Free Practice Questions for the ISC certification ISSAP Exam (2026 Updated)

You are the Security Consultant and have been contacted by a client regarding their encryption and hashing algorithms. Their in-house network administrator tells you that their current hashing algorithm is an older one with known weaknesses and is not collision resistant.Which algorithm are they most likely using for hashing?

Which of the following describes the acceptable amount of data loss measured in time?

Which of the following authentication methods is based on physical appearance of a user?

Mark works as a Network Administrator for NetTech Inc. He wants to connect the company ' s headquarter and its regional offices using a WAN technology. For this, he uses packet-switched connection. Which of the following WAN technologies will Mark use to connect the offices? Each correct answer represents a complete solution. Choose two.

Which of the following is responsible for maintaining certificates in a public key infrastructure (PKI)?

Which of the following methods of encryption uses a single key to encrypt and decrypt data?

You are implementing some security services in an organization, such as smart cards, biometrics, access control lists, firewalls, intrusion detection systