You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network.Which of the following phases of the Incident handling process should you follow next to handle this incident?
Answer(s): A
After the identification of the DOS attack, you need to disconnect the link to the network from which the attack is being performed. TheContainment phase should be followed until the eradication and recovery from the attack is done. The Containment phase of the Incident handling process is responsible for supporting and building up the incident combating process. It ensures the stability of the system and also confirms that the incident does not get any worse. The Containment phase includes the process of preventing further contamination of the system or network, and preserving the evidence of the contamination.Answer option D is incorrect. The Identification phase of the Incident handling process is the stage at which the Incident handler evaluates the critical level of an incident for an enterprise or system. It is an important stage where the distinction between an event and an incident is determined, measured and tested.Answer option C is incorrect. The Recovery phase of the Incident handling process is the stage at which the enterprise or the system is settled back to its balanced production state. It involves the quality assurance tests and re-evaluation of the system for the purpose of the system revival or recovery.Answer option B is incorrect. The preparation phase of the Incident handling process is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise. Preparation is the phase of the Incident handling, which involves different processes that are as follows:Establishing applicable policiesBuilding relationships with key playersBuilding a response kitEstablish communication planCreating incident checklistsPerforming threat modelingBuilding an incident response team
You have decided to implement video surveillance in your company in order to enhance network security.Which of the following locations must have a camera in order to provide the minimum level of security for the network resources? Each correct answer represents a complete solution. Choose two.
Answer(s): A,E
The minimum coverage area for cameras to protect your network resources would be all entrance doors (that allows you to see everyone that comes and goes) and the server rooms (you can see anyone doing anything with the servers). Answer option B is incorrect. Anyone leaving the building with hardware or data would be detected by the entrance way cameras. Hallway cameras add extra expense with no real extra protection for the network. Answer option A is incorrect. The only purpose (for protecting the network) of monitoring the parking lot is to see who enters and leaves. That is already accomplished with the entrance way cameras.Answer option D is incorrect. This would involve a level of monitoring well beyond the minimum. It is also likely to make employees very uncomfortable with that level of scrutiny.
You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company's intranet. You decide to use public key and private key pairs.What will you implement to accomplish this?
Answer(s): D
You will implement certificate server to use public key and private key pairs for secure communication on the intranet. Certificate server is a standards-based, highly customizable server program for managing the creation, issuance, and renewal of digital certificates. It uses public key cryptography that is a technology widely used for secure communication on a network such as intranet or Internet. Public key cryptography uses two types of keys, a public key and a private key. The public key is available to everyone, while the private or secret key is available only to the recipient of the message. For example, when a user sends a message or data to another user, the sender uses a public key to encrypt the data. The receiver uses his private key to decrypt the data. Public key cryptography is the most secure cryptographic implementation.Answer options B is incorrect. VPN stands for virtual private network. It allows users to use the Internet as a secure pipeline to their corporate local area networks (LANs). Remote users can dial-in to any local Internet Service Provider (ISP) and initiate a VPN session to connect to their corporate LAN over the Internet. Companies using VPNs significantly reduce long- distance dial-up charges. VPNs also provide remote employees with an inexpensive way of remaining connected to their company's LAN for extended periods.Answer option A is incorrect. Microsoft Internet Information Server (IIS) is a Web and application server for the Internet and private intranets.IIS receives requests from users on the network using the World Wide Web (WWW) service and transmits information using the HypertextTransport Protocol (HTTP). IIS uses Microsoft Transaction Server (MTS) to provide security, performance, and scalability with server side packages.
Which of the following protocols is used to compare two values calculated using the Message Digest (MD5) hashing function?
Challenge Handshake Authentication Protocol (CHAP) involves comparison of two values calculated using the Message Digest (MD5) hashing function. Challenge Handshake Authentication Protocol (CHAP) is an authentication protocol that uses a secure form of encrypted authentication. Using CHAP, network dial-up connections are able to securely connect to almost allPPP servers.Answer option C is incorrect. Extensible Authentication Protocol (EAP) is an authentication protocol that provides support for a wide range of authentication methods, such as smart cards, certificates, one-time passwords, public keys, etc. It is an extension to Point-to-Point Protocol(PPP), which allows the application of arbitrary authentication mechanisms for the validation of a PPP connection.Answer option D is incorrect. Extensible Authentication Protocol-Transport Level Security (EAP-TLS) is an authentication protocol, which provides mutual authentication, integrity-protected negotiation of cryptographic service providers, and a secret key exchange between two systems that use public key cryptography. EAP-TLS works on a network that is configured for public key infrastructure (PKI) and uses certificates for authentication. These certificates can be stored on computers or on smart cards. Answer option B is incorrect. The Protected Extensible Authentication Protocol, also known as Protected EAP or simply PEAP, is a protocol that encapsulates EAP within an encrypted and authenticated Transport Layer Security (TLS) tunnel. The purpose was to correct deficiencies inEAP; EAP assumed a protected communication channel, such as that provided by physical security.
Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?
Answer(s): C
Cryptography is responsible for the encoding of messages, and securing the messages during a network communication. Cryptography is a technique of encrypting and decrypting messages.When the text is encrypted, it is unreadable by humans.When the text is decrypted, it is readable by the humans. The terms used in cryptography are as follows:Plaintext: This text can be read by a user.Ciphertext: This text can be converted to a non-readable format. Encryption: It is the process of creating a ciphertext from a plaintext. Decryption: It is the process of converting a ciphertext to a plaintext. Cipher: It is an algorithm that is used to encrypt and decrypt text. Key: Keys are the elements that are used in the technology of encrypting and decrypting text. Answer option A is incorrect. Risk analysis is the science of risks and their probability and evaluation in a business or a process. It is an important factor in security enhancement and prevention in a system. Risk analysis should be performed as part of the risk management process for each project. The outcome of the risk analysis would be the creation or review of the risk register to identify and quantify risk elements to the project and their potential impact.Answer option B is incorrect. The OODA loop (for observe, orient, decide, and act) is a concept originally applied to the combat operations process, often at the strategic level in both military and business operations. It is now also often applied to understand commercial operations and learning processes. The concept was developed by military strategist and USAF Colonel John Boyd.
Share your comments for ISC CISSP-ISSAP exam with other users:
very helpful
Question 1, Ans is - Developer,Standard,Professional Direct and Premier
Passed this exam in first appointment. Great resource and valid exam dump.
Today I wrote this exam and passed, i totally relay on this practice exam. The questions were very tough, these questions are valid and I encounter the same.
Anyone used this dump recently?
173 question is A not D
nice questions
Thanks for the practice questions they helped me a lot.
Passed this exam today. All questions are valid and this is not something you can find in ChatGPT.
i need to pass exam for VMware 2V0-11.25
Great questions.
great dumps to practice for the exam
How reliable and relevant are these questions?? also i can see the last update here was January and definitely new questions would have emerged.
Can I trust to this source?
can you please provide the CBDA latest test preparation
This is the best and only way of passing this exam as it is extremely hard. Good questions and valid dump.
Can I use this dumps when I am taking the exam? I mean does somebody look what tabs or windows I have opened ?
Finally got a change to write this exam and pass it! Valid and accurate!
Upload this exam please!
Thank you for providing these questions. It helped me a lot with passing my exam.
my first attempt
very explainable
i think answer of q 462 is variance analysis
hi i need see questions
best study material for exam
very interesting repository
american history 1
good level of questions
i need this dump kindly upload it
do we need c# coding to be az204 certified
excellent topics covered
are these really financial cloud questions and answers, seems these are basic admin question and answers
are these comments real
please upload the latest dumps