CISSP-ISSAP Practice Test

CISSP-ISSAP Practice Test practice questions, page 3 of 10, with answer review and explanations.

Question 11

A user is sending a large number of protocol packets to a network in order to saturate its resources and to disrupt connections to prevent communications between services. Which type of attack is this?

  1. Denial-of-Service attack
  2. Vulnerability attack
  3. Social Engineering attack
  4. Impersonation attack

Question 12

Which of the following types of firewall functions at the Session layer of OSI model?

  1. Circuit-level firewall
  2. Application-level firewall
  3. Packet filtering firewall
  4. Switch-level firewall

Question 13

Which of the following statements about a stream cipher are true? Each correct answer represents a complete solution. Choose three.

  1. It typically executes at a higher speed than a block cipher.
  2. It divides a message into blocks for processing.
  3. It typically executes at a slower speed than a block cipher.
  4. It divides a message into bits for processing.
  5. It is a symmetric key cipher.

Question 14

Which of the following types of attack can be used to break the best physical and logical security mechanism to gain access to a system?

  1. Social engineering attack
  2. Cross site scripting attack
  3. Mail bombing
  4. Password guessing attack

Question 15

You are the Security Consultant advising a company on security methods. This is a highly secure location that deals with sensitive national defense related data. They are very concerned about physical security as they had a breach last month. In that breach an individual had simply grabbed a laptop and ran out of the building. Which one of the following would have been most effective in preventing this?

  1. Not using laptops.
  2. Keeping all doors locked with a guard.
  3. Using a man-trap.
  4. A sign in log.