[2022] Use Real ISC Dumps - 100% Free CISSP Exam Dumps
Realistic CISSP Dumps Latest ISC Practice Tests Dumps
Understanding specialized and utilitarian capacities of CISSP test: Certified Information Systems Security Professional
The accompanying will be examined in ISC CISSP dumps:
- Enforce security controls being developed conditions
- Communications and Network Security
- Collect security measure information (e.g., the executives and operational controls)
- Security and Risk Management: Understand and apply ideas of classification, respectability and accessibility
- Operate and keep up precaution measures
- Ensure fitting maintenance
- Security Operations
- Security Assessment and Testing
- Conduct or encourage inward and outsider reviews
- Assess the adequacy of programming security
- Asset Security: Determine and look after possession (e.g., information proprietors, framework proprietors, business/mission proprietors)
- Identity and Access Management
- Software Development Security
- Security Engineering
NEW QUESTION 253
How many bits compose an IPv6 address?
- A. 64 bits
- B. 96 bits
- C. 128 bits
- D. 32 bits
Answer: C
Explanation:
Explanation/Reference:
Explanation:
IPv6 uses 128 bits for its addresses.
Incorrect Answers:
A: IPv4 uses 32 bits for its addresses, while IPv6 uses 128 bits.
B: IPv6 uses 128 bits, not 64 bits, for its addresses.
C: IPv6 uses 128 bits, not 96 bits, for its addresses.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 541
NEW QUESTION 254
An audit trail is an example of what type of control?
- A. Preventative control
- B. Detective control
- C. Application control
- D. Deterrent control
Answer: B
Explanation:
The correct answer is Detective control. An audit trail is a record of events to piece together what has happened and allow enforcement of individual accountability by creating a reconstruction of events. They can be used to assist in the proper implementation of the other controls,
however.
NEW QUESTION 255
Refer to the information below to answer the question.
A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.
In the plan, what is the BEST approach to mitigate future internal client-based attacks?
- A. Remove all non-essential client-side web services from the network.
- B. Screen for harmful exploits of client-side services before implementation.
- C. Block all client side web exploits at the perimeter.
- D. Harden the client image before deployment.
Answer: D
NEW QUESTION 256
Which of the following characteristics pertaining to databases is not true?
- A. Justifications must exist for normalized data.
- B. All relations must have a specific cardinality.
- C. No NULLs should be allowed for primary keys.
- D. A data model should exist and all entities should have a significant name.
Answer: A
Explanation:
Justifications should be provided when data is denormalized, not when it is normalized, because it introduces risk of data inconsistency. Denormalization is usually introduced for performance purposes.
Source: Information Systems Audit and Control Association, Certified Information Systems
Auditor 2002 review manual, Chapter 3: Technical Infrastructure and Operational Practices
(page 108).
NEW QUESTION 257
The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?
- A. forgiveness level
- B. acceptance level
- C. clipping level
- D. logging level
Answer: C
Explanation:
The correct answer is "clipping level". This is the point at which a system decides to
take some sort of action when an action repeats a preset number of times. That action may be to
log the activity, lock a user account, temporarily close a port, etc.
Example: The most classic example of a clipping level is failed login attempts. If you have a
system configured to lock a user's account after three failed login attemts, that is the "clipping
level".
The other answers are not correct because:
Acceptance level, forgiveness level, and logging level are nonsensical terms that do not exist (to
my knowledge) within network security.
Reference:
Official ISC2 Guide - The term "clipping level" is not in the glossary or index of that book. I cannot
find it in the text either. However, I'm quite certain that it would be considered part of the CBK,
despite its exclusion from the Official Guide.
All in One Third Edition page: 136 - 137
NEW QUESTION 258
While using IPsec, the ESP and AH protocols both provides integrity services. However when using AH, some special attention needs to be paid if one of the peers uses NAT for address translation service. Which of the items below would affects the use of AH and it's Integrity Check Value (ICV) the most?
- A. Crypotographic algorithm used
- B. Key session exchange
- C. Packet Header Source or Destination address
- D. VPN cryptographic key size
Answer: C
Explanation:
It may seem odd to have two different protocols that provide overlapping functionality. AH provides authentication and integrity, and ESP can provide those two functions and confidentiality.
