Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
MuleSoft
Okta
Palo Alto Networks
Salesforce
SAP
All Vendors
  1. Home
  2. ISC
  3. CISSP-ISSAP

ISC CISSP-ISSAP Exam (page: 1)
ISC CISSP-ISSAP Information Systems Security Architecture Professional
Updated on: 28-Jul-2025

Viewing Page 1 of 50
CISSP-ISSAP PDF 241 Questions

Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market?

  1. Project gap
  2. Product gap
  3. Competitive gap
  4. Usage gap

Answer(s): D

Explanation:

The usage gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market.
Mainly two figures are needed for this calculation:
Market potential: The maximum number of consumers available will usually be determined by market research, but it may sometimes be calculated from demographic data or government statistics. Existing usage: The existing usage by consumers makes up the total current market, from which market shares, for example, are calculated. It is usually derived from marketing research, most accurately from panel research and also from ad hoc work.
Thus, the 'usage gap' can be calculated by:
usage gap = market potential - existing usage
Answer option B is incorrect. The product gap is also described as the segment or positioning gap. It represents that part of the market from which the individual organization is excluded because of product or service characteristics. This may have come about because the market has been segmented and the organization does not have offerings in some segments, or it may be because the positioning of its offering effectively excludes it from certain groups of potential consumers, because there are competitive offerings much better placed in relation to these groups.
The product gap is probably the main element of the planning gap in which the organization can have a productive input. Therefore the emphasis is on the importance of correct positioning.
Answer option A is incorrect. The project gap is not a valid element of planning gap. Answer option C is incorrect. The competitive gap is the share of business achieved among similar products, sold in the same market segment and with similar distribution patterns or at least, in any comparison, after such effects have been discounted. The competitive gap represents the effects of factors such as price and promotion, both the absolute level and the effectiveness of its messages. It is what marketing is popularly supposed to be about.



Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

  1. Hacking
  2. Packet filtering
  3. Web caching
  4. Spoofing

Answer(s): B

Explanation:

Packet filtering is a method that allows or restricts the flow of specific types of packets to provide security. It analyzes the incoming and outgoing packets and lets them pass or stops them at a network interface based on the source and destination addresses, ports, or protocols. Packet filtering provides a way to define precisely which type of IP traffic is allowed to cross the firewall of an intranet. IP packet filtering is important when users from private intranets connect to public networks, such as the Internet.
Answer option D is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the
IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the responses to be misdirected.
Answer option C is incorrect. Web caching is a method for minimizing performance bottlenecks and reducing network traffic by serving locally cached Web content. Web caching helps in reducing bandwidth utilization during periods of high network traffic. High network traffic is usually caused when a large number of users use the network at the same time. With a caching solution in place, users' requests will be returned from the cache without having to travel over a WAN link to the destination Web server. Answer option A is incorrect. Hacking is a process by which a person acquires illegal access to a computer or network through a security break or by implanting a virus on the computer or network.



You work as a Network Administrator for NetTech Inc. The company wants to encrypt its e-mails.
Which of the following will you use to accomplish this?

  1. PGP
  2. PPTP
  3. IPSec
  4. NTFS

Answer(s): A

Explanation:

Standard Internet e-mail is usually sent as plaintext over networks. This is not secure as intruders can monitor mail servers and network traffic to obtain sensitive information. The two most commonly used methods for providing e-mail security are Pretty Good Privacy (PGP) and
Secure/Multipurpose Internet Mail Extensions (S/MIME). These methods typically include authentication of the originator and privacy of the message.
Pretty Good Privacy (PGP) is an encryption method that uses public-key encryption to encrypt and digitally sign e-mail messages during communication between e-mail clients. PGP is effective, easy to use, and free. Therefore, it is one of the most common ways to protect messages on the Internet.
Answer option C is incorrect. Internet Protocol security (IPSec) provides secure communication over IP networks. It cannot be used to encrypt e-mail messages.



Peter works as a Network Administrator for Net World Inc. The company wants to allow remote users to connect and access its private network through a dial-up connection via the Internet. All the data will be sent across a public network. For security reasons, the management wants the data sent through the Internet to be encrypted. The company plans to use a Layer 2 Tunneling Protocol (L2TP) connection.
Which communication protocol will Peter use to accomplish the task?

  1. IP Security (IPSec)
  2. Microsoft Point-to-Point Encryption (MPPE)
  3. Pretty Good Privacy (PGP)
  4. Data Encryption Standard (DES)

Answer(s): A

Explanation:

According to the question, all the data will be sent across a public network. Data sent through a public network such as the Internet should be encrypted in order to maintain security.

The two modes available for data encryption are Microsoft Point-to-Point Encryption (MPPE) and IP Security (IPSec). The MPPE protocol is used for data encryption in a PPTP connection. It supports MSCHAP v1 and v2, and the EAP-TLS authentication methods. However, L2TP does not support the MPPE protocol. Therefore, for an L2TP connection, Peter will have to use the IPSec protocol to encrypt data. L2TP with IPSec needs a certificate authority server (CA server) to generate certificates as well as to check their validity for providing secure communication across both ends of the VPN.



Which of the following protocols multicasts messages and information among all member devices in an IP multicast group?

