Latest ISC SSCP First Attempt, Exam real Dumps Updated [Sep-2021]
Get the superior quality SSCP Dumps Questions from PrepAwayExam. Nobody can stop you from getting to your dreams now. Your bright future is just a click away!
NEW QUESTION 397
Which of the following can best eliminate dial-up access through a Remote Access Server as a hacking vector?
- A. Only attaching modems to non-networked hosts.
- B. Installing the Remote Access Server outside the firewall and forcing legitimate users to authenticate to the firewall.
- C. Using a TACACS+ server.
- D. Setting modem ring count to at least 5.
Answer: B
Explanation:
Explanation/Reference:
Containing the dial-up problem is conceptually easy: by installing the Remote Access Server outside the firewall and forcing legitimate users to authenticate to the firewall, any access to internal resources through the RAS can be filtered as would any other connection coming from the Internet.
The use of a TACACS+ Server by itself cannot eliminate hacking.
Setting a modem ring count to 5 may help in defeating war-dialing hackers who look for modem by dialing long series of numbers.
Attaching modems only to non-networked hosts is not practical and would not prevent these hosts from being hacked.
Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 2: Hackers.
NEW QUESTION 398
In Synchronous dynamic password tokens:
- A. The token generates a new password value at fixed time intervals (this password could be based on the time of day encrypted with a secret key).
- B. The authentication entity in a system or workstation knows an owner's secret key and PIN, and the entity verifies that the entered password is invalid and that it was entered during the invalid time window.
- C. The unique password is not entered into a system or workstation along with an owner's PIN.
- D. The token generates a new non-unique password value at fixed time intervals (this password could be based on the time of day encrypted with a secret key).
Answer: A
Explanation:
Synchronous dynamic password tokens:
-The token generates a new password value at fixed time intervals (this password could be the time of day encrypted with a secret key).
-the unique password is entered into a system or workstation along with an owner's PIN.
-The authentication entity in a system or workstation knows an owner's secret key and PIN, and the entity verifies that the entered password is valid and that it was entered during the valid time window.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 37.
NEW QUESTION 399
Which of the following is not a DES mode of operation?
- A. Input feedback
- B. Cipher feedback
- C. Cipher block chaining
- D. Electronic code book
Answer: A
Explanation:
Explanation/Reference:
Output feedback (OFB) is a DES mode of operation, not input feedback.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 4: Cryptography (page 149).
NEW QUESTION 400
One of the following statements about the differences between PPTP and L2TP is NOT true
- A. PPTP can run only on top of IP networks.
- B. PPTP is an encryption protocol and L2TP is not.
- C. L2TP works well with all firewalls and network devices that perform NAT.
- D. L2TP supports AAA servers
Answer: C
Explanation:
Explanation/Reference:
L2TP is affected by packet header modification and cannot cope with firewalls and network devices that perform NAT.
"PPTP can run only on top of IP networks." is correct as PPTP encapsulates datagrams into an IP packet, allowing PPTP to route many network protocols across an IP network.
"PPTP is an encryption protocol and L2TP is not." is correct. When using PPTP, the PPP payload is encrypted with Microsoft Point-to-Point Encryption (MPPE) using MSCHAP or EAP-TLS.
"L2TP supports AAA servers" is correct as L2TP supports TACACS+ and RADIUS.
NOTE:
L2TP does work over NAT. It is possible to use a tunneled mode that wraps every packet into a UDP packet. Port 4500 is used for this purpose. However this is not true of PPTP and it is not true as well that it works well with all firewalls and NAT devices.
References:
All in One Third Edition page 545
Official Guide to the CISSP Exam page 124-126
NEW QUESTION 401
Instructions or code that executes on an end user's machine from a web browser is known as __________ code.
- A. Malware
- B. Windows Scripting
- C. Active X
- D. Mobile
- E. JavaScript
Answer: D
NEW QUESTION 402
Which of the following is true about Kerberos?
- A. It utilizes public key cryptography.
- B. It is a second party authentication system.
- C. It encrypts data after a ticket is granted, but passwords are exchanged in plain text.
- D. It depends upon symmetric ciphers.
Answer: D
Explanation:
Explanation/Reference:
Kerberos depends on secret keys (symmetric ciphers). Kerberos is a third party authentication protocol. It was designed and developed in the mid 1980's by MIT. It is considered open source but is copyrighted and owned by MIT. It relies on the user's secret keys. The password is used to encrypt and decrypt the keys.
The following answers are incorrect:
It utilizes public key cryptography. Is incorrect because Kerberos depends on secret keys (symmetric ciphers).
It encrypts data after a ticket is granted, but passwords are exchanged in plain text. Is incorrect because the passwords are not exchanged but used for encryption and decryption of the keys.
It is a second party authentication system. Is incorrect because Kerberos is a third party authentication system, you authenticate to the third party (Kerberos) and not the system you are accessing.
References:
MIT http://web.mit.edu/kerberos/
Wikipedi http://en.wikipedia.org/wiki/Kerberos_%28protocol%29
OIG CBK Access Control (pages 181 - 184)
AIOv3 Access Control (pages 151 - 155)
NEW QUESTION 403
Which of the following networking devices allows the connection of two or more homogeneous LANs in a simple way where they forward the traffic based on the MAC address ?
- A. Routers
- B. Bridges
- C. Firewalls
- D. Gateways
Answer: B
Explanation:
Explanation/Reference:
Bridges are simple, protocol-dependent networking devices that are used to connect two or more homogeneous LANs to form an extended LAN.
A bridge does not change the contents of the frame being transmitted but acts as a relay.
A gateway is designed to reduce the problems of interfacing any combination of local networks that employ different level protocols or local and long-haul networks.
A router connects two networks or network segments and may use IP to route messages.
Firewalls are methods of protecting a network against security threats from other systems or networks by centralizing and controlling access to the protected network segment.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter
7: Telecommunications and Network Security (page 397).
NEW QUESTION 404
One of the following statements about the differences between PPTP and L2TP is NOT true
- A. PPTP can run only on top of IP networks.
- B. PPTP is an encryption protocol and L2TP is not.
- C. L2TP works well with all firewalls and network devices that perform NAT.
- D. L2TP supports AAA servers
Answer: C
Explanation:
Section: Network and Telecommunications
Explanation/Reference:
L2TP is affected by packet header modification and cannot cope with firewalls and network devices that perform NAT.
"PPTP can run only on top of IP networks." is correct as PPTP encapsulates datagrams into an IP packet, allowing PPTP to route many network protocols across an IP network.
"PPTP is an encryption protocol and L2TP is not." is correct. When using PPTP, the PPP payload is encrypted with Microsoft Point-to-Point Encryption (MPPE) using MSCHAP or EAP-TLS.
"L2TP supports AAA servers" is correct as L2TP supports TACACS+ and RADIUS.
NOTE:
L2TP does work over NAT. It is possible to use a tunneled mode that wraps every packet into a UDP packet.
Port 4500 is used for this purpose. However this is not true of PPTP and it is not true as well that it works well with all firewalls and NAT devices.
References:
All in One Third Edition page 545
Official Guide to the CISSP Exam page 124-126
NEW QUESTION 405
Which of the following is not a security goal for remote access?
- A. Protection of confidential data
- B. Automated login for remote users
- C. Reliable authentication of users and systems
- D. Easy to manage access control to systems and network resources
Answer: B
Explanation:
Section: Access Control
Explanation/Reference:
An automated login function for remote users would imply a weak authentication, thus certainly not a security goal.
Source: TIPTON, Harold F. & KRAUSE, Micki, Information Security Management Handbook, 4th edition, volume 2, 2001, CRC Press, Chapter 5: An Introduction to Secure Remote Access (page 100).
NEW QUESTION 406
A deviation from an organization-wide security policy requires which of the following?
- A. Risk Acceptance
- B. Risk Containment
- C. Risk Assignment
- D. Risk Reduction
Answer: A
Explanation:
Section: Risk, Response and Recovery
Explanation/Reference:
A deviation from an organization-wide security policy requires you to manage the risk. If you deviate from the security policy then you are required to accept the risks that might occur.
In some cases, it may be prudent for an organization to simply accept the risk that is presented in certain scenarios. Risk acceptance is the practice of accepting certain risk(s), typically based on a business decision that may also weigh the cost versus the benefit of dealing with the risk in another way.
The OIG defines Risk Management as: This term characterizes the overall process.
The first phase of risk assessment includes identifying risks, risk-reducing measures, and the budgetary impact of implementing decisions related to the acceptance, avoidance, or transfer of risk.
The second phase of risk management includes the process of assigning priority to, budgeting, implementing, and maintaining appropriate risk-reducing measures.
Risk management is a continuous process of ever-increasing complexity. It is how we evaluate the impact of exposures and respond to them. Risk management minimizes loss to information assets due to undesirable events through identification, measurement, and control. It encompasses the overall security review, risk analysis, selection and evaluation of safeguards, cost-benefit analysis, management decision, and safeguard identification and implementation, along with ongoing effectiveness review.
Risk management provides a mechanism to the organization to ensure that executive management knows current risks, and informed decisions can be made to use one of the risk management principles: risk avoidance, risk transfer, risk mitigation, or risk acceptance.
The 4 ways of dealing with risks are: Avoidance, Transfer, Mitigation, Acceptance The following answers are incorrect:
Risk assignment. Is incorrect because it is a distractor, assignment is not one of the ways to manage risk.