Why even bother with AH then?
In most cases, the reason has to do with whether the environment is using network address translation (NAT). IPSec will generate an integrity check value (ICV), which is really the same thing as a MAC value, over a portion of the packet. Remember that the sender and receiver generate their own values. In IPSec, it is called an ICV value. The receiver compares her ICV value with the one sent by the sender. If the values match, the receiver can be assured the packet has not been modified during transmission. If the values are different, the packet has been altered and the receiver discards the packet.
The AH protocol calculates this ICV over the data payload, transport, and network headers. If the packet then goes through a NAT device, the NAT device changes the IP address of the packet. That is its job. This means a portion of the data (network header) that was included to calculate the ICV value has now changed, and the receiver will generate an ICV value that is different from the one sent with the packet, which means the packet will be discarded automatically.
The ESP protocol follows similar steps, except it does not include the network header portion when calculating its ICV value. When the NAT device changes the IP address, it will not affect the receiver's ICV value because it does not include the network header when calculating the ICV.
Here is a tutorial on IPSEC from the Shon Harris Blog:
The Internet Protocol Security (IPSec) protocol suite provides a method of setting up a secure channel for protected data exchange between two devices. The devices that share this secure channel can be two servers, two routers, a workstation and a server, or two gateways between different networks. IPSec is a widely accepted standard for providing network layer protection. It can be more flexible and less expensive than end-to end and link encryption methods.
IPSec has strong encryption and authentication methods, and although it can be used to enable tunneled communication between two computers, it is usually employed to establish virtual private networks (VPNs) among networks across the Internet.
IPSec is not a strict protocol that dictates the type of algorithm, keys, and authentication method to use. Rather, it is an open, modular framework that provides a lot of flexibility for companies when they choose to use this type of technology. IPSec uses two basic security protocols: Authentication Header (AH) and Encapsulating Security Payload (ESP). AH is the authenticating protocol, and ESP is an authenticating and encrypting protocol that uses cryptographic mechanisms to provide source authentication, confidentiality, and message integrity.
IPSec can work in one of two modes: transport mode, in which the payload of the message is protected, and tunnel mode, in which the payload and the routing and header information are protected. ESP in transport mode encrypts the actual message information so it cannot be sniffed and uncovered by an unauthorized entity. Tunnel mode provides a higher level of protection by also protecting the header and trailer data an attacker may find useful. Figure 8-26 shows the high-level view of the steps of setting up an IPSec connection.
Each device will have at least one security association (SA) for each VPN it uses. The SA, which is critical to the IPSec architecture, is a record of the configurations the device needs to support an IPSec connection. When two devices complete their handshaking process, which means they have agreed upon a long list of parameters they will use to communicate, these data must be recorded and stored somewhere, which is in the SA.
The SA can contain the authentication and encryption keys, the agreed-upon algorithms, the key lifetime, and the source IP address. When a device receives a packet via the IPSec protocol, it is the SA that tells the device what to do with the packet. So if device B receives a packet from device C via IPSec, device B will look to the corresponding SA to tell it how to decrypt the packet, how to properly authenticate the source of the packet, which key to use, and how to reply to the message if necessary.
SAs are directional, so a device will have one SA for outbound traffic and a different SA for inbound traffic for each individual communication channel. If a device is connecting to three devices, it will have at least six SAs, one for each inbound and outbound connection per remote device. So how can a device keep all of these SAs organized and ensure that the right SA is invoked for the right connection? With the mighty secu rity parameter index (SPI), that's how. Each device has an SPI that keeps track of the different SAs and tells the device which one is appropriate to invoke for the different packets it receives. The SPI value is in the header of an IPSec packet, and the device reads this value to tell it which SA to consult.
IPSec can authenticate the sending devices of the packet by using MAC (covered in the earlier section, "The One-Way Hash"). The ESP protocol can provide authentication, integrity, and confidentiality if the devices are configured for this type of functionality.
So if a company just needs to make sure it knows the source of the sender and must be assured of the integrity of the packets, it would choose to use AH. If the company would like to use these services and also have confidentiality, it would use the ESP protocol because it provides encryption functionality. In most cases, the reason ESP is employed is because the company must set up a secure VPN connection.
