Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 68)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
63
64
65
66
67
68
69
70
71
72
…
»
»»

Question 332

Which of the following is an advantage in using a bottom-up versus a top-down approach to software testing?

A.Interface errors are detected earlier.
B.Errors in critical modules are detected earlier.
C.Confidence in the system is achieved earlier.
D.Major functions and processing are tested earlier.

Correct Answer: B

Section: Security Operation Adimnistration
Explanation/Reference:
The bottom-up approach to software testing begins with the testing of atomic units, such as programs and modules, and work upwards until a complete system testing has taken place. The advantages of using a bottom-up approach to software testing are the fact that there is no need for stubs or drivers and errors in critical modules are found earlier. The other choices refer to advantages of a top down approach which follows the opposite path.
Source: Information Systems Audit and Control Association, Certified Information Systems Auditor 2002 review manual, chapter 6: Business Application System Development, Acquisition, Implementation and Maintenance (page 299).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 333

Which of the following statements pertaining to packet switching is incorrect?

A.Most data sent today uses digital signals over network employing packet switching.
B.Messages are divided into packets.
C.All packets from a message travel through the same route.
D.Each network node or point examines each packet for routing.

Correct Answer: C

Explanation/Reference:
When using packet switching, messages are broken down into packets. Source and destination address are added to each packet so that when passing through a network node, they can be examined and eventually rerouted through different paths as conditions change. All message packets may travel different paths and not arrive in the same order as sent. Packets need to be collected and reassembled into the original message at destination.
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 334

Which of the following best defines add-on security?

A.Physical security complementing logical security measures.
B.Protection mechanisms implemented as an integral part of an information system.
C.Layer security.
D.Protection mechanisms implemented after an information system has become operational.

Correct Answer: D

Explanation/Reference:
The Internet Security Glossary (RFC2828) defines add-on security as "The retrofitting of protection mechanisms, implemented by hardware or software, after the [automatic data processing] system has become operational."
Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 335

Buffer overflow and boundary condition errors are subsets of which of the following?

A.Race condition errors.
B.Access validation errors.
C.Exceptional condition handling errors.
D.Input validation errors.

Correct Answer: D

Section: Security Operation Adimnistration
Explanation/Reference:
In an input validation error, the input received by a system is not properly checked, resulting in a vulnerability that can be exploited by sending a certain input sequence. There are two important types of input validation errors: buffer overflows (input received is longer than expected input length) and boundary condition error (where an input received causes the system to exceed an assumed boundary). A race condition occurs when there is a delay between the time when a system checks to see if an operation is allowed by the security model and the time when the system actually performs the operation. In an access validation error, the system is vulnerable because the access control mechanism is faulty. In an exceptional condition handling error, the system somehow becomes vulnerable due to an exceptional condition that has arisen.
Source: DUPUIS, Clement, Access Control Systems and Methodology CISSP Open Study Guide, version 1.0, march 2002 (page 105).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 336

Whose role is it to assign classification level to information?

A.Security Administrator
B.User
C.Owner
D.Auditor

Correct Answer: C

The Data/Information Owner is ultimately responsible for the protection of the data. It is the Data/Information Owner that decides upon the classifications of that data they are responsible for.
The data owner decides upon the classification of the data he is responsible for and alters
that classification if the business need arises.
The following answers are incorrect:
Security Administrator. Is incorrect because this individual is responsible for ensuring that
the access right granted are correct and support the polices and directives that the
Data/Information Owner defines.
User. Is Incorrect because the user uses/access the data according to how the
Data/Information Owner defined their access.
Auditor. Is incorrect because the Auditor is responsible for ensuring that the access levels
are appropriate. The Auditor would verify that the Owner classified the data properly.
References:
CISSP All In One Third Edition, Shon Harris, Page 121

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
63
64
65
66
67
68
69
70
71
72
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics