ISSAP Online Practice Questions and Answers

Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the data will be sent across a public network. For security reasons, the management wants the data sent through the Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection. Which communication protocol will Peter use to accomplish the task?

A. IP Security (IPSec)

B. Microsoft Point-to-Point Encryption (MPPE)

C. Pretty Good Privacy (PGP)

D. Data Encryption Standard (DES)

IPsec VPN provides a high degree of data privacy by establishing trust points between communicating devices and data encryption. Which of the following encryption methods does IPsec VPN use? Each correct answer represents a complete solution. Choose two.

A. MD5

B. LEAP

C. AES

D. 3DES

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

A. Buffer-overflow attack

B. Man-in-the-middle attack

C. Shoulder surfing attack

D. Denial-of-Service (DoS) attack

John works as a Network Administrator for NetPerfect Inc. The company has a Windows-based network. John has been assigned a project to build a network for the sales department of the company. It is important for the LAN to continue working even if there is a break in the cabling. Which of the following topologies should John use to accomplish the task?

A. Star

B. Mesh

C. Bus

D. Ring

John works as a security manager for SoftTech Inc. He is working with his team on the disaster recovery management plan. One of his team members has a doubt related to the most cost effective DRP testing plan. According to you, which of the following disaster recovery testing plans is the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?

A. Evacuation drill

B. Walk-through drill

C. Structured walk-through test

D. Full-scale exercise

Which of the following heights of fence deters only casual trespassers?

A. 8 feet

B. 3 to 4 feet

C. 2 to 2.5 feet

D. 6 to 7 feet

You work as a Chief Security Officer for Tech Perfect Inc. The company has a TCP/IP based network. You want to use a firewall that can track the state of active connections of the network and then determine which network packets are allowed to enter through the firewall. Which of the following firewalls has this feature?

A. Stateful packet inspection firewall

B. Proxy-based firewall

C. Dynamic packet-filtering firewall

D. Application gateway firewall

You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and easy recovery of data. Which of the following options will you choose to accomplish this?

A. Take a full backup daily and use six-tape rotation.

B. Take a full backup on Monday and a differential backup on each of the following weekdays. Keep Monday's backup offsite.

C. Take a full backup daily with the previous night's tape taken offsite.

D. Take a full backup on alternate days and keep rotating the tapes.

E. Take a full backup on Monday and an incremental backup on each of the following weekdays. Keep Monday's backup offsite.

F. Take a full backup daily with one tape taken offsite weekly.

A company named Money Builders Inc., hires you to provide consultancy for setting up their Windows network. The company's server room will be in a highly secured environment. You are required to suggest an authentication method for it. The CFO of the company wants the server to use thumb impressions for authentication. Which of the following authentication methods will you suggest?

A. Certificate

B. Smart card

C. Two-factor

D. Biometrics

Which of the following authentication methods provides credentials that are only valid during a single session?

A. Kerberos v5

B. Smart card

C. Certificate

D. Token