SSCP Exam Dumps | One of these statements about the key elements of a good configuration process is NOT true

<< Prev Question Next Question >>

Question 248/999

One of these statements about the key elements of a good configuration process is NOT true

A. Accommodate the reuse of proven standards and best practices

B. Ensure that all requirements remain clear, concise, and valid

C. Control modifications to system hardware in order to prevent resource changes

D. Ensure changes, standards, and requirements are communicated promptly and precisely

Correct Answer: C

Explanation/Reference:
Configuration management isn't about preventing change but ensuring the integrity of IT resources by preventing unauthorised or improper changes.
According to the Official ISC2 guide to the CISSP exam, a good CM process is one that can:
(1) accommodate change;
(2) accommodate the reuse of proven standards and best practices;
(3) ensure that all requirements remain clear, concise, and valid;
(4) ensure changes, standards, and requirements are communicated promptly and precisely; and (5) ensure that the results conform to each instance of the product.
Configuration management
Configuration management (CM) is the detailed recording and updating of information that describes an enterprise's computer systems and networks, including all hardware and software components. Such information typically includes the versions and updates that have been applied to installed software packages and the locations and network addresses of hardware devices. Special configuration management software is available. When a system needs a hardware or software upgrade, a computer technician can accesses the configuration management program and database to see what is currently installed. The technician can then make a more informed decision about the upgrade needed.
An advantage of a configuration management application is that the entire collection of systems can be reviewed to make sure any changes made to one system do not adversely affect any of the other systems Configuration management is also used in software development, where it is called Unified Configuration Management (UCM). Using UCM, developers can keep track of the source code, documentation, problems, changes requested, and changes made.
Change management
In a computer system environment, change management refers to a systematic approach to keeping track of the details of the system (for example, what operating system release is running on each computer and which fixes have been applied).

Question List (999q): Question 1: Why would anomaly detection IDSs often generate a large numb...; Question 2: Who is ultimately responsible for the security of computer b...; Question 3: What key size is used by the Clipper Chip?...; Question 4: Which of the following is the FIRST step in protecting data'...; Question 5: Which of the following describes a logical form of separatio...; Question 6: Within the context of the CBK, which of the following provid...; Question 7: When we encrypt or decrypt data there is a basic operation i...; Question 8: Which of the following is NOT a fundamental component of an ...; Question 9: What can best be defined as the sum of protection mechanisms...; Question 10: Which of the following prevents, detects, and corrects error...; Question 11: What can be defined as the maximum acceptable length of time...; Question 12: Which of the following should NOT be performed by an operato...; Question 13: Which of the following does NOT concern itself with key mana...; Question 14: What can be defined as a data structure that enumerates digi...; Question 15: Which of the following best describes signature-based detect...; Question 16: Organizations should not view disaster recovery as which of ...; Question 17: What algorithm has been selected as the AES algorithm, repla...; Question 18: Which of the following is an extension to Network Address Tr...; Question 19: How many bits is the effective length of the key of the Data...; Question 20: How often should a Business Continuity Plan be reviewed?...; Question 21: Which of the following security models does NOT concern itse...; Question 22: The IP header contains a protocol field. If this field conta...; Question 23: Which of the following statements pertaining to biometrics i...; Question 24: Which of the following statements is most accurate regarding...; Question 25: Which of the following would be an example of the best passw...; Question 26: ______________ is a Unix security scanning tool developed at...; Question 27: Information security policies are a ___________________....; Question 28: CORRECT TEXT An attempt to break an encryption algorithm is ...; Question 29: Which of the following computer crime is MORE often associat...; Question 30: Which of the following is defined as a key establishment pro...; Question 31: Which of the following backup methods is most appropriate fo...; Question 32: The standard of __________ states that a certain level of in...; Question 33: Which of the following would be true about Static password t...; Question 34: A Business Continuity Plan should be tested:...; Question 35: Which of the following refers to the data left on the media ...; Question 36: Which of the following algorithms is a stream cipher?...; Question 37: Which of the following is NOT a technique used to perform a ...; Question 38: Which of the following is true about link encryption?...; Question 39: A Security Kernel is defined as a strict implementation of a...; Question 40: This type of attack is generally most applicable to public-k...; Question 41: Why do buffer overflows happen? What is the main cause?...; Question 42: Which of the following backup methods is primarily run when ...; Question 43: Secure Sockets Layer (SSL) is very heavily used for protecti...; Question 44: IT security measures should:; Question 45: Which division of the Orange Book deals with discretionary p...; Question 46: Proxies works by transferring a copy of each accepted data p...; Question 47: What does it mean to say that sensitivity labels are "incomp...; Question 48: When a station communicates on the network for the first tim...; Question 49: A good password policy uses which of the following guideline...; Question 50: What protocol is used on the Local Area Network (LAN) to obt...; Question 51: According to the annual CSI/FBI Computer Crime report, which...; Question 52: Which of the following statements pertaining to packet switc...; Question 53: Which type of encryption is considered to be unbreakable if ...; Question 54: Which of the following is the primary reason why a user woul...; Question 55: Which of the following protocols does not operate at the dat...; Question 56: Which of the following describes a technique in which a numb...; Question 57: Controls like guards and general steps to maintain building ...; Question 58: How many bits of a MAC address uniquely identify a vendor, a...; Question 59: Which of the following statements pertaining to PPTP (Point-...; Question 60: Who is responsible for initiating corrective measures and ca...; Question 61: In an online transaction processing system (OLTP), which of ...; Question 62: Which of the following would be used to implement Mandatory ...; Question 63: You work in a police department forensics lab where you exam...; Question 64: Which of the following would constitute the best example of ...; Question 65: Only law enforcement personnel are qualified to do computer ...; Question 66: Which backup type run at regular intervals would take the le...; Question 67: What is the main focus of the Bell-LaPadula security model?...; Question 68: When backing up an applications system's data, which of the ...; Question 69: Which of the following are NT Audit events? (Choose all that...; Question 70: Which of the following statements relating to the Bell-LaPad...; Question 71: What are the three FUNDAMENTAL principles of security?...; Question 72: What is NOT true about a one-way hashing function?...; Question 73: Which of the following is true of network security?...; Question 74: Which of the following would be used to implement Mandatory ...; Question 75: Which of the following would best describe secondary evidenc...; Question 76: Making sure that only those who are supposed to access the d...; Question 77: Which of the following is a device that is used to regenerat...; Question 78: The following is NOT a security characteristic we need to co...; Question 79: Which OSI/ISO layer does a SOCKS server operate at?...; Question 80: Which of the following does not address Database Management ...; Question 81: ___________________ viruses change the code order of the str...; Question 82: Which of the following protects Kerberos against replay atta...; Question 83: What is Kerberos?; Question 84: Which of the following security mode of operation does NOT r...; Question 85: Which of the following biometric devices has the lowest user...; Question 86: Who developed one of the first mathematical models of a mult...; Question 87: Controls are implemented to:; Question 88: Which of the following exemplifies proper separation of duti...; Question 89: Which of the following phases of a software development life...; Question 90: Which of the following is NOT a common backup method?...; Question 91: The first step in the implementation of the contingency plan...; Question 92: Which of the following was developed by the National Compute...; Question 93: What is the Maximum Tolerable Downtime (MTD)?...; Question 94: What can best be defined as the detailed examination and tes...; Question 95: Which of the following protocols operates at the session lay...; Question 96: How is Annualized Loss Expectancy (ALE) derived from a threa...; Question 97: What can be defined as a batch process dumping backup data t...; Question 98: What is defined as the rules for communicating between compu...; Question 99: Which of the following Operation Security controls is intend...; Question 100: What does the simple security (ss) property mean in the Bell...; Question 101: Which of the following is related to physical security and i...; Question 102: Which of the following is NOT true about IPSec Tunnel mode?...; Question 103: What would be the name of a Logical or Virtual Table dynamic...; Question 104: Which of the following is true of two-factor authentication?...; Question 105: The Terminal Access Controller Access Control System (TACACS...; Question 106: What is the act of obtaining information of a higher sensiti...; Question 107: What does the simple security (ss) property mean in the Bell...; Question 108: Which TCSEC class specifies discretionary protection?...; Question 109: Which one of the following authentication mechanisms creates...; Question 110: The DES algorithm is an example of what type of cryptography...; Question 111: When two or more separate entities (usually persons) operati...; Question 112: Pin, Password, Passphrases, Tokens, smart cards, and biometr...; Question 113: Which of the following protection devices is used for spot p...; Question 114: Which of the following statements pertaining to software tes...; Question 115: What is called the percentage at which the False Rejection R...; Question 116: In the context of network enumeration by an outside attacker...; Question 117: Cryptography does not concern itself with which of the follo...; Question 118: The property of a system or a system resource being accessib...; Question 119: Which type of password provides maximum security because a n...; Question 120: If an operating system permits shared resources such as memo...; Question 121: Which of the following BEST describes a function relying on ...; Question 122: What is the maximum key size for the RC5 algorithm?...; Question 123: As a result of a risk assessment, your security manager has ...; Question 124: Which of the following is true about Kerberos?...; Question 125: Of the following, which is NOT a specific loss criteria that...; Question 126: What mechanism automatically causes an alarm originating in ...; Question 127: Which of the following is not a component of a Operations Se...; Question 128: The general philosophy for DMZ's is that:...; Question 129: A DMZ is also known as a; Question 130: Which of the following is true related to network sniffing?...; Question 131: Which of the following service is a distributed database tha...; Question 132: In stateful inspection firewalls, packets are:...; Question 133: Which of the following is a tool often used to reduce the ri...; Question 134: What is the main issue with media reuse?...; Question 135: If your property Insurance has Replacement Cost Valuation (R...; Question 136: What would BEST define risk management?...; Question 137: What security model is dependent on security labels?...; Question 138: What is called the formal acceptance of the adequacy of a sy...; Question 139: Which of the following is not a logical control when impleme...; Question 140: Which of the following was developed in order to protect aga...; Question 141: Memory management in TCSEC levels B3 and A1 operating system...; Question 142: Which of the following is the MOST important aspect relating...; Question 143: The fact that a network-based IDS reviews packets payload an...; Question 144: Which of the following assertions is NOT true about pattern ...; Question 145: Which of the following is not a physical control for physica...; Question 146: Who can best decide what are the adequate technical security...; Question 147: Which of the following access control models requires defini...; Question 148: What is the difference between Advisory and Regulatory secur...; Question 149: Which of the following is a device that is used to regenerat...; Question 150: How is Annualized Loss Expectancy (ALE) derived from a threa...; Question 151: Which of the following centralized access control mechanisms...; Question 152: Which of the following statements pertaining to a security p...; Question 153: Passwords can be required to change monthly, quarterly, or a...; Question 154: Transport Layer Security (TLS) is a two-layered socket layer...; Question 155: Each of the following is a valid step in handling incidents ...; Question 156: Which access control model provides upper and lower bounds o...; Question 157: Which of the following is not one of the three goals of Inte...; Question 158: What security principle is based on the division of job resp...; Question 159: Which protocol makes USE of an electronic wallet on a custom...; Question 160: The Orange Book states that "Hardware and software features ...; Question 161: Which port does the Post Office Protocol Version 3 (POP3) ma...; Question 162: Which of the following is the FIRST step in protecting data'...; Question 163: What is the primary goal of setting up a honeypot?...; Question 164: One of the following statements about the differences betwee...; Question 165: In which of the following phases of system development life ...; Question 166: There are ______ available service ports...; Question 167: Which of the following describes a computer processing archi...; Question 168: Which of the following can best be defined as a key distribu...; Question 169: A security policy is a rigid set of rules that must be follo...; Question 170: Which of the following is the most critical item from a disa...; Question 171: What is the PRIMARY goal of incident handling?...; Question 172: In which layer of the OSI Model are connection-oriented prot...; Question 173: Which of the following transmission media would NOT be affec...; Question 174: Which of the following access control techniques best gives ...; Question 175: Which of the following services relies on UDP?...; Question 176: A variation of the application layer firewall is called a:...; Question 177: Before the advent of classless addressing, the address 128.1...; Question 178: What is the PRIMARY use of a password?...; Question 179: Kerberos is vulnerable to replay in which of the following c...; Question 180: For which areas of the enterprise are business continuity pl...; Question 181: The Logical Link Control sub-layer is a part of which of the...; Question 182: Which one of these formulas is used in Quantitative risk ana...; Question 183: The primary purpose for using one-way hashing of user passwo...; Question 184: Which of the following statements is NOT true of IPSec Trans...; Question 185: Which of the following is a trusted, third party authenticat...; Question 186: What is the name of the third party authority that vouches f...; Question 187: What type of cable is used with 100Base-TX Fast Ethernet?...; Question 188: Which of the following is NOT a common category/classificati...; Question 189: Which of the following security controls might force an oper...; Question 190: Which of the following are the steps usually followed in the...; Question 191: Which of the following is true related to network sniffing?...; Question 192: Which of the following is best defined as a circumstance in ...; Question 193: Which of the following categories of hackers poses the great...; Question 194: Which of the following is an example of a connectionless com...; Question 195: Kerberos depends upon what encryption method?...; Question 196: Which of the following statements pertaining to firewalls is...; Question 197: Is the person who is attempting to log on really who they sa...; Question 198: Which of the following is NOT a VPN communications protocol ...; Question 199: Which of the following is TRUE regarding Transmission Contro...; Question 200: What assesses potential loss that could be caused by a disas...; Question 201: Which xDSL flavour delivers both downstream and upstream spe...; Question 202: Which of the following is considered the MOST secure?...; Question 203: What key size is used by the Clipper Chip?...; Question 204: Business Continuity and Disaster Recovery Planning (Primaril...; Question 205: The session layer provides a logical persistent connection b...; Question 206: In an organization where there are frequent personnel change...; Question 207: Which of the following standards is concerned with message h...; Question 208: Which of the following is a CHARACTERISTIC of a decision sup...; Question 209: Public Key Infrastructure (PKI) uses asymmetric key encrypti...; Question 210: Which of the following encryption methods is known to be unb...; Question 211: Like the Kerberos protocol, SESAME is also subject to which ...; Question 212: How long are IPv4 addresses?; Question 213: Which one of the following is used to provide authentication...; Question 214: The MOST common threat that impacts a business's ability to ...; Question 215: Where parties do not have a shared secret and large quantiti...; Question 216: Knowledge-based Intrusion Detection Systems (IDS) are more c...; Question 217: What is called an automated means of identifying or authenti...; Question 218: Which of the following would provide the BEST stress testing...; Question 219: A one way hash converts a string of random length into a ___...; Question 220: What protocol is used to match an IP address to the appropri...; Question 221: The general philosophy for DMZ's is that:...; Question 222: As per RFC 1122, which of the following is not a defined lay...; Question 223: Controls like guards and general steps to maintain building ...; Question 224: Which of the following backup methods makes a complete backu...; Question 225: Which of the following is the best reason for the use of an ...; Question 226: Which of the following is less likely to be included in the ...; Question 227: Secure Sockets Layer (SSL) is very heavily used for protecti...; Question 228: What type of software can be used to prevent, detect (and po...; Question 229: Which of the following is true about Kerberos?...; Question 230: Ensuring least privilege does not require:...; Question 231: Computer-generated evidence is considered:...; Question 232: What is a limitation of TCP Wrappers?...; Question 233: Which of the following backup sites is the most effective fo...; Question 234: What does "residual risk" mean?...; Question 235: Which of the following biometric devices has the lowest user...; Question 236: The criteria for evaluating the legal requirements for imple...; Question 237: Which backup method is used if backup time is critical and t...; Question 238: What are the components of an object's sensitivity label?...; Question 239: Which of the following does NOT concern itself with key mana...; Question 240: Why would a memory dump be admissible as evidence in court?...; Question 241: A DMZ is located:; Question 242: Making sure that the data has not been changed unintentional...; Question 243: What is the effective key size of DES?...; Question 244: In biometrics, "one-to-many" search against database of stor...; Question 245: Knowledge-based Intrusion Detection Systems (IDS) are more c...; Question 246: What can best be defined as the sum of protection mechanisms...; Question 247: Which of the following is not a DES mode of operation?...; Question 248: One of these statements about the key elements of a good con...; Question 249: Which of the following protocols' primary function is to sen...; Question 250: Which of the following protocols is not implemented at the I...; Question 251: Which is the last line of defense in a physical security sen...; Question 252: The throughput rate is the rate at which individuals, once e...; Question 253: Which of the following best defines source routing?...; Question 254: Which of the following services is NOT provided by the digit...; Question 255: What mechanism does a system use to compare the security lab...; Question 256: Failure of a contingency plan is usually:...; Question 257: What is the Biba security model concerned with?...; Question 258: Sensitivity labels are an example of what application contro...; Question 259: Which of the following is needed for System Accountability?...; Question 260: Which layer of the OSI model handles encryption?...; Question 261: Companies can now be sued for privacy violations just as eas...; Question 262: What protocol is used to match an IP address to the appropri...; Question 263: Within the legal domain what rule is concerned with the lega...; Question 264: The type of discretionary access control (DAC) that is based...; Question 265: Which of the following devices enables more than one signal ...; Question 266: The ___________ protocol converts IP addresses (logical) to ...; Question 267: In the context of network enumeration by an outside attacker...; Question 268: Which backup method only copies files that have been recentl...; Question 269: The following is NOT a security characteristic we need to co...; Question 270: Java is not:; Question 271: What can be described as an imaginary line that separates th...; Question 272: When considering an IT System Development Life-cycle, securi...; Question 273: During the salvage of the Local Area Network and Servers, wh...; Question 274: CORRECT TEXT The two categories of threats are natural and _...; Question 275: An area of the Telecommunications and Network Security domai...; Question 276: The following is NOT a security characteristic we need to co...; Question 277: In the context of Biometric authentication, what is a quick ...; Question 278: Because all the secret keys are held and authentication is p...; Question 279: Which of the following protocols that provide integrity and ...; Question 280: CORRECT TEXT ______________ is a high speed data routing tec...; Question 281: Which type of attack consists of modifying the length and fr...; Question 282: Which of the following is used to interrupt the opportunity ...; Question 283: What are the two most critical aspects of risk analysis? (Ch...; Question 284: Degaussing is used to clear data from all of the following m...; Question 285: What is called the use of technologies such as fingerprint, ...; Question 286: Which of the following is the act of performing tests and ev...; Question 287: Who first described the DoD multilevel military security pol...; Question 288: Which of the following protocol was used by the INITIAL vers...; Question 289: This is a common security issue that is extremely hard to co...; Question 290: Cable modems are less secure than DSL connections because ca...; Question 291: Encapsulating Security Payload (ESP) provides some of the se...; Question 292: Recovery Site Strategies for the technology environment depe...; Question 293: In order to be able to successfully prosecute an intruder:...; Question 294: Which of the following is true about Kerberos?...; Question 295: What can be defined as an instance of two different keys gen...; Question 296: Which of the following is the primary security feature of a ...; Question 297: Which of the following statements pertaining to block cipher...; Question 298: Which of the following statements pertaining to biometrics i...; Question 299: Which of the following is not an example of a block cipher?...; Question 300: In biometric identification systems, at the beginning, it wa...; Question 301: Which of the following technologies has been developed to su...; Question 302: What attack involves the perpetrator sending spoofed packet(...; Question 303: Which of the following Kerberos components holds all users' ...; Question 304: Which of the following is the most critical item from a disa...; Question 305: Words appearing in the English dictionary are not considered...; Question 306: When you update records in multiple locations or you make a ...; Question 307: In an online transaction processing system (OLTP), which of ...; Question 308: ICMP and IGMP belong to which layer of the OSI model?...; Question 309: Which of the following choices describe a Challenge-response...; Question 310: Which of the following is not a physical control for physica...; Question 311: The Data Encryption Algorithm performs how many rounds of su...; Question 312: To protect and/or restore lost, corrupted, or deleted inform...; Question 313: What is called an event or activity that has the potential t...; Question 314: Which of the following is less likely to accompany a conting...; Question 315: Which of the following is an Internet IPsec protocol to nego...; Question 316: Which of the following types of Intrusion Detection Systems ...; Question 317: Which encryption algorithm is BEST suited for communication ...; Question 318: Which conceptual approach to intrusion detection system is t...; Question 319: Which of the following is an example of a passive attack?...; Question 320: A public key algorithm that does both encryption and digital...; Question 321: In a SSL session between a client and a server, who is respo...; Question 322: Which of the following is a CHARACTERISTIC of a decision sup...; Question 323: Penetration testing involves three steps. At which step shou...; Question 324: Which of the following are additional terms used to describe...; Question 325: What layer of the OSI/ISO model does Point-to-point tunnelli...; Question 326: Which of the following would be the MOST serious risk where ...; Question 327: Which of the following would best classify as a management c...; Question 328: What is also known as 10Base5?; Question 329: Which of the following access control techniques best gives ...; Question 330: Which integrity model defines a constrained data item, an in...; Question 331: Which access control type has a central authority that deter...; Question 332: Which of the following outlined how senior management are re...; Question 333: Which of the following Kerberos components holds all users' ...; Question 334: Which backup method does not reset the archive bit on files ...; Question 335: Why is traffic across a packet switched network difficult to...; Question 336: What is it called when a computer uses more than one CPU in ...; Question 337: In biometric identification systems, the parts of the body c...; Question 338: This is a common security issue that is extremely hard to co...; Question 339: Which of the following is an example of discretionary access...; Question 340: What would be the Annualized Rate of Occurrence (ARO) of the...; Question 341: What is the difference between Access Control Lists (ACLs) a...; Question 342: Digital Certificates use which protocol?...; Question 343: Which of the following statements pertaining to IPSec is inc...; Question 344: This type of supporting evidence is used to help prove an id...; Question 345: Which of the following issues is not addressed by digital si...; Question 346: Controls like guards and general steps to maintain building ...; Question 347: What is the greatest danger from DHCP?...; Question 348: Which of the following concerning the Rijndael block cipher ...; Question 349: When a station communicates on the network for the first tim...; Question 350: Who of the following is responsible for ensuring that proper...; Question 351: Which of the following is an IP address that is private (i.e...; Question 352: Business Continuity Planning (BCP) is not defined as a prepa...; Question 353: In the course of responding to and handling an incident, you...; Question 354: One purpose of a security awareness program is to modify:...; Question 355: Which device acting as a translator is used to connect two n...; Question 356: Which of the following statements pertaining to the security...; Question 357: Which of the following is the WEAKEST authentication mechani...; Question 358: Which of the following statements pertaining to Secure Socke...; Question 359: What is electronic vaulting?; Question 360: Which of the following networking devices allows the connect...; Question 361: Which of the following type of cryptography is used when bot...; Question 362: In a stateful inspection firewall, data packets are captured...; Question 363: What refers to legitimate users accessing networked services...; Question 364: How would an IP spoofing attack be best classified?...; Question 365: As a result of a risk assessment, your security manager has ...; Question 366: Which of the following is addressed by Kerberos?...; Question 367: A group of independent servers, which are managed as a singl...; Question 368: Which of the following is NOT a property of the Rijndael blo...; Question 369: To control access by a subject (an active entity such as ind...; Question 370: In the context of access control, locks, gates, guards are e...; Question 371: Which of the following is NOT true of the Kerberos protocol?...; Question 372: The Diffie-Hellman algorithm is used for:...; Question 373: Which of the following is NOT true about IPSec Tunnel mode?...; Question 374: In response to Access-request from a client such as a Networ...; Question 375: A _________ is an information path that is not normally used...; Question 376: Which of the following is a token-passing scheme like token ...; Question 377: Which of the following classes is the first level (lower) de...; Question 378: Authentication Headers (AH) and Encapsulating Security Paylo...; Question 379: What is the main difference between computer abuse and compu...; Question 380: Why would a memory dump be admissible as evidence in court?...; Question 381: The concept of best effort delivery is best associated with?...; Question 382: Which of the following protocol was used by the INITIAL vers...; Question 383: A server cluster looks like a:; Question 384: What enables a workstation to boot without requiring a hard ...; Question 385: Which of the following is the WEAKEST authentication mechani...; Question 386: The end result of implementing the principle of least privil...; Question 387: Physical security is accomplished through proper facility co...; Question 388: A contingency plan should address:...; Question 389: What is called the percentage of valid subjects that are fal...; Question 390: Which of the following categories of hackers poses the great...; Question 391: What can be defined as a data structure that enumerates digi...; Question 392: The controls that usually require a human to evaluate the in...; Question 393: Which of the following would best describe a Concealment cip...; Question 394: Which of the following is a disadvantage of a statistical an...; Question 395: Which of the following protects Kerberos against replay atta...; Question 396: A channel within a computer system or network that is design...; Question 397: If your property Insurance has Actual Cash Valuation (ACV) c...; Question 398: Which of the following elements of telecommunications is not...; Question 399: Kerberos depends upon what encryption method?...; Question 400: An alternative to using passwords for authentication in logi...; Question 401: What type of attack involves IP spoofing, ICMP ECHO and a bo...; Question 402: Which type of password token involves time synchronization?...; Question 403: Who should direct short-term recovery actions immediately fo...; Question 404: In telephony different types of connections are being used. ...; Question 405: Risk analysis is MOST useful when applied during which phase...; Question 406: This baseline sets certain thresholds for specific errors or...; Question 407: The change control process:; Question 408: Which of the following is not a property of the Rijndael blo...; Question 409: When preparing a business continuity plan, who of the follow...; Question 410: A confidential number used as an authentication factor to ve...; Question 411: What is NOT an authentication method within IKE and IPsec?...; Question 412: During the salvage of the Local Area Network and Servers, wh...; Question 413: Which of the following is NOT true about IPSec Tunnel mode?...; Question 414: Which one of the following authentication mechanisms creates...; Question 415: Which of the following is a method of multiplexing data wher...; Question 416: Under the Business Exemption Rule to the hearsay evidence, w...; Question 417: What security problem is most likely to exist if an operatin...; Question 418: Which of the following is a symmetric encryption algorithm?...; Question 419: Which encryption algorithm is BEST suited for communication ...; Question 420: Which of the following encryption algorithms does not deal w...; Question 421: Which of the following is NOT a technique used to perform a ...; Question 422: Which security model is based on the military classification...; Question 423: A weakness or lack of a safeguard, which may be exploited by...; Question 424: Which of the following standards concerns digital certificat...; Question 425: Which of the following packets should NOT be dropped at a fi...; Question 426: Which of the following Kerberos components holds all users' ...; Question 427: What is the main concern with single sign-on?...; Question 428: EDI (Electronic Data Interchange) differs from e-Commerce in...; Question 429: The Telecommunications Security Domain of information securi...; Question 430: Out of the steps listed below, which one is not one of the s...; Question 431: The Computer Security Policy Model the Orange Book is based ...; Question 432: The Data Encryption Algorithm performs how many rounds of su...; Question 433: What is the greatest danger from DHCP?...; Question 434: Which of the following item would best help an organization ...; Question 435: A Business Continuity Plan should be tested:...; Question 436: ____________ is a file system that was poorly designed and h...; Question 437: Which backup method is used if backup time is critical and t...; Question 438: Devices that supply power when the commercial utility power ...; Question 439: Which of the following is NOT a technical control?...; Question 440: What level of assurance for a digital certificate verifies a...; Question 441: This type of supporting evidence is used to help prove an id...; Question 442: Which of the following was developed to address some of the ...; Question 443: What is the difference between Access Control Lists (ACLs) a...; Question 444: Which of the following keys has the SHORTEST lifespan?...; Question 445: Which of the following was designed as a more fault-tolerant...; Question 446: ____________ is used in mission critical systems and applica...; Question 447: Which of the following is not appropriate in addressing obje...; Question 448: A public key algorithm that does both encryption and digital...; Question 449: PGP & PEM are programs that allow users to send encrypte...; Question 450: Which of the following elements of telecommunications is not...; Question 451: The IP header contains a protocol field. If this field conta...; Question 452: What is the PRIMARY reason to maintain the chain of custody ...; Question 453: Sending an ICMP packet greater than 64Kb is an example of wh...; Question 454: What would be the name of a Logical or Virtual Table dynamic...; Question 455: Which of the following would be used to detect and correct e...; Question 456: Which of the following ports does NOT normally need to be op...; Question 457: A prolonged power supply that is below normal voltage is a:...; Question 458: This baseline sets certain thresholds for specific errors or...; Question 459: What is defined as the hardware, firmware and software eleme...; Question 460: Qualitative loss resulting from the business interruption do...; Question 461: Which of the following would best describe the difference be...; Question 462: Within the OSI model, at what layer are some of the SLIP, CS...; Question 463: In SSL/TLS protocol, what kind of authentication is supporte...; Question 464: Which of the following is not a logical control when impleme...; Question 465: Password management falls into which control category?...; Question 466: In an organization, an Information Technology security funct...; Question 467: What does "System Integrity" mean?...; Question 468: What is called the percentage of valid subjects that are fal...; Question 469: Which of the following is a problem regarding computer inves...; Question 470: CORRECT TEXT Public keys are used for ___________ messages a...; Question 471: Which of the following remote access authentication systems ...; Question 472: Which of the following is used to find the Media Access Cont...; Question 473: In Discretionary Access Control the subject has authority, w...; Question 474: Which of the following are additional access control objecti...; Question 475: Which of the following computer design approaches is based o...; Question 476: What is a common problem when using vibration detection devi...; Question 477: Under United States law, an investigator's notebook may be u...; Question 478: Which of the following biometric parameters are better suite...; Question 479: What is called the probability that a threat to an informati...; Question 480: Which of the following was not designed to be a proprietary ...; Question 481: In a SSL session between a client and a server, who is respo...; Question 482: Which of the following technologies has been developed to su...; Question 483: The typical computer fraudsters are usually persons with whi...; Question 484: Which authentication technique best protects against hijacki...; Question 485: Which of the following is a disadvantage of a statistical an...; Question 486: What is the Biba security model concerned with?...; Question 487: All hosts on an IP network have a logical ID called a(n):...; Question 488: Which of the following category of UTP cables is specified t...; Question 489: Attributes that characterize an attack are stored for refere...; Question 490: Which of the following are NOT a countermeasure to traffic a...; Question 491: Which of the following can prevent hijacking of a web sessio...; Question 492: At what stage of the applications development process should...; Question 493: The Information Technology Security Evaluation Criteria (ITS...; Question 494: ________ ___________ refers to the act of requiring more tha...; Question 495: Which of the following is the most secure form of triple-DES...; Question 496: Which of the following is a symmetric encryption algorithm?...; Question 497: Which of the following statements pertaining to disk mirrori...; Question 498: Which of the concepts best describes Availability in relatio...; Question 499: What mechanism automatically causes an alarm originating in ...; Question 500: The Information Technology Security Evaluation Criteria (ITS...; Question 501: Which xDSL flavour can deliver up to 52 Mbps downstream over...; Question 502: Who first described the DoD multilevel military security pol...; Question 503: Which of the following is NOT a part of a risk analysis?...; Question 504: Which of the following best defines source routing?...; Question 505: Which one of the following statements about the advantages a...; Question 506: What is Kerberos?; Question 507: Identification and authentication are the keystones of most ...; Question 508: The scope and focus of the Business continuity plan developm...; Question 509: A Security Kernel is defined as a strict implementation of a...; Question 510: In Discretionary Access Control the subject has authority, w...; Question 511: A contingency plan should address:...; Question 512: Which of the following is NOT a form of detective administra...; Question 513: Similar to Secure Shell (SSH-2), Secure Sockets Layer (SSL) ...; Question 514: What can be described as a measure of the magnitude of loss ...; Question 515: Which xDSL flavour, appropriate for home or small offices, d...; Question 516: Which of the following is the primary reason why a user woul...; Question 517: A momentary high voltage is a:; Question 518: The Trusted Computer Security Evaluation Criteria book (TCSE...; Question 519: Which of the following is NOT a characteristic of a host-bas...; Question 520: What is the goal of the Maintenance phase in a common develo...; Question 521: Brute force attacks against encryption keys have increased i...; Question 522: What can best be defined as high-level statements, beliefs, ...; Question 523: Secure Sockets Layer (SSL) is very heavily used for protecti...; Question 524: What is the primary goal of setting up a honeypot?...; Question 525: Which of the following is the biggest concern with firewall ...; Question 526: Which of the following focuses on sustaining an organization...; Question 527: When submitting a passphrase for authentication, the passphr...; Question 528: There are parallels between the trust models in Kerberos and...; Question 529: Passwords can be required to change monthly, quarterly, or a...; Question 530: What is the main purpose of Corporate Security Policy?...; Question 531: The Data Encryption Standard (DES) encryption algorithm has ...; Question 532: Kerberos is vulnerable to replay in which of the following c...; Question 533: Which of the following is an Internet IPsec protocol to nego...; Question 534: How should a risk be HANDLED when the cost of the countermea...; Question 535: Which protocol is used to send email?...; Question 536: What can be defined as secret communications where the very ...; Question 537: A true network security audit does include an audit for mode...; Question 538: Which of the following is the act of performing tests and ev...; Question 539: Why is infrared generally considered to be more secure to ea...; Question 540: Which of the following monitors network traffic in real time...; Question 541: PGP allows which of the following to be encrypted?...; Question 542: Remote Procedure Call (RPC) is a protocol that one program c...; Question 543: What Orange Book security rating is reserved for systems tha...; Question 544: The standard server port number for HTTP is which of the fol...; Question 545: Controls provide accountability for individuals who are acce...; Question 546: Which of the following is best defined as a circumstance in ...; Question 547: A potential problem related to the physical installation of ...; Question 548: Secure Shell (SSH-2) supports authentication, compression, c...; Question 549: IT security measures should:; Question 550: Which of the following is often the greatest challenge of di...; Question 551: Which of the following is the most secure form of triple-DES...; Question 552: Which of the following is a cryptographic protocol and infra...; Question 553: What is the maximum number of different keys that can be use...; Question 554: An effective information security policy should not have whi...; Question 555: External consistency ensures that the data stored in the dat...; Question 556: Degaussing is used to clear data from all of the following m...; Question 557: Why is Network File System (NFS) used?...; Question 558: Which of the following statements pertaining to disaster rec...; Question 559: Which of the following will a Business Impact Analysis NOT i...; Question 560: Which of the following is NOT a compensating measure for acc...; Question 561: Which of the following is immune to the effects of electroma...; Question 562: CORRECT TEXT A type of virus that resides in a Word or Excel...; Question 563: SMTP can best be described as:; Question 564: Each data packet is assigned the IP address of the sender an...; Question 565: Which of the following is NOT a task normally performed by a...; Question 566: Which of the following is not a responsibility of an informa...; Question 567: What type of attack involves IP spoofing, ICMP ECHO and a bo...; Question 568: Making sure that the data has not been changed unintentional...; Question 569: Which of the following is most concerned with personnel secu...; Question 570: Which of the following statements pertaining to the Bell-LaP...; Question 571: In non-discretionary access control using Role Based Access ...; Question 572: Which of the following statements pertaining to ethical hack...; Question 573: Which type of attack involves the alteration of a packet at ...; Question 574: The standard server port number for HTTP is which of the fol...; Question 575: At which OSI/ISO layer is an encrypted authentication betwee...; Question 576: The information security staff's participation in which of t...; Question 577: In addition to the Legal Department, with what company funct...; Question 578: Which of following is not a service provided by AAA servers ...; Question 579: Which of the following biometric characteristics cannot be u...; Question 580: A prolonged power supply that is below normal voltage is a:...; Question 581: Which of the following would be an example of the best passw...; Question 582: An effective information security policy should not have whi...; Question 583: Passwords can be required to change monthly, quarterly, or a...; Question 584: Which of the following is a trusted, third party authenticat...; Question 585: How often should a Business Continuity Plan be reviewed?...; Question 586: Which authentication technique best protects against hijacki...; Question 587: What is called the act of a user professing an identity to a...; Question 588: As per the Orange Book, what are two types of system assuran...; Question 589: Which protocol of the TCP/IP suite addresses reliable data t...; Question 590: What kind of encryption is realized in the S/MIME-standard?...; Question 591: Which of the following can be used as a covert channel?...; Question 592: What is the name of a one way transformation of a string of ...; Question 593: Kerberos can prevent which one of the following attacks?...; Question 594: What uses a key of the same length as the message where each...; Question 595: Which of the following centralized access control mechanisms...; Question 596: Secure Shell (SSH-2) supports authentication, compression, c...; Question 597: The control of communications test equipment should be clear...; Question 598: What is called the access protection system that limits conn...; Question 599: Which of the following algorithms is used today for encrypti...; Question 600: Which of the following Kerberos components holds all users' ...; Question 601: Brute force attacks against encryption keys have increased i...; Question 602: The RSA algorithm is an example of what type of cryptography...; Question 603: The preliminary steps to security planning include all of th...; Question 604: Which of the following computer design approaches is based o...; Question 605: Another example of Computer Incident Response Team (CIRT) ac...; Question 606: Which of the following assertions is NOT true about pattern ...; Question 607: Which of the following describes the major disadvantage of m...; Question 608: Which of the following is NOT a characteristic of a host-bas...; Question 609: The act of intercepting the first message in a public key ex...; Question 610: Which of the following classes is defined in the TCSEC (Oran...; Question 611: The basic language of modems and dial-up remote access syste...; Question 612: Which of the following is NOT a fundamental component of an ...; Question 613: Which of the following is defined as the most recent point i...; Question 614: Which of the following LAN topologies offers the highest ava...; Question 615: What kind of encryption is realized in the S/MIME-standard?...; Question 616: What is called the type of access control where there are pa...; Question 617: Degaussing is used to clear data from all of the following m...; Question 618: Good security is built on which of the following concept?...; Question 619: CORRECT TEXT ______________ relates to the concept of protec...; Question 620: Virus scanning and content inspection of SMIME encrypted e-m...; Question 621: Which of the following BEST explains why computerized inform...; Question 622: A standardized list of the most common security weaknesses a...; Question 623: Which of the following questions are least likely to help in...; Question 624: What is the primary reason why some sites choose not to impl...; Question 625: Which of the following transmission media would NOT be affec...; Question 626: What does "System Integrity" mean?...; Question 627: Secure Shell (SSH-2) provides all the following services exc...; Question 628: Which of the following networking devices allows the connect...; Question 629: What is the primary difference between FTP and TFTP?...; Question 630: Telnet and rlogin use which protocol?...; Question 631: Which of the following steps are involved in a basic risk as...; Question 632: What can be described as a measure of the magnitude of loss ...; Question 633: Computer security should be first and foremost which of the ...; Question 634: After a company is out of an emergency state, what should be...; Question 635: Which of the following access control models requires securi...; Question 636: What setup should an administrator use for regularly testing...; Question 637: Which of the following usually provides reliable, real-time ...; Question 638: Which of the following specifically addresses cyber attacks ...; Question 639: If a sender is unable to deny having sent an electronic tran...; Question 640: In what way can violation clipping levels assist in violatio...; Question 641: What is considered the most important type of error to avoid...; Question 642: Which of the following is NOT an example of an operational c...; Question 643: Which of the following should be emphasized during the Busin...; Question 644: To protect and/or restore lost, corrupted, or deleted inform...; Question 645: Which of the following is NOT a task normally performed by a...; Question 646: Which Network Address Translation (NAT) is the most convenie...; Question 647: Which of the following proves or disproves a specific act th...; Question 648: If an organization were to monitor their employees' e-mail, ...; Question 649: A department manager has read access to the salaries of the ...; Question 650: Which of the following service is a distributed database tha...; Question 651: Which of the following is NOT and encryption algorithm?...; Question 652: Which of the following is most affected by denial-of-service...; Question 653: Which of the following can best define the "revocation reque...; Question 654: Which of the following is NOT an advantage that TACACS+ has ...; Question 655: Which of the following best describes what would be expected...; Question 656: Once evidence is seized, a law enforcement officer should em...; Question 657: Which one of the following factors is NOT one on which Authe...; Question 658: What is NOT true about a one-way hashing function?...; Question 659: Which of the following is NOT a property of a one-way hash f...; Question 660: CORRECT TEXT Symmetric = private key = secret ________ = pub...; Question 661: Which of the following are suitable protocols for securing V...; Question 662: Several analysis methods can be employed by an IDS, each wit...; Question 663: Which protocol of the TCP/IP suite addresses reliable data t...; Question 664: CORRECT TEXT Unlike like viruses and worm, __________ are bo...; Question 665: Which of the following keys has the SHORTEST lifespan?...; Question 666: What algorithm has been selected as the AES algorithm, repla...; Question 667: Access Control techniques do not include which of the follow...; Question 668: Which type of algorithm is considered to have the highest st...; Question 669: Which of the following is an IP address that is private (i.e...; Question 670: What physical characteristic does a retinal scan biometric d...; Question 671: The IP header contains a protocol field. If this field conta...; Question 672: Which of the following access control models introduces user...; Question 673: Rule-Based Access Control (RuBAC) access is determined by ru...; Question 674: Which of the following is defined as an Internet, IPsec, key...; Question 675: What can be best defined as the examination of threat source...; Question 676: Which of the following Intrusion Detection Systems (IDS) use...; Question 677: What setup should an administrator use for regularly testing...; Question 678: What is called an exception to the search warrant requiremen...; Question 679: Which of the following is not a security goal for remote acc...; Question 680: In the statement below, fill in the blank: Law enforcement a...; Question 681: Which of the following BEST explains why computerized inform...; Question 682: Which of the following results in the most devastating busin...; Question 683: Which one of the following statements about the advantages a...; Question 684: Which type of attack is based on the probability of two diff...; Question 685: Which of the following is an example of discretionary access...; Question 686: ________, _________, and __________ are required to successf...; Question 687: In the UTP category rating, the tighter the wind:...; Question 688: A business continuity plan is an example of which of the fol...; Question 689: What does the (star) property mean in the Bell-LaPadula mode...; Question 690: Which type of attack consists of modifying the length and fr...; Question 691: Which of the following is a telecommunication device that tr...; Question 692: Knowledge-based Intrusion Detection Systems (IDS) are more c...; Question 693: Which of the following Intrusion Detection Systems (IDS) use...; Question 694: What is the name of the third party authority that vouches f...; Question 695: This is a common security issue that is extremely hard to co...; Question 696: What can be described as an imaginary line that separates th...; Question 697: What security model implies a central authority that define ...; Question 698: Kerberos can prevent which one of the following attacks?...; Question 699: Which of the following can be defined as the process of reru...; Question 700: Which of the following pairings uses technology to enforce a...; Question 701: In computing what is the name of a non-self-replicating type...; Question 702: Which of the following access control models requires securi...; Question 703: Which of the following NAT firewall translation modes offers...; Question 704: In the Bell-LaPadula model, the Star-property is also called...; Question 705: Virus scanning and content inspection of SMIME encrypted e-m...; Question 706: Which of the following statements pertaining to stream ciphe...; Question 707: In biometric identification systems, at the beginning, it wa...; Question 708: Which of the following is a method of multiplexing data wher...; Question 709: How often should tests and disaster recovery drills be perfo...; Question 710: Which OSI/ISO layers are TCP and UDP implemented at?...; Question 711: Which of the following results in the most devastating busin...; Question 712: Which of the following is NOT an administrative control?...; Question 713: Which of the following is most affected by denial-of-service...; Question 714: Which of the following BEST explains why computerized inform...; Question 715: Which of the following is based on the premise that the qual...; Question 716: Which of the following is less likely to be used today in cr...; Question 717: Which of the following ports does NOT normally need to be op...; Question 718: What is the 802.11 standard related to?...; Question 719: Which of the following is NOT true of the Kerberos protocol?...; Question 720: Which access model is most appropriate for companies with a ...; Question 721: In telephony different types of connections are being used. ...; Question 722: Which of the following protects a password from eavesdropper...; Question 723: Java is not:; Question 724: Which of the following statements pertaining to software tes...; Question 725: What are called user interfaces that limit the functions tha...; Question 726: A prolonged power supply that is below normal voltage is a:...; Question 727: Which of the following would NOT violate the Due Diligence c...; Question 728: Which of the following statements pertaining to disaster rec...; Question 729: The IP header contains a protocol field. If this field conta...; Question 730: Which of the following identifies the encryption algorithm s...; Question 731: What attribute is included in a X.509-certificate?...; Question 732: Which of the following would best describe certificate path ...; Question 733: Today, privacy violations are almost as serious as security ...; Question 734: What is the most critical characteristic of a biometric iden...; Question 735: Which of the following biometric devices offers the LOWEST C...; Question 736: What Orange Book security rating is reserved for systems tha...; Question 737: Which of the following is true related to network sniffing?...; Question 738: Which of the following is NOT a common category/classificati...; Question 739: ___________ programs decrease the number of security inciden...; Question 740: Which of the following best ensures accountability of users ...; Question 741: Which of the following is NOT a common backup method?...; Question 742: Which of the following best describes the purpose of debuggi...; Question 743: Which of the following should NOT normally