ISC2 CISSP-ISSAP Certification Sample Questions

CISSP-ISSAP Dumps, CISSP-ISSAP Dumps, CISSP-ISSAP PDF, CISSP-ISSAP VCE, ISC2 CISSP-ISSAP VCE, ISC2 ISSAP PDFThe purpose of this Sample Question Set is to provide you with information about the ISC2 Information Systems Security Architecture Professional exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the CISSP-ISSAP certification test. To get familiar with real exam environment, we suggest you try our Sample ISC2 CISSP-ISSAP Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual ISC2 Information Systems Security Architecture Professional (CISSP-ISSAP) certification exam.

These sample questions are simple and basic questions that represent likeness to the real ISC2 CISSP-ISSAP exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium ISC2 CISSP-ISSAP Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

ISC2 CISSP-ISSAP Sample Questions:

01. Which networking technologies are particularly suspectable to Remote Code Execution (REC) attack?
a) Centralized
b) Hybrid
c) SCADA
d) IoT
 
02. Keccak is a cryptographic solution found in what implementation?
a) Secure hash algorithm (SHA1)
b) Secure hash algorithm (SHA3)
c) RACE Integrity Primitives Evaluation Message Digest-160 (RIPEMD-160)
d) Message digest (MD6)
 
03. Security in Internet of Things (IoT) devices is:
a) Impossible
b) Always configured
c) Sometimes configured
d) Not necessary
 
04. What type of malware is Petya?
a) A virus
b) A worm
c) Spyware
d) Ransomware
 
05. Monitoring privileged accounts is a crucial element. Which of the following is NOT considered to be in this group?
a) Mainframe operators
b) Auditors
c) Database administrators
d) System administrators
 
06. When notifying stakeholders, what media would NOT be considered as sufficient?
a) Direct communication (email) with all affected parties
b) Social media
c) The corporate website
d) Direct communication with the press
 
07. The core of identity management surrounds the AAA triad. What does this refer to?
a) Auditing, Availability, Accountability
b) Availability, Authorization and Authentication
c) Authentication, Accessibility and Availability
d) Authentication, Authorization and Accounting
 
08. You are the owner of a small, local shop. You accept both cash and credit cards for payment of goods. Are you required to be payment card industry (PCI) compliant?
a) No, PCI only applies to large, multi-location, organizations
b) Yes, compliance is required for all merchants
c) No, PCI only applies to credit card companies
d) No, PCI only applies to banks
 
09. Open Authorization (OAuth) is an open source, token-based authorization framework. Currently there are two versions: OAuth v1.0 and v2.0. Which of the following statements is correct?
a) Version 2.0 uses user-based tokens
b) Version 2.0 uses digital signing
c) Version 1.0 uses user-based tokens for authentication
d) Version 1.0 is still widely available
 
10. When considering the three cloud service models (IaaS, PaaS and SaaS), which of the following are the sole responsibility of the cloud service provider (CSP)?
a) User access, applications, physical
b) Applications, infrastructure, network traffic
c) Hypervisor, infrastructure, physical
d) Hypervisor, data, user access

Answers:

Question: 01
Answer: c		 Question: 02
Answer: b		 Question: 03
Answer: c		 Question: 04
Answer: d		 Question: 05
Answer: b
Question: 06
Answer: a		 Question: 07
Answer: d		 Question: 08
Answer: b		 Question: 09
Answer: a		 Question: 10
Answer: c

Note: For any error in ISC2 Information Systems Security Architecture Professional (CISSP-ISSAP) certification exam sample questions, please update us by writing an email on feedback@edusum.com.

Rating: 4.8 / 5 (133 votes)