Instant Access ISC.SSCP.v2022-06-29.q999 Actual Practice Test Engine for Free (Page 77)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
SSCP Exam
ISC.SSCP.v2022-06-29.q999 Dumps

««
«
…
72
73
74
75
76
77
78
79
80
81
…
»
»»

Question 377

Which type of control is concerned with restoring controls?

A.Compensating controls
B.Corrective controls
C.Detective controls
D.Preventive controls

Correct Answer: B

Explanation/Reference:
Corrective controls are concerned with remedying circumstances and restoring controls.
Detective controls are concerned with investigating what happen after the fact such as logs and video surveillance tapes for example.
Compensating controls are alternative controls, used to compensate weaknesses in other controls.
Preventive controls are concerned with avoiding occurrences of risks.
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 378

Which of the following statements pertaining to VPN protocol standards is false?

A.L2TP is a combination of PPTP and L2F.
B.L2TP and PPTP were designed for single point-to-point client to server communication.
C.L2TP operates at the network layer.
D.PPTP uses native PPP authentication and encryption services.

Correct Answer: C

Section: Network and Telecommunications
Explanation/Reference:
L2TP and PPTP were both designed for individual client to server connections; they enable only a single point- to-point connection per session. Dial-up VPNs use L2TP often. Both L2TP and PPTP operate at the data link layer (layer 2) of the OSI model. PPTP uses native PPP authentication and encryption services and L2TP is a combination of PPTP and Layer 2 Forwarding protocol (L2F).
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
95).

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 379

When backing up an applications system's data, which of the following is a key question to be answered first?

A.When to make backups
B.Where to keep backups
C.What records to backup
D.How to store backups

Correct Answer: C

It is critical that a determination be made of WHAT data is important and should be retained and protected. Without determining the data to be backed up, the potential for error increases. A record or file could be vital and yet not included in a backup routine. Alternatively, temporary or insignificant files could be included in a backup routine unnecessarily.
The following answers were incorrect:
When to make backups Although it is important to consider schedules for backups, this is done after the decisions are made of what should be included in the backup routine.
Where to keep backups The location of storing backup copies of data (Such as tapes, online backups, etc) should be made after determining what should be included in the backup routine and the method to store the backup.
How to store backups The backup methodology should be considered after determining what data should be included in the backup routine.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 380

Business Continuity and Disaster Recovery Planning (Primarily) addresses the:

A.Availability of the CIA triad
B.Confidentiality of the CIA triad
C.Integrity of the CIA triad
D.Availability, Confidentiality and Integrity of the CIA triad

Correct Answer: A

Explanation/Reference:
The Information Technology (IT) department plays a very important role in identifying and protecting the company's internal and external information dependencies. Also, the information technology elements of the BCP should address several vital issue, including:
Ensuring that the company employs sufficient physical security mechanisms to preserve vital network and hardware components. including file and print servers.
Ensuring that the organization uses sufficient logical security methodologies (authentication, authorization, etc.) for sensitive data.
Reference: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, page 279.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 381

Diffie Hellman, RSA, and ___________ are all examples of Public Key cryptography?

A.SSL - Secure Sockets Layer
B.Blowfish
C.DSS - Digital Signature Standard
D.AES - Advanced Encryption Standard

Correct Answer: C

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
72
73
74
75
76
77
78
79
80
81
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.SSCP.v2022-06-29.q999 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics