Guards are appropriate whenever the function required by the security program involves which of the following?
Answer(s): A
The use of discriminating judgment, a guard can make the determinations that hardware or other automated security devices cannot make due to its ability to adjust to rapidly changing conditions, to learn and alter recognizable patterns, and to respond to various conditions in the environment. Guards are better at making value decisions at times of incidents. They are appropriate whenever immediate, discriminating judgment is required by the security entity.The following answers are incorrect:The use of physical force This is not the best answer. A guard provides discriminating judgment, and the ability to discern the need for physical force. The operation of access control devices A guard is often uninvolved in the operations of an automated access control device such as a biometric reader, a smart lock, mantrap, etc. The need to detect unauthorized access The primary function of a guard is not to detect unauthorized access, but to prevent unauthorized physical access attempts and may deter social engineering attempts.The following reference(s) were/was used to create this question:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 10: Physical security (page 339). ISC2 Offical Guide to the CBK page 288-289.
What physical characteristic does a retinal scan biometric device measure?
Answer(s): D
The retina, a thin nerve (1/50th of an inch) on the back of the eye, is the part of the eye which senses light and transmits impulses through the optic nerve to the brain - the equivalent of film in a camerA. Blood vessels used for biometric identification are located along the neural retina, the outermost of retina's four cell layers.The following answers are incorrect:The amount of light reaching the retina The amount of light reaching the retina is not used in the biometric scan of the retina.The amount of light reflected by the retina The amount of light reflected by the retina is not used in the biometric scan of the retina.The pattern of light receptors at the back of the eye This is a distractorThe following reference(s) were/was used to create this question:
Retina Scan Technology.ISC2 Official Guide to the CBK, 2007 (Page 161)
Which is the last line of defense in a physical security sense?
"Ultimately, people are the last line of defense for your company's assets" (Pastore & Dulaney, 2006, p. 529).Pastore, M. and Dulaney, E. (2006). CompTIA Security+ study guide: Exam SY0-101.Indianapolis, IN: Sybex.
The Computer Security Policy Model the Orange Book is based on is which of the following?
The Computer Security Policy Model Orange Book is based is the Bell-LaPadula Model. Orange Book Glossary.The Data Encryption Standard (DES) is a cryptographic algorithm. National Information SecurityGlossary.TEMPEST is related to limiting the electromagnetic emanations from electronic equipment.
U.S. Department of Defense, Trusted Computer System Evaluation Criteria (Orange Book), DOD 5200.28-STD. December 1985 (also available here).
The end result of implementing the principle of least privilege means which of the following?
The principle of least privilege refers to allowing users to have only the access they need and not anything more. Thus, certain users may have no need to access any of the files on specific systems.The following answers are incorrect:Users can access all systems. Although the principle of least privilege limits what access and systems users have authorization to, not all users would have a need to know to access all of the systems. The best answer is still Users would get access to only the info for which they have a need to know as some of the users may not have a need to access a system.Users get new privileges when they change positions. Although true that a user may indeed require new privileges, this is not a given fact and in actuality a user may require less privileges for a new position. The principle of least privilege would require that the rights required for the position be closely evaluated and where possible rights revoked.Authorization creep. Authorization creep occurs when users are given additional rights with new positions and responsibilities. The principle of least privilege should actually prevent authorization creep.The following reference(s) were/was used to create this question:ISC2 OIG 2007 p.101,123Shon Harris AIO v3 p148, 902-903
Share your comments for ISC SSCP exam with other users:
good for students who wish to give certification.
is there a google drive link to the images? the links in questions are not working.
very promising, looks great, so much wow!
i scored 87% on the az-204 exam. thanks! i always trust
good need more
sample questions seems good
huawei is ok
good one nice
please continue
this exam dumps just did the job. i donot want to ruffle your feathers but your exam dumps and mock test engine is amazing.
nice questions
the explanation are really helpful
just passed my exam yesterday on my first attempt. these dumps were extremely helpful in passing first time. the questions were very, very similar to these questions!
cosmos db is paas not saas
what is the percentage of common questions in gcp exam compared to 197 dump questions? are they 100% matching with real gcp exam?
not able to see questions
by far one of the best sites for free questions. i have pass 2 exams with the help of this website.
excellent question bank.
it really helped
excelent material
the new versoin of this exam which i downloaded has all the latest questions from the exam. i only saw 3 new questions in the exam which was not in this dump.
question 8 - can cloudtrail be used for storing jobs? based on aws - aws cloudtrail is used for governance, compliance and investigating api usage across all of our aws accounts. every action that is taken by a user or script is an api call so this is logged to [aws] cloudtrail. something seems incorrect here.
question 13 tda - c01 answer : quick table calculation -> percentage of total , compute using table down
pls share teh dump
question 44 answer is user risk
please post the questions for preparation
thanks for the questions
please reopen it now ..its really urgent
these practice exam questions were exactly what i needed. the variety of questions and the realistic exam-like environment they created helped me assess my strengths and weaknesses. i felt more confident and well-prepared on exam day, and i owe it to this exam dumps!
thank u it very instructuf
its helpful?
is this dump still valid???
question 205 answer is b
question 39, should be answer b, directions stated is being sudneted from /21 to a /23. a /23 has 512 ips so 510 hosts. and can make 4 subnets out of the /21