Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 61)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
56
57
58
59
60
61
62
63
64
65
…
»
»»

Question 297

Examples of types of physical access controls include all EXCEPT which of the following?

A.badges
B.locks
C.guards
D.passwords

Correct Answer: D

Passwords are considered a Preventive/Technical (logical) control.
The following answers are incorrect:
badges Badges are a physical control used to identify an individual. A badge can include a smart device which can be used for authentication and thus a Technical control, but the actual badge itself is primarily a physical control.
locks Locks are a Preventative Physical control and has no Technical association. guards Guards are a Preventative Physical control and has no Technical association.
The following reference(s) were/was used to create this question:
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 2: Access control systems (page 35).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 298

Which of the following protects a password from eavesdroppers and supports the encryption of communication?

A.Challenge Handshake Authentication Protocol (CHAP)
B.Challenge Handshake Identification Protocol (CHIP)
C.Challenge Handshake Encryption Protocol (CHEP)
D.Challenge Handshake Substitution Protocol (CHSP)

Correct Answer: A

Section: Access Control
Explanation/Reference:
CHAP: A protocol that uses a three way hanbdshake The server sends the client a challenge which includes a random value(a nonce) to thwart replay attacks. The client responds with the MD5 hash of the nonce and the password.
The authentication is successful if the client's response is the one that the server expected.
Reference: Page 450, OIG 2007.
CHAP protects the password from eavesdroppers and supports the encryption of communication.
Reference: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 44.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 299

Which of the following was developed as a simple mechanism for allowing simple network terminals to load their operating system from a server over the LAN?

A.DHCP
B.BootP
C.DNS
D.ARP

Correct Answer: B

Explanation/Reference:
BootP was developed as a simple mechanism for allowing simple network terminals to load their operating system from a server over the LAN. Over time, it has expanded to allow centralized configuration of many aspects of a host's identity and behavior on the network. Note that DHCP, more complex, has replaced BootP over time.
Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 300

Which of the following are NOT a countermeasure to traffic analysis?

A.Padding messages.
B.Eavesdropping.
C.Sending noise.
D.Faraday Cage

Correct Answer: B

Section: Security Operation Adimnistration
Explanation/Reference:
Eavesdropping is not a countermeasure, it is a type of attack where you are collecting traffic and attempting to see what is being send between entities communicating with each other.
The following answers are incorrect:
Padding Messages. Is incorrect because it is considered a countermeasure you make messages uniform size, padding can be used to counter this kind of attack, in which decoy traffic is sent out over the network to disguise patterns and make it more difficult to uncover patterns.
Sending Noise. Is incorrect because it is considered a countermeasure, tansmitting non-informational data elements to disguise real data.
Faraday Cage Is incorrect because it is a tool used to prevent emanation of electromagnetic waves. It is a very effective tool to prevent traffic analysis.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 301

Which type of control is concerned with avoiding occurrences of risks?

A.Deterrent controls
B.Detective controls
C.Preventive controls
D.Compensating controls

Correct Answer: C

Section: Access Control
Explanation/Reference:
Preventive controls are concerned with avoiding occurrences of risks while deterrent controls are concerned with discouraging violations. Detecting controls identify occurrences and compensating controls are alternative controls, used to compensate weaknesses in other controls. Supervision is an example of compensating control.
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
56
57
58
59
60
61
62
63
64
65
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics