Which of the following are the countermeasures against a man-in-the-middle attack? Each correct answer represents a complete solution. Choose all that apply.
Answer(s): A,C,D
A user can follow various methods to mitigate a man-in-the-middle attack. To overcome these attacks use authentication techniques that are based on the following:Public key infrastructuresStronger mutual authenticationSecret keys (high information entropy secrets)Passwords (low information entropy secrets)Other criteria, such as voice recognition or other biometrics Off-the-Record Messaging for instant messagingOff-channel verificationCarry-forward verification
Which of the following is an electrical event shows that there is enough power on the grid to prevent from a total power loss but there is no enough power to meet the current electrical demand?
Answer(s): D
A brownout shows that the demand of the electrical power exceeds the capability of the electrical power supply system and reduces the voltage for everyone. It indicates there is enough power on the grid to prevent blackout or a total power loss but there is not enough power to meet the current electrical demand. It frequently occurs during informal weather conditions such as suddenly cold or hot spell. Brownouts are quite harder for computer equipments than blackouts. A brownout lasts longer than a power sag and corrupts more data.Answer option C is incorrect. A blackout indicates a complete loss of PC's electrical source. It is an event that shows a sudden drop-off power source, which can cause a wide variety of problems on a PC or a network. A blackout is not a power failure over an entire area but it can be in a section or a part of a building , city, or any other larger area. It is caused by electrical storms, traffic accidents in utility poles, or a total collapse of the power system due to demand overload.Answer option A is incorrect. Power surge is a sharp increase in the voltage or an over voltage event.It is a short and temporary increase in voltage on the power grid and it is like a rough wave. Different types of electrical disturbance such as lightning storm, distant lightning strikes,or problems on the electrical power supply grid can cause the voltage to suddenly increase. Answer option B is incorrect. A power spike is a sudden isolated extremely high over voltage event on an electrical line. The primary cause of the power spike is lightning strikes. Lightning carries millions of volts, and if a home or office takes a direct hit, a PC along with other devices are likely to be heavily damaged. Direct striking is a rare event but a strike within a mile can create a sudden spike in the electrical current near the strike.
Which of the following protocols is designed to efficiently handle high-speed data over wide area networks (WANs)?
Answer(s): C
Frame relay is a telecommunication service designed for cost-efficient data transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area network (WAN). Frame relay puts data in a variable- size unit called a frame. It checks for lesser errors as compared to other traditional forms of packet switching, which speeds up data transmission.When an error is detected in a frame, it is simply dropped. The end points are responsible for detecting and retransmitting dropped frames.
Which of the following statements best describes a certification authority?
A certification authority (CA) or certificate authority is an entity that issues digital certificates for use by other parties. It is an example of a trusted third party. A CA issues digital certificates that contain a public key and the identity of the owner. The matching private key is not similarly made available publicly, but kept secret by the end user who generated the key pair. The certificate is also an attestation by the CA that the public key contained in the certificate belongs to the person, organization, server or other entity noted in the certificate. A CA's obligation in such schemes is to verify an applicant's credentials, so that users and relying parties can trust the information in the CA's certificates. A variety of standards and tests are used by CAs to do so. If the user trusts the CA and can verify the CA's signature, then he can also verify that a certain public key does indeed belong to a person identified in the certificate.Answer options B, D are incorrect. A certification authority (CA) is not a type of encryption.Answer option A is incorrect. A certification authority (CA) does not authenticate digital documents by using computer cryptography. In order to authenticate digital documents by using computer cryptography, a digital signature should be used.
In which of the following alternative processing sites is the backup facility maintained in a constant order, with a full complement of servers, workstations, and communication links ready to assume the primary operations responsibility?
Answer(s): A
A hot site is a duplicate of the original site of the organization, with full computer systems as well as near-complete backups of user data. It provides the backup facility, which is maintained in a constant order, with a full complement of servers, workstations, and communication links ready to assume the primary operations responsibility.A hot site is a backup site in case disaster has taken place in a data center. A hot site is located off site and provides the best protection. It is an exact replica of the current data center. In case a disaster struck to the data center, administrators just need to take the backup of recent data in hot site and the data center is back online in a very short time. It is very expensive to create and maintain the hot site. There are lots of third party companies that provide disaster recovery solutions by maintaining hot sites at their end.Answer option D is incorrect. A cold site is a backup site in case disaster has taken place in a data center. This is the least expensive disaster recovery solution, usually having only a single room with no equipment. All equipment is brought to the site after the disaster. It can be on site or off site.Answer option B is incorrect. Mobile sites are self-reliant, portable shells custom-fitted with definite telecommunications and IT equipment essential to meet system requirements. These are presented for lease through commercial vendors. Answer option C is incorrect. A warm site is, quite logically, a compromise between hot and cold sites. Warm sites will have hardware and connectivity already established, though on a smaller scale than the original production site or even a hot site. These sites will have backups on hand, but they may not be complete and may be between several days and a week old. An example would be backup tapes sent to the warm site by courier.
Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISSAP content, but please register or login to continue.