思科认证(cisco)题3

思科认证

201.Which one of the following should NOT be contained within a computer policy?

A. Definition of management expectations.

B. Responsibilities of inpiduals and groups for protected information.

C. Statement of senior executive support.

D. Definition of legal and regulatory controls.

Answer: B

202.Which one of the following data transmission technologies is NOT packet-switch based?

A. X.25

B. ATM (Asynchronous Transfer Mode)

C. CSMA/CD (Carrier Sense Multiple Access/Collision Detection)

D. Frame Relay

Answer: C

203.How does the SOCKS protocol secure Internet Protocol (IP) connections?

A. By negotiating encryption keys during the connection setup.

B. By attaching Authentication Headers (AH) to each packet.

C. By distributing encryption keys to SOCKS enabled applications.

D. By acting as a connection proxy.

Answer: D

204.Penetration testing will typically include

A. Generally accepted auditing practices.

B. Review of Public Key Infrastructure (PKI) digital certificate, and encryption.

C. Social engineering, configuration review, and vulnerability assessment.

D. Computer Emergency Response Team (CERT) procedures.

Answer: C

205.A forensic examination should inspect slack space because it

A. Contains system level access control kernel.

B. Can contain a hidden file or data.

C. Can contain vital system information.

D. Can be defeted to avoid detection.

Answer: B

206.To improve the integrity of asynchronous communications in the realm of personal computers, the

Microcom Networking Protocol (MNP) uses a highly effective communications error-control technique known as

A. Cyclic redundancy check.

B. Vertical redundancy check.

C. Checksum.

D. Echoplex.

Answer: D

思科认证

207.What technique is used to prevent eavesdropping of digital cellular telephone conversations?

A. Encryption

B. Authentication

C. Call detail suppression

D. Time-pision multiplexing

Answer: D

208.A proxy based firewall has which one of the following advantages over a firewall employing stateful

packet inspection?

A. It has a greater throughput.

B. It detects intrusion faster.

C. It has greater network isolation.

D. It automatically configures the rule set.

Answer: C

209.What is the PRIMARY concern during a disaster?

A. Recover of the critical functions.

B. Availability of a hot site.

C. Acceptable outage duration.

D. Personnel safety.

Answer: D

Personal safety goes way above and beyond all other things, unless you're a rescue worker, and even then

safety is still priority #1. Recovering critical functions and down time are not the MOST important concerns;

Data can be recovered, a potential life loss cannot be. Making Personal safety of the utmost important.

210.Macro viruses written in Visual Basic for Applications (VDA) are a major problem because

A. Floppy disks can propagate such viruses.

B. These viruses can infect many types of environments.

C. Anti-virus software is usable to remove the viral code.

D. These viruses almost exclusively affect the operating system.

Answer: D

211.You are documenting a possible computer attack.

Which one of the following methods is NOT appropriate for legal record keeping?

A. A bound paper notebook.

B. An electronic mail document.

C. A personal computer in "capture" mode that prints immediately.

D. Microcassette recorder for verbal notes

Answer: D

思科认证

212.Virtual Private Network software typically encrypts all of the following EXCEPT

A. File transfer protocol

B. Data link messaging

C. HTTP protocol

D. Session information

Answer: B

213.What is the term used to describe a virus that can infect both program files and boot sectors?

A. Polymorphie

B. Multipartite

C. Stealth

D. Multiple encrypting

Answer: B

214.The intrusion detection system at your site has detected Internet Protocol (IP) packets where the IP

source address is the same as the destination address.

This situation indicates

A. Misdirected traffic jammed to the internal network.

B. A denial of service attack.

C. An error in the internal address matrix.

D. A hyper overflow in the IP stack.

Answer: A

215.When developing an information security policy, what is the FIRST step that should be taken?

A. Obtain copies of mandatory regulations.

B. Gain management approval.

C. Seek acceptance from other departments.

D. Ensure policy is compliant with current working practices.

Answer: B

216.What is the PRIMARY reason that reciprocal agreements between independent organizations for

backup processing capability are seldom used?

A. Lack of successful recoveries using reciprocal agreements.

B. Legal liability of the host site in the event that the recovery fails.

C. Dissimilar equipment used by disaster recovery organization members.

D. Difficulty in enforcing the reciprocal agreement.

Answer: D

"Reciprocal agreements are at best a secondary option for disaster protection. The agreements are not

enforceable, so there is no guarantee that this facility will really be available to the company in a time of

思科认证

need." Pg 615 Shon Harris CISSP All-In-One Certification Exam Guide

217.If a token and 4-digit personal identification number (PIN) are used to access a computer system and

the token performs off- …… 此处隐藏：23202字，全部文档内容请下载后查看。喜欢就下载吧 ……