You work as a technician for Trade Well Inc. The company is in the business of share trading. To enhance security, the company wants users to provide a third key (apart from ID and password) to access the company's Web site.Which of the following technologies will you implement to accomplish the task?
Answer(s): B
In order to accomplish the task, you should use key fobs. The company will provide key fobs to all its users. This will provide users secure access to the company's Web site. The numbers generated in the key fobs will be used by users as the third key.
Which of the following layers of the OSI model corresponds to the Host-to-Host layer of the TCP/IP model?
Answer(s): A
The transport layer of the OSI model corresponds to the Host-to-Host layer of the TCP/IP model. The transport layer defines how to address the physical locations and devices on the network, how to make connections between nodes, and it also handles the internetworking of messages.The TCP/IP model is a specification for computer network protocols created by DARPA, an agency of the United States Department of Defense.It laid the foundation for ARPANET, which was the world's first wide area network and a predecessor of the Internet. The TCP/IP Model is sometimes called the Internet Reference Model, the DoD Model or the ARPANET Reference Model. Answer options C, D, and B are incorrect. The presentation, application, and session layers of the OSI model correspond to the application layer of the TCP/IP model.The OSI model organizes network communication through seven different layers. Each layer has a group of protocols associated with it.Protocols can be defined as rules that every computer should follow in order to communicate within a network. A protocol stack is formed when a communication needs more than one protocol to complete the process. The commonly used protocol stack is TCP/IP, which is used for communication over the Internet.
You are the Network Administrator for a college. You watch a large number of people (some not even students) going in and out of areas with campus computers (libraries, computer labs, etc.). You have had a problem with laptops being stolen.What is the most cost effective method to prevent this?
It is very inexpensive to put physical locks on laptops that connect them to tables preventing them from being easily stolen.Answer options C, A, and D are incorrect. All of these methods would help ameliorate the situation, but would not be cost effective. All are more expensive than the simpler idea of using laptop locks.
The ATM of a bank is robbed by breaking the ATM machine.Which of the following physical security devices can now be used for verification and historical analysis of the ATM robbery?
Answer(s): D
Closed-circuit television (CCTV) is a device that uses video cameras to transmit a signal to a specific place, on a limited set of monitors. It differs from broadcast television in that the signal is not openly transmitted, though it may employ point to point wireless links. CCTV is often used for surveillance in areas that may need monitoring such as banks, casinos, airports, military installations, and convenience stores.Answer option A is incorrect. Key card cannot be used for verification now as the key card was not used during the robbery. The doors of ATMmachines are attached with a unique key card recognition system that works as an access regulator for users.Answer option B is incorrect. Biometrics is a method of authentication that uses physical characteristics, such as fingerprints, scars, retinal patterns, and other forms of biophysical qualities to identify a user. Nowadays, the usage of biometric devices such as hand scanners and retinal scanners is becoming more common in the business environment. Answer option C is incorrect. An Intrusion detection system (IDS) is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet. It can detect several types of attacks and malicious behaviors that can compromise the security of a network and computers. This includes network attacks against vulnerable services, unauthorized logins and access to sensitive data, and malware (e.g. viruses, worms, etc.). An IDS also detects attacks that originate from within a system. In most cases, an IDS has three main components: Sensors, Console, and Engine. Sensors generate security events. A console is used to alert and control sensors and to monitor events. An engine is used to record events and to generate security alerts based on received security events. In many IDSimplementations, these three components are combined into a single device. Basically, following two types of IDS are used :Network-based IDSHost-based IDS
You have been assigned the task of selecting a hash algorithm. The algorithm will be specifically used to ensure the integrity of certain sensitive files. It must use a 128 bit hash value.Which of the following should you use?
Answer(s): C
Message Digest 5 (MD5) uses a 128 bit hash value and is specifically used to ensure file integrity.Message Digest 5 (MD5) is a cryptographic hash function designed by Ron Rivest. It has a 128-bit hash value. As an Internet standard (RFC 1321), MD5 has been employed in a wide variety of security applications, and is also commonly used to check the integrity of files. However,now that it is easy to generate MD5 collisions, it is possible for the person who created the file to create a second file with the same checksum, so this technique cannot protect against some forms of malicious tampering. In this case MD5 can only provide error-checking functionality. It will recognize a corrupt or incomplete download, which becomes more likely when downloading larger files. An MD5 hash is typically expressed as a 32 digit hexadecimal number.Answer option B is incorrect. SHA (Secure Hash Standard) does not necessarily use a 128 bit hash value and it is not designed specifically to ensure file integrity (though it could be used in that fashion).
Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISSAP content, but please register or login to continue.