显示标签为“CISSP-ISSAP”的博文。显示所有博文
显示标签为“CISSP-ISSAP”的博文。显示所有博文

2013年11月20日星期三

Le matériel de formation de l'examen de meilleur ISC CISSP-ISSAP

Beaucoup de travailleurs dans l'Industrie IT peut obenir un meilleur travail et améliorer son niveau de vie à travers le Certificat ISC CISSP-ISSAP. Mais la majorité des candidats dépensent beaucoup de temps et d'argent pour préparer le test, ça ne coûte pas dans cette société que le temps est tellement précieux. Pass4Test peut vous aider à économiser le temps et l'effort pendant le cours de la préparation du test ISC CISSP-ISSAP. Choisir le produit de Pass4Test particulier pour le test Certification ISC CISSP-ISSAP vous permet à réussir 100% le test. Votre argent sera tout rendu si malheureusement vous ne passez pas le test.

Le produit de Pass4Test peut assurer les candidats à réussir le test ISC CISSP-ISSAP à la première fois, mais aussi offrir la mise à jour gratuite pendant un an, les clients peuvent recevoir les ressources plus nouvelles. Pass4Test n'est pas seulement un site, mais aussi un bon centre de service.

La partie plus nouvelle de test Certification ISC CISSP-ISSAP est disponible à télécharger gratuitement dans le site de Pass4Test. Les exercices de Pass4Test sont bien proches de test réel ISC CISSP-ISSAP. En comparaison les Q&As dans les autres sites, vous trouverez que les nôtres sont beaucoup plus complets. Les Q&As de Pass4Test sont tout recherchés par les experts de Pass4Test, y compris le test simulation.

Code d'Examen: CISSP-ISSAP
Nom d'Examen: ISC (CISSP-ISSAP - Information Systems Security Architecture Professional)
Questions et réponses: 237 Q&As

Le Certificat de ISC CISSP-ISSAP peut vous aider à monter un autre degré de votre carrière, même que votre niveau de vie sera amélioré. Avoir un Certificat ISC CISSP-ISSAP, c'est-à-dire avoir une grande fortune. Le Certificat ISC CISSP-ISSAP peut bien tester des connaissances professionnelles IT. La Q&A ISC CISSP-ISSAP plus nouvelle vient de sortir qui peut vous aider à faciilter le cours de test préparation. Notre Q&A comprend les meilleurs exercices, test simulation et les réponses.

Les experts de Pass4Test ont fait sortir un nouveau guide d'étude de Certification ISC CISSP-ISSAP, avec ce guide d'étude, réussir ce test a devenu une chose pas difficile. Pass4Test vous permet à réussir 100% le test ISC CISSP-ISSAP à la première fois. Les questions et réponses vont apparaître dans le test réel. Pass4Test peut vous donner une Q&A plus complète une fois que vous choisissez nous. D'ailleurs, la mise à jour gratuite pendant un an est aussi disponible pour vous.

CISSP-ISSAP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSAP.html

NO.1 Which of the following types of attack can be used to break the best physical and logical security
mechanism to gain access to a system?
A. Social engineering attack
B. Cross site scripting attack
C. Mail bombing
D. Password guessing attack
Answer: A

ISC   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.2 Which of the following statements about a stream cipher are true? Each correct answer represents a
complete solution. Choose three.
A. It typically executes at a higher speed than a block cipher.
B. It divides a message into blocks for processing.
C. It typically executes at a slower speed than a block cipher.
D. It divides a message into bits for processing.
E. It is a symmetric key cipher.
Answer: A,D,E

ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.3 A user is sending a large number of protocol packets to a network in order to saturate its resources and
to disrupt connections to prevent communications between services. Which type of attack is this?
A. Denial-of-Service attack
B. Vulnerability attack
C. Social Engineering attack
D. Impersonation attack
Answer: A

ISC   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.4 Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the
authenticity of a certificate to be immediately verified?
A. RSTP
B. SKIP
C. OCSP
D. HTTP
Answer: C

certification ISC   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.5 IPsec VPN provides a high degree of data privacy by establishing trust points between communicating
devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each
correct answer represents a complete solution. Choose two.
A. MD5
B. LEAP
C. AES
D. 3DES
Answer: C,D

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP

NO.6 You are the Security Consultant advising a company on security methods. This is a highly secure
location that deals with sensitive national defense related data. They are very concerned about physical
security as they had a breach last month. In that breach an individual had simply grabbed a laptop and
ran out of the building. Which one of the following would have been most effective in preventing this?
A. Not using laptops.
B. Keeping all doors locked with a guard.
C. Using a man-trap.
D. A sign in log.
Answer: C

certification ISC   CISSP-ISSAP   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.7 Which of the following is a method for transforming a message into a masked form, together with a way
of undoing the transformation to recover the message?
A. Cipher
B. CrypTool
C. Steganography
D. MIME
Answer: A

ISC examen   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.8 Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to
connect and access its private network through a dial-up connection via the Internet. All the data will be
sent across a public network. For security reasons, the management wants the data sent through the
Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.
Which communication protocol will Peter use to accomplish the task?
A. IP Security (IPSec)
B. Microsoft Point-to-Point Encryption (MPPE)
C. Pretty Good Privacy (PGP)
D. Data Encryption Standard (DES)
Answer: A

certification ISC   certification CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.9 Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each
correct answer represents a complete solution. Choose two.
A. GTC
B. MS-CHAP v2
C. AES
D. RC4
Answer: A,B

certification ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.10 You want to implement a network topology that provides the best balance for regional topologies in
terms of the number of virtual circuits, redundancy, and performance while establishing a WAN network.
Which of the following network topologies will you use to accomplish the task?
A. Bus topology
B. Fully meshed topology
C. Star topology
D. Partially meshed topology
Answer: D

ISC   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.11 Which of the following elements of planning gap measures the gap between the total potential for the
market and the actual current usage by all the consumers in the market?
A. Project gap
B. Product gap
C. Competitive gap
D. Usage gap
Answer: D

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.12 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Integrity
B. Confidentiality
C. Authentication
D. Non-repudiation
Answer: D

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.13 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Policy Access Control
B. Mandatory Access Control
C. Discretionary Access Control
D. Role-Based Access Control
Answer: D

certification ISC   CISSP-ISSAP   CISSP-ISSAP

NO.14 Which of the following protocols multicasts messages and information among all member devices in an
IP multicast group?
A. ARP
B. ICMP
C. TCP
D. IGMP
Answer: D

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP

NO.15 Which of the following types of firewall functions at the Session layer of OSI model?
A. Circuit-level firewall
B. Application-level firewall
C. Packet filtering firewall
D. Switch-level firewall
Answer: A

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP examen

NO.16 Which of the following security devices is presented to indicate some feat of service, a special
accomplishment, a symbol of authority granted by taking an oath, a sign of legitimate employment or
student status, or as a simple means of identification?
A. Sensor
B. Alarm
C. Motion detector
D. Badge
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.17 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which
of the following will you use to accomplish this?
A. PGP
B. PPTP
C. IPSec
D. NTFS
Answer: A

ISC examen   certification CISSP-ISSAP   CISSP-ISSAP

NO.18 Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement
two-factor authentication for the employees to access their networks. He has told him that he would like to
use some type of hardware device in tandem with a security or identifying pin number. Adam decides to
implement smart cards but they are not cost effective. Which of the following types of hardware devices
will Adam use to implement two-factor authentication?
A. Biometric device
B. One Time Password
C. Proximity cards
D. Security token
Answer: D

certification ISC   CISSP-ISSAP   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.19 Which of the following terms refers to the method that allows or restricts specific types of packets from
crossing over the firewall.?
A. Hacking
B. Packet filtering
C. Web caching
D. Spoofing
Answer: B

certification ISC   CISSP-ISSAP   CISSP-ISSAP examen

NO.20 Which of the following is used to authenticate asymmetric keys?
A. Digital signature
B. MAC Address
C. Demilitarized zone (DMZ)
D. Password
Answer: A

ISC   CISSP-ISSAP examen   CISSP-ISSAP   CISSP-ISSAP

Vous serez impressionné par le service après vendre de Pass4Test, le service en ligne 24h et la mise à jour après vendre sont gratuit pour vous pendant un an, et aussi vous allez recevoir les informations plus nouvelles à propos de test Certification IT. Vous aurez un résultat imaginaire en coûtant un peu d'argent. D'ailleurs, vous pouvez économier beaucoup de temps et d'efforts avec l'aide de Pass4Test. C'est vraiment un bon marché de choisir le Pass4Test comme le guide de formation.

2013年8月8日星期四

Le meilleur matériel de formation examen ISC CISSP-ISSAP

Vous aurez une assurance 100% à réussir le test ISC CISSP-ISSAP si vous choisissez le produit de Pass4Test. Si malheuresement, vous ne passerez pas le test, votre argent seront tout rendu.


But que Pass4Test n'offre que les produits de qualité est pour vous aider à réussir le test ISC CISSP-ISSAP 100%. Le test simulation offert par Pass4Test est bien proche de test réel. Si vous ne pouvez pas passer le test ISC CISSP-ISSAP, votre argent sera tout rendu.


Bien qu'Il y ait plein de talentueux dans cette société, il manque beaucoup de professionnels dans les domaine en cours de développement, l'Industrie IT est l'un de ces domaines. Donc le test ISC CISSP-ISSAP est un bon l'examination de technique informatique. Pass4Test est un site d'offrir la formation particulière au test ISC CISSP-ISSAP.


Aujourd'hui, il y a pleine de professionnels IT dans cette société. Ces professionnels sont bien populaires mais ils ont à être en face d'une grande compétition. Donc beaucoup de professionnels IT se prouver par les tests de Certification très difficile à réussir. Pass4Test est voilà pour offrir un raccourci au succès de test Certification.


Code d'Examen: CISSP-ISSAP

Nom d'Examen: ISC (CISSP-ISSAP - Information Systems Security Architecture Professional)

Questions et réponses: 237 Q&As

CISSP-ISSAP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSAP.html


NO.1 Which of the following is used to authenticate asymmetric keys?
A. Digital signature
B. MAC Address
C. Demilitarized zone (DMZ)
D. Password
Answer: A

certification ISC   CISSP-ISSAP examen   certification CISSP-ISSAP

NO.2 You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails. Which
of the following will you use to accomplish this?
A. PGP
B. PPTP
C. IPSec
D. NTFS
Answer: A

ISC   CISSP-ISSAP   CISSP-ISSAP examen

NO.3 You are the Security Consultant advising a company on security methods. This is a highly secure
location that deals with sensitive national defense related data. They are very concerned about physical
security as they had a breach last month. In that breach an individual had simply grabbed a laptop and
ran out of the building. Which one of the following would have been most effective in preventing this?
A. Not using laptops.
B. Keeping all doors locked with a guard.
C. Using a man-trap.
D. A sign in log.
Answer: C

ISC   CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP

NO.4 Which of the following is a method for transforming a message into a masked form, together with a way
of undoing the transformation to recover the message?
A. Cipher
B. CrypTool
C. Steganography
D. MIME
Answer: A

ISC examen   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP

NO.5 Which of the following terms refers to the method that allows or restricts specific types of packets from
crossing over the firewall.?
A. Hacking
B. Packet filtering
C. Web caching
D. Spoofing
Answer: B

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.6 Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each
correct answer represents a complete solution. Choose two.
A. GTC
B. MS-CHAP v2
C. AES
D. RC4
Answer: A,B

certification ISC   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.7 Which of the following security devices is presented to indicate some feat of service, a special
accomplishment, a symbol of authority granted by taking an oath, a sign of legitimate employment or
student status, or as a simple means of identification?
A. Sensor
B. Alarm
C. Motion detector
D. Badge
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.8 You want to implement a network topology that provides the best balance for regional topologies in
terms of the number of virtual circuits, redundancy, and performance while establishing a WAN network.
Which of the following network topologies will you use to accomplish the task?
A. Bus topology
B. Fully meshed topology
C. Star topology
D. Partially meshed topology
Answer: D

ISC examen   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.9 Which of the following types of attack can be used to break the best physical and logical security
mechanism to gain access to a system?
A. Social engineering attack
B. Cross site scripting attack
C. Mail bombing
D. Password guessing attack
Answer: A

ISC examen   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.10 Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources
that are required for them. Which of the following access control models will he use?
A. Policy Access Control
B. Mandatory Access Control
C. Discretionary Access Control
D. Role-Based Access Control
Answer: D

certification ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen   CISSP-ISSAP examen

NO.11 Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the
authenticity of a certificate to be immediately verified?
A. RSTP
B. SKIP
C. OCSP
D. HTTP
Answer: C

certification ISC   CISSP-ISSAP   CISSP-ISSAP   certification CISSP-ISSAP

NO.12 A user is sending a large number of protocol packets to a network in order to saturate its resources and
to disrupt connections to prevent communications between services. Which type of attack is this?
A. Denial-of-Service attack
B. Vulnerability attack
C. Social Engineering attack
D. Impersonation attack
Answer: A

ISC   CISSP-ISSAP   CISSP-ISSAP examen

NO.13 Which of the following statements about a stream cipher are true? Each correct answer represents a
complete solution. Choose three.
A. It typically executes at a higher speed than a block cipher.
B. It divides a message into blocks for processing.
C. It typically executes at a slower speed than a block cipher.
D. It divides a message into bits for processing.
E. It is a symmetric key cipher.
Answer: A,D,E

ISC   certification CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP   CISSP-ISSAP

NO.14 Which of the following terms refers to a mechanism which proves that the sender really sent a
particular message?
A. Integrity
B. Confidentiality
C. Authentication
D. Non-repudiation
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.15 IPsec VPN provides a high degree of data privacy by establishing trust points between communicating
devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each
correct answer represents a complete solution. Choose two.
A. MD5
B. LEAP
C. AES
D. 3DES
Answer: C,D

ISC   certification CISSP-ISSAP   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP examen

NO.16 Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement
two-factor authentication for the employees to access their networks. He has told him that he would like to
use some type of hardware device in tandem with a security or identifying pin number. Adam decides to
implement smart cards but they are not cost effective. Which of the following types of hardware devices
will Adam use to implement two-factor authentication?
A. Biometric device
B. One Time Password
C. Proximity cards
D. Security token
Answer: D

ISC   CISSP-ISSAP   CISSP-ISSAP examen

NO.17 Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to
connect and access its private network through a dial-up connection via the Internet. All the data will be
sent across a public network. For security reasons, the management wants the data sent through the
Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.
Which communication protocol will Peter use to accomplish the task?
A. IP Security (IPSec)
B. Microsoft Point-to-Point Encryption (MPPE)
C. Pretty Good Privacy (PGP)
D. Data Encryption Standard (DES)
Answer: A

ISC examen   certification CISSP-ISSAP   certification CISSP-ISSAP

NO.18 Which of the following elements of planning gap measures the gap between the total potential for the
market and the actual current usage by all the consumers in the market?
A. Project gap
B. Product gap
C. Competitive gap
D. Usage gap
Answer: D

ISC examen   certification CISSP-ISSAP   CISSP-ISSAP   CISSP-ISSAP

NO.19 Which of the following protocols multicasts messages and information among all member devices in an
IP multicast group?
A. ARP
B. ICMP
C. TCP
D. IGMP
Answer: D

certification ISC   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP

NO.20 Which of the following types of firewall functions at the Session layer of OSI model?
A. Circuit-level firewall
B. Application-level firewall
C. Packet filtering firewall
D. Switch-level firewall
Answer: A

ISC   CISSP-ISSAP   CISSP-ISSAP examen   certification CISSP-ISSAP   CISSP-ISSAP

Pass4Test possède une grande équipe composée des experts IT qui travaillent dur avec leurs riches expériences et connaissances pour produire un bon outil de formation. Selon les anciens test, le test simulation de Pass4Test est bien lié avec le test réel. Pass4Test peut vous assurer à réussir le test. Maintenant vous ajoutez votre outil de formation au panier, et votre rêve réalisera bien tôt.


2013年7月31日星期三

Le plus récent matériel de formation ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP

Au 21er siècle, il manque encore grand nombreux de gens qualifié de IT. Le test Certificat IT est une bonne façon à examiner les hommes de talent. Ce n'est pas un test facile à réussir. Un bon choix de formation est une assurance pour le succès de test. Le test simulation est bien proche que test réel. Vous pouvez réussir 100%, bien que ce soit la première à participer le test.


Pass4Test est aussi un site d'offrir la ressource des connaissances pour le test Certification IT. Selon les Feedbacks venus de gens qui ont untilié les produits de Pass4Test, Pass4Test est un site fiable comme l'outil de se former. Les Q&As offertes par Pass4Test sont bien précises. Les experts de Pass4Test mettent à jour nos documentations de formation de temps de temps.


Le Certificat ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP est un passport rêvé par beaucoup de professionnels IT. Le test ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP est une bonne examination pour les connaissances et techniques professionnelles. Il demande beaucoup de travaux et efforts pour passer le test ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP. Pass4Test est le site qui peut vous aider à économiser le temps et l'effort pour réussir le test ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP avec plus de possibilités. Si vous êtes intéressé par Pass4Test, vous pouvez télécharger la partie gratuite de Q&A ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP pour prendre un essai.


Code d'Examen: CISSP-ISSAP

Nom d'Examen: ISC (CISSP-ISSAP - Information Systems Security Architecture Professional)

Questions et réponses: 237 Q&As

Code d'Examen: CISSP-ISSEP

Nom d'Examen: ISC (CISSP-ISSEP - Information Systems Security Engineering Professional)

Questions et réponses: 214 Q&As

Code d'Examen: CISSP-ISSMP

Nom d'Examen: ISC (CISSP-ISSMP - Information Systems Security Management Professional)

Questions et réponses: 218 Q&As

Code d'Examen: CSSLP

Nom d'Examen: ISC (Certified Secure Software Lifecycle Professional Practice Test)

Questions et réponses: 349 Q&As

La Q&A de Pass4Test vise au test Certificat ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP. L'outil de formation ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP offert par Pass4Test comprend les exercices de pratique et le test simulation. Vous pouvez trouver les autres sites de provider la Q&A, en fait vous allez découvrir que c'est l'outil de formation de Pass4Test qui offre les documentaions plus compètes et avec une meilleure qualité.


Le test ISC CISSP-ISSAP CISSP-ISSEP CISSP-ISSMP CSSLP est populaire dans l'Industrie IT. Il y a beaucoup de professionnels IT veulent ce passport de IT. Votre vie et salaire sera améliorée avec ce Certificat. Vous aurez une meilleure assurance.


CISSP-ISSEP Démo gratuit à télécharger: http://www.pass4test.fr/CISSP-ISSEP.html


NO.1 Which of the following documents is defined as a source document, which is most useful for the ISSE
when classifying the needed security functionality
A. Information Protection Policy (IPP)
B. IMM
C. System Security Context
D. CONOPS
Answer: A

ISC   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP examen

NO.2 Which of the following email lists is written for the technical audiences, and provides weekly
summaries of security issues, new vulnerabilities, potential impact, patches and workarounds, as well as
the actions recommended to mitigate risk
A. Cyber Security Tip
B. Cyber Security Alert
C. Cyber Security Bulletin
D. Technical Cyber Security Alert
Answer: C

ISC examen   CISSP-ISSEP examen   CISSP-ISSEP   CISSP-ISSEP

NO.3 Which of the following security controls is a set of layered security services that address
communications and data security problems in the emerging Internet and intranet application space
A. Internet Protocol Security (IPSec)
B. Common data security architecture (CDSA)
C. File encryptors
D. Application program interface (API)
Answer: B

certification ISC   CISSP-ISSEP   certification CISSP-ISSEP   CISSP-ISSEP

NO.4 Which of the following elements are described by the functional requirements task Each correct
answer represents a complete solution. Choose all that apply.
A. Coverage
B. Accuracy
C. Quality
D. Quantity
Answer: A,C,D

ISC examen   certification CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP

NO.5 Which of the following is used to indicate that the software has met a defined quality level and is ready
for mass distribution either by electronic means or by physical media
A. ATM
B. RTM
C. CRO
D. DAA
Answer: B

ISC   CISSP-ISSEP examen   CISSP-ISSEP   CISSP-ISSEP

NO.6 Which of the following processes culminates in an agreement between key players that a system in its
current configuration and operation provides adequate protection controls
A. Certification and accreditation (C&A)
B. Risk Management
C. Information systems security engineering (ISSE)
D. Information Assurance (IA)
Answer: A

ISC examen   CISSP-ISSEP examen   CISSP-ISSEP

NO.7 FITSAF stands for Federal Information Technology Security Assessment Framework. It is a
methodology for assessing the security of information systems. Which of the following FITSAF levels
shows that the procedures and controls are tested and reviewed?
A. Level 4
B. Level 5
C. Level 1
D. Level 2
E. Level 3
Answer: A

ISC   CISSP-ISSEP   CISSP-ISSEP

NO.8 Which of the following types of firewalls increases the security of data packets by remembering the state
of connection at the network and the session layers as they pass through the filter
A. Stateless packet filter firewall
B. PIX firewall
C. Stateful packet filter firewall
D. Virtual firewall
Answer: C

ISC examen   CISSP-ISSEP examen   certification CISSP-ISSEP   CISSP-ISSEP

NO.9 Which of the following elements of Registration task 4 defines the system's external interfaces as well
as the purpose of each external interface, and the relationship between the interface and the system
A. System firmware
B. System software
C. System interface
D. System hardware
Answer: C

ISC   CISSP-ISSEP examen   CISSP-ISSEP

NO.10 The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has
been accredited in Phase 3. What are the process activities of this phase Each correct answer represents
a complete solution. Choose all that apply.
A. Security operations
B. Continue to review and refine the SSAA
C. Change management
D. Compliance validation
E. System operations
F. Maintenance of the SSAA
Answer: A,C,D,E,F

ISC   certification CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP

NO.11 Which of the following Security Control Assessment Tasks gathers the documentation and supporting
materials essential for the assessment of the security controls in the information system
A. Security Control Assessment Task 4
B. Security Control Assessment Task 3
C. Security Control Assessment Task 1
D. Security Control Assessment Task 2
Answer: C

ISC examen   CISSP-ISSEP   CISSP-ISSEP

NO.12 Which of the following documents were developed by NIST for conducting Certification & Accreditation
(C&A) Each correct answer represents a complete solution. Choose all that apply.
A. NIST Special Publication 800-59
B. NIST Special Publication 800-60
C. NIST Special Publication 800-37A
D. NIST Special Publication 800-37
E. NIST Special Publication 800-53
F. NIST Special Publication 800-53A
Answer: A,B,D,E,F

ISC   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP examen

NO.13 Part of your change management plan details what should happen in the change control system for
your project. Theresa, a junior project manager, asks what the configuration management activities are
for scope changes. You tell her that all of the following are valid configuration management activities
except for which one
A. Configuration Item Costing
B. Configuration Identification
C. Configuration Verification and Auditing
D. Configuration Status Accounting
Answer: A

certification ISC   CISSP-ISSEP examen   CISSP-ISSEP   CISSP-ISSEP

NO.14 Which of the following federal laws is designed to protect computer data from theft
A. Federal Information Security Management Act (FISMA)
B. Computer Fraud and Abuse Act (CFAA)
C. Government Information Security Reform Act (GISRA)
D. Computer Security Act
Answer: B

ISC   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP examen

NO.15 Which of the following guidelines is recommended for engineering, protecting, managing, processing,
and controlling national security and sensitive (although unclassified) information
A. Federal Information Processing Standard (FIPS)
B. Special Publication (SP)
C. NISTIRs (Internal Reports)
D. DIACAP by the United States Department of Defense (DoD)
Answer: B

ISC examen   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP   certification CISSP-ISSEP

NO.16 Which of the following protocols is used to establish a secure terminal to a remote network device
A. WEP
B. SMTP
C. SSH
D. IPSec
Answer: C

ISC examen   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP

NO.17 Which of the following tasks obtains the customer agreement in planning the technical effort
A. Task 9
B. Task 11
C. Task 8
D. Task 10
Answer: B

certification ISC   certification CISSP-ISSEP   CISSP-ISSEP examen   CISSP-ISSEP examen

NO.18 Which of the following is a type of security management for computers and networks in order to identify
security breaches.?
A. IPS
B. IDS
C. ASA
D. EAP
Answer: B

ISC examen   CISSP-ISSEP   CISSP-ISSEP   certification CISSP-ISSEP   CISSP-ISSEP   CISSP-ISSEP

NO.19 Which of the following professionals is responsible for starting the Certification & Accreditation (C&A)
process
A. Authorizing Official
B. Information system owner
C. Chief Information Officer (CIO)
D. Chief Risk Officer (CRO)
Answer: B

ISC examen   CISSP-ISSEP   CISSP-ISSEP

NO.20 Which of the following professionals plays the role of a monitor and takes part in the organization's
configuration management process
A. Chief Information Officer
B. Authorizing Official
C. Common Control Provider
D. Senior Agency Information Security Officer
Answer: C

certification ISC   certification CISSP-ISSEP   certification CISSP-ISSEP   CISSP-ISSEP   certification CISSP-ISSEP