Limited-Time Offer: Enjoy 50% Savings! Ends in 00h 00m 00s Coupon code: 50OFF
Skip to content

Free ISC2 Information Systems Security Architecture Professional ISSAP Exam Questions

Page: 1 / 16 Total 237 questions

Want more questions? Get Premium Access.

Question 1

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Correct Answer: B. Annualized Rate of Occurrence (ARO)

Question 2

Which of the following is a form of gate that allows one person to pass at a time?

Correct Answer: C. Turnstile

Question 3

Which of the following statements about incremental backup are true? Each correct answer represents a complete solution. Choose two.

Correct Answer: A. It is the fastest method of backing up data.; D. It backs up only the files changed since the most recent backup and clears the archive bit.

Question 4

Which of the following are the initial steps required to perform a risk analysis process? Each correct answer represents a part of the solution. Choose three.

Correct Answer: A. Estimate the potential losses to assets by determining their value.; B. Establish the threats likelihood and regularity.; D. Evaluate potential threats to the assets.

Question 5

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You have a disaster scenario and you want to discuss it with your team members for getting appropriate responses of the disaster. In which of the following disaster recovery tests can this task be performed?

Correct Answer: C. Simulation test

Question 6

Which of the following LAN protocols use token passing for exchanging signals among various stations on the network? Each correct answer represents a complete solution. Choose two.

Correct Answer: B. Token ring (IEEE 802.5); C. Fiber Distributed Data Interface (FDDI)

Question 7

You work as a Network Administrator for NetTech Inc. The company's network is connected to the Internet. For security, you want to restrict unauthorized access to the network with minimum administrative effort. You want to implement a hardware-based solution. What will you do to accomplish this?

Correct Answer: D. Implement firewall on the network.

Question 8

Jasmine is creating a presentation. She wants to ensure the integrity and authenticity of the presentation. Which of the following will she use to accomplish the task?

Correct Answer: B. Digital Signature

Question 9

Which of the following is responsible for maintaining certificates in a public key infrastructure (PKI)?

Correct Answer: C. Certification Authority

Question 10

The OSI reference model is divided into layers and each layer has a specific task to perform. At which layer of OSI model is the File and Print service performed?

Correct Answer: D. Application layer

Question 11

Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A. TIS authentication; B. Rhosts (rsh-style) authentication; C. Kerberos authentication

Question 12

Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the following formulas best describes the Single Loss Expectancy (SLE)?

Correct Answer: A. SLE = Asset Value (AV) * Exposure Factor (EF)

Question 13

An organization is seeking to implement a hot site and wants to maintain a live database server at the backup site. Which of the following solutions will be the best for the organization?

Correct Answer: C. Remote mirroring

Question 14

Which of the following encryption algorithms are based on block ciphers?

Correct Answer: B. Twofish; C. Rijndael; D. RC5

Question 15

Which of the following protocols provides certificate-based authentication for virtual private networks (VPNs)?

Correct Answer: D. L2TP