support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  1. Home
  2. Exams
  3. ISC2
  4. ISSAP

ISC2 ISSAP Exam Actual Questions
ISC2 Information Systems Security Architecture Professional Exam (Page 9 )

Updated On: 11-Aug-2026
Page 9 of 50
PDF with 241 Questions

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network.
Which of the following phases of the Incident handling process should you follow next to handle this incident?

  1. Containment
  2. Preparation
  3. Recovery
  4. Identification

Answer(s): A

Explanation:

After the identification of the DOS attack, you need to disconnect the link to the network from which the attack is being performed. The
Containment phase should be followed until the eradication and recovery from the attack is done. The Containment phase of the Incident handling process is responsible for supporting and building up the incident combating process. It ensures the stability of the system and also confirms that the incident does not get any worse. The Containment phase includes the process of preventing further contamination of the system or network, and preserving the evidence of the contamination.

Answer option D is incorrect. The Identification phase of the Incident handling process is the stage at which the Incident handler evaluates the critical level of an incident for an enterprise or system. It is an important stage where the distinction between an event and an incident is determined, measured and tested.
Answer option C is incorrect. The Recovery phase of the Incident handling process is the stage at which the enterprise or the system is settled back to its balanced production state. It involves the quality assurance tests and re-evaluation of the system for the purpose of the system revival or recovery.
Answer option B is incorrect. The preparation phase of the Incident handling process is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise. Preparation is the phase of the Incident handling, which involves different processes that are as follows:
Establishing applicable policies
Building relationships with key players
Building a response kit
Establish communication plan
Creating incident checklists
Performing threat modeling
Building an incident response team



You have decided to implement video surveillance in your company in order to enhance network security.
Which of the following locations must have a camera in order to provide the minimum level of security for the network resources? Each correct answer represents a complete solution. Choose two.

  1. Parking lot
  2. All hallways
  3. Server Rooms
  4. All offices
  5. All entrance doors

Answer(s): A,E

Explanation:

The minimum coverage area for cameras to protect your network resources would be all entrance doors (that allows you to see everyone that comes and goes) and the server rooms (you can see anyone doing anything with the servers). Answer option B is incorrect. Anyone leaving the building with hardware or data would be detected by the entrance way cameras. Hallway cameras add extra expense with no real extra protection for the network. Answer option A is incorrect. The only purpose (for protecting the network) of monitoring the parking lot is to see who enters and leaves. That is already accomplished with the entrance way cameras.

Answer option D is incorrect. This would involve a level of monitoring well beyond the minimum. It is also likely to make employees very uncomfortable with that level of scrutiny.



You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs.
What will you implement to accomplish this?

  1. Microsoft Internet Information Server (IIS)
  2. VPN
  3. FTP server
  4. Certificate server

Answer(s): D

Explanation:

You will implement certificate server to use public key and private key pairs for secure communication on the intranet. Certificate server is a standards-based, highly customizable server program for managing the creation, issuance, and renewal of digital certificates. It uses public key cryptography that is a technology widely used for secure communication on a network such as intranet or Internet. Public key cryptography uses two types of keys, a public key and a private key. The public key is available to everyone, while the private or secret key is available only to the recipient of the message. For example, when a user sends a message or data to another user, the sender uses a public key to encrypt the data. The receiver uses his private key to decrypt the data. Public key cryptography is the most secure cryptographic implementation.
Answer options B is incorrect. VPN stands for virtual private network. It allows users to use the Internet as a secure pipeline to their corporate local area networks (LANs). Remote users can dial-in to any local Internet Service Provider (ISP) and initiate a VPN session to connect to their corporate LAN over the Internet. Companies using VPNs significantly reduce long- distance dial-up charges. VPNs also provide remote employees with an inexpensive way of remaining connected to their company's LAN for extended periods.
Answer option A is incorrect. Microsoft Internet Information Server (IIS) is a Web and application server for the Internet and private intranets.
IIS receives requests from users on the network using the World Wide Web (WWW) service and transmits information using the Hypertext
Transport Protocol (HTTP). IIS uses Microsoft Transaction Server (MTS) to provide security, performance, and scalability with server side packages.



Which of the following protocols is used to compare two values calculated using the Message Digest (MD5) hashing function?

  1. CHAP
  2. PEAP
  3. EAP
  4. EAP-TLS

Answer(s): A

Explanation:

Challenge Handshake Authentication Protocol (CHAP) involves comparison of two values calculated using the Message Digest (MD5) hashing function. Challenge Handshake Authentication Protocol (CHAP) is an authentication protocol that uses a secure form of encrypted authentication. Using CHAP, network dial-up connections are able to securely connect to almost all

PPP servers.
Answer option C is incorrect. Extensible Authentication Protocol (EAP) is an authentication protocol that provides support for a wide range of authentication methods, such as smart cards, certificates, one-time passwords, public keys, etc. It is an extension to Point-to-Point Protocol
(PPP), which allows the application of arbitrary authentication mechanisms for the validation of a PPP connection.
Answer option D is incorrect. Extensible Authentication Protocol-Transport Level Security (EAP-TLS) is an authentication protocol, which provides mutual authentication, integrity-protected negotiation of cryptographic service providers, and a secret key exchange between two systems that use public key cryptography. EAP-TLS works on a network that is configured for public key infrastructure (PKI) and uses certificates for authentication. These certificates can be stored on computers or on smart cards. Answer option B is incorrect. The Protected Extensible Authentication Protocol, also known as Protected EAP or simply PEAP, is a protocol that encapsulates EAP within an encrypted and authenticated Transport Layer Security (TLS) tunnel. The purpose was to correct deficiencies in
EAP; EAP assumed a protected communication channel, such as that provided by physical security.



Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

  1. Risk analysis
  2. OODA loop
  3. Cryptography
  4. Firewall security

Answer(s): C

Explanation:

Cryptography is responsible for the encoding of messages, and securing the messages during a network communication. Cryptography is a technique of encrypting and decrypting messages.
When the text is encrypted, it is unreadable by humans.
When the text is decrypted, it is readable by the humans. The terms used in cryptography are as follows:
Plaintext: This text can be read by a user.
Ciphertext: This text can be converted to a non-readable format. Encryption: It is the process of creating a ciphertext from a plaintext. Decryption: It is the process of converting a ciphertext to a plaintext. Cipher: It is an algorithm that is used to encrypt and decrypt text. Key: Keys are the elements that are used in the technology of encrypting and decrypting text. Answer option A is incorrect. Risk analysis is the science of risks and their probability and evaluation in a business or a process. It is an important factor in security enhancement and prevention in a system. Risk analysis should be performed as part of the risk management process for each project. The outcome of the risk analysis would be the creation or review of the risk register to identify and quantify risk elements to the project and their potential impact.
Answer option B is incorrect. The OODA loop (for observe, orient, decide, and act) is a concept originally applied to the combat operations process, often at the strategic level in both military and business operations. It is now also often applied to understand commercial operations and learning processes. The concept was developed by military strategist and USAF Colonel John Boyd.



  PDF
Viewing page 9 of 50
Viewing questions 41 - 45 out of 241 questions


Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!