2024 Latest 100% Exam Passing Ratio - CISSP Dumps PDF
Pass Exam With Full Sureness - CISSP Dumps with 1481 Questions
The benefits of obtaining a CISSP certification are numerous. Certified professionals have a deep understanding of the latest security threats and vulnerabilities, and they are equipped with the knowledge and skills to protect their organizations from cyberattacks. CISSP certification is also an excellent way to advance your career and increase your earning potential. Many employers require or prefer candidates with a CISSP certification, and certified professionals typically earn higher salaries than their non-certified counterparts.
NEW QUESTION # 531
Which of the following command line tools can be used in the reconnaissance phase of a network vulnerability assessment?
- A. nbstat
- B. ifconfig
- C. dig
- D. ipconfig
Answer: C
Explanation:
Section: Software Development Security
NEW QUESTION # 532
The Diffie-Hellman algorithm is used for:
- A. Key agreement
- B. Encryption
- C. Non-repudiation
- D. Digital signature
Answer: A
Explanation:
The Diffie-Hellman algorithm is used for Key agreement (key distribution) and
cannot be used to encrypt and decrypt messages.
Source: WALLHOFF, John, CBK#5 Cryptography (CISSP Study Guide), April 2002 (page 4).
Note: key agreement, is different from key exchange, the functionality used by the other
asymmetric algorithms.
References:
AIO, third edition Cryptography (Page 632)
AIO, fourth edition Cryptography (Page 709)
NEW QUESTION # 533
The term failover refers to:
- A. Terminating processing in a controlled fashion.
- B. A fail-soft system.
- C. Resiliency.
- D. Switching to a duplicate, hot backup component.
Answer: D
Explanation:
The correct answer is "Switching to a duplicate, hot backup component". Failover means switching to a hot backup system that maintains duplicate states with the primary system.
Answer "Terminating processing in a controlled fashion" refers to fail safe, and answers
Resiliency and A fail-soft system refer to fail soft.
NEW QUESTION # 534
Whose role is it to assign classification level to information?
- A. Security Administrator
- B. Owner
- C. Auditor
- D. User
Answer: B
Explanation:
Explanation/Reference:
Explanation:
The data owner (information owner) is usually a member of management who is in charge of a specific business unit, and who is ultimately responsible for the protection and use of a specific subset of information. The data owner has due care responsibilities and thus will be held responsible for any negligent act that results in the corruption or disclosure of the data. The data owner decides upon the classification of the data she is responsible for and alters that classification if the business need arises.
This person is also responsible for ensuring that the necessary security controls are in place, defining security requirements per classification and backup requirements, approving any disclosure activities, ensuring that proper access rights are being used, and defining user access criteria. The data owner approves access requests or may choose to delegate this function to business unit managers.
Incorrect Answers:
A: The security administrator is responsible for implementing and maintaining specific security network devices and software in the enterprise. It is not the role of the security administrator to assign classification level to information.
B: The user is any individual who routinely uses the data for work-related tasks. It is not the role of the user to assign classification level to information.
D: The auditor ensures that the correct controls are in place and are being maintained securely. It is not the role of the auditor to assign classification level to information.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 121-125
NEW QUESTION # 535
Including a Trusted Platform Module (TPM) in the design of a computer system is an example of a technique to what?
- A. Establish a secure initial state
- B. Prevent Denial of Service (DoS) attacks
- C. Improve the quality of security software
- D. Interface with the Public Key Infrastructure (PKI)
Answer: A
NEW QUESTION # 536
Why should extensive exterior perimeter lighting of entrances or parking
areas be installed?
- A. To enable programmable locks to be used
- B. To create two-factor authentication
- C. To discourage prowlers or casual intruders
- D. To prevent dataremanence
Answer: C
Explanation:
The other answers have nothing to do with lighting.
NEW QUESTION # 537
What should an auditor do when conducting a periodic audit on media retention?
- A. Ensure that data shared with outside organizations is no longer on a retention schedule.
- B. Check that hard disks containing backup data that are still within a retention cycle are being destroyed....
- C. Check electronic storage media to ensure records are not retained past their destruction date.
- D. Ensure authorized personnel are in possession of paper copies containing Personally Identifiable Information....
Answer: C
NEW QUESTION # 538
Write Once, Read Many (WORM) data storage devices are designed to BEST support which of the following core security concepts?
- A. Availability
- B. Scalability
- C. lntegrity
- D. Confidentiality
Answer: C
NEW QUESTION # 539
What key size is used by the Clipper Chip?
- A. 40 bits
- B. 64 bits
- C. 56 bits
- D. 80 bits
Answer: D
Explanation:
"Each Clipper Chip has a unique serial number and an 80-bit unique unit or secret key. The unit key is divided into tow parts and is stored at two separate organizations with the serial number that uniquely identifies that particular Clipper Chip." Pg 166 Krutz: The CISSP Prep Guide
NEW QUESTION # 540
Which of the following is NOT a characteristic of the ElGamal public
key cryptosystem?
- A. It is based on the discrete logarithm problem.
- B. It can be used to generate digital signatures.
- C. It can perform encryption, but not digital signatures.
- D. It can perform encryption.
Answer: C
Explanation:
The ElGamal public key cryptosystem can perform both encryption and digital signatures based on the discrete logarithm problem. These three characteristics are shown in the examples that follow. To generate a key pair in the ElGamal system:
A. Choose a prime number, p.
B. Choose two random numbers, g and x (g and x must both be less
than p).
C. Calculate y = g x mod p.
D. The private key is x and the public key is y, g, and p.
To encrypt a message, M, in the ElGamal system:
A. Select a random number, j, such that j is relatively prime to p-1.
Recall that two numbers are relatively prime if they have no
common factors other than 1.
B. Generate w = g j mod p and z = y j M mod p.
C. w and z comprise the ciphertext.
To decrypt the message, M, in the ElGamal system, calculate M =
z/w xmod p. This can be shown by substituting the values of z and w
in the equation as follows:
M = y j M mod p/ g jx mod p
Since y j = g xj mod p
M = (g xj M / g jx ) mod p
To sign a message, M, in the ElGamal system:
A. Select a random number, j, such that j is relatively prime to p-1. The
value of j must not be disclosed. Generate w = g j mod p.
B. Solve for z in the equation M = (xw + jz) mod (p-1). The solution to
this equation is beyond the scope of this coverage. Suffice to say that
an algorithm exists to solve for the variable z.
C. w and z comprise the signature.
D. Verification of the signature is accomplished if g M mod p = y w w z mod p.
NEW QUESTION # 541
What uses a key of the same length as the message where each bit or character from the plaintext is encrypted by a modular addition?
- A. Running key cipher
- B. Cipher block chaining
- C. One-time pad
- D. Steganography
Answer: C
Explanation:
Explanation/Reference:
Explanation:
In cryptography, the one-time pad (OTP) is an encryption technique that cannot be cracked if used correctly. In this technique, a plaintext is paired with a random secret key (also referred to as a one-time pad). Then, each bit or character of the plaintext is encrypted by combining it with the corresponding bit or character from the pad using modular addition. If the key is truly random, is at least as long as the plaintext, is never reused in whole or in part, and is kept completely secret, then the resulting ciphertext will be impossible to decrypt or break. However, practical problems have prevented one-time pads from being widely used.
The "pad" part of the name comes from early implementations where the key material was distributed as a pad of paper, so that the top sheet could be easily torn off and destroyed after use.
The one-time pad has serious drawbacks in practice because it requires:
Truly random (as opposed to pseudorandom) one-time pad values, which is a non-trivial requirement.
Secure generation and exchange of the one-time pad values, which must be at least as long as the
message. (The security of the one-time pad is only as secure as the security of the one-time pad exchange).
Careful treatment to make sure that it continues to remain secret, and is disposed of correctly
preventing any reuse in whole or part-hence "one time".
Because the pad, like all shared secrets, must be passed and kept secure, and the pad has to be at least as long as the message, there is often no point in using one-time padding, as one can simply send the plain text instead of the pad (as both can be the same size and have to be sent securely).
