Official isc Study guides, Class notes & Summaries

1. Angela is an information security architect at a bank and has been assigned to ensure that transactions are secure as they traverse the network. She recommends that all transactions use TLS. What threat is she most likely attempting to stop, and what method is she using to protect against it? A. Man-in-the-middle, VPN B. Packet injection, encryption C. Sniffing, encryption D. Sniffing, TEMPEST - Answer- C. Encryption is often used to protect traffic like bank transactions from sniffing....

1. Matthew is the security administrator for a consulting firm and must enforce access controls that restrict users' access based upon their previous activity. For example, once a consultant accesses data belonging to Acme Cola, a consulting client, they may no longer access data belonging to any of Acme's competitors. What security model best fits Matthew's needs? A. Clark-Wilson B. Biba C. Bell-LaPadula D. Brewer-Nash - Answer- D. The Brewer-Nash model allows access controls to change...

1. What is the final step of a quantitative risk analysis? A. Determine asset value. B. Assess the annualized rate of occurrence. C. Derive the annualized loss expectancy. D. Conduct a it analysis. - Answer- D. The final step of a quantitative risk analysis is conducting a cost/benefit analysis to determine whether the organisation should implement proposed countermeasure(s). 2. An evil twin attack that broadcasts a legitimate SSID for an unauthorised network is an example of what cat...

1. What is the final step of a quantitative risk analysis? A. Determine asset value. B. Assess the annualized rate of occurrence. C. Derive the annualized loss expectancy. D. Conduct a it analysis. - Answer- D. The final step of a quantitative risk analysis is conducting a cost/benefit analysis to determine whether the organisation should implement proposed countermeasure(s). 2. An evil twin attack that broadcasts a legitimate SSID for an unauthorised network is an example of what cat...

CISSP Official ISC2 practice tests (All domains) questions with correct answers

CISSP Official ISC2 practice tests Exam Questions and Answers (Latest Update 2024)

CISSP Official ISC2 practice tests Exam Questions and Answers (Latest Update 2023)

CISSP Official ISC2 practice tests Exam Questions and Answers (Latest Update 2023)

Official (ISC)² CSSLP - Domain 4: Secure Software Implementation – Coding questions with correct answers

CISSP Official ISC2 Practice Exam Tests (All Domains) With 100% Correct And Verified Answers