Allison Mernka
Quiz by , created more than 1 year ago

CISSP Information Security Quiz on CISSP Official Study Guide Questions (10-12), created by Allison Mernka on 19/11/2021.

8
1
0
Allison Mernka
Created by Allison Mernka almost 5 years ago
Close

CISSP Official Study Guide Questions (10-12)

Question 1 of 60

1

Which of the following is the most important aspect of security?

Select one of the following:

  • Physical security

  • Intrusion detection

  • Logical security

  • Awareness training

Explanation

Question 2 of 60

1

What method can be used to map out the needs of an organization for a new facility?

Select one of the following:

  • Log file audit

  • Critical path analysis

  • Risk analysis

  • Inventory

Explanation

Question 3 of 60

1

What infrastructure component is often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together?

Select one of the following:

  • Server room

  • Wiring closet

  • Datacenter

  • Media cabinets

Explanation

Question 4 of 60

1

Which of the follwoing is not a security-focused design element of a facility or site?

Select one of the following:

  • Separation of work and visitor areas

  • Restricted access to areas with higher value or importance

  • Confidential assets located in the heart or center of a facility

  • Equal access to all locations within a facility

Explanation

Question 5 of 60

1

Which of the following does not need to be true in order to maintain the most efficient and secure server room?

Select one of the following:

  • It must be human compatible.

  • It must include the use of nonwater fire suppressants

  • The humidity must be kept between 40 and 60 percent

  • The temperature must be kept between 60 and 75 degrees Fahrenheit

Explanation

Question 6 of 60

1

Which of the following is not a typical security measure implmented in relation to a media storage facility containing reusable removable media?

Select one of the following:

  • Employing a librarian or custodian

  • Using a check-in/check-out process

  • Hashing

  • Using sanitization tools on returned media

Explanation

Question 7 of 60

1

Which of the following is a double set of doors that is often protected by a guard and is used to contain a subject until their identity and authentication are verified?

Select one of the following:

  • Gate

  • Turnstile

  • Mantrap

  • Proximity detector

Explanation

Question 8 of 60

1

What is the most common form of perimeter security devices or mechanisms?

Select one of the following:

  • Security guards

  • Fences

  • CCTV

  • Lighting

Explanation

Question 9 of 60

1

Which of the following is not a disadvantage of using security guards?

Select one of the following:

  • Security guards are usually unaware of the scope of the operations within a facility.

  • Not all environments and facilities support security guards.

  • Not all security guards are themselves reliable.

  • Prescreening, bonding, and training do not guarantee effective and reliable security guards.

Explanation

Question 10 of 60

1

What is the most common cause of a false positive for a water-based fire supporession system?

Select one of the following:

  • Water shortage

  • People

  • Ionization detectors

  • Placement of detectors in drop ceilings

Explanation

Question 11 of 60

1

What is the most common and inexpensive form of physical access control device?

Select one of the following:

  • Lighting

  • Security guard

  • Key locks

  • Fences

Explanation

Question 12 of 60

1

What type of motion detector senses changes in the electrical or magnetic field surrounding a monitored object?

Select one of the following:

  • Wave

  • Photoelectric

  • Heat

  • Capacitance

Explanation

Question 13 of 60

1

Which of the following is not a typical type of alarm that can be triggered for physical security?

Select one of the following:

  • Preventive

  • Deterrent

  • Repellant

  • Notification

Explanation

Question 14 of 60

1

No matter what form of physical access control is used, a security guard or other monitoring system may be deployed to prevent all but which of the following?

Select one of the following:

  • Piggybacking

  • Espionage

  • Masquerading

  • Abuse

Explanation

Question 15 of 60

1

What is the most important goal of all security solutions?

Select one of the following:

  • Prevention of disclosure

  • Maintaining integrity

  • Human safety

  • Sustaining availability

Explanation

Question 16 of 60

1

What is the ideal humidity range for a computer room?

Select one of the following:

  • 20-40 percent

  • 40-60 percent

  • 60-75 percent

  • 80-95 percent

Explanation

Question 17 of 60

1

Which of the following statements are not true in regards to static electricity?

Select one of the following:

  • Electrostatic discharge can damage most computing comonents

  • Static charge accumulation is more prevalent when there is high humidity

  • Static discharge from a person to a metal object can be over 1,000 volts

  • Static electricity is not managed by the deployment of a UPS

Explanation

Question 18 of 60

1

A Type B fire extinguisher may use all except which o fthe follwoing supporession mediums?

Select one of the following:

  • Water

  • CO2

  • Halon or an acceptable halon substitute

  • Soda acid

Explanation

Question 19 of 60

1

What is the best type of water-based fire suppression system for a computer facility?

Select one of the following:

  • Wet pipe system

  • Dry pipe system

  • Preaction system

  • Deluge system

Explanation

Question 20 of 60

1

Which of the following is typically not a culprit in causing damage to computer equipment in the event of a fire and a triggered suppression?

Select one of the following:

  • Heat

  • Suppression medium

  • Smoke

  • Light

Explanation

Question 21 of 60

1

What is layer 4 of the OSI model?

Select one of the following:

  • Presentation

  • Network

  • Data Link

  • Transport

Explanation

Question 22 of 60

1

What is encapsulation?

Select one of the following:

  • Changing the source and destination addresses of a packet

  • Adding a header and possibly a footer to data as it moves down the OSI stack

  • Verifying a person's identity

  • Protecting evidence until it has been properly collected

Explanation

Question 23 of 60

1

Which OSI model layer manages communications in simplex, half-duplex, and full-duplex modes?

Select one of the following:

  • Applicaiton

  • Session

  • Transport

  • Physical

Explanation

Question 24 of 60

1

Which of the following is the least resistant to EMI?

Select one of the following:

  • Thinnet

  • UTP

  • STP

  • Fiber

Explanation

Question 25 of 60

1

Which of the following is not an example of network segmentation?

Select one of the following:

  • Intranet

  • DMZ

  • Extranet

  • VPN

Explanation

Question 26 of 60

1

What is a field-powered technology that can be used for inventory management without requiring direct physical contact?

Select one of the following:

  • IPX

  • RFID

  • SSID

  • SDN

Explanation

Question 27 of 60

1

If you are the victim of a bluejacking attack, what was compromised?

Select one of the following:

  • Your firewall

  • Your switch

  • Your cell phone

  • Your web cookies

Explanation

Question 28 of 60

1

Which networking technology is based on the IEEE 802.3 standard?

Select one of the following:

  • Ethernet

  • Token Ring

  • FDDI

  • HDLC

Explanation

Question 29 of 60

1

What is a TCP wrapper?

Select one of the following:

  • An encapsulation protocol used by switches

  • An application that can serve as a basic firewall by restricting access based on user IDs or system IDs

  • A security protocol used to protect TCP/IP traffic over WAN links

  • A mechanism to tunnel TCP/IP through non-IP networks

Explanation

Question 30 of 60

1

What is both a benefit and a potentially harmful implication of multilayer protocols?

Select one of the following:

  • Throughput

  • Encapsulation

  • Hash integrity checking

  • Logical addressing

Explanation

Question 31 of 60

1

By examining the source and destination addresses, the applicaiton usage, the source of origin, and the relationship between current packets with the previous packets of the same session, ________________ firewalls are able to grant a broader range of access for authorized users and activities and actively watch for and block unauthorized users and activities.

Select one of the following:

  • Static packet-filtering

  • Application-level gateway

  • Stateful inspection

  • Circuit-level gateway

Explanation

Question 32 of 60

1

What type of firewall evaluates the context of network traffic to make allow and deny decisions?

Select one of the following:

  • Application-level gateway

  • Stateful inspection

  • Circuit-level gateway

  • Static packet-filtering

Explanation

Question 33 of 60

1

Which of the following is not true regarding firewalls?

Select one of the following:

  • They are able to log traffic information

  • They are able to block viruses

  • They are able to issue alarms based on suspected attacks

  • They are unable to prevent internal attacks.

Explanation

Question 34 of 60

1

Which of the following is not a routing protocol?

Select one of the following:

  • OSPF

  • BGP

  • RPC

  • RIP

Explanation

Question 35 of 60

1

A _________________ is an intelligent hub because it knows the addresses of the systems connected on each outbound port. Instead of repeating traffic on every outbound port, it repeats traffic only out of the port on which the detination is known to exist.

Select one of the following:

  • Repeater

  • Switch

  • Bridge

  • Router

Explanation

Question 36 of 60

1

Which of the following is not a technology specifically associated with 802.11 wireless networking?

Select one of the following:

  • 802.1x

  • WPA

  • WEP

  • 802.11i

Explanation

Question 37 of 60

1

Which wireless frequency access method offers the greatest throughput with the least interference?

Select one of the following:

  • FHSS

  • DSSS

  • OFDM

  • OSPF

Explanation

Question 38 of 60

1

What security concept encourages administrators to install firewalls, malware scanners, and an IDS on every host?

Select one of the following:

  • Endpoint security

  • Network access control (NAC)

  • VLAN

  • RADIUS

Explanation

Question 39 of 60

1

What function does ARP perform?

Select one of the following:

  • It is a routing protocol

  • It resolves IP addresses into MAC addresses

  • It resolves physical addresses into logical addresses

  • It manages multiplex streaming

Explanation

Question 40 of 60

1

What form of infrastructure mode wireless networking deployment supports large physical environments through the use of a single SSID but numerous access points?

Select one of the following:

  • Stand-alone

  • Wired extension

  • Enterprise extension

  • Bridge

Explanation

Question 41 of 60

1

____________________ is a layer 2 connection mechanism that uses packet-switching technology to establish virtual circuits between the communicaiton endpoints.

Select one of the following:

  • ISDN

  • Frame Relay

  • SMDS

  • ATM

Explanation

Question 42 of 60

1

Tunnel connections can be established over all except for which of the following?

Select one of the following:

  • WAN links

  • LAN pathways

  • Dial-up connections

  • Stand-alone systems

Explanation

Question 43 of 60

1

_________________________ is a standards-based mechanism for providing encryption for point-to-point TCP/IP traffic.

Select one of the following:

  • UDP

  • IDEA

  • IPSec

  • SDLC

Explanation

Question 44 of 60

1

Which of the following IP addresses is not a private IP address as defined by RFC 1918?

Select one of the following:

  • 10.0.0.18

  • 169.254.1.119

  • 172.31.8.204

  • 192.168.6.43

Explanation

Question 45 of 60

1

Which of the following cannot be linked over a VPN?

Select one of the following:

  • Two distant internet-connected LANs

  • Two systems on the same LAN

  • A system connected to the internet and a LAN connected to the internet

  • Two systems without an intermediary network connection

Explanation

Question 46 of 60

1

What is needed to allow an external client to initiate a communicaiton session with an internal system if the network uses a NAT proxy?

Select one of the following:

  • IPsec tunnel

  • Static mode NAT

  • Static private IP address

  • Reverse DNS

Explanation

Question 47 of 60

1

Which of the following VPN protocols do not offer native data encryption? (Choose all that apply.)

Select one or more of the following:

  • L2F

  • L2TP

  • IPsec

  • PPTP

Explanation

Question 48 of 60

1

At which OSI model layer does the IPsec protocol function?

Select one of the following:

  • Data Link

  • Transport

  • Session

  • Network

Explanation

Question 49 of 60

1

What technology allows for phone conversations to occur over an existing TCP/IP network and internet connection?

Select one of the following:

  • IPsec

  • VoIP

  • SSH

  • TLS

Explanation

Question 50 of 60

1

Which of the following is not a benefit of NAT?

Select one of the following:

  • Hiding the internal IP addressing scheme

  • Sharing a few public internet addresses with a large number of internal clients

  • Using the private IP addresses from RFC 1918 on an internal network

  • Filtering netwrok traffic to prevent brute-force attacks

Explanation

Question 51 of 60

1

A significant benefit of a security control is when it goes unnoticed by users. What is this called?

Select one of the following:

  • Invisibility

  • Transparency

  • Diversion

  • Hiding in plain sight

Explanation

Question 52 of 60

1

When you're designing a security system for internet-delivered email, which of the following is least important?

Select one of the following:

  • Nonrepudiation

  • Availability

  • Message integrity

  • Access restriction

Explanation

Question 53 of 60

1

Which of the following is typically not an element that must be discussed with end users in regard to email retention policies?

Select one of the following:

  • Privacy

  • Auditor review

  • Length of retainer

  • Backup method

Explanation

Question 54 of 60

1

What is it called when email itself is used as an attack mechanism?

Select one of the following:

  • Masquerading

  • Mail-bombing

  • Spoofing

  • Smurf attack

Explanation

Question 55 of 60

1

Why is spam so difficult to stop?

Select one of the following:

  • Filters are ineffective at blocking inbound messages.

  • The source address is usually spoofed.

  • It is an attack requring little expertise

  • Spam can cause denial-of-service attacks.

Explanation

Question 56 of 60

1

Which of the following is a type of connection that can be described as a logical circuit that always exists and is waiting for the customer to send data?

Select one of the following:

  • ISDN

  • PVC

  • VPN

  • SVC

Explanation

Question 57 of 60

1

In addition to maintaining an updated system and controlling physical access, which of the following is the most effective countermeasure against PBX fraud and abuse?

Select one of the following:

  • Encrypting communications

  • Changing default passwords

  • Using transmission logs

  • Taping and archiving all conversations

Explanation

Question 58 of 60

1

Which of the following can be used to bypass even the best physical and logical security mechanisms to gain access to a system?

Select one of the following:

  • Dictionary attacks

  • Denial of service

  • Social engineering

  • Port scanning

Explanation

Question 59 of 60

1

Which of the following is not a denial-of-service attack?

Select one of the following:

  • Exploiting a flaw in a program to consume 100 percent of the CPU

  • Sending malformed packets to a system, causing it to freeze

  • Performing a brute-force attack against a known user account when account lockout is not present

  • Sending thousands of emails to a single address

Explanation

Question 60 of 60

1

What authentication protocol offers no encryption or protection for logon credentials?

Select one of the following:

  • PAP

  • CHAP

  • SSL

  • RADIUS

Explanation

Previous
Check answer
Next