Free ISC ISSAP Exam Dumps Questions & Answers

The IPSec protocol is configured in an organization's network in order to maintain a complete infrastructure for secured network communications. IPSec uses four components for this. Which of the following components reduces the size of data transmitted over congested network connections and increases the speed of such networks without losing data?

• A.  ESP
• B.  AH
• C.  IKE
• D.  IPcomp

In which of the following cryptographic attacking techniques does an attacker obtain encrypted messages that have been encrypted using the same encryption algorithm?

• A.  Chosen plaintext attack
• B.  Chosen ciphertext attack
• C.  Known plaintext attack
• D.  Ciphertext only attack

You are responsible for security at a defense contracting firm. You are evaluating various possible encryption algorithms to use. One of the algorithms you are examining is not integer based, uses shorter keys, and is public key based. What type of algorithm is this?

• A.  None - all encryptions are integer based.
• B.  RSA
• C.  Elliptic Curve
• D.  Symmetric

Which of the following decides access control on an object in the mandatory access control (MAC)
environment?

• A.  Security log
• B.  Sensitivity label
• C.  Event log
• D.  System Access Control List (SACL)

Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited personnel in SoftTech Inc, what will be your answer for her question? Each correct answer represents a part of the solution. Choose three.

• A.  Maximize the decision-making required by personnel during a disaster.
• B.  Guarantee the reliability of standby systems through testing and simulation.
• C.  Protect an organization from major computer services failure.
• D.  Minimize the risk to the organization from delays in providing services.