Distributing very long one-time pad keys is inconvenient and usually poses a significant security risk. The pad is essentially the encryption key, but unlike keys for modern ciphers, it must be extremely long and is much too difficult for humans to remember. Storage media such as thumb drives, DVD-Rs or personal digital audio players can be used to carry a very large one-time-pad from place to place in a non- suspicious way, but even so the need to transport the pad physically is a burden compared to the key negotiation protocols of a modern public-key cryptosystem, and such media cannot reliably be erased securely by any means short of physical destruction (e.g., incineration).
The key material must be securely disposed of after use, to ensure the key material is never reused and to protect the messages sent. Because the key material must be transported from one endpoint to another, and persist until the message is sent or received, it can be more vulnerable to forensic recovery than the transient plaintext it protects.
Incorrect Answers:
A: Running key cipher does not use a key of the same length as the message.
C: Steganography is a method of hiding data in another media type so the very existence of the data is concealed. This is not what is described in the question.
D: Cipher block chaining is an encryption method where each block of text, the key, and the value based on the previous block are processed in the algorithm and applied to the next block of text. This is not what is described in the question.
References:
https://en.wikipedia.org/wiki/One-time_pad
NEW QUESTION # 542
During which of the following processes is least privilege implemented for a user account?
- A. Provision
- B. Approve
- C. Review
- D. Request
Answer: A
Explanation:
Section: Software Development Security
Explanation/Reference:
NEW QUESTION # 543
Compared to RSA, which of the following is true of elliptic curve cryptography?
- A. It has been mathematically proved to be less secure
- B. It is believed to require longer keys for equivalent security
- C. It is believed to require shorter keys for equivalent security
- D. It has been mathematically proved to be the more secure
Answer: C
Explanation:
CISSP All-In-One - page 491: "In most cases, the longer the key length, the more protection provided, but ECC can provide the same level of protection with a key size that is smaller than what RSA requires."
CISSP Prep Guide (not Gold edition) - page 158: "... smaller key sizes in the elliptic curve implementation can yield higher levels of security. For example, an elliptic curve key of 160 bits is equivalent to 1024-bit RSA key."
NEW QUESTION # 544
With regard to databases, which of the following has characteristics of ease of reusing code and analysis and reduced maintenance?
- A. Object-Relational Data Bases (ORDB)
- B. Relational Data Bases
- C. Object-Oriented Data Bases (OODB)
- D. Data base management systems (DBMS)
Answer: C
Explanation:
OODB has the characteristics of ease of reusing code and analysis, reduced maintenance, and an easier transition from analysis of the problem to design and implementation.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 47.
NEW QUESTION # 545
Which of the following attacks could capture network user passwords?
- A. IP Spoofing
- B. Smurfing
- C. Sniffing
- D. Data diddling
Answer: C
Explanation:
A network sniffer captures a copy every packet that traverses the network segment the sniffer is connect to.
Sniffers are typically devices that can collect information from a communication medium, such as a network. These devices can range from specialized equipment to basic workstations with customized software.
A sniffer can collect information about most, if not all, attributes of the communication. The most common method of sniffing is to plug a sniffer into an existing network device like a hub or switch. A hub (which is designed to relay all traffic passing through it to all of its ports) will automatically begin sending all the traffic on that network segment to the sniffing device. On the other hand, a switch (which is designed to limit what traffic gets sent to which port) will have to be specially configured to send all traffic to the port where the sniffer is plugged in.
Another method for sniffing is to use a network tap-a device that literally splits a network transmission into two identical streams; one going to the original network destination and the other going to the sniffing device. Each of these methods has its advantages and disadvantages, including cost, feasibility, and the desire to maintain the secrecy of the sniffing activity.
The packets captured by sniffer are decoded and then displayed by the sniffer. Therfore, if the username/password are contained in a packet or packets traversing the segment the sniffer is connected to, it will capture and display that information (and any other information on that segment it can see).
Of course, if the information is encrypted via a VPN, SSL, TLS, or similar technology, the information is still captured and displayed, but it is in an unreadable format.
The following answers are incorrect:
Data diddling involves changing data before, as it is enterred into a computer, or after it is extracted.
Spoofing is forging an address and inserting it into a packet to disguise the origin of the communication - or causing a system to respond to the wrong address.
Smurfing would refer to the smurf attack, where an attacker sends spoofed packets to the broadcast address on a gateway in order to cause a denial of service.
The following reference(s) were/was used to create this question:
CISA Review manual 2014 Page number 321
Official ISC2 Guide to the CISSP 3rd edition Page Number 153
NEW QUESTION # 546
What physical characteristic does a retinal scan biometric device measure?
- A. The pattern of light receptors at the back of the eye
- B. The amount of light reaching the retina
- C. The amount of light reflected by the retina
- D. The pattern of blood vessels at the back of the eye
Answer: D
Explanation:
The retina, a thin nerve (1/50th of an inch) on the back of the eye, is the part of the
eye which senses light and transmits impulses through the optic nerve to the brain - the equivalent
of film in a camera. Blood vessels used for biometric identification are located along the neural
retina, the outermost of retina's four cell layers.
The following answers are incorrect:
The amount of light reaching the retina The amount of light reaching the retina is not used in the
biometric scan of the retina.
The amount of light reflected by the retina The amount of light reflected by the retina is not used in the biometric scan of the retina.
The pattern of light receptors at the back of the eye This is a distractor
The following reference(s) were/was used to create this question:
Reference: Retina Scan Technology.
ISC2 Official Guide to the CBK, 2007 (Page 161)
NEW QUESTION # 547
Which of the following is required in order to provide accountability?
- A. Audit trails
- B. Authentication
- C. Integrity
- D. Confidentiality
Answer: A
Explanation:
Accountability can actually be seen in two different ways:
1) Although audit trails are also needed for accountability, no user can be accountable for their actions unless properly authenticated.
2) Accountability is another facet of access control. Individuals on a system are responsible for their actions. This accountability property enables system activities to be traced to the proper individuals. Accountability is supported by audit trails that record events on the system and network. Audit trails can be used for intrusion detection and for the reconstruction of past events. Monitoring individual activities, such as keystroke monitoring, should be accomplished in accordance with the company policy and appropriate laws.
Banners at the log-on time should notify the user of any monitoring that is being conducted.
The point is that unless you employ an appropriate auditing mechanism, you don't have accountability. Authorization only gives a user certain permissions on the network.
Accountability is far more complex because it also includes intrusion detection, unauthorized actions by both unauthorized users and authorized users, and system faults.
The audit trail provides the proof that unauthorized modifications by both authorized and unauthorized users took place. No proof, No accountability.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, John Wiley & Sons, 2001, Page 50
The Shon Harris AIO book, 4th Edition, on Page 243 also states:
Auditing Capabilities ensures users are accountable for their actions, verify that the secutiy policies are enforced, and can be used as investigation tools. Accountability is tracked by recording user, system, and application activities.
This recording is done through auditing functions and mechanisms within an operating sytem or application.
Audit trail contain information about operating System activities, application events, and user actions.
NEW QUESTION # 548
Why would a database be denormalized?
- A. To increase processing efficiency.
- B. To prevent duplication of data.
- C. To ensure data integrity.
- D. To save storage space.
Answer: A
Explanation:
Denormalization is the process of attempting to optimize the performance of data storage by adding redundant data. It is necessary because current DBMSs are not fully relational. A fully relational DBMS would be able to preserve full normalization at the logical level, while allowing it to be mapped to performance-tuned physical level. Database designers often justify denormalization on performance issues, but they should note that logical denormalization can easily break the consistency of the database, one of the all-important ACID properties. However, a designer can achieve the performance benefits while retaining consistency by performing denormalization at a physical level; such denormalization is often called caching.
NEW QUESTION # 549
......
Here is the information about Passing Scores ISC CISSP Exam
The exam passing score varies from country to country and is set by the local testing authority in each region or country. To determine your Exam Pass/Fail status, you will need to know your total raw score count for all domains, not individual domain count.
Verified CISSP dumps Q&As - 100% Pass from TroytecDumps: https://www.troytecdumps.com/CISSP-troytec-exam-dumps.html
Pass CISSP Exam in First Attempt Guaranteed 2024 Dumps: https://drive.google.com/open?id=1JikWZ1zoMXQLDLKh3sHkIioPs4Lj7csc