Free ISC CISSP Test Practice Test Questions Exam Dumps [Q390-Q405]

Attenuation is the loss of signal strength as it travels. The longer a cable, the more at tenuation occurs, which causes the signal carrying the data to deteriorate. This is why standards include suggested cable-run lengths. If a networking cable is too long, attenuation may occur. Basically, the data are in the form of electrons, and these electrons have to “swim” through a copper wire. However, this is more like swimming upstream, because there is a lot of resistance on the electrons working in this media. After a certain distance, the electrons start to slow down and their encoding format loses form. If the form gets too degraded, the receiving system cannot interpret them any longer. If a network administrator needs to run a cable longer than its recommended segment length, she needs to insert a repeater or some type of device that will amplify the signal and ensure it gets to its destination in the right encoding format.
Attenuation can also be caused by cable breaks and malfunctions. This is why cables should be tested. If a cable is suspected of attenuation problems, cable testers can inject signals into the cable and read the results at the end of the cable.
The following answers are incorrect:
Crosstalk – Crosstalk is one example of noise where unwanted electrical coupling between adjacent lines causes the signal in one wire to be picked up by the signal in an adjacent wire.
Noise – Noise is also a signal degradation but it refers to a large amount of electrical fluctuation that can interfere with the interpretation of the signal by the receiver.
Delay distortion – Delay distortion can result in a misinterpretation of a signal that results from transmitting a digital signal with varying frequency components. The various components arrive at the receiver with varying delays.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 265
Official ISC2 guide to CISSP CBK 3rd Edition Page number 229 &
CISSP All-In-One Exam guide 6th Edition Page Number 561

Explanation/Reference:
Explanation:
A Type II error, or false acceptance rate, is when the system accepts impostors who should be rejected.
Incorrect Answers:
A: A Type I error, or false rejection rate, is when a biometric system rejects an authorized individual.
C: The crossover error rate (CER) is a percentage that signifies the point at which the false rejection rate equals the false acceptance rate.
D: The true accept rate is the percentage of times a system correctly verifies a true claim of identity.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 188
http://www.technovelgy.com/ct/Technology-Article.asp?ArtNum=92

The correct answer is “Evidence is mostly intangible”.
*Answer “Backups may be difficult to find” is incorrect because if backups are done, they usually can be located.
*Answer “Evidence cannot be preserved” is incorrect because evidence can be preserved using the proper procedures.
*Answer “Evidence is hearsay and can never be introduced into a court of law” is incorrect because there are exceptions to the hearsay rule.

A major concern with Single Sign-On (SSO) is that if a user’s ID and password are compromised, the intruder would have access to all the systems that the user was authorized for.
The following answers are incorrect:
The security administrator’s workload would increase. Is incorrect because the security administrator’s workload would decrease and not increase. The admin would not be responsible for maintaining multiple user accounts just the one.
The users’ password would be too hard to remember. Is incorrect because the users would have less passwords to remember.
User access rights would be increased. Is incorrect because the user access rights would not be any different than if they had to log into systems manually.

The correct answer is “They are statements that indicate a senior management’s intention to support InfoSec”. High-level policies are senior management statements of recognition of the importance of InfoSec controls.

Section: Software Development Security

Explanation/Reference:
Explanation:
L2TP is not compatible with NAT.
Incorrect Answers:
A: PPTP was designed to provide a way to tunnel PPP connections through an IP network.
B: PPTP uses PPP data packets that encrypted using Microsoft Point to Point Encryption (MPPE), while L2TP on the other hand does not provide any encryption or confidentiality by itself.
D: Radius AAA servers can be configured to use L2TP tunnels.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 702-703

In databases, polyinstantiation is database-related SQL (structured query language)
terminology. It allows a relation to contain multiple rows with the same primary key; the multiple
instances are distinguished by their security levels. It occurs because of mandatory policy.
Depending on the security level established, one record contains sensitive information, and the
other one does not, that is, a user will see the record’s information depending on his/her level of
confidentiality previously dictated by the company’s policy.
The following answers are incorrect:
An RDBMS is a DBMS in which data is stored in tables and the relationships among the data are
also stored in tables. The data can be accessed or reassembled in many different ways without
having to change the table forms.
Polymorphism based on the Greek roots “poly” and “morph,” meaning many and forms, respectively): allows the ability to overload operators, performing different methods depending on the context of the input message.
It is not possible The following reference(s) were/was used to create this question: http://en.wikipedia.org/wiki/Polyinstantiation https://en.wikipedia.org/wiki/Relational_database_management_system https://en.wikipedia.org/wiki/Polymorphism_%28computer_science%29 http://my.safaribooksonline.com/book/certification/cissp/9781597495639

Teardrop attack – This is based on the fragmentation implementation of IP whereby reassembly problems can cause machines to crash. The attack uses a reassembly bug with overlapping fragments and causes systems to hang or crash. It works for any Internet Protocol type because it hits the IP layer itself. Engineers should turn off directed broadcast capability.