Free Information Systems Security Architecture Professional ISSAP Exam Practice Test

You work as a Network Administrator for company Inc. The company has deployed an ASA at the network perimeter. Which of the following types of firewall will you use to create two different communications, one between the client and the firewall, and the other between the firewall and the end server?

• Stateful firewall
• Endian firewall
• Packet filter firewall
• Proxy-based firewall

You are responsible for a Microsoft based network. Your servers are all clustered. Which of the following are the likely reasons for the clustering?Each correct answer represents a complete solution. Choose two.

• Reduce power consumption
• Ease of maintenance
• Failover
• Load balancing

Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?

• Kerberos
• Cryptography
• Cryptographer
• Cryptanalysis

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase the security of the Web site by implementing Secure Sockets Layer (SSL). Which of the following types of encryption does SSL use? Each correct answer represents a complete solution. Choose two.

• Synchronous
• Secret
• Asymmetric
• Symmetric

Fill in the blank with the appropriate encryption system.The encryption system is an asymmetric key encryption algorithm for the public-key cryptography, which is based on the Diffie-Hellman key agreement.

• ElGamal

Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.

• Detection
• Continuous Monitoring
• Initiation
• Auditing

A digital signature is a type of public key cryptography. Which of the following statements are true about digital signatures? Each correct answer represents a complete solution. Choose all that apply.

• In order to digitally sign an electronic record, a person must use his/her public key.
• In order to verify a digital signature, the signer's private key must be used.
• In order to digitally sign an electronic record, a person must use his/her private key.
• In order to verify a digital signature, the signer's public key must be used.

You are the Network Administrator for a college. You watch a large number of people (some not even students) going in and out of areas with campus computers (libraries, computer labs, etc.). You have had a problem with laptops being stolen. What is the most cost effective method to prevent this?

• Smart card access to all areas with computers.
• Use laptop locks.
• Video surveillance on all areas with computers.
• Appoint a security guard.

Which of the following protocols work at the Network layer of the OSI model?

• Routing Information Protocol (RIP)
• File Transfer Protocol (FTP)
• Simple Network Management Protocol (SNMP)
• Internet Group Management Protocol (IGMP)

Mark works as a Network Administrator for NetTech Inc. He wants to connect the company's headquarter and its regional offices using a WAN technology. For this, he uses packet-switched connection. Which of the following WAN technologies will Mark use to connect the offices? Each correct answer represents a complete solution. Choose two.

• ISDN
• X.25
• Frame Relay
• Leased line