Free ISC2 ISSAP Exam Dumps

DES

RC5

AES

Blowfish

Packets are created and routing is done based on IP addresses at layer 3 of the OSI model.

UDP, windowing, and segments are created at layer 4 of the OSI model.

Preventive access control:

Fence

Security policy

Security awareness training

Antivirus software

Detective access control:

Security guard

Supervising user

Incident investigation

Intrusion detection system

Corrective access control:

Alarm

Mantrap

Security policy

to transmit private documents via the Internet. SSL uses a combination of public key and symmetric encryption to provide communication

privacy, authentication, and message integrity. Using the SSL protocol, clients and servers can communicate in a way that prevents

eavesdropping and tampering of data on the Internet. Many Web sites use the SSL protocol to obtain confidential user information, such as

credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http:. By default, SSL uses port 443 for

secured communication.

Answer option B is incorrect. Internet Protocol Security (IPSec) is a method of securing data. It secures traffic by using encryption and digital

signing. It enhances the security of data as if an IPSec packet is captured, its contents cannot be read. IPSec also provides sender verification

that ensures the certainty of the datagram's origin to the receiver.

Answer option A is incorrect. Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two

components, authentication and encryption. It provides security, which is equivalent to wired networks, for wireless networks. WEP encrypts

data on a wireless network by using a fixed secret key. WEP incorporates a checksum in each frame to provide protection against the attacks

that attempt to reveal the key stream.

Answer option C is incorrect. VPN stands for virtual private network. It allows users to use the Internet as a secure pipeline to their corporate

local area networks (LANs). Remote users can dial-in to any local Internet Service Provider (ISP) and initiate a VPN session to connect to their

corporate LAN over the Internet. Companies using VPNs significantly reduce long-distance dial-up charges. VPNs also provide remote

employees with an inexpensive way of remaining connected to their company's LAN for extended periods.

gathers information about the premises of an organization. This attack is often performed by looking surreptitiously at the keyboard of an

employee's computer while he is typing in his password at any access point such as a terminal/Web site. An attacker can also gather

information by looking at open documents on the employee's desk, posted notices on the notice boards, etc.

Answer option C is incorrect. John was not performing a dumpster diving attack. Dumpster diving is a term that refers to going through

someone's trash to find out useful or confidential information. Dumpster divers check and separate items from commercial or residential trash

to get any information they desire. This information may be used for identity theft and for breaking physical information security.

Answer option A is incorrect. John was not carrying out an Important user posing attack. In this attack, the attacker pretends to be an

important member of the organization. These attacks work because there is a common belief that it is not good to question authority.

Answer option D is incorrect. John was not performing an Authorization by third party attack. In this attack, the attacker misleads the victim

into believing that he has approval from a third party. Such types of attacks work because it is generally believed that most people are good

and are being truthful about what they are saying.