  1. ARP
  2. ICMP
  3. TCP
  4. IGMP

Answer(s): D

Explanation:

Internet Group Management Protocol (IGMP) is a communication protocol that multicasts messages and information among all member devices in an IP multicast group. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. It can be effectively used for gaming and showing online videos. IGMP is vulnerable to network attacks. Answer option B is incorrect. Internet Control Message Protocol (ICMP) is an integral part of IP. It is used to report an error in datagram processing. The Internet Protocol (IP) is used for host-to-host datagram service in a network. The network is configured with connecting devices called gateways.
When an error occurs in datagram processing, gateways or destination hosts report the error to the source hosts through the ICMP protocol. The ICMP messages are sent in various situations, such as when a datagram cannot reach its destination, when the gateway cannot direct the host to send traffic on a shorter route, when the gateway does not have the buffering capacity, etc.
Answer option A is incorrect. Address Resolution Protocol (ARP) is a network maintenance protocol of the TCP/IP protocol suite. It is responsible for the resolution of IP addresses to media access control (MAC) addresses of a network interface card (NIC). The ARP cache is used to maintain a correlation between a MAC address and its corresponding IP address. ARP provides the protocol rules for making this correlation and providing address conversion in both directions. ARP is limited to physical network systems that support broadcast packets.
Answer option C is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can transmit large amounts of data. Application-layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients and servers.



Viewing Page 1 of 50



Share your comments for ISC CISSP-ISSAP exam with other users:

Ace 8/3/2023 10:37:00 AM

number 52 answer is d
UNITED STATES


Nathan 12/17/2023 12:04:00 PM

just started preparing for my exam , and this site is so much help
Anonymous


Corey 12/29/2023 5:06:00 PM

question 35 is incorrect, the correct answer is c, it even states so: explanation: when a vm is infected with ransomware, you should not restore the vm to the infected vm. this is because the ransomware will still be present on the vm, and it will encrypt the files again. you should also not restore the vm to any vm within the companys subscription. this is because the ransomware could spread to other vms in the subscription. the best way to restore a vm that is infected with ransomware is to restore it to a new azure vm. this will ensure that the ransomware is not present on the new vm.
Anonymous


Rajender 10/18/2023 3:54:00 AM

i would like to take psm1 exam.
Anonymous


Blessious Phiri 8/14/2023 9:53:00 AM

cbd and pdb are key to the database
SOUTH AFRICA


Alkaed 10/19/2022 10:41:00 AM

the purchase and download process is very much streamlined. the xengine application is very nice and user-friendly but there is always room for improvement.
NETHERLANDS


Dave Gregen 9/4/2023 3:17:00 PM

please upload p_sapea_2023
SWEDEN


Sarah 6/13/2023 1:42:00 PM

anyone use this? the question dont seem to follow other formats and terminology i have been studying im getting worried
CANADA


Shuv 10/3/2023 8:19:00 AM

good questions
UNITED STATES


Reb974 8/5/2023 1:44:00 AM

hello are these questions valid for ms-102
CANADA


Mchal 7/20/2023 3:38:00 AM

some questions are wrongly answered but its good nonetheless
POLAND


Sonbir 8/8/2023 1:04:00 PM

how to get system serial number using intune
Anonymous


Manju 10/19/2023 1:19:00 PM

is it really helpful to pass the exam
Anonymous


LeAnne Hair 8/24/2023 12:47:00 PM

#229 in incorrect - all the customers require an annual review
UNITED STATES


Abdul SK 9/28/2023 11:42:00 PM

kindy upload
Anonymous


Aderonke 10/23/2023 12:53:00 PM

fantastic assessment on psm 1
UNITED KINGDOM


SAJI 7/20/2023 2:51:00 AM

56 question correct answer a,b
Anonymous


Raj Kumar 10/23/2023 8:52:00 PM

thank you for providing the q bank
CANADA


piyush keshari 7/7/2023 9:46:00 PM

true quesstions
Anonymous


B.A.J 11/6/2023 7:01:00 AM

i can´t believe ms asks things like this, seems to be only marketing material.
Anonymous


Guss 5/23/2023 12:28:00 PM

hi, could you please add the last update of ns0-527
Anonymous


Rond65 8/22/2023 4:39:00 PM

question #3 refers to vnet4 and vnet5. however, there is no vnet5 listed in the case study (testlet 2).
UNITED STATES


Cheers 12/13/2023 9:55:00 AM

sometimes it may be good some times it may be
GERMANY


Sumita Bose 7/21/2023 1:01:00 AM

qs 4 answer seems wrong- please check
AUSTRALIA


Amit 9/7/2023 12:53:00 AM

very detailed explanation !
HONG KONG


FisherGirl 5/16/2022 10:36:00 PM

the interactive nature of the test engine application makes the preparation process less boring.
NETHERLANDS


Chiranthaka 9/20/2023 11:15:00 AM

very useful.
Anonymous


SK 7/15/2023 3:51:00 AM

complete question dump should be made available for practice.
Anonymous


Gamerrr420 5/25/2022 9:38:00 PM

i just passed my first exam. i got 2 exam dumps as part of the 50% sale. my second exam is under work. once i write that exam i report my result. but so far i am confident.
AUSTRALIA


Kudu hgeur 9/21/2023 5:58:00 PM

nice create dewey stefen
CZECH REPUBLIC


Anorag 9/6/2023 9:24:00 AM

i just wrote this exam and it is still valid. the questions are exactly the same but there are about 4 or 5 questions that are answered incorrectly. so watch out for those. best of luck with your exam.
CANADA


Nathan 1/10/2023 3:54:00 PM

passed my exam today. this is a good start to 2023.
UNITED STATES


1 10/28/2023 7:32:00 AM

great sharing
Anonymous


Anand 1/20/2024 10:36:00 AM

very helpful
UNITED STATES