Which of the following types of ciphers are included in the historical ciphers? Each correct answer represents a complete solution. Choose two.
Answer(s): B,D
Historical ciphers include the following types of ciphers:1.Substitution ciphers: In cryptography, a substitution cipher is a method of encryption by which units of plaintext are replaced with ciphertext according to a regular system. The units may be single letters, pairs of letters, triplets of letters, mixtures of the above, and so forth. The receiver deciphers the text by performing an inverse substitution. 2.Transposition ciphers: A transposition cipher is a method of cryptographic encryption by which the positions held by units of plaintext (which are commonly characters or groups of characters) are shifted according to a regular system, so that the ciphertext constitutes a permutation of the plaintext. That is, the order of the units is changed. Mathematically a bijective function is used on the characters'positions to encrypt and an inverse function to decrypt. Answer options A, C are incorrect. Block ciphers and stream ciphers are not included in the historical ciphers. Both are the types of modern ciphers.
John works as a security manager for SoftTech Inc. He is working with his team on the disaster recovery management plan. One of his team members has a doubt related to the most cost effective DRP testing plan. According to you, which of the following disaster recovery testing plans is the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?
Answer(s): C
The structured walk-through test is also known as the table-top exercise. In structured walk-through test, the team members walkthrough the plan to identify and correct weaknesses and how they will respond to the emergency scenarios by stepping in the course of the plan. It is the most effective and competent way to identify the areas of overlap in the plan before conducting more challenging training exercises.Answer option D is incorrect. In full-scale exercise, the critical systems run at an alternate site. Answer option B is incorrect. The emergency management group and response teams actually perform their emergency response functions by walking through the test, without actually initiating recovery procedures. But it is not much cost effective.Answer option A is incorrect. It is a test performed when personnel walks through the evacuation route to a designated area where procedures for accounting for the personnel are tested.
Which of the following security protocols provides confidentiality, integrity, and authentication of network traffic with end-to-end and intermediate-hop security?
The Software IP Encryption Protocol (SWIPE) is an IP (Internet Protocol) security protocol that operates at the Internet Layer of the Internet Protocol Suite. It provides confidentiality, integrity, and authentication of network traffic, and can be used to provide both end-to-end and intermediate-hop security. SWIPE is concerned only with security mechanisms; policy and key management are handled outside the protocol.It works by augmenting each packet with a cryptographically-strong authenticator and/or encrypting the data to be sent.Answer option B is incorrect. Secure Electronic Transaction (SET) was a standard protocol for securing credit card transactions over insecure networks, specifically, the Internet. SET was not itself a payment system, but rather a set of security protocols and formats that enable users to employ the existing credit card payment infrastructure on an open network in a secure fashion.However, it failed to gain traction. VISA now promotes the 3-D Secure scheme.SET allowed parties to cryptographically identify themselves to each other and exchange information securely. SET used a blinding algorithm that, in effect, would have let merchants substitute a certificate for a user's credit-card number. If SET were used, the merchant itself would never have had to know the credit-card numbers being sent from the buyer, which would have provided verified good payment but protected customers and credit companies from fraud.Answer option A is incorrect. Internet Protocol Security (IPSec) is a method of securing data. It secures traffic by using encryption and digital signing. It enhances the security of data as if an IPSec packet is captured, its contents cannot be read.IPSec also provides sender verification that ensures the certainty of the datagram's origin to the receiver. Answer option D is incorrect. SKIP (Simple Key-Management for Internet Protocol) is developed by the IETF Security Working Group for the sharing of encryption keys. It is used to protect sessionless datagram protocols. SKIP works at Layer 3 of the OSI model. It integrates with the IPSec (Internet Protocol Security).
You are calculating the Annualized Loss Expectancy (ALE) using the following formula: ALE=AV * EF * ARO What information does the AV (Asset Value) convey?
Answer(s): D
AV (Asset Value) is a factor that represents the total cost of an asset, including the purchase price, recurring maintenance, expenses, and all other costs associated with acquiring an asset.Answer option B is incorrect. EF (Exposure Factor) is a factor that represents the percentage of loss that an asset experiences if an anticipated threat occurs.Answer option A is incorrect. ARO (Annualized Rate of Occurrence) is a factor that represents how many times per year a specific threat occurs.Answer option C is incorrect. Annualized Loss Expectancy (ALE) is a monetary value that is expected for an asset due to a risk over a one year period.
You work as a Network Administrator for NetTech Inc.When you enter http://66.111.64.227 in the browser's address bar, you are able to access the site. But, you are unable to access the site when you enter http://www.company.com.What is the most likely cause?
You are unable to access the site on entering http://www.company.com because the DNS server has no entry for the host name www.company.com. DNS server resolves host name to IP address. If the DNS entry is not found, the browser's request by host name cannot be resolved. Hence, you will access the site only by specifying the IP address of the site.
Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISSAP content, but please register or login to continue.