Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 28)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
23
24
25
26
27
28
29
30
31
32
…
»
»»

Question 132

The controls that usually require a human to evaluate the input from sensors or cameras to determine if a real threat exists are associated with:

A.Preventive/physical
B.Detective/technical
C.Detective/physical
D.Detective/administrative

Correct Answer: C

Detective/physical controls usually require a human to evaluate the input
from sensors or cameras to determine if a real threat exists.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 133

In a known plaintext attack, the cryptanalyst has knowledge of which of the following?

A.the ciphertext and the key
B.the plaintext and the secret key
C.both the plaintext and the associated ciphertext of several messages
D.the plaintext and the algorithm

Correct Answer: C

In a known plaintext attack, the attacker has the plaintext and ciphertext of one or more messages. The goal is to discover the key used to encrypt the messages so that other messages can be deciphered and read. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 3rd Ed., chapter 8: Cryptography (page 676). Also check out: Handbook of Applied Cryptography 4th Edition by Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 134

Which of the following statements pertaining to a Criticality Survey is incorrect?

A.It is implemented to gather input from all personnel that is going to be part of the recovery teams.
B.The purpose of the survey must be clearly stated.
C.Management's approval should be obtained before distributing the survey.
D.Its intent is to find out what services and systems are critical to keeping the organization in business.

Correct Answer: A

Section: Risk, Response and Recovery
Explanation/Reference:
The Criticality Survey is implemented through a standard questionnaire to gather input from the most knowledgeable people. Not all personnel that is going to be part of recovery teams is necessarily able to help in identifying critical functions of the organization.
The intent of such a survey is to identify the services and systems that are critical to the organization.
Having a clearly stated purpose for the survey helps in avoiding misinterpretations.
Management's approval of the survey should be obtained before distributing it.
Source: HARE, Chris, CISSP Study Guide: Business Continuity Planning Domain,

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 135

What can be defined as secret communications where the very existence of the message is hidden?

A.Clustering
B.Steganography
C.Cryptology
D.Vernam cipher

Correct Answer: B

Explanation/Reference:
Steganography is a secret communication where the very existence of the message is hidden. For example, in a digital image, the least significant bit of each word can be used to comprise a message without causing any significant change in the image. Key clustering is a situation in which a plaintext message generates identical ciphertext messages using the same transformation algorithm but with different keys. Cryptology encompasses cryptography and cryptanalysis. The Vernam Cipher, also called a one-time pad, is an encryption scheme using a random key of the same size as the message and is used only once. It is said to be unbreakable, even with infinite resources.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 4: Cryptography (page 134).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 136

How would an IP spoofing attack be best classified?

A.Session hijacking attack
B.Passive attack
C.Fragmentation attack
D.Sniffing attack

Correct Answer: A

Explanation/Reference:
IP spoofing is used to convince a system that it is communicating with a known entity that gives an intruder access. IP spoofing attacks is a common session hijacking attack.
Source: KRUTZ, Ronald L & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
77).

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
23
24
25
26
27
28
29
30
31
32
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics