Free ISSAP Exam Braindumps (page: 10)

Page 10 of 61

You have decided to implement video surveillance in your company in order to enhance network security.
Which of the following locations must have a camera in order to provide the minimum level of security for the network resources? Each correct answer represents a complete solution. Choose two.

  1. Parking lot
  2. All hallways
  3. Server Rooms
  4. All offices
  5. All entrance doors

Answer(s): A,E

Explanation:

The minimum coverage area for cameras to protect your network resources would be all entrance doors (that allows you to see everyone that comes and goes) and the server rooms (you can see anyone doing anything with the servers). Answer option B is incorrect. Anyone leaving the building with hardware or data would be detected by the entrance way cameras. Hallway cameras add extra expense with no real extra protection for the network. Answer option A is incorrect. The only purpose (for protecting the network) of monitoring the parking lot is to see who enters and leaves. That is already accomplished with the entrance way cameras.

Answer option D is incorrect. This would involve a level of monitoring well beyond the minimum. It is also likely to make employees very uncomfortable with that level of scrutiny.



You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs.
What will you implement to accomplish this?

  1. Microsoft Internet Information Server (IIS)
  2. VPN
  3. FTP server
  4. Certificate server

Answer(s): D

Explanation:

You will implement certificate server to use public key and private key pairs for secure communication on the intranet. Certificate server is a standards-based, highly customizable server program for managing the creation, issuance, and renewal of digital certificates. It uses public key cryptography that is a technology widely used for secure communication on a network such as intranet or Internet. Public key cryptography uses two types of keys, a public key and a private key. The public key is available to everyone, while the private or secret key is available only to the recipient of the message. For example, when a user sends a message or data to another user, the sender uses a public key to encrypt the data. The receiver uses his private key to decrypt the data. Public key cryptography is the most secure cryptographic implementation.
Answer options B is incorrect. VPN stands for virtual private network. It allows users to use the Internet as a secure pipeline to their corporate local area networks (LANs). Remote users can dial-in to any local Internet Service Provider (ISP) and initiate a VPN session to connect to their corporate LAN over the Internet. Companies using VPNs significantly reduce long- distance dial-up charges. VPNs also provide remote employees with an inexpensive way of remaining connected to their company's LAN for extended periods.
Answer option A is incorrect. Microsoft Internet Information Server (IIS) is a Web and application server for the Internet and private intranets.
IIS receives requests from users on the network using the World Wide Web (WWW) service and transmits information using the Hypertext
Transport Protocol (HTTP). IIS uses Microsoft Transaction Server (MTS) to provide security, performance, and scalability with server side packages.



Which of the following protocols is used to compare two values calculated using the Message Digest (MD5) hashing function?

  1. CHAP
  2. PEAP
  3. EAP
  4. EAP-TLS

Answer(s): A

Explanation:

Challenge Handshake Authentication Protocol (CHAP) involves comparison of two values calculated using the Message Digest (MD5) hashing function. Challenge Handshake Authentication Protocol (CHAP) is an authentication protocol that uses a secure form of encrypted authentication. Using CHAP, network dial-up connections are able to securely connect to almost all

PPP servers.
Answer option C is incorrect. Extensible Authentication Protocol (EAP) is an authentication protocol that provides support for a wide range of authentication methods, such as smart cards, certificates, one-time passwords, public keys, etc. It is an extension to Point-to-Point Protocol
(PPP), which allows the application of arbitrary authentication mechanisms for the validation of a PPP connection.
Answer option D is incorrect. Extensible Authentication Protocol-Transport Level Security (EAP-TLS) is an authentication protocol, which provides mutual authentication, integrity-protected negotiation of cryptographic service providers, and a secret key exchange between two systems that use public key cryptography. EAP-TLS works on a network that is configured for public key infrastructure (PKI) and uses certificates for authentication. These certificates can be stored on computers or on smart cards. Answer option B is incorrect. The Protected Extensible Authentication Protocol, also known as Protected EAP or simply PEAP, is a protocol that encapsulates EAP within an encrypted and authenticated Transport Layer Security (TLS) tunnel. The purpose was to correct deficiencies in
EAP; EAP assumed a protected communication channel, such as that provided by physical security.



Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

  1. Risk analysis
  2. OODA loop
  3. Cryptography
  4. Firewall security

Answer(s): C

Explanation:

Cryptography is responsible for the encoding of messages, and securing the messages during a network communication. Cryptography is a technique of encrypting and decrypting messages.
When the text is encrypted, it is unreadable by humans.
When the text is decrypted, it is readable by the humans. The terms used in cryptography are as follows:
Plaintext: This text can be read by a user.
Ciphertext: This text can be converted to a non-readable format. Encryption: It is the process of creating a ciphertext from a plaintext. Decryption: It is the process of converting a ciphertext to a plaintext. Cipher: It is an algorithm that is used to encrypt and decrypt text. Key: Keys are the elements that are used in the technology of encrypting and decrypting text. Answer option A is incorrect. Risk analysis is the science of risks and their probability and evaluation in a business or a process. It is an important factor in security enhancement and prevention in a system. Risk analysis should be performed as part of the risk management process for each project. The outcome of the risk analysis would be the creation or review of the risk register to identify and quantify risk elements to the project and their potential impact.
Answer option B is incorrect. The OODA loop (for observe, orient, decide, and act) is a concept originally applied to the combat operations process, often at the strategic level in both military and business operations. It is now also often applied to understand commercial operations and learning processes. The concept was developed by military strategist and USAF Colonel John Boyd.



Page 10 of 61



Post your Comments and Discuss ISC2 ISSAP exam with other Community members:

Terry commented on May 24, 2023
i can practice for exam
Anonymous
upvote

Rahul Kumar commented on August 31, 2023
need certification.
CANADA
upvote

Rahul Kumar commented on August 31, 2023
need certification.
CANADA
upvote

Terry commented on May 24, 2023
I can practice for exam
Anonymous
upvote