It may seem odd to have two different protocols that provide overlapping functionality. AH provides authentication and integrity, and ESP can provide those two functions and confidentiality. Why even bother with AH then? In most cases, the reason has to do with whether the environment is using network address translation (NAT). IPSec will generate an integrity check value (ICV), which is really the same thing as a MAC value, over a portion of the packet. Remember that the sender and receiver generate their own values. In IPSec, it is called an ICV value. The receiver compares her ICV value with the one sent by the sender. If the values match, the receiver can be assured the packet has not been modified during transmission. If the values are different, the packet has been altered and the receiver discards the packet.
The AH protocol calculates this ICV over the data payload, transport, and network headers. If the packet then goes through a NAT device, the NAT device changes the IP address of the packet. That is its job. This means a portion of the data (network header) that was included to calculate the ICV value has now changed, and the receiver will generate an ICV value that is different from the one sent with the packet, which means the packet will be discarded automatically.
The ESP protocol follows similar steps, except it does not include the network header portion when calculating its ICV value. When the NAT device changes the IP address, it will not affect the receiver's ICV value because it does not include the network header when calculating the ICV.
Because IPSec is a framework, it does not dictate which hashing and encryption algorithms are to be used or how keys are to be exchanged between devices. Key management can be handled manually or automated by a key management protocol. The de facto standard for IPSec is to use Internet Key Exchange (IKE), which is a combination of the ISAKMP and OAKLEY protocols. The Internet Security Association and Key Management Protocol (ISAKMP) is a key exchange architecture that is independent of the type of keying mechanisms used. Basically, ISAKMP provides the framework of what can be negotiated to set up an IPSec connection (algorithms, protocols, modes, keys). The OAKLEY protocol is the one that carries out the negotiation process. You can think of ISAKMP as providing the playing field (the infrastructure) and OAKLEY as the guy running up and down the playing field (carrying out the steps of the negotiation).
IPSec is very complex with all of its components and possible configurations. This complexity is what provides for a great degree of flexibility, because a company has many different configuration choices to achieve just the right level of protection. If this is all new to you and still confusing, please review one or more of the following references to help fill in the gray areas.
The following answers are incorrect:
The other options are distractors.
The following reference(s) were/was used to create this question:
Shon Harris, CISSP All-in-One Exam Guide- fiveth edition, page 759
and
https://neodean.wordpress.com/tag/security-protocol/
NEW QUESTION 259
What is the name of the software that prevents users from seeing all items or directories on a computer and is most commonly found in the UNIX/Linux environment?
- A. Root Kits
- B. Shell Kits
- C. Ethereal
- D. Shadow data
- E. Netbus
Answer: D
Explanation:
Shadowing, used for Unix password files hides the password hash.
IF SHAWDOWING IS ACTIVE:
------------------------
If the shawdowing is active the /etc/passwd would look like this:
root:x:0:1:0000:/:
sysadm:x:0:0:administration:/usr/admin:/bin/rsh
The password filed is substituted by "x".
The /etc/shawdow file only readable by root will look similar to
this:
root:D943/sys34:5288::
super user accounts
Cathy:masai1:5055:7:120
all other users
The first field contains users id:the second contains the password(The pw will be NONE if logining in remotely is deactivated):the third contains a code of when the password was last changed:the fourth and the fifth contains the minimum and the maximum numbers of days for pw changes(Its rare that you will find this in the super user logins due to there hard to guess passwords)
NEW QUESTION 260
What is the MAIN purpose for writing planned procedures in the design of Business Continuity Plans (BCP)?
- A. Accelerate the recovery process.
- B. Establish lines of responsibility.
- C. Minimize the risk of failure.
- D. Eliminate unnecessary decision making.
Answer: C
NEW QUESTION 261
While inventorying storage equipment, it is found that there are unlabeled, disconnected, and powered off devices. Which of the following is the correct procedure for handling such equipment?
- A. They should be recycled to save energy.
- B. They should be recycled according to NIST SP 800-88.
- C. They should be inspected and categorized properly to sell them for reuse.
- D. They should be inspected and sanitized following the organizational policy.
Answer: D
NEW QUESTION 262
Which type of fire detectors sends an alarm when the temperature of the room rises dramatically?
- A. Heat-sensing
- B. Smoke-actuated
- C. Flame-actuated
- D. Odor-sensing
Answer: A
Explanation:
A rate-of-rise detector triggers an alarm
when the ambient temperature of a room increases rapidly. Another
type of heat-sensing detector, a fixed temperature device, sends an
alarm when the temperature passes a predetermined level.
NEW QUESTION 263
What does the simple security (ss) property mean in the Bell-LaPadula model?
- A. No write down
- B. No write up
- C. No read down
- D. No read up
Answer: D
Explanation:
The ss (simple security) property of the Bell-LaPadula access control model states that reading of information by a subject at a lower sensitivity level from an object at a higher sensitivity level is not permitted (no read up). Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 202).
NEW QUESTION 264
In Disaster Recovery (DR) and Business Continuity (DC) training, which BEST describes a functional drill?
- A. a functional evacuation of personnel
- B. a specific test by response teams of individual emergency response functions
- C. an activation of the backup site
- D. a full-scale simulation of an emergency and the subsequent response functions.
Answer: D
NEW QUESTION 265
Which of the following describes a technique in which a number of processor units are employed in a single computer system to increase the performance of the system in its application environment above the performance of a single processor of the same kind?
- A. Multitasking
- B. Multiprogramming
- C. Multiprocessing
- D. Pipelining
Answer: C
Explanation:
Multiprocessing is an organizational technique in which a number of processor units are employed in a single computer system to increase the performance of the system in its application environment above the performance of a single processor of the same kind. In order to cooperate on a single application or class of applications, the processors share a common resource. Usually this resource is primary memory, and the multiprocessor is called a primary memory multiprocessor. A system in which each processor has a private (local) main memory and shares secondary (global) memory with the others is a secondary memory multiprocessor, sometimes called a multicomputer system because of the looser coupling between processors. The more common multiprocessor systems incorporate only processors of the same type and performance and thus are called homogeneous multiprocessors; however, heterogeneous multiprocessors are also employed. A special case is the attached processor, in which a second
processor module is attached to a first processor in a closely coupled fashion so that the first can
perform input/output and operating system functions, enabling the attached processor to
concentrate on the application workload.
The following were incorrect answers:
Multiprogramming: The interleaved execution of two or more programs by a computer, in which
the central processing unit executes a few instructions from each program in succession.
Multitasking: The concurrent operation by one central processing unit of two or more processes.
Pipelining: A procedure for processing instructions in a computer program more rapidly, in which
each instruction is divided into numerous small stages, and a population of instructions are in
various stages at any given time. One instruction does not have to wait for the previous one to
complete all of the stages before it gets into the pipeline. It would be similiar to an assembly chain
in the real world.
References:
TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
http://www.answers.com/topic/multiprocessing?cat=technology
http://www.answers.com/multitasking?cat=biz-fin
http://www.answers.com/pipelining?cat=technology
NEW QUESTION 266
For maximum security design, what type of fence is most effective and cost-effective method (Foot are being used as measurement unit below)?
- A. Double fencing
- B. 3' to 4' high.
- C. 6' to 7' high.
- D. 8' high and above with strands of barbed wire.
Answer: A
Explanation:
The most commonly used fence is the chain linked fence and it is the most affordable. The standard is a six-foot high fence with two-inch mesh square openings. The material should consist of nine-gauge vinyl or galvanized metal. Nine-gauge is a typical fence material installed in residential areas.
Additionally, it is recommended to place barbed wire strands angled out from the top of the fence at a 45 angle and away from the protected area with three strands running across the top. This
will provide for a seven-foot fence. There are several variations of the use of "top guards" using V-
shaped barbed wire or the use of concertina wire as an enhancement, which has been a
replacement for more traditional three strand barbed wire "top guards."
The fence should be fastened to ridged metal posts set in concrete every six feet with additional
bracing at the corners and gate openings. The bottom of the fence should be stabilized against
intruders crawling under by attaching posts along the bottom to keep the fence from being pushed
or pulled up from the bottom. If the soil is sandy, the bottom edge of the fence should be installed
below ground level.
For maximum security design, the use of double fencing with rolls of concertina wire positioned
between the two fences is the most effective deterrent and cost-efficient method. In this design, an
intruder is required to use an extensive array of ladders and equipment to breach the fences.
Most fencing is largely a psychological deterrent and a boundary marker rather than a barrier,
because in most cases such fences can be rather easily penetrated unless added security
measures are taken to enhance the security of the fence. Sensors attached to the fence to provide
electronic monitoring of cutting or scaling the fence can be used.
Reference(s) used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition
((ISC)2 Press) (Kindle Locations 24416-24431). Auerbach Publications. Kindle Edition.
NEW QUESTION 267
A common way to create fault tolerance with leased lines is to group several T-1's together with an inverse multiplexer placed:
- A. somewhere between both end points
- B. at both ends of the connection
- C. in the middle of the connection
- D. at one end of the connection
Answer: B
NEW QUESTION 268
A computer system that employs the necessary hardware and software
assurance measures to enable it to process multiple levels of classified or
sensitive information is called a:
- A. Safe system.
- B. Open system.
- C. Closed system.
- D. Trusted system.
Answer: D
Explanation:
The correct answer is Trusted system, by definition of a trusted system.
Answers Closed system and Open system refer to open, standard information on a product as
opposed to a closed or proprietary product. Answer Safe system is a distracter.
NEW QUESTION 269
Which of the following items is NOT used to determine the types of
access controls to be applied in an organization?
- A. Organizational policies
- B. Separation of duties
- C. Relational categories
- D. Least privilege
Answer: C
Explanation:
The item, relational categories, is a distracter. The other options
are important determinants of access control implementations in an
organization.
NEW QUESTION 270
At a MINIMUM, a formal review of any Disaster Recovery Plan (DRP) should be conducted
- A. bi-annually.
- B. quarterly.
- C. monthly.
- D. annually.
Answer: D
NEW QUESTION 271
What is the difference between Advisory and Regulatory security policies?
- A. Advisory policies are mandated while Regulatory policies are not
- B. Advisory policies are not mandated. Regulatory policies must be implemented.
- C. there is no difference between them
- D. regulatory policies are high level policy, while advisory policies are very detailed
Answer: B
Explanation:
Advisory policies are security polices that are not mandated to be followed but are strongly suggested, perhaps with serious consequences defined for failure to follow them (such as termination, a job action warning, and so forth). A company with such policies wants most employees to consider these policies mandatory.
Most policies fall under this broad category.
Advisory policies can have many exclusions or application levels. Thus, these policies can control some employees more than others, according to their roles and responsibilities within that organization. For example, a policy that requires a certain procedure for transaction processing might allow for an alternative procedure under certain, specified conditions.
Regulatory
Regulatory policies are security policies that an organization must implement due to compliance, regulation, or other legal requirements. These companies might be financial institutions, public utilities, or some other type of organization that operates in the public interest. These policies are usually very detailed and are specific to the industry in which the organization operates.
Regulatory polices commonly have two main purposes:
1 . To ensure that an organization is following the standard procedures or base practices of operation in its specific industry
2 . To give an organization the confidence that it is following the standard and accepted industry policy
Informative
Informative policies are policies that exist simply to inform the reader. There are no implied or specified requirements, and the audience for this information could be certain internal
(within the organization) or external parties. This does not mean that the policies are authorized for public consumption but that they are general enough to be distributed to external parties (vendors accessing an extranet, for example) without a loss of confidentiality.
References:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, John Wiley & Sons, 2001, Page 12, Chapter 1: Security
Management Practices.
also see:
The CISSP Prep Guide:Mastering the Ten Domains of Computer Security by Ronald L.
Krutz, Russell Dean Vines, Edward M. Stroz
also see:
http://i-data-recovery.com/information-security/information-security-policies-standards- guidelines-and-procedures
NEW QUESTION 272
The owner of a system should have the confidence that the system will behave according to its specifications. This is termed as :
- A. Integrity
- B. Accountability
- C. Assurance
- D. Availability
Answer: C
Explanation:
The owner of a system should have the confidence that the system will behave according to its specifications. This is termed as Assurance
The following answers are incorrect:
Integrity
Accountability
Availability
The following reference(s) were/was used to create this question:
Ethical hacking countermeasures
Introduction to Ethical hacking
Orange Book
NEW QUESTION 273
Which of the following is less likely to be used today in creating a Virtual Private Network?
- A. IPSec
- B. L2TP
- C. L2F
- D. PPTP
Answer: C
Explanation:
L2F (Layer 2 Forwarding) provides no authentication or encryption. It is a Protocol that supports the creation of secure virtual private dial-up networks over the Internet.
At one point L2F was merged with PPTP to produce L2TP to be used on networks and not only on
dial up links.
IPSec is now considered the best VPN solution for IP environments.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002,
Chapter 8: Cryptography (page 507).
NEW QUESTION 274
View the image below and identify the attack
- A. TFN
- B. Reflection Attack
- C. DoS
- D. DDoS
Answer: D
Explanation:
Explanation/Reference:
Explanation:
When a hacker has a collection of compromised systems, it is referred to as a botnet (network of bots). In the exhibit they are marked as zombies. The hacker can use all of these systems to carry out powerful distributed-denial-of-service (DDoS) attacks or even rent these systems to spammers. The owner of this botnet controls the systems remotely, usually through the Internet Relay Chat (IRC) protocol.
Incorrect Answers:
B: A DoS attack is similar to a DDoS attack, but in a DoS attack there is only one single source of the attack.
C: The Tribe Flood Network or TFN is a set of computer programs to conduct various DDoS attacks such as ICMP flood, SYN flood, UDP flood and Smurf attack. From the exhibit we have no evidence of a TFN attack, just of a DDoS attack.
D: A reflection attack is a method of attacking a challenge-response authentication system that uses the same protocol in both directions. That is, the same challenge-response protocol is used by each side to authenticate the other side. A reflection attack uses only a single computer as source, not a set of zombie computers.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1204
NEW QUESTION 275
A continuous information security monitoring program can BEST reduce risk through which of the following?
- A. Logging both scheduled and unscheduled system changes
- B. Facilitating system-wide visibility into the activities of critical user accounts
- C. Encompassing people, process, and technology
- D. Collecting security events and correlating them to identify anomalies
Answer: B
NEW QUESTION 276
Which of the following is the primary security feature of a proxy server?
- A. Route blocking
- B. URL blocking
- C. Content filtering
- D. Virus Detection
Answer: C
Explanation:
In many organizations, the HTTP proxy is used as a means to implement content filtering, for instance, by logging or blocking traffic that has been defined as, or is assumed to be nonbusiness related for some reason.
Although filtering on a proxy server or firewall as part of a layered defense can be quite effective to prevent, for instance, virus infections (though it should never be the only protection against viruses), it will be only moderately effective in preventing access to unauthorized services (such as certain remote-access services or file sharing), as well as preventing the download of unwanted content. HTTP Tunneling.
HTTP tunneling is technically a misuse of the protocol on the part of the designer of such tunneling applications. It has become a popular feature with the rise of the first streaming video and audio applications and has been implemented into many applications that have a market need to bypass user policy restrictions.
Usually, HTTP tunneling is applied by encapsulating outgoing traffic from an application in an HTTP request and incoming traffic in a response. This is usually not done to circumvent security, but rather, to be compatible with existing firewall rules and allow an application to function through a firewall without the need to apply special rules, or additional configurations.
The following are incorrect choices:
Virus Detection A proxy is not best at detection malware and viruses within content. A antivirus product would be use for that purpose.
URL blocking This would be a subset of Proxying, based on the content some URL's may be blocked by the proxy but it is not doing filtering based on URL addresses only. This is not the BEST answer.
Route blocking This is a function that would be done by Intrusion Detection and Intrusion prevention system and not the proxy. This could be done by filtering devices such as
Firewalls and Routers as well. Again, not the best choice.
Reference(s) used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third
Edition ((ISC)2 Press) (Kindle Locations 6195-6201). Auerbach Publications. Kindle
Edition.
NEW QUESTION 277
......
CISSP Dumps PDF - CISSP Real Exam Questions Answers: https://www.itcertmagic.com/ISC/real-CISSP-exam-prep-dumps.html
CISSP Exam [2022] Dumps ISC PDF Questions: https://drive.google.com/open?id=1eXdJPESkJDngmEptmS6FmOcngvs17NMe