ISSAP EXAM QUESTIONS AND 100%
CORRECT ANSWERS
You are working as a consultant for a nonprofit organization on disaster recovery plans.
In the event a disaster strikes that impacts the main IT centers for the organization, they
need to have the ability to operate from an alternate location. However, for this
particular client, budget will be an issue. Which of the following would you recommend
for that type of client? Warm, Cold, Shared, Hot Site - Answer Cold Site
A customer asks to link his LAN connection to the internet. Which one of the following
devices do yu recommend in order to reach his goal?
router, Hub, Switch, Cable - Answer Switch
There are lots of various sensors for intruder detection. Which one detects the
movement and steps on floor?
A. Sonic
B. Vibration
C. Pressure
D. Capacitance - Answer Not Sonic nor Vibration. must be one of the other 2
Which of the following is the technology of indoor or automotive environmental comfort
HVAC, CCTV, Lighting, Fire Suppression - Answer HVAC
in multifactor authentication tokens are the something you
,Are, Have, Know, See - Answer Have
Which of the following is triggered when an intrusion alarm is activated causing all
doors to lock and an intruder is caught between the doors in the dead space
Man Trap, Biometric device, Facility Intrusion Detection System, Trap Door - Answer
Man trap
Organizations and providers found to be out of compliance may have their credit card
processing capabilities taken away according to the PCI data security standards. True
or False. - Answer True
Of the following, which statement is correct about Public key cryptography?
A. Data Encrypted with the secret key can only be decrypted by another secret key
B. The secret key cannot encrypt a message and anyone with the public key can decrypt
it
C. The distinguishing technique in the use of public key-private key cryptography is the
use of symmetric key algorithms
D. Distinctive technique used in public-private key cryptography is use of asymmetric
key algorithms - Answer D
Asymmetric keys have low computational overhead - True or False - Answer False
symmetric key encryption algorithms in use today
Answer RC4, AES, Blowfish, DES,
asymmetric key encryption algorithms
Answer ElGamal, RSA, Elliptical Curve, PGP, SSH
Visitor control is a specific function of making sure that non-employees who need
access to your facility are authorized to be there, monitored, and controlled when
necessary to limit access to sensitive information. Which of the following is least
effective for performing visitor control?
, A. Use visitor logs
B. Always escort visitors
C. Limit access to sensitive information
D. Guard patrolling - Answer D
In the OSI model, which layer provides non-repudiation?
A. Application Layer
B. Data-Link Layer
C. Presentation Layer
D. Physical Layer - Answer A. Application Layer
When performing risk and business impact analysis existing frameworks provide the
best source for guidance. Which of the following is NOT a method for performing risk
assessments?
A. NIST 800 37
B. ISO 27005
C. OCTAVE
D. Common Criteria - Answer Not C or D
CORRECT ANSWERS
You are working as a consultant for a nonprofit organization on disaster recovery plans.
In the event a disaster strikes that impacts the main IT centers for the organization, they
need to have the ability to operate from an alternate location. However, for this
particular client, budget will be an issue. Which of the following would you recommend
for that type of client? Warm, Cold, Shared, Hot Site - Answer Cold Site
A customer asks to link his LAN connection to the internet. Which one of the following
devices do yu recommend in order to reach his goal?
router, Hub, Switch, Cable - Answer Switch
There are lots of various sensors for intruder detection. Which one detects the
movement and steps on floor?
A. Sonic
B. Vibration
C. Pressure
D. Capacitance - Answer Not Sonic nor Vibration. must be one of the other 2
Which of the following is the technology of indoor or automotive environmental comfort
HVAC, CCTV, Lighting, Fire Suppression - Answer HVAC
in multifactor authentication tokens are the something you
,Are, Have, Know, See - Answer Have
Which of the following is triggered when an intrusion alarm is activated causing all
doors to lock and an intruder is caught between the doors in the dead space
Man Trap, Biometric device, Facility Intrusion Detection System, Trap Door - Answer
Man trap
Organizations and providers found to be out of compliance may have their credit card
processing capabilities taken away according to the PCI data security standards. True
or False. - Answer True
Of the following, which statement is correct about Public key cryptography?
A. Data Encrypted with the secret key can only be decrypted by another secret key
B. The secret key cannot encrypt a message and anyone with the public key can decrypt
it
C. The distinguishing technique in the use of public key-private key cryptography is the
use of symmetric key algorithms
D. Distinctive technique used in public-private key cryptography is use of asymmetric
key algorithms - Answer D
Asymmetric keys have low computational overhead - True or False - Answer False
symmetric key encryption algorithms in use today
Answer RC4, AES, Blowfish, DES,
asymmetric key encryption algorithms
Answer ElGamal, RSA, Elliptical Curve, PGP, SSH
Visitor control is a specific function of making sure that non-employees who need
access to your facility are authorized to be there, monitored, and controlled when
necessary to limit access to sensitive information. Which of the following is least
effective for performing visitor control?
, A. Use visitor logs
B. Always escort visitors
C. Limit access to sensitive information
D. Guard patrolling - Answer D
In the OSI model, which layer provides non-repudiation?
A. Application Layer
B. Data-Link Layer
C. Presentation Layer
D. Physical Layer - Answer A. Application Layer
When performing risk and business impact analysis existing frameworks provide the
best source for guidance. Which of the following is NOT a method for performing risk
assessments?
A. NIST 800 37
B. ISO 27005
C. OCTAVE
D. Common Criteria - Answer Not C or D
