Which of the following is needed for System Accountability?
Answer(s): A
Is a means of being able to track user actions. Through the use of audit logs and other tools the user actions are recorded and can be used at a later date to verify what actions were performed.Accountability is the ability to identify users and to be able to track user actions.The following answers are incorrect:Documented design as laid out in the Common CriteriA. Is incorrect because the Common Criteria is an international standard to evaluate trust and would not be a factor in System Accountability.Authorization. Is incorrect because Authorization is granting access to subjects, just because you have authorization does not hold the subject accountable for their actions.Formal verification of system design. Is incorrect because all you have done is to verify the system design and have not taken any steps toward system accountability.
OIG CBK Glossary (page 778)
What is Kerberos?
Answer(s): B
Is correct because that is exactly what Kerberos is.The following answers are incorrect:A three-headed dog from Egyptian mythology. Is incorrect because we are dealing with Information Security and not the Egyptian mythology but the Greek Mythology.A security model. Is incorrect because Kerberos is an authentication protocol and not just a security model.A remote authentication dial in user server. Is incorrect because Kerberos is not a remote authentication dial in user server that would be called RADIUS.
The three classic ways of authenticating yourself to the computer security software are by something you know, by something you have, and by something:
Answer(s): C
This is more commonly known as biometrics and is one of the most accurate ways to authenticate an individual.The rest of the answers are incorrect because they not one of the three recognized forms for Authentication.
A timely review of system access audit records would be an example of which of the basic security functions?
Answer(s): D
By reviewing system logs you can detect events that have occured.The following answers are incorrect:avoidance. This is incorrect, avoidance is a distractor. By reviewing system logs you have not avoided anything.deterrence. This is incorrect because system logs are a history of past events. You cannot deter something that has already occurred.prevention. This is incorrect because system logs are a history of past events. You cannot prevent something that has already occurred.
A confidential number used as an authentication factor to verify a user's identity is called a:
PIN Stands for Personal Identification Number, as the name states it is a combination of numbers.The following answers are incorrect:User ID This is incorrect because a Userid is not required to be a number and a Userid is only used to establish identity not verify it.Password. This is incorrect because a password is not required to be a number, it could be any combination of characters.Challenge. This is incorrect because a challenge is not defined as a number, it could be anything.
Share your comments for ISC SSCP exam with other users:
this is useful information
looks usefull
question 81 should be c.
question 18 : response isnt a ?
plaese add questions
is dumps still valid ?
thanks for this
please upload questions
please upload the question dump for professional machinelearning
question 4 answer is c. this site shows the correct answer as b. "adopt a consumption model" is clearly a cost optimization design principle. looks like im done using this site to study!!!
number 52 answer is d
just started preparing for my exam , and this site is so much help
question 35 is incorrect, the correct answer is c, it even states so: explanation: when a vm is infected with ransomware, you should not restore the vm to the infected vm. this is because the ransomware will still be present on the vm, and it will encrypt the files again. you should also not restore the vm to any vm within the companys subscription. this is because the ransomware could spread to other vms in the subscription. the best way to restore a vm that is infected with ransomware is to restore it to a new azure vm. this will ensure that the ransomware is not present on the new vm.
i would like to take psm1 exam.
cbd and pdb are key to the database
the purchase and download process is very much streamlined. the xengine application is very nice and user-friendly but there is always room for improvement.
please upload p_sapea_2023
anyone use this? the question dont seem to follow other formats and terminology i have been studying im getting worried
good questions
hello are these questions valid for ms-102
some questions are wrongly answered but its good nonetheless
how to get system serial number using intune
is it really helpful to pass the exam
#229 in incorrect - all the customers require an annual review
kindy upload
fantastic assessment on psm 1
56 question correct answer a,b
thank you for providing the q bank
true quesstions
i can´t believe ms asks things like this, seems to be only marketing material.
hi, could you please add the last update of ns0-527
question #3 refers to vnet4 and vnet5. however, there is no vnet5 listed in the case study (testlet 2).
sometimes it may be good some times it may be
qs 4 answer seems wrong- please check