Questions: CISSP CBK Final Exam


206. Which of the following is a “Class A” fire?

207. This IPsec mode encapsulates the entire IP packet between IPsec nodes.

208. A momentary power outage is a:

209. Which security measure would be the best deterrent to the theft of corporate information from a laptop which was left in a hotel room?

210. Which of the following is not EPA-approved replacements for Halon?

211. Which of the following statements pertaining to fire suppression systems is true?

212. Which of the following suppresses combustion through a chemical reaction that kills the fire?

213. Which of the following is a “Class C” fire?

214. When handling electronic evidence, what is the implementation principle for chain of custody that documents the evidence life cycle?

215. Which of the following is a proximity identification device that does not require action by the user and works by responding with an access code to signals transmitted by a reader?

216. A momentary high voltage is a:

217. A device that supplies power when the commercial utility power system fails is called?

218. The ideal operating humidity range is defined as 40 percent to 60 percent. Low humidity (less than 40 percent) can produce what type of problem on computer parts?

219. While referring to physical security, what does positive pressurization means?

220. Which of the following question is less likely to help in assessing physical access controls?

221. The National Institute of Standards and Technology (NIST) standard pertaining to perimeter protection states that critical areas should be illuminated up to?

222. Which of the following is true about a "dry pipe" sprinkler system?

223. The followings are fire detector types except:

224. Which of the following asymmetric encryption algorithm is based on the difficulty of factoring large numbers?

225. Under what conditions would the use of a Class C fire suppression system be preferable to the use of a Class A fire suppression system?

226. Which of the following recovery issue must be considered in disaster recovery planning (DRP)?

227. A business continuity plan (BCP) should have a structure that includes:

228. What should take place in order to restore a server, its files and data after a major system failure?

229. It is recommended that your disaster recovery plan (DRP) and business continuity plan (BCP) be tested at a minimum of what intervals?

230. In addition to preventing loss of life and further injury, what other reason is there to immediately initiate an emergency plan after a disaster?

231. When shopping for an off-site backup facility that will ultimately be used to store all your backup media, what is the most important factor to consider?

232. What is the primary reason for using one-way hashing algorithms on user passwords?

233. What is the most critical factor in the development of a disaster recovery plan (DRP)?

234. What is the best description of a structured walk through test?

235. Which of the following backup facility is most expensive?

236. A business impact analysis would not likely include which of the following tasks?

237. What is the effective length of a secret key in the Data Encryption Standard (DES) algorithm?

238. If a site needed sporadic access to another network, which would be the best choice?

239. Resuming critical business functions includes:

240. The admissibility rule requires that evidence must be excluded if:

241. Chain of custody is primarily used to:

242. A unique packaging method or symbol is a:

243. Why is computer crime difficult to investigate:

244. Privacy laws generally include which of the following provisions:

245. What is the minimum and customary practice of responsible protection of assets that affects a community or societal norm?

246. What is the best description of a stream cipher?

247. Evidence may be not detected through:

248. Which of the following is not a valid X.509 V.3 certificate field?

249. Which network protocol uses a “connected” session?

250. What are the objectives of emergency actions taken at the beginning stage of a disaster? Preventing injuries, loss of life, and …

98. Which one of the following hardware devices can be re-programmed?
1 Read Only Memory (ROM).
2 Programmable Read Only Memory (PROM).
3 Erasable Programmable Read Only Memory (EPROM).
4 Electrically Erasable Programmable Read Only Memory (EEPROM).

102. Trusted Computing Base (TCB) is comprised of what combination of system components?
1 Hardware.
2 Firmware.
3 Software.

121. Match the correct network connection speed to the correct standard.
Standard - - Speed
802.11 - - ?
802.11b - - ?
802.11g - - ?
1. 1 & 2 Mbps
2. 4 & 8 Mbps
3. 11 Mbps
4. 54 Mbps

180. Which security model addresses integrity?
1. Bell-LaPadula.
2. Clark-Wilson.
3. Biba.
4. Chinese Wall.

163. Which protocol makes use of an electronic wallet on a customer`s PC and sends encrypted credit card information to merchant`s Web server, which digitally signs it and sends it on to its processing bank?

1  2  3  4  5