Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 51)

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
46
47
48
49
50
51
52
53
54
55
…
»
»»

Question 247

Due care is not related to:

A.Good faith
B.Prudent man
C.Profit
D.Best interest

Correct Answer: C

Explanation/Reference:
Officers and directors of a company are expected to act carefully in fulfilling their tasks. A director shall act in good faith, with the care an ordinarily prudent person in a like position would exercise under similar circumstances and in a manner he reasonably believes is in the best interest of the enterprise. The notion of profit would tend to go against the due care principle.
Source: ANDRESS, Mandy, Exam Cram CISSP, Coriolis, 2001, Chapter 10: Law, Investigation, and Ethics (page 186).

Comment: *

Name: *

Email: *

Verification: *

Question 248

Which of the following DoD Model layer provides non-repudiation services?

A.network layer.
B.application layer.
C.transport layer.
D.data link layer.

Correct Answer: B

The Application Layer determines the identity of the communication partners and this is where Non-Repudiation service would be provided as well. See the layers below: C:\Users\MCS\Desktop\1.jpg

DOD Model DoD Model
The following answers are incorrect:
network layer. Is incorrect because the Network Layer mostly has routing protocols, ICMP, IP, and IPSEC. It it not a layer in the DoD Model. It is called the Internet Layer within the DoD model.
transport layer. Is incorrect because the Transport layer provides transparent transfer of data between end users. This is called Host-to-Host on the DoD model but sometimes some books will call it Transport as well on the DoD model.
data link layer. Is incorrect because the Data Link Layer defines the protocols that computers must follow to access the network for transmitting and receiving messages. It is part of the OSI Model. This does not exist on the DoD model, it is called the Link Layer on the DoD model.

Comment: *

Name: *

Email: *

Verification: *

Question 249

What is the role of IKE within the IPsec protocol?

A.peer authentication and key exchange
B.data encryption
C.data signature
D.enforcing quality of service

Correct Answer: A

Section: Network and Telecommunications
Explanation
Explanation/Reference: RFC 2409: The Internet Key Exchange (IKE); DORASWAMY, Naganand & HARKINS, Dan, Ipsec:
The New Security Standard for the Internet, Intranets, and Virtual Private Networks, 1999, Prentice Hall PTR; SMITH, Richard E., Internet Cryptography, 1997, Addison-Wesley Pub Co.

Comment: *

Name: *

Email: *

Verification: *

Question 250

Access Control techniques do not include which of the following choices?

A.Relevant Access Controls
B.Discretionary Access Control
C.Mandatory Access Control
D.Lattice Based Access Control

Correct Answer: A

Access Control Techniques Discretionary Access Control Mandatory Access Control Lattice Based Access Control Rule-Based Access Control Role-Based Access Control Source: DUPUIS, Clement, Access Control Systems and Methodology, Version 1, May 2002, CISSP Open Study Group Study Guide for Domain 1, Page 13.

Comment: *

Name: *

Email: *

Verification: *

Question 251

Which of the following is NOT a form of detective administrative control?

A.Rotation of duties
B.Required vacations
C.Separation of duties
D.Security reviews and audits

Correct Answer: C

Explanation/Reference:
Detective administrative controls warn of administrative control violations. Rotation of duties, required vacations and security reviews and audits are forms of detective administrative controls. Separation of duties is the practice of dividing the steps in a system function among different individuals, so as to keep a single individual from subverting the process, thus a preventive control rather than a detective control.
Source: DUPUIS, Cl?ment, Access Control Systems and Methodology CISSP Open Study Guide, version
1.0 (march 2002).

Comment: *

Name: *

Email: *

Verification: *

««
«
…
46
47
48
49
50
51
52
53
54
55
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email: