New 2022 CISSP Dumps for ISC Certification Certified Exam Questions & Answer [Q538-Q553]

4.5/5 - (2 votes)

New 2022 CISSP Dumps for ISC Certification Certified Exam Questions and Answer

Realistic Verified CISSP exam dumps Q&As – CISSP Free Update

QUESTION 538
Which one of the following authentication mechanisms creates a problem for mobile users?

Mechanisms based on IP addresses

Mechanism with reusable passwords

one-time password mechanism.

challenge response mechanism.

Anything based on a fixed IP address would be a problem for mobile users because their location and its associated IP address can change from one time to the next.
Many providers will assign a new IP every time the device would be restarted. For example an insurance adjuster using a laptop to file claims online. He goes to a different client each time and the address changes every time he connects to the ISP.
NOTE FROM CLEMENT:
The term MOBILE in this case is synonymous with Road Warriors where a user is contantly traveling and changing location. With smartphone today that may not be an issue but it would be an issue for laptops or WIFI tablets. Within a carrier network the IP will tend to be the same and would change rarely. So this question is more applicable to devices that are not cellular devices but in some cases this issue could affect cellular devices as well.
The following answers are incorrect:
mechanism with reusable password. This is incorrect because reusable password mechanism would not present a problem for mobile users. They are the least secure and change only at specific interval.
one-time password mechanism. This is incorrect because a one-time password mechanism would not present a problem for mobile users. Many are based on a clock and not on the IP address of the user.
challenge response mechanism. This is incorrect because challenge response mechanism would not present a problem for mobile users.

QUESTION 539
Which one of the following is the MOST critical characteristic of a biometrics system?

Acceptability

Accuracy

Throughput

Reliability

We don’t agree with the original answer, which was throughput. Granted throughput is vital but Krutz lists accuracy is most important.
In addition to the accuracy of the biometric systems, there are OTHER factors that must also be considered. These factors include the enrollment time, the throughput rate, and acceptability. Ronald Krutz The CISSP PREP Guide (gold edition) pg 51

QUESTION 540
During the testing of the business continuity plan (BCP), which of the following methods of results analysis provides the BEST assurance that the plan is workable?

Measurement of accuracy

Elapsed time for completion of critical tasks

Quantitatively measuring the results of the test

Evaluation of the observed test results

Explanation/Reference:
Explanation:
Once you develop a list of threats, you must individually evaluate each threat and its related risk. There are two risk assessment methodologies: quantitative and qualitative. Quantitative risk analysis assigns real dollar figures to the loss of an asset.
Incorrect Answers:
A: Accuracy is not measured. It is the list of threats that are quantitative measured.
B: Elapsed time for completion of critical tasks is Critical. It is critical to evaluate the risks.
D: the observed test results are Evaluated. The business function either passes or fails the test.
References:
Stewart, James M., Ed Tittel, and Mike Chapple, CISSP: Certified Information Systems Security Professional Study Guide, 5th Edition, Sybex, Indianapolis, 2011, p. 243

QUESTION 541
Which of the following standards/guidelines requires an Information Security Management System (ISMS) to be defined?

International Organization for Standardization (ISO) 27000 family

Information Technology Infrastructure Library (ITIL)

Payment Card Industry Data Security Standard (PCIDSS)

ISO/IEC 20000

QUESTION 542
Communications devices must operate:

at different speeds to communicate.

at the same speed to communicate.

at varying speeds to interact.

at high speed to interact.

Communications devices must operate at the same speed to communicate.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 100.

QUESTION 543
Where in a PKI infrastructure is a list of revoked certificates stored?

CRL

Registration Authority

Recovery Agent

Key escrow

Explanation/Reference:
Explanation:
In a Public Key Infrastructure (PKI), the revocation of a certificate is dealt with by the certificate authority (CA). The revoked certificate information is stored on a certificate revocation list (CRL).
Incorrect Answers:
B: The registration authority (RA) executes the certification registration tasks. It does not, however, store a list of revoked certificates.
C: Key recovery agent is one of the intended purposes of digital certificates. It does not, however, store a list of revoked certificates.
D: Key escrow is a process or entity that can recover lost or corrupted cryptographic keys. It does not, however, store a list of revoked certificates.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 833-836, 843 Miller, David R, Microsoft CISSP Training Kit, O’Reilly Media, 2013, California, p. 217

QUESTION 544
Which of the following does not address Database Management Systems (DBMS) Security?

Perturbation

Cell suppression

Padded cells

Partitioning

Explanation/Reference:
Explanation:
A padded cell system is used in Intrusion Detection Systems (IDSs) and is similar to a honeypot. When an IDS detects an intruder, that intruder is automatically transferred to a padded cell. The padded cell has the look and layout of the actual network, but within the padded cell the intruder can neither perform malicious activities nor access any confidential data.
Incorrect Answers:
A: Noise and perturbation is a database security technique of inserting fake information in the database to misdirect an attacker or cause confusion on the part of the attacker that the actual attack will not be fruitful.
B: Cell suppression is a database security technique used to hide specific cells in a database that contain information that could be used in inference attacks.
D: Partitioning is a database security technique that involves dividing the database into different parts, which makes it much harder for an unauthorized individual to find connecting pieces of data that can be brought together and other information that can be deduced or uncovered.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1185 Stewart, James, Ed Tittel and Mike Chapple, CISSP: Certified Information Systems security Professional Study Guide, 5th Edition, Wiley Publishing, Indianapolis, 2011, p. 58

QUESTION 545
A one-way hash provides which of the following?

Confidentiality

Availability

Integrity

Authentication

A one-way hash is a function that takes a variable-length string a message, and compresses and transforms it into a fixed length value referred to as a hash value. It provides integrity, but no confidentiality, availability or authentication. Source: WALLHOFF, John, CBK#5 Cryptography (CISSP Study Guide), April 2002 (page 5).

QUESTION 546
Which choice does NOT describe an element of configuration
management?

Configuration management reports the status of change processing.

Configuration management is the decomposition process of a verification system into Configuration Items (CIs).

Configuration management documents the functional and physical characteristics of each configuration item.

Configuration management involves information capture and version control.

Configuration management is a discipline applying technical and administrative direction to: Identify and document the functional and physical characteristics of each configuration item for the system Manage all changes to these characteristics Record and report the status of change processing and implementation Configuration management involves process monitoring, version control, information capture, quality control, bookkeeping, and an organizational framework to support these activities. The configuration being managed is the verification system plus all tools and documentation related to the configuration process. Source: NCSC-TG-014-89, Guidelines for Formal Verification Systems [Purple Book].

QUESTION 547
The absence or weakness in a system that may possibly be exploited is called a(n)?

Threat

Exposure

Vulnerability

Risk

QUESTION 548
Which of the following is NOT a type of motion detector?

photoelectric sensor

wave pattern

capacitance

audio detector

Audio detector detects sound not motion Not A: A photoelectric sensor is a motion sensor that’s what it was designed to do.

QUESTION 549
The equation used to calculate the total number of symmetric keys (K) needed for a group of users (N) to communicate securely with each other is given by which of the following?

K(N – 1)/ 2

N(K – 1)/ 2

K(N + 1)/ 2

N(N – 1)/ 2

Explanation/Reference:
Explanation:
The equation employed to determine the required number of symmetric keys is N(N – 1)/2.
Incorrect Answers:
A, B, C: These equations are not valid for calculating the required number of symmetric keys.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 782

QUESTION 550
Which of the following is true about Kerberos?

It utilized public key cryptography

It encrypts data after a ticket is granted, but passwords are exchanged in plain text

It depends upon symmetric ciphers

It is a second party authentication system

“Kerberos relies upon symmetric key cryptography, specifically Data Encryption Standard (DES), and provides end-to-end security for authentication traffic between the client and the Key Distribution Center (KDC).” Pg. 15 Tittel: CISSP Study Guide

QUESTION 551
Which of the following is the FIRST step in protecting data’s confidentiality?

Install a firewall

Implement encryption

Identify which information is sensitive

Review all user access rights

In order to protect the confidentiality of the data.
The following answers are incorrect because :
Install a firewall is incorrect as this would come after the information has been identified for sensitivity levels.
Implement encryption is also incorrect as this is one of the mechanisms to protect the data once it has been identified.
Review all user access rights is also incorrect as this is also a protection mechanism for the identified information.
Reference : Shon Harris AIO v3 , Chapter-4 : Access Control , Page : 126

QUESTION 552
Which of the following is the PRIMARY benefit of a formalized information classification program?

It minimized system logging requirements.

It supports risk assessment.

It reduces asset vulnerabilities.

It drives audit processes.

QUESTION 553
In multi-processing systems, which one of the following lacks mandatory controls and is NORMALLY AVOIDED for communication?

Storage channels

Covert channels

Timing channels

Object channels

Covert channel – A communication path that enables a process to transmit information in a way that violates the system’s security policy. – Shon Harris All-in-one CISSP Certification Guide pg 929

Loading …

How to earn PCSA credentials?

The candidate must earn 50 continuing education units (CEUs) for the PCSA credential. The CEUs may be earned through participation in the ISSA – ISC2 Security Forum of Interest Community of Interest (COI), attendance at an Information Systems Security Association (ISSA) certified training course, obtaining CEUs from any other Information Systems Security Association or Information Systems Audit and Control Association (ISACA) member, obtaining certification credits for passing the exam, or through participating in many other online sites.
The Professional level requires passing two exams to achieve. The PCSA credential is defined as conforming to the requirements of NCEES, the American Society for Testing and Materials (ASTM), and the International Information Systems Security Certification Consortium (ISC). The test will not earn a CISSP valid certification.

Use Real CISSP Dumps – 100% Free CISSP Exam Dumps: https://www.trainingquiz.com/CISSP-practice-quiz.html

Previous Article [Dec 13, 2022] C-S4EWM-2020 Exam Brain Dumps – Study Notes and Theory [Q39-Q59]

Next Article [Full-Version] 2022 New 201 Actual Exam Dumps, F5 Practice Test [Q45-Q62]

The Best SSCP Exam Study Material and Preparation Test Question Dumps [Q491-Q512]

SSCP, ISC April 16, 2023

The Best SSCP Exam Study Material and Preparation Test Question Dumps Get Ready to Pass the SSCP exam Right Now

Updated Jul 07, 2024 Verified Pass CGRC Exam in First Attempt Guaranteed [Q157-Q174]

CGRC, ISC July 7, 2024

Updated Jul 07, 2024 Verified Pass CGRC Exam in First Attempt Guaranteed Free CGRC Sample Questions and 100% Cover Real

Quiz Training Materials

New 2022 CISSP Dumps for ISC Certification Certified Exam Questions & Answer [Q538-Q553]

How to earn PCSA credentials?

The Best SSCP Exam Study Material and Preparation Test Question Dumps [Q491-Q512]

Updated Jul 07, 2024 Verified Pass CGRC Exam in First Attempt Guaranteed [Q157-Q174]

Leave a Reply Cancel reply

Quiz Training Materials

New 2022 CISSP Dumps for ISC Certification Certified Exam Questions & Answer [Q538-Q553]

How to earn PCSA credentials?

You May Also Like...

The Best SSCP Exam Study Material and Preparation Test Question Dumps [Q491-Q512]

Updated Jul 07, 2024 Verified Pass CGRC Exam in First Attempt Guaranteed [Q157-Q174]

Leave a Reply Cancel reply