Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 74)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
69
70
71
72
73
74
75
76
77
78
…
»
»»

Question 362

Which of the following would BEST be defined as an absence or weakness of safeguard that could be exploited?

A.A threat
B.A vulnerability
C.A risk
D.An exposure

Correct Answer: B

Section: Risk, Response and Recovery
Explanation/Reference:
It is a software , hardware or procedural weakness that may provide an attacker the open door he is looking for to enter a computer or network and have unauthorized access to resources within the environment. A vulnerability characterizes the absence or weakness of a safeguard that could be exploited. This vulnerability may be a service running on a server, unpatched applications or operating system software etc.
The following answers are incorrect because:
Threat: A threat is defined as a potential danger to information or systems. The threat is someone or something will identify a specific vulnerability and use it against the company or individual. The entity that takes advantage of a vulnerability is referred to as a 'Threat Agent'. A threat agent could be an intruder accessing the network through a port on the firewall , a process accessing data that violates the security policy.
Risk:A risk is the likelihood of a threat agent taking advantage of a vulnerability and the corresponding business impact. If a firewall has several ports open , there is a higher likelihood that an intruder will use one to access the network in an unauthorized method.
Exposure: An exposure is an instance of being exposed to losses from a threat agent.
REFERENCES:
SHON HARRIS , ALL IN ONE THIRD EDITION : Chapter 3 : Security Management Practices , Pages: 57-59

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 363

Which of the following media is MOST resistant to EMI interference?

A.microwave
B.fiber optic
C.twisted pair
D.coaxial cable

Correct Answer: B

A fiber optic cable is a physical medium that is capable of conducting
modulated light trasmission. Fiber optic cable carries signals as light waves, thus creating
higher trasmission speeds and greater distances due to less attenuation. This type of
cabling is more difficult to tap than other cabling and is most resistant to interference,
especially EMI.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3:
Telecommunications and Network Security (page 103).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 364

Which of the following is not a component of a Operations Security "triples"?

A.Asset
B.Threat
C.Vulnerability
D.Risk

Correct Answer: D

Section: Security Operation Adimnistration
Explanation/Reference:
The Operations Security domain is concerned with triples - threats, vulnerabilities and assets.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 216.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 365

Which of the following protects Kerberos against replay attacks?

A.Tokens
B.Passwords
C.Cryptography
D.Time stamps

Correct Answer: D

Section: Network and Telecommunications
Explanation/Reference:
A replay attack refers to the recording and retransmission of packets on the network. Kerberos uses time stamps, which protect against this type of attack.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 8:
Cryptography (page 581).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 366

AH - Authentication Header is used in what industry standard protocol?

A.ESP - Encapsulating Security payload
B.IKE - Internet Key Exchange
C.SSL - Secure Sockets Layer
D.ISAKMP - Internet Security Association and Key Management Protocol
E.IPSEC - Internet Protocol Security

Correct Answer: E

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
69
70
71
72
73
74
75
76
77
78
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics