ISSAP Free Practice Test

- (Exam Topic 2)
Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

1. A. Safeguard
2. B. Annualized Rate of Occurrence (ARO)
3. C. Single Loss Expectancy (SLE)
4. D. Exposure Factor (EF)

Correct Answer: B

- (Exam Topic 1)
Computer networks and the Internet are the prime mode of Information transfer today. Which of the following is a technique used for modifying messages, providing Information and Cyber security, and reducing the risk of hacking attacks during communications and message passing over the Internet?

1. A. Risk analysis
2. B. Firewall security
3. C. Cryptography
4. D. OODA loop

Correct Answer: C

- (Exam Topic 1)
Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

1. A. Structured walk-through test
2. B. Simulation test
3. C. Full-interruption test
4. D. Parallel test

Correct Answer: C

- (Exam Topic 1)
John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail. Which of the following techniques is he performing to accomplish his task?

1. A. Email spoofing
2. B. Social engineering
3. C. Web ripping
4. D. Steganography

Correct Answer: D

- (Exam Topic 1)
Which of the following tenets does the CIA triad provide for which security practices are measured? Each correct answer represents a part of the solution. Choose all that apply.

1. A. Integrity
2. B. Accountability
3. C. Availability
4. D. Confidentiality

Correct Answer: ACD