
ISC Information Systems Security Architecture Professional - ISSAP Exam Questions
QUESTION NO: 1
Sonya, a user, reports that she works in an electrically unstable environment where brownouts are a regular occurrence. Which of the following will you tell her to use to protect her computer?
Sonya, a user, reports that she works in an electrically unstable environment where brownouts are a regular occurrence. Which of the following will you tell her to use to protect her computer?
Correct Answer: B
QUESTION NO: 2
Fill in the blank with the appropriate security device. ___________ is a device that contains a physical
mechanism or electronic sensor that quantifies motion that can be either integrated with or connected to
other devices that alert the user of the presence of a moving object within the field of view.
Fill in the blank with the appropriate security device. ___________ is a device that contains a physical
mechanism or electronic sensor that quantifies motion that can be either integrated with or connected to
other devices that alert the user of the presence of a moving object within the field of view.
Correct Answer:
Motion detector
QUESTION NO: 3
Which of the following are the primary components of a discretionary access control (DAC) model? Each correct answer represents a complete solution. Choose two.
Which of the following are the primary components of a discretionary access control (DAC) model? Each correct answer represents a complete solution. Choose two.
Correct Answer: B,D
QUESTION NO: 4
Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.
Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.
Correct Answer: A,D
QUESTION NO: 5
Which of the following describes the acceptable amount of data loss measured in time?
Which of the following describes the acceptable amount of data loss measured in time?
Correct Answer: D
QUESTION NO: 6
Which of the following algorithms is found to be suitable for both digital signature and encryption?
Which of the following algorithms is found to be suitable for both digital signature and encryption?
Correct Answer: B
QUESTION NO: 7
Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose three.
Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose three.
Correct Answer: A,B,C
QUESTION NO: 8
Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?
Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?
Correct Answer: C
QUESTION NO: 9
Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.
Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.
Correct Answer: A,D
QUESTION NO: 10
You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following tasks: Develop a risk-driven enterprise information security architecture. Deliver security infrastructure solutions that support critical business initiatives. Which of the following methods will you use to accomplish these tasks?
You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following tasks: Develop a risk-driven enterprise information security architecture. Deliver security infrastructure solutions that support critical business initiatives. Which of the following methods will you use to accomplish these tasks?
Correct Answer: B
QUESTION NO: 11
Which of the following types of halon is found in portable extinguishers and is stored as a liquid?
Which of the following types of halon is found in portable extinguishers and is stored as a liquid?
Correct Answer: C
QUESTION NO: 12
You are the Network Administrator at a large company. Your company has a lot of contractors and other outside parties that come in and out of the building. For this reason you are concerned that simply having usernames and passwords is not enough and want to have employees use tokens for authentication. Which of the following is not an example of tokens?
You are the Network Administrator at a large company. Your company has a lot of contractors and other outside parties that come in and out of the building. For this reason you are concerned that simply having usernames and passwords is not enough and want to have employees use tokens for authentication. Which of the following is not an example of tokens?
Correct Answer: B
QUESTION NO: 13
Which of the following is a correct sequence of different layers of Open System Interconnection (OSI)
model?
Which of the following is a correct sequence of different layers of Open System Interconnection (OSI)
model?
Correct Answer: C
QUESTION NO: 14
Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.
Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.
Correct Answer: A,B,C