Risk reduction. Is incorrect because there was a deviation of the security policy. You could have some additional exposure by the fact that you deviated from the policy.
Risk containment. Is incorrect because it is a distractor, containment is not one of the ways to manage risk.
Reference(s) used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 8882-8886). Auerbach Publications. Kindle Edition.
and
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 10206-10208). Auerbach Publications. Kindle Edition.
NEW QUESTION 407
Which of the following statements pertaining to block ciphers is incorrect?
- A. It operates on fixed-size blocks of plaintext.
- B. Plain text is encrypted with a public key and decrypted with a private key.
- C. Some Block ciphers can operate internally as a stream.
- D. It is more suitable for software than hardware implementations.
Answer: B
Explanation:
Explanation/Reference:
Block ciphers do not use public cryptography (private and public keys).
Block ciphers is a type of symmetric-key encryption algorithm that transforms a fixed-size block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length. They are appropriate for software implementations and can operate internally as a stream. See more info below about DES in Output Feedback Mode (OFB), which makes use internally of a stream cipher.
The output feedback (OFB) mode makes a block cipher into a synchronous stream cipher. It generates keystream blocks, which are then XORed with the plaintext blocks to get the ciphertext. Just as with other stream ciphers, flipping a bit in the ciphertext produces a flipped bit in the plaintext at the same location.
This property allows many error correcting codes to function normally even when applied before encryption.
Reference(s) used for this question:
Wikipedia on Block Cipher mode at: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation and
http://www.itl.nist.gov/fipspubs/fip81.htm
NEW QUESTION 408
Making sure that the data has not been changed unintentionally, due to an accident or malice is:
- A. Integrity.
- B. Auditability.
- C. Availability.
- D. Confidentiality.
Answer: A
Explanation:
Section: Security Operation Adimnistration
Explanation/Reference:
Integrity refers to the protection of information from unauthorized modification or deletion.
Confidentiality is incorrect. Confidentiality refers to the protection of information from unauthorized disclosure.
Availability is incorrect. Availability refers to the assurance that information and services will be available to authorized users in accordance with the service level objective.
Auditability is incorrect. Auditability refers to the ability to trace an action to the identity that performed it and identify the date and time at which it occurred.
References:
CBK, pp. 5 - 6
AIO3, pp. 56 - 57
NEW QUESTION 409
Which of the following will a Business Impact Analysis NOT identify?
- A. The names of individuals to be contacted during a disaster.
- B. The outage time that can be tolerated by the enterprise as a result of a disaster.
- C. Areas that would suffer the greatest financial or operational loss in the event of a disaster.
- D. Systems critical to the survival of the enterprise.
Answer: A
Explanation:
Explanation/Reference:
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
NEW QUESTION 410
Which of the following statements pertaining to stream ciphers is correct?
- A. A stream cipher generates what is called a keystream.
- B. A stream cipher is slower than a block cipher.
- C. A stream cipher is a type of asymmetric encryption algorithm.
- D. A stream cipher is not appropriate for hardware-based encryption.
Answer: A
Explanation:
Explanation/Reference:
A stream cipher is a type of symmetric encryption algorithm that operates on continuous streams of plain text and is appropriate for hardware-based encryption.
Stream ciphers can be designed to be exceptionally fast, much faster than any block cipher. A stream cipher generates what is called a keystream (a sequence of bits used as a key).
Stream ciphers can be viewed as approximating the action of a proven unbreakable cipher, the one-time pad (OTP), sometimes known as the Vernam cipher. A one-time pad uses a keystream of completely random digits. The keystream is combined with the plaintext digits one at a time to form the ciphertext.
This system was proved to be secure by Claude Shannon in 1949. However, the keystream must be (at least) the same length as the plaintext, and generated completely at random. This makes the system very cumbersome to implement in practice, and as a result the one-time pad has not been widely used, except for the most critical applications.
A stream cipher makes use of a much smaller and more convenient key - 128 bits, for example. Based on this key, it generates a pseudorandom keystream which can be combined with the plaintext digits in a similar fashion to the one-time pad. However, this comes at a cost: because the keystream is now pseudorandom, and not truly random, the proof of security associated with the one-time pad no longer holds: it is quite possible for a stream cipher to be completely insecure if it is not implemented properly as we have seen with the Wired Equivalent Privacy (WEP) protocol.
Encryption is accomplished by combining the keystream with the plaintext, usually with the bitwise XOR operation.
Source: DUPUIS, Clement, CISSP Open Study Guide on domain 5, cryptography, April 1999.
More details can be obtained on Stream Ciphers in RSA Security's FAQ on Stream Ciphers.
NEW QUESTION 411
Layer 4 of the OSI model corresponds to which layer of the DoD model?
- A. Layer 3 - Host to Host
- B. Layer 6 - Presentation
- C. Layer 2 - Internet
- D. Layer 1 - Network
- E. Layer 4 - Application
Answer: A
NEW QUESTION 412
Telnet and rlogin use which protocol?
- A. IGP.
- B. TCP.
- C. SNMP.
- D. UDP.
Answer: B
Explanation:
Section: Network and Telecommunications
Explanation/Reference:
TCP allows for reliabilty in connections which would be required for terminal emulation.
The following answers are incorrect:
UDP. Is incorrect because with User Datagram Protocol (UDP) you don't have a reliable transmission, datagrams could arrive out of sequence.
SNMP. Is incorrect because it is a network management protocol, Simple Network Management Protocol (SNMP).
IGP. Is incorrect because Interior Gateway Protocol (IGP) is used interally on a network.
NEW QUESTION 413
What is defined as the rules for communicating between computers on a Local Area Network (LAN)?
- A. LAN topologies
- B. Contention Access Control
- C. LAN transmission methods
- D. LAN Media Access methods
Answer: D
Explanation:
Section: Network and Telecommunications
Explanation/Reference:
Media contention occurs when two or more network devices have data to send at the same time. Because multiple devices cannot talk on the network simultaneously, some type of method must be used to allow one device access to the network media at a time.
This is done in two main ways: carrier sense multiple access collision detect (CSMA/CD) and token passing.
In networks using CSMA/CD technology such as Ethernet, network devices contend for the network media.
When a device has data to send, it first listens to see if any other device is currently using the network. If not, it starts sending its data. After finishing its transmission, it listens again to see if a collision occurred. A collision occurs when two devices send data simultaneously. When a collision happens, each device waits a random length of time before resending its data. In most cases, a collision will not occur again between the two devices. Because of this type of network contention, the busier a network becomes, the more collisions occur.
This is why performance of Ethernet degrades rapidly as the number of devices on a single network increases.
In token-passing networks such as Token Ring and FDDI, a special network frame called a token is passed around the network from device to device. When a device has data to send, it must wait until it has the token and then sends its data. When the data transmission is complete, the token is released so that other devices may use the network media. The main advantage of token-passing networks is that they are deterministic. In other words, it is easy to calculate the maximum time that will pass before a device has the opportunity to send data. This explains the popularity of token-passing networks in some real-time environments such as factories, where machinery must be capable of communicating at a determinable interval.
For CSMA/CD networks, switches segment the network into multiple collision domains. This reduces the number of devices per network segment that must contend for the media. By creating smaller collision domains, the performance of a network can be increased significantly without requiring addressing changes.
The following are incorrect answers:
LAN topologies: Think of a topology as a network's virtual shape or structure. This shape does not necessarily correspond to the actual physical layout of the devices on the network. For example, the computers on a home LAN may be arranged in a circle in a family room, but it would be highly unlikely to find a ring topology there.
Common topologies are: bus, ring, star or meshed. See THIS LINK for more information.
LAN transmission methods: refer to the way packets are sent on the network and are either unicast, multicast or broadcast. See THIS LINK for more information.
Contention Access Control: This is a bogus detractor.
Contention is a real term but Contention Access Control is just made up. Contention methods is very closely related to Media Access Control methods. In communication networks, contention is a media access method that is used to share a broadcast medium. In contention, any computer in the network can transmit data at any time (first come-first served). This system breaks down when two computers attempt to transmit at the same time. This is a case of collision. To avoid collision, carrier sensing mechanism is used. Here each computer listens to the network before attempting to transmit. If the network is busy, it waits until network quiets down. In carrier detection, computers continue to listen to the network as they transmit. If computer detects another signal that interferes with the signal it is sending, it stops transmitting. Both computers then wait for random amount of time and attempt to transmit. Contention methods are most popular media access control method on LANs.
Reference(s) used for this question:
http://docwiki.cisco.com/wiki/Introduction_to_LAN_Protocols#LAN_Media-Access_Methods
http://en.wikipedia.org/wiki/Contention_%28telecommunications%29
NEW QUESTION 414
Which of the following IEEE standards defines the token ring media access method?
- A. 802.11
- B. 802.2
- C. 802.5
- D. 802.3
Answer: B
Explanation:
Explanation/Reference:
The IEEE 802.5 standard defines the token ring media access method. 802.3 refers to Ethernet's CSMA/ CD, 802.11 refers to wireless communications and 802.2 refers to the logical link control.
Source: KRUTZ, Ronald L & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page
109).
NEW QUESTION 415
......
ISC Practice Test Engine with SSCP Questions: https://drive.google.com/open?id=123Ej1dQBr7LryTXKpZI5NRaijwBcTgPC
Guaranteed Success with Valid ISC SSCP Dumps: https://www.prepawayexam.com/ISC/braindumps.SSCP.ete.file.html