Kopieren und bearbeiten

CISSP Official Study Guide Questions (10-12)

Beschreibung

CISSP Information Security Quiz am CISSP Official Study Guide Questions (10-12), erstellt von Allison Mernka am 19/11/2021.
Allison Mernka
Quiz von Allison Mernka, aktualisiert more than 1 year ago
Allison Mernka
Erstellt von Allison Mernka vor fast 5 Jahre
8
1
0

Zusammenfassung der Ressource

Frage 1

Frage
Which of the following is the most important aspect of security?
Antworten
  • Physical security
  • Intrusion detection
  • Logical security
  • Awareness training

Frage 2

Frage
What method can be used to map out the needs of an organization for a new facility?
Antworten
  • Log file audit
  • Critical path analysis
  • Risk analysis
  • Inventory

Frage 3

Frage
What infrastructure component is often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together?
Antworten
  • Server room
  • Wiring closet
  • Datacenter
  • Media cabinets

Frage 4

Frage
Which of the follwoing is not a security-focused design element of a facility or site?
Antworten
  • Separation of work and visitor areas
  • Restricted access to areas with higher value or importance
  • Confidential assets located in the heart or center of a facility
  • Equal access to all locations within a facility

Frage 5

Frage
Which of the following does not need to be true in order to maintain the most efficient and secure server room?
Antworten
  • It must be human compatible.
  • It must include the use of nonwater fire suppressants
  • The humidity must be kept between 40 and 60 percent
  • The temperature must be kept between 60 and 75 degrees Fahrenheit

Frage 6

Frage
Which of the following is not a typical security measure implmented in relation to a media storage facility containing reusable removable media?
Antworten
  • Employing a librarian or custodian
  • Using a check-in/check-out process
  • Hashing
  • Using sanitization tools on returned media

Frage 7

Frage
Which of the following is a double set of doors that is often protected by a guard and is used to contain a subject until their identity and authentication are verified?
Antworten
  • Gate
  • Turnstile
  • Mantrap
  • Proximity detector

Frage 8

Frage
What is the most common form of perimeter security devices or mechanisms?
Antworten
  • Security guards
  • Fences
  • CCTV
  • Lighting

Frage 9

Frage
Which of the following is not a disadvantage of using security guards?
Antworten
  • Security guards are usually unaware of the scope of the operations within a facility.
  • Not all environments and facilities support security guards.
  • Not all security guards are themselves reliable.
  • Prescreening, bonding, and training do not guarantee effective and reliable security guards.

Frage 10

Frage
What is the most common cause of a false positive for a water-based fire supporession system?
Antworten
  • Water shortage
  • People
  • Ionization detectors
  • Placement of detectors in drop ceilings

Frage 11

Frage
What is the most common and inexpensive form of physical access control device?
Antworten
  • Lighting
  • Security guard
  • Key locks
  • Fences

Frage 12

Frage
What type of motion detector senses changes in the electrical or magnetic field surrounding a monitored object?
Antworten
  • Wave
  • Photoelectric
  • Heat
  • Capacitance

Frage 13

Frage
Which of the following is not a typical type of alarm that can be triggered for physical security?
Antworten
  • Preventive
  • Deterrent
  • Repellant
  • Notification

Frage 14

Frage
No matter what form of physical access control is used, a security guard or other monitoring system may be deployed to prevent all but which of the following?
Antworten
  • Piggybacking
  • Espionage
  • Masquerading
  • Abuse

Frage 15

Frage
What is the most important goal of all security solutions?
Antworten
  • Prevention of disclosure
  • Maintaining integrity
  • Human safety
  • Sustaining availability

Frage 16

Frage
What is the ideal humidity range for a computer room?
Antworten
  • 20-40 percent
  • 40-60 percent
  • 60-75 percent
  • 80-95 percent

Frage 17

Frage
Which of the following statements are not true in regards to static electricity?
Antworten
  • Electrostatic discharge can damage most computing comonents
  • Static charge accumulation is more prevalent when there is high humidity
  • Static discharge from a person to a metal object can be over 1,000 volts
  • Static electricity is not managed by the deployment of a UPS

Frage 18

Frage
A Type B fire extinguisher may use all except which o fthe follwoing supporession mediums?
Antworten
  • Water
  • CO2
  • Halon or an acceptable halon substitute
  • Soda acid

Frage 19

Frage
What is the best type of water-based fire suppression system for a computer facility?
Antworten
  • Wet pipe system
  • Dry pipe system
  • Preaction system
  • Deluge system

Frage 20

Frage
Which of the following is typically not a culprit in causing damage to computer equipment in the event of a fire and a triggered suppression?
Antworten
  • Heat
  • Suppression medium
  • Smoke
  • Light

Frage 21

Frage
What is layer 4 of the OSI model?
Antworten
  • Presentation
  • Network
  • Data Link
  • Transport

Frage 22

Frage
What is encapsulation?
Antworten
  • Changing the source and destination addresses of a packet
  • Adding a header and possibly a footer to data as it moves down the OSI stack
  • Verifying a person's identity
  • Protecting evidence until it has been properly collected

Frage 23

Frage
Which OSI model layer manages communications in simplex, half-duplex, and full-duplex modes?
Antworten
  • Applicaiton
  • Session
  • Transport
  • Physical

Frage 24

Frage
Which of the following is the least resistant to EMI?
Antworten
  • Thinnet
  • UTP
  • STP
  • Fiber

Frage 25

Frage
Which of the following is not an example of network segmentation?
Antworten
  • Intranet
  • DMZ
  • Extranet
  • VPN

Frage 26

Frage
What is a field-powered technology that can be used for inventory management without requiring direct physical contact?
Antworten
  • IPX
  • RFID
  • SSID
  • SDN

Frage 27

Frage
If you are the victim of a bluejacking attack, what was compromised?
Antworten
  • Your firewall
  • Your switch
  • Your cell phone
  • Your web cookies

Frage 28

Frage
Which networking technology is based on the IEEE 802.3 standard?
Antworten
  • Ethernet
  • Token Ring
  • FDDI
  • HDLC

Frage 29

Frage
What is a TCP wrapper?
Antworten
  • An encapsulation protocol used by switches
  • An application that can serve as a basic firewall by restricting access based on user IDs or system IDs
  • A security protocol used to protect TCP/IP traffic over WAN links
  • A mechanism to tunnel TCP/IP through non-IP networks

Frage 30

Frage
What is both a benefit and a potentially harmful implication of multilayer protocols?
Antworten
  • Throughput
  • Encapsulation
  • Hash integrity checking
  • Logical addressing

Frage 31

Frage
By examining the source and destination addresses, the applicaiton usage, the source of origin, and the relationship between current packets with the previous packets of the same session, ________________ firewalls are able to grant a broader range of access for authorized users and activities and actively watch for and block unauthorized users and activities.
Antworten
  • Static packet-filtering
  • Application-level gateway
  • Stateful inspection
  • Circuit-level gateway

Frage 32

Frage
What type of firewall evaluates the context of network traffic to make allow and deny decisions?
Antworten
  • Application-level gateway
  • Stateful inspection
  • Circuit-level gateway
  • Static packet-filtering

Frage 33

Frage
Which of the following is not true regarding firewalls?
Antworten
  • They are able to log traffic information
  • They are able to block viruses
  • They are able to issue alarms based on suspected attacks
  • They are unable to prevent internal attacks.

Frage 34

Frage
Which of the following is not a routing protocol?
Antworten
  • OSPF
  • BGP
  • RPC
  • RIP

Frage 35

Frage
A _________________ is an intelligent hub because it knows the addresses of the systems connected on each outbound port. Instead of repeating traffic on every outbound port, it repeats traffic only out of the port on which the detination is known to exist.
Antworten
  • Repeater
  • Switch
  • Bridge
  • Router

Frage 36

Frage
Which of the following is not a technology specifically associated with 802.11 wireless networking?
Antworten
  • 802.1x
  • WPA
  • WEP
  • 802.11i

Frage 37

Frage
Which wireless frequency access method offers the greatest throughput with the least interference?
Antworten
  • FHSS
  • DSSS
  • OFDM
  • OSPF

Frage 38

Frage
What security concept encourages administrators to install firewalls, malware scanners, and an IDS on every host?
Antworten
  • Endpoint security
  • Network access control (NAC)
  • VLAN
  • RADIUS

Frage 39

Frage
What function does ARP perform?
Antworten
  • It is a routing protocol
  • It resolves IP addresses into MAC addresses
  • It resolves physical addresses into logical addresses
  • It manages multiplex streaming

Frage 40

Frage
What form of infrastructure mode wireless networking deployment supports large physical environments through the use of a single SSID but numerous access points?
Antworten
  • Stand-alone
  • Wired extension
  • Enterprise extension
  • Bridge

Frage 41

Frage
____________________ is a layer 2 connection mechanism that uses packet-switching technology to establish virtual circuits between the communicaiton endpoints.
Antworten
  • ISDN
  • Frame Relay
  • SMDS
  • ATM

Frage 42

Frage
Tunnel connections can be established over all except for which of the following?
Antworten
  • WAN links
  • LAN pathways
  • Dial-up connections
  • Stand-alone systems

Frage 43

Frage
_________________________ is a standards-based mechanism for providing encryption for point-to-point TCP/IP traffic.
Antworten
  • UDP
  • IDEA
  • IPSec
  • SDLC

Frage 44

Frage
Which of the following IP addresses is not a private IP address as defined by RFC 1918?
Antworten
  • 10.0.0.18
  • 169.254.1.119
  • 172.31.8.204
  • 192.168.6.43

Frage 45

Frage
Which of the following cannot be linked over a VPN?
Antworten
  • Two distant internet-connected LANs
  • Two systems on the same LAN
  • A system connected to the internet and a LAN connected to the internet
  • Two systems without an intermediary network connection

Frage 46

Frage
What is needed to allow an external client to initiate a communicaiton session with an internal system if the network uses a NAT proxy?
Antworten
  • IPsec tunnel
  • Static mode NAT
  • Static private IP address
  • Reverse DNS

Frage 47

Frage
Which of the following VPN protocols do not offer native data encryption? (Choose all that apply.)
Antworten
  • L2F
  • L2TP
  • IPsec
  • PPTP

Frage 48

Frage
At which OSI model layer does the IPsec protocol function?
Antworten
  • Data Link
  • Transport
  • Session
  • Network

Frage 49

Frage
What technology allows for phone conversations to occur over an existing TCP/IP network and internet connection?
Antworten
  • IPsec
  • VoIP
  • SSH
  • TLS

Frage 50

Frage
Which of the following is not a benefit of NAT?
Antworten
  • Hiding the internal IP addressing scheme
  • Sharing a few public internet addresses with a large number of internal clients
  • Using the private IP addresses from RFC 1918 on an internal network
  • Filtering netwrok traffic to prevent brute-force attacks

Frage 51

Frage
A significant benefit of a security control is when it goes unnoticed by users. What is this called?
Antworten
  • Invisibility
  • Transparency
  • Diversion
  • Hiding in plain sight

Frage 52

Frage
When you're designing a security system for internet-delivered email, which of the following is least important?
Antworten
  • Nonrepudiation
  • Availability
  • Message integrity
  • Access restriction

Frage 53

Frage
Which of the following is typically not an element that must be discussed with end users in regard to email retention policies?
Antworten
  • Privacy
  • Auditor review
  • Length of retainer
  • Backup method

Frage 54

Frage
What is it called when email itself is used as an attack mechanism?
Antworten
  • Masquerading
  • Mail-bombing
  • Spoofing
  • Smurf attack

Frage 55

Frage
Why is spam so difficult to stop?
Antworten
  • Filters are ineffective at blocking inbound messages.
  • The source address is usually spoofed.
  • It is an attack requring little expertise
  • Spam can cause denial-of-service attacks.

Frage 56

Frage
Which of the following is a type of connection that can be described as a logical circuit that always exists and is waiting for the customer to send data?
Antworten
  • ISDN
  • PVC
  • VPN
  • SVC

Frage 57

Frage
In addition to maintaining an updated system and controlling physical access, which of the following is the most effective countermeasure against PBX fraud and abuse?
Antworten
  • Encrypting communications
  • Changing default passwords
  • Using transmission logs
  • Taping and archiving all conversations

Frage 58

Frage
Which of the following can be used to bypass even the best physical and logical security mechanisms to gain access to a system?
Antworten
  • Dictionary attacks
  • Denial of service
  • Social engineering
  • Port scanning

Frage 59

Frage
Which of the following is not a denial-of-service attack?
Antworten
  • Exploiting a flaw in a program to consume 100 percent of the CPU
  • Sending malformed packets to a system, causing it to freeze
  • Performing a brute-force attack against a known user account when account lockout is not present
  • Sending thousands of emails to a single address

Frage 60

Frage
What authentication protocol offers no encryption or protection for logon credentials?
Antworten
  • PAP
  • CHAP
  • SSL
  • RADIUS
Zusammenfassung anzeigen Zusammenfassung ausblenden

Möchten Sie mit GoConqr kostenlos Ihre eigenen Quiz erstellen? eigenen Mehr erfahren.

ähnlicher Inhalt

Infosec Basics
bondarets
2.1 Business Influences and Associated Security Risks
DJ Perrone
Types of Attacks
River L.
Information Security: Chapter 2
marcb176
Data-centric Security
Michael Mihalik
Threats
marnus.db
Information Security FULL WORK
Luis Mauricio Falla Guiulfo
Bibliothek durchsuchen