR literal instruction can be used to insert a 16-bit constant in the lower half of that register, so that a full 32-bit address can then be used via the register-indirect addressing mode, which itself is provided as "base-plus-offset" with an offset of 0.
http://en.wikipedia.org/wiki/Addressing_mode (Very good coverage of the subject) also see:
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, page 186.
also see:
http://www.comsci.us/ic/notes/am.html

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 839

Which of the following are the steps usually followed in the development of documents such as security policy, standards and procedures?

A.design, development, publication, coding, and testing.
B.design, evaluation, approval, publication, and implementation.
C.initiation, evaluation, development, approval, publication, implementation, and maintenance.
D.feasibility, development, approval, implementation, and integration.

Correct Answer: C

Section: Security Operation Adimnistration
Explanation/Reference:
The common steps used the the development of security policy are initiation of the project, evaluation, development, approval, publication, implementation, and maintenance. The other choices listed are the phases of the software development life cycle and not the step used to develop ducuments such as Policies, Standards, etc...
Reference: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 3, 2002, Auerbach Publications.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 840

Which type of firewall can be used to track connectionless protocols such as UDP and RPC?

A.Stateful inspection firewalls
B.Packet filtering firewalls
C.Application level firewalls
D.Circuit level firewalls

Correct Answer: A

Explanation/Reference:
Packets in a stateful inspection firewall are queued and then analyzed at all OSI layers, providing a more complete inspection of the data. By examining the state and context of the incoming data packets, it helps to track the protocols that are considered "connectionless", such as UDP-based applications and Remote Procedure Calls (RPC).
Source: KRUTZ, Ronald L & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
91).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 841

The fact that a network-based IDS reviews packets payload and headers enable which of the following?

A.Detection of denial of service
B.Detection of all viruses
C.Detection of data corruption
D.Detection of all password guessing attacks

Correct Answer: A

Section: Analysis and Monitoring
Explanation/Reference:
Because a network-based IDS reviews packets and headers, denial of service attacks can also be detected.
This question is an easy question if you go through the process of elimination. When you see an answer containing the keyword: ALL It is something a give away that it is not the proper answer. On the real exam you may encounter a few question where the use of the work ALL renders the choice invalid. Pay close attention to such keyword.
The following are incorrect answers:
Even though most IDSs can detect some viruses and some password guessing attacks, they cannot detect ALL viruses or ALL password guessing attacks. Therefore these two answers are only detractors.
Unless the IDS knows the valid values for a certain dataset, it can NOT detect data corruption.
Reference used for this question:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 48.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
164
165
166
167
168
169
170
171
172
173
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics