Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 24)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
19
20
21
22
23
24
25
26
27
28
…
»
»»

Question 112

In biometric identification systems, the parts of the body conveniently available for identification are:

A.neck and mouth
B.hands, face, and eyes
C.feet and hair
D.voice and neck

Correct Answer: B

Today implementation of fast, accurate, reliable, and user-acceptable biometric identification systems are already under way. Because most identity authentication takes place when a people are fully clothed (neck to feet and wrists), the parts of the body conveniently available for this purpose are hands, face, and eyes. From: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 1, Page 7.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 113

Brute force attacks against encryption keys have increased in potency because of increased computing power. Which of the following is often considered a good protection against the brute force cryptography attack?

A.The use of good key generators.
B.The use of session keys.
C.Nothing can defend you against a brute force crypto key attack.
D.Algorithms that are immune to brute force key attacks.

Correct Answer: B

If we assume a crytpo-system with a large key (and therefore a large key space) a brute force attack will likely take a good deal of time - anywhere from several hours to several years depending on a number of variables. If you use a session key for each message you encrypt, then the brute force attack provides the attacker with only the key for that one message. So, if you are encrypting 10 messages a day, each with a different session key, but it takes me a month to break each session key then I am fighting a loosing battle.
The other answers are not correct because:
"The use of good key generators" is not correct because a brute force key attack will
eventually run through all possible combinations of key. Therefore, any key will eventually
be broken in this manner given enough time.
"Nothing can defend you against a brute force crypto key attack" is incorrect, and not the
best answer listed. While it is technically true that any key will eventually be broken by a
brute force attack, the question remains "how long will it take?". In other words, if you
encrypt something today but I can't read it for 10,000 years, will you still care? If the key is
changed every session does it matter if it can be broken after the session has ended? Of
the answers listed here, session keys are "often considered a good protection against the
brute force cryptography attack" as the question asks.
"Algorithms that are immune to brute force key attacks" is incorrect because there currently
are no such algorithms.
References:
Official ISC2 Guide page: 259
All in One Third Edition page: 623

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 114

Which of the following is less likely to be used today in creating a Virtual Private Network?

A.L2TP
B.PPTP
C.IPSec
D.L2F

Correct Answer: D

Section: Network and Telecommunications
Explanation/Reference:
L2F (Layer 2 Forwarding) provides no authentication or encryption. It is a Protocol that supports the creation of secure virtual private dial-up networks over the Internet.
At one point L2F was merged with PPTP to produce L2TP to be used on networks and not only on dial up links.
IPSec is now considered the best VPN solution for IP environments.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, Chapter 8:
Cryptography (page 507).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 115

Related to information security, the prevention of the intentional or unintentional unauthorized disclosure of contents is which of the following?

A.Confidentiality
B.Integrity
C.Availability
D.capability

Correct Answer: A

Section: Security Operation Adimnistration
Explanation/Reference:
Confidentiality is the prevention of the intentional or unintentional unauthorized disclosure of contents.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 60.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 116

Which of the following Kerberos components holds all users' and services' cryptographic keys?

A.The Key Distribution Service
B.The Authentication Service
C.The Key Distribution Center
D.The Key Granting Service

Correct Answer: C

Explanation/Reference:
The Key Distribution Center (KDC) holds all users' and services' cryptographic keys. It provides authentication services, as well as key distribution functionality. The Authentication Service is the part of the KDC that authenticates a principal. The Key Distribution Service and Key Granting Service are distracters and are not defined Kerberos components.
Source: WALLHOFF, John, CISSP Summary 2002, April 2002, CBK#1 Access Control System & Methodology (page 3)

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
19
20
21
22
23
24
25
26
27
28
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics