SSCP practice questions 191–200

1. Question 191 · 203 in bank

   Communications and network security relates to transmission of which of the following?

   • Avoice
   • Bvoice and multimedia
   • Cdata and multimedia
   • Dvoice, data and multimedia

   Show answer

   Answer: B

   Explanation

   From the published (ISC)2 goals for the Certified Information Systems Security Professional candidate: The CISSP candidate should be familiar to communications and network security as it relates to voice, data, multimedia, and facsimile transmissions in terms of local area, wide area, and remote access. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 57.

   Source: Adapted from community discussion — [Removed]

   Next question

2. Question 192 · 203 in bank

   Which of the following statements do not apply to a hot site?

   • AIt is expensive.
   • BThere are cases of common overselling of processing capabilities by the service provider.
   • CIt provides a false sense of security.
   • DIt is accessible on a first come first serve basis. In case of large disaster it might not be accessible.

   Show answer

   Answer: C

   Next question

3. Question 193 · 203 in bank

   One of the following statements about the differences between PPTP and L2TP is NOT true

   • APPTP can run only on top of IP networks.
   • BPPTP is an encryption protocol and L2TP is not.
   • CL2TP works well with all firewalls and network devices that perform NAT.
   • DL2TP supports AAA servers C

   Show answer

   Answer: C

   Explanation

   L2TP is affected by packet header modification and cannot cope with firewalls and network devices that perform NAT. "PPTP can run only on top of IP networks." is correct as PPTP encapsulates datagrams into an IP packet, allowing PPTP to route many network protocols across an IP network. "PPTP is an encryption protocol and L2TP is not." is correct. When using PPTP, the PPP payload is encrypted with Microsoft Point-to-Point Encryption (MPPE) using MSCHAP or EAP-TLS. "L2TP supports AAA servers" is correct as L2TP supports TACACS+ and RADIUS. NOTE: L2TP does work over NAT. It is possible to use a tunneled mode that wraps every packet into a UDP packet. Port 4500 is used for this purpose. However this is not true of PPTP and it is not true as well that it works well with all firewalls and NAT devices. References: All in One Third Edition page 545 Official Guide to the CISSP Exam page 124-126

   Next question

4. Question 194 · 203 in bank

   Which of the following methods of providing telecommunications continuity involves the use of an alternative media?

   • AAlternative routing
   • BDiverse routing
   • CLong haul network diversity
   • DLast mile circuit protection

   Show answer

   Answer: D

   Explanation

   Alternative routing is a method of routing information via an alternate medium such as copper cable or fiber optics. This involves use of different networks, circuits or end points should the normal network be unavailable. Diverse routing routes traffic through split cable facilities or duplicate cable facilities. This can be accomplished with different and/or duplicate cable sheaths. If different cable sheaths are used, the cable may be in the same conduit and therefore subject to the same interruptions as the cable it is backing up. The communication service subscriber can duplicate the facilities by having alternate routes, although the entrance to and from the customer premises may be in the same conduit. The subscriber can obtain diverse routing and alternate routing from the local carrier, including dual entrance facilities. This type of access is time-consuming and costly. Long haul network diversity is a diverse long-distance network utilizing T1 circuits among the major long-distance carriers. It ensures long-distance access should any one carrier experience a network failure. Last mile circuit protection is a redundant combination of local carrier T1s microwave and/or coaxial cable access to the local communications loop. This enables the facility to have access during a local carrier communication disaster. Alternate local carrier routing is also utilized. Source: Information Systems Audit and Control Association, Certified Information Systems Auditor 2002 review manual, chapter 5: Disaster Recovery and Business Continuity (page 259).

   Next question

5. Question 195 · 203 in bank

   Secure Shell (SSH-2) supports authentication, compression, confidentiality, and integrity, SSH is commonly used as a secure alternative to all of the following protocols below except:

   • Atelnet
   • Brlogin
   • CRSH
   • DHTTPS

   Show answer

   Answer: D

   Explanation

   HTTPS is used for secure web transactions and is not commonly replaced by SSH. Users often want to log on to a remote computer. Unfortunately, most early implementations to meet that need were designed for a trusted network. Protocols/ programs, such as TELNET, RSH, and rlogin, transmit unencrypted over the network, which allows traffic to be easily intercepted. Secure shell (SSH) was designed as an alternative to the above insecure protocols and allows users to securely access resources on remote computers over an encrypted tunnel. SSHs services include remote log-on, file transfer, and command execution. It also supports port forwarding, which redirects other protocols through an encrypted SSH tunnel. Many users protect less secure traffic of protocols, such as X Windows and VNC (virtual network computing), by forwarding them through a SSH tunnel. The SSH tunnel protects the integrity of communication, preventing session hijacking and other man-in-the-middle attacks. Another advantage of SSH over its predecessors is that it supports strong authentication. There are several alternatives for SSH clients to authenticate to a SSH server, including passwords and digital certificates. Keep in mind that authenticating with a password is still a significant improvement over the other protocols because the password is transmitted encrypted. The following were wrong answers: telnet is an incorrect choice. SSH is commonly used as an more secure alternative to telnet. In fact Telnet should not longer be used today. rlogin is and incorrect choice. SSH is commonly used as a more secure alternative to rlogin. RSH is an incorrect choice. SSH is commonly used as a more secure alternative to RSH. Reference(s) used for this question: Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 7077-7088). Auerbach Publications. Kindle Edition.

   Next question

6. Question 196 · 203 in bank

   In stateful inspection firewalls, packets are:

   • AInspected at only one layer of the Open System Interconnection (OSI) model
   • BInspected at all Open System Interconnection (OSI) layers
   • CDecapsulated at all Open Systems Interconnect (OSI) layers.
   • DEncapsulated at all Open Systems Interconnect (OSI) layers.

   Show answer

   Answer: B

   Explanation

   Many times when a connection is opened, the firewall will inspect all layers of the packet. While this inspection is scaled back for subsequent packets to improve performance, this is the best of the four answers. When packet filtering is used, a packet arrives at the firewall, and it runs through its ACLs to determine whether this packet should be allowed or denied. If the packet is allowed, it is passed on to the destination host, or to another network device, and the packet filtering device forgets about the packet. This is different from stateful inspection, which remembers and keeps track of what packets went where until each particular connection is closed. A stateful firewall is like a nosy neighbor who gets into peoples business and conversations. She keeps track of the suspicious cars that come into the neighborhood, who is out of town for the week, and the postman who stays a little too long at the neighbor ladys house. This can be annoying until your house is burglarized. Then you and the police will want to talk to the nosy neighbor, because she knows everything going on in the neighborhood and would be the one most likely to know something unusual happened. "Inspected at only one Open Systems Interconnetion (OSI) layer" is incorrect. To perform stateful packet inspection, the firewall must consider at least the network and transport layers. "Decapsulated at all Open Systems Interconnection (OSI) layers" is incorrect. The headers are not stripped ("decapsulated" if there is such a word) and are passed through in their entirety IF the packet is passed. "Encapsulated at all Open Systems Interconnect (OSI) layers" is incorrect. Encapsulation refers to the adding of a layer's header/trailer to the information received from the above level. This is done when the packet is assembled not at the firewall. Reference(s) used for this question: CBK, p. 466 - Harris, Shon (2012-10-25). CISSP All-in-One Exam Guide, 6th Edition (pp. 632-633). McGraw-Hill. Kindle Edition.

   Next question

7. Question 197 · 203 in bank

   Which of the following are additional access control objectives?

   • AConsistency and utility
   • BReliability and utility
   • CUsefulness and utility
   • DConvenience and utility

   Show answer

   Answer: B

   Next question

8. Question 198 · 203 in bank

   Which of the following services relies on UDP?

   • AFTP
   • BTelnet
   • CDNS
   • DSMTP

   Show answer

   Answer: C

   Next question

9. Question 199 · 203 in bank

   In a SSL session between a client and a server, who is responsible for generating the master secret that will be used as a seed to generate the symmetric keys that will be used during the session?

   • ABoth client and server
   • BThe client's browser
   • CThe web server
   • DThe merchant's Certificate Server

   Show answer

   Answer: B

   Next question

10. Question 200 · 203 in bank

    Which of the following would be an example of the best password?

    • Agolf001
    • BElizabeth
    • CT1me4g0lF
    • Dpassword

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SSCP practice, question 191. 203 questions available.