be allowed throug...; Question 744: A central authority determines what subjects can have access...; Question 745: Which of the following would be true about Static password t...; Question 746: Why are coaxial cables called "coaxial"?...; Question 747: Which of the following is a not a preventative control?...; Question 748: Which of the following services is NOT provided by the digit...; Question 749: When a biometric system is used, which error type deals with...; Question 750: What ISO/OSI layer do switches primarily operate at? Do take...; Question 751: Under the Business Exemption Rule to the hearsay evidence, w...; Question 752: Macintosh computers are not at risk for receiving viruses....; Question 753: Which of the following is based on the premise that the qual...; Question 754: Which of the following is a method of multiplexing data wher...; Question 755: Which of the following items is NOT a benefit of cold sites?...; Question 756: While there are many different models for IT system life cyc...; Question 757: After a company is out of an emergency state, what should be...; Question 758: Which of the following choice is NOT normally part of the qu...; Question 759: Which of the following statements pertaining to access contr...; Question 760: What can best be defined as high-level statements, beliefs, ...; Question 761: What is NOT an authentication method within IKE and IPsec?...; Question 762: Which access control model achieves data integrity through w...; Question 763: Which of the following protection devices is used for spot p...; Question 764: Controls are implemented to:; Question 765: Which of the following is NOT a characteristic or shortcomin...; Question 766: Which xDSL flavour delivers both downstream and upstream spe...; Question 767: Organizations should consider which of the following first b...; Question 768: In order to use L0pht, the ___________ must be exported from...; Question 769: What is the maximum key size for the RC5 algorithm?...; Question 770: Which of the following statements pertaining to packet filte...; Question 771: Masquerading is synonymous with __________....; Question 772: Which of the following statements pertaining to block cipher...; Question 773: Which of the following is related to physical security and i...; Question 774: Which must bear the primary responsibility for determining t...; Question 775: The information security staff's participation in which of t...; Question 776: Which of the following is not a responsibility of an informa...; Question 777: Which of the following answers is described as a random valu...; Question 778: Which of the following statements is most accurate regarding...; Question 779: Which of the following best defines add-on security?...; Question 780: Which of the following is a problem regarding computer inves...; Question 781: Which of the following is used to find the Media Access Cont...; Question 782: Diffie Hellman, RSA, and ___________ are all examples of Pub...; Question 783: Which disaster recovery plan test involves functional repres...; Question 784: Which of the following tools is NOT likely to be used by a h...; Question 785: Which of the following is best at defeating frequency analys...; Question 786: Which access control type has a central authority that deter...; Question 787: A periodic review of user account management should not dete...; Question 788: Application Layer Firewalls operate at the:...; Question 789: HTTP, FTP, SMTP reside at which layer of the OSI model?...; Question 790: Which of the following can best eliminate dial-up access thr...; Question 791: How many bits of a MAC address uniquely identify a vendor, a...; Question 792: Failure of a contingency plan is usually:...; Question 793: Which of the following is a token-passing scheme like token ...; Question 794: Which of the following steps should be one of the first step...; Question 795: What is the effective key size of DES?...; Question 796: What is the role of IKE within the IPsec protocol?...; Question 797: Which of the following binds a subject name to a public key ...; Question 798: The Information Technology Security Evaluation Criteria (ITS...; Question 799: Which of the following is used to interrupt the opportunity ...; Question 800: The Secure Hash Algorithm (SHA-1) creates:...; Question 801: Which of the following is the BEST way to detect software li...; Question 802: What IDS approach relies on a database of known attacks?...; Question 803: Controls to keep password sniffing attacks from compromising...; Question 804: Which software development model is actually a meta-model th...; Question 805: Which of the following statements pertaining to ethical hack...; Question 806: If an employee's computer has been used by a fraudulent empl...; Question 807: Which of the following statements pertaining to RADIUS is in...; Question 808: Of the reasons why a Disaster Recovery plan gets outdated, w...; Question 809: Several analysis methods can be employed by an IDS, each wit...; Question 810: Which of the following questions is less likely to help in a...; Question 811: A confidential number used as an authentication factor to ve...; Question 812: CORRECT TEXT EICAR is an example of a _____________ used to ...; Question 813: Which of the following is a trusted, third party authenticat...; Question 814: What term describes the amount of risk that remains after th...; Question 815: RADIUS incorporates which of the following services?...; Question 816: What is malware that can spread itself over open network con...; Question 817: Which type of control is concerned with restoring controls?...; Question 818: What are the three performance measurements used in biometri...; Question 819: Which of the following is a cryptographic protocol and infra...; Question 820: Which of the following is immune to the effects of electroma...; Question 821: Which of the following statements pertaining to software tes...; Question 822: Which of the following does not address Database Management ...; Question 823: Volatile memory is referred to as ROM....; Question 824: Which of the following does not address Database Management ...; Question 825: Complete the blanks. When using PKI, I digitally sign a mess...; Question 826: In biometrics, "one-to-many" search against database of stor...; Question 827: Which of the following is an IP address that is private (i.e...; Question 828: Which of the following would be an example of the best passw...; Question 829: Which of the following questions are least likely to help in...; Question 830: Which of the following can be used as a covert channel?...; Question 831: What enables a workstation to boot without requiring a hard ...; Question 832: Which of the following is not a component of a Operations Se...; Question 833: What is the main objective of proper separation of duties?...; Question 834: Which of the following is the most reliable, secure means of...; Question 835: DES - Data Encryption standard has a 128 bit key and is very...; Question 836: Which of the following statements pertaining to disaster rec...; Question 837: Which type of firewall can be used to track connectionless p...; Question 838: Which of the following best allows risk management results t...; Question 839: Which of the following security models does NOT concern itse...; Question 840: Like the Kerberos protocol, SESAME is also subject to which ...; Question 841: Which of the following groups represents the leading source ...; Question 842: In order to enable users to perform tasks and duties without...; Question 843: What physical characteristic does a retinal scan biometric d...; Question 844: All hosts on an IP network have a logical ID called a(n):...; Question 845: Which of the following statements pertaining to key manageme...; Question 846: Related to information security, confidentiality is the oppo...; Question 847: Which of the following is NOT a basic component of security ...; Question 848: A ______________ is a means, method, or program to neutraliz...; Question 849: Why should batch files and scripts be stored in a protected ...; Question 850: Which of the following is considered the weakest link in a s...; Question 851: CORRECT TEXT SATAN is a _____________ based tool and COPS is...; Question 852: In the course of responding to and handling an incident, you...; Question 853: __________ attacks capitalize on programming errors and can ...; Question 854: To control access by a subject (an active entity such as ind...; Question 855: The RSA Algorithm uses which mathematical concept as the bas...; Question 856: Which xDSL flavour can deliver up to 52 Mbps downstream over...; Question 857: Which of the following is not one of the three goals of Inte...; Question 858: Under the principle of culpable negligence, executives can b...; Question 859: Which of the following is NOT a VPN communications protocol ...; Question 860: Which of the following statements pertaining to VPN protocol...; Question 861: Which of the following best defines a Computer Security Inci...; Question 862: Which of the following should NOT normally be allowed throug...; Question 863: What can best be described as a domain of trust that shares ...; Question 864: Which of the following is the most reliable, secure means of...; Question 865: You have been tasked to develop an effective information cla...; Question 866: What is defined as the manner in which the network devices a...; Question 867: Which of the following was developed by the National Compute...; Question 868: Which of the following is needed for System Accountability?...; Question 869: Which of the following was designed as a more fault-tolerant...; Question 870: Insiders have a clear advantage in committing computer crime...; Question 871: What is the primary role of smartcards in a PKI?...; Question 872: Which of the following is given the responsibility of the ma...; Question 873: Preservation of confidentiality within information systems r...; Question 874: Which of the following is NOT a proper component of Media Vi...; Question 875: Which cable technology refers to the CAT3 and CAT5 categorie...; Question 876: In SSL/TLS protocol, what kind of authentication is supporte...; Question 877: Which of the following was not designed to be a proprietary ...; Question 878: What are called user interfaces that limit the functions tha...; Question 879: Which of the following cannot be undertaken in conjunction o...; Question 880: Preservation of confidentiality within information systems r...; Question 881: In order to be able to successfully prosecute an intruder:...; Question 882: Which of the following is an advantage in using a bottom-up ...; Question 883: What can best be described as a domain of trust that shares ...; Question 884: What is the proper term to refer to a single unit of Etherne...; Question 885: What is NOT true with pre shared key authentication within I...; Question 886: Who of the following is responsible for ensuring that proper...; Question 887: Which of the following is used to monitor network traffic or...; Question 888: Which of the following classes is the first level (lower) de...; Question 889: Which of the following is addressed by Kerberos?...; Question 890: What is the appropriate role of the security analyst in the ...; Question 891: In the UTP category rating, the tighter the wind:...; Question 892: Which of the following is the most reliable authentication m...; Question 893: Which of the following would MOST likely ensure that a syste...; Question 894: Which of the following is NOT a common backup method?...; Question 895: A circuit level proxy is ___________________ when compared t...; Question 896: What can be defined as an instance of two different keys gen...; Question 897: Which of the following types of Intrusion Detection Systems ...; Question 898: Which of the following biometric characteristics cannot be u...; Question 899: Which of the following is not a two-factor authentication me...; Question 900: What can be defined as an instance of two different keys gen...; Question 901: The typical computer fraudsters are usually persons with whi...; Question 902: Which of the following are WELL KNOWN PORTS assigned by the ...; Question 903: Which of the following control pairing places emphasis on "s...; Question 904: The three classic ways of authenticating yourself to the com...; Question 905: When it comes to magnetic media sanitization, what differenc...; Question 906: Which of the following results in the most devastating busin...; Question 907: Which of the following backup method must be made regardless...; Question 908: Which of the following is a tool often used to reduce the ri...; Question 909: Which of the following would best classify as a management c...; Question 910: Which of the following would best define a digital envelope?...; Question 911: Asynchronous Communication transfers data by sending:...; Question 912: In biometrics, the "one-to-one" search used to verify claim ...; Question 913: During which phase of an IT system life cycle are security r...; Question 914: CORRECT TEXT :A _________ refers to hidden code or instructi...; Question 915: Transport Layer Security (TLS) is a two-layered socket layer...; Question 916: Which of the following protocols is designed to send individ...; Question 917: What attribute is included in a X.509-certificate?...; Question 918: What does it mean to say that sensitivity labels are "incomp...; Question 919: In SSL/TLS protocol, what kind of authentication is supporte...; Question 920: Unclassified, Private, Confidential, Secret, Top Secret, and...; Question 921: In response to Access-request from a client such as a Networ...; Question 922: The communications products and services, which ensure that ...; Question 923: Which of the following rules is least likely to support the ...; Question 924: Which of the following is biggest factor that makes Computer...; Question 925: How should a risk be HANDLED when the cost of the countermea...; Question 926: Which of the following is used to find the Media Access Cont...; Question 927: CORRECT TEXT ______________ is a major component of an overa...; Question 928: Which of the following would be used to detect and correct e...; Question 929: Which of the following tape formats can be used to backup da...; Question 930: Which of the following algorithms is a stream cipher?...; Question 931: Which of the following encryption algorithms does not deal w...; Question 932: Which of the following type of traffic can easily be filtere...; Question 933: Which of the following is the core of fiber optic cables mad...; Question 934: To be admissible in court, computer evidence must be which o...; Question 935: In non-discretionary access control using Role Based Access ...; Question 936: Your ATM card is a form of two-factor authentication for wha...; Question 937: How do you distinguish between a bridge and a router?...; Question 938: Which is NOT a suitable method for distributing certificate ...; Question 939: Which of the following is an example of discretionary access...; Question 940: A deviation from an organization-wide security policy requir...; Question 941: Which of the following control pairing places emphasis on "s...; Question 942: Which of the following is an example of an active attack?...; Question 943: Which of the following is an IDS that acquires data and defi...; Question 944: A server cluster looks like a:; Question 945: Physical security is accomplished through proper facility co...; Question 946: Which of the following is an advantage that UDP has over TCP...; Question 947: The control of communications test equipment should be clear...; Question 948: Which of the following is defined as a key establishment pro...; Question 949: Which of the following would NOT violate the Due Diligence c...; Question 950: Define the term tuple.; Question 951: When should a post-mortem review meeting be held after an in...; Question 952: A business continuity plan should list and prioritize the se...; Question 953: Which of the following is related to physical security and i...; Question 954: The basic language of modems and dial-up remote access syste...; Question 955: Which of the following would assist the most in Host Based i...; Question 956: At which layer of ISO/OSI does the fiber optics work?...; Question 957: Which of the following is NOT a transaction redundancy imple...; Question 958: Which OSI/ISO layers are TCP and UDP implemented at?...; Question 959: In discretionary access environments, which of the following...; Question 960: What algorithm was DES derived from?...; Question 961: As telnet is widely know to be insecure, one time passwords ...; Question 962: To protect and/or restore lost, corrupted, or deleted inform...; Question 963: Which of the following item would best help an organization ...; Question 964: Which of the following statements pertaining to using Kerber...; Question 965: How should a risk be HANDLED when the cost of the countermea...; Question 966: Which of the following is implemented through scripts or sma...; Question 967: Sandra has used Ethereal, a packet sniffer, to listen in on ...; Question 968: How do you distinguish between a bridge and a router?...; Question 969: Each data packet is assigned the IP address of the sender an...; Question 970: When preparing a business continuity plan, who of the follow...; Question 971: What can be described as an imaginary line that separates th...; Question 972: What is NOT true with pre shared key authentication within I...; Question 973: Application Layer Firewalls operate at the:...; Question 974: Which of the following are WELL KNOWN PORTS assigned by the ...; Question 975: In what way can violation clipping levels assist in violatio...; Question 976: In the context of network enumeration by an outside attacker...; Question 977: What is the primary reason why some sites choose not to impl...; Question 978: Which backup method copies only files that have changed sinc...; Question 979: What is a TFTP server most useful for?...; Question 980: Which of the following computer recovery sites is only parti...; Question 981: What is the framing specification used for transmitting digi...; Question 982: What mechanism does a system use to compare the security lab...; Question 983: Guards are appropriate whenever the function required by the...; Question 984: Which of the following prevents, detects, and corrects error...; Question 985: CORRECT TEXT NIPC stands for _____ _____ _____ ______ and is...; Question 986: Which of the following security modes of operation involves ...; Question 987: Which of the following was developed as a simple mechanism f...; Question 988: Which of the following is not an example of a block cipher?...; Question 989: Which of the following would be MOST important to guarantee ...; Question 990: Although they are accused of being one in the same, hackers ...; Question 991: The IP header contains a protocol field. If this field conta...; Question 992: Which of the following access control models is based on sen...; Question 993: Telnet and rlogin use which protocol?...; Question 994: Which of the following statements pertaining to key manageme...; Question 995: Which of the following standards is concerned with message h...; Question 996: Decentralized access control allows ______________________....; Question 997: What security control provides a method to insure that a tra...; Question 998: Risk mitigation and risk reduction controls for providing in...; Question 999: Which of the following is most likely to be useful in detect...

Question 248/999

LEAVE A REPLY

Download PDF File