ISC System Security Certified Practitioner (SSCP) - SSCP무료 덤프문제 풀어보기

A. Auditing of changes to the Trusted Computing Base.

B. Control of changes to the Trusted Computing Base.

C. Auditing and controlling any changes to the Trusted Computing Base.

D. Changes in the configuration access to the Trusted Computing Base.

A. Identify

B. Prepare

C. Contain

D. Review

E. Recover

F. Prosecute

A. They provide strict boundaries and definitions on what the processes that work within each ring can access.

B. They support the CIA triad requirements of multitasking operating systems.

C. Programs operating in inner rings are usually referred to as existing in a privileged mode.

D. They provide users with a direct access to peripherals

A. When ESP is used for the security protocol, the hash is only applied to the upper layer protocols contained in the packet

B. If used in gateway-to-host communication, gateway must act as host

C. Set-up when end-point is host or communications terminates at end-points

D. It is required for gateways providing access to internal systems

A. The merchant's Certificate Server

B. The client's browser

C. The web server

D. Both client and server

A. It tracks network connections to off-site locations.

B. It scans network segments for cabling faults.

C. It monitors network traffic for illegal packets.

D. It captures network traffic for later analysis.

A. Recovery testing

B. Interface testing

C. Stress/volume testing

D. Security testing

A. Trojan horses

B. Data fiddling

C. Salami techniques

D. Data diddling

A. It is based on ACLs.

B. It keeps track of the state of a connection.

C. It operates at the network layer.

D. It is not application dependant.

A. The reference monitor.

B. Discretionary Access Control.

C. Mandatory Access Control.

D. The Security Kernel.

A. Read-Only Media

B. Video Tapes

C. Magnetic Hard Disks

D. Floppy Disks

A. Convenience

B. Convenience and centralized data administration

C. Convenience and centralized network administration

D. Convenience and centralized administration

A. Channel service unit/Data service unit (CSU/DSU)

B. Router

C. Multiplexer

D. Wan switch

A. Much of the data gathered during the review cannot be reused for subsequent analysis.

B. Most software tools have user interfaces that are easy to use and does not require any training.

C. Information gathering would be minimized and expedited due to the amount of information already built into the tool.

D. Automated methodologies require minimal training and knowledge of risk analysis.