ISC-Certified Information Systems Security Professionals Set 13

1.

Which of the following statements pertaining to IPSec is NOT true?

A security association has to be defined between two IPSec systems in order for bi-directional communication to be established. Integrity and authentication for IP datagrams are provided by AH. ESP provides for integrity, authentication and encryption to IP datagrams. In transport mode, ESP only encrypts the data payload of each packet.

2.

Which of the following statements pertaining to packet filtering is NOT true?

It is based on ACLs. It is not application dependent. It operates at the network layer. It keeps track of the state of a connection.

3.

Which of the following is a method of multiplexing data where a communication channel is divided into an arbitrary number of variable bit-rate digital channels or data streams. This method allocates bandwidth dynamically to physical channels having information to transmit?

Time-division multiplexing Asynchronous time-division multiplexing Statistical multiplexing Frequency division multiplexing

4.

If an organization were to deploy only one Intrusion Detection System (IDS) sensor to protect its information system from the Internet:

It should be host-based and installed on the most critical system in the DMZ, between the external router and the firewall. It should be network-based and installed in the DMZ, between the external router and the firewall. It should be network-based and installed between the firewall to the DMZ and the intranet. It should be host-based and installed between the external router and the Internet.

5.

Why is infrared generally considered to be more secure to eavesdropping than multidirectional radio transmissions?

Because infrared eavesdropping requires more sophisticated equipment. Because infrared operates only over short distances. Because infrared requires direct line-of-sight paths. Because infrared operates at extra-low frequencies (ELF).

6.

Authentication Headers (AH) and Encapsulating Security Payload (ESP) protocols are the driving force of IPSec. Authentication Headers (AH) provides the
following service except:

Authentication Integrity Replay resistance and non-repudiations Confidentiality

7.

In IPSec, if the communication is to be gateway-to-gateway or host-to-gateway:

Tunnel mode of operation is required Only transport mode can be used Encapsulating Security Payload (ESP) authentication must be used Both tunnel and transport mode can be used

8.

Which of the following is NOT true about IPSec Tunnel mode?

Fundamentally an IP tunnel with encryption and authentication Works at the Transport layer of the OSI model Have two sets of IP headers Established for gateway service

9.

Which of the following statements is NOT true of IPSec Transport mode?

It is required for gateways providing access to internal systems Set-up when end-point is host or communications terminates at end-points If used in gateway-to-host communication, gateway must act as host When ESP is used for the security protocol, the hash is only applied to the upper layer protocols contained in the packet

10.

Which of the following statements pertaining to firewalls is NOT true?

Firewalls create bottlenecks between the internal and external network. Firewalls allow for centralization of security services in machines optimized and dedicated to the task. Firewalls protect a network at all layers of the OSI models. Firewalls are used to create security checkpoints at the boundaries of private networks.

ISC-Certified Information Systems Security Professionals Set 13

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

ISC-Certified Information Systems Security Professionals Set 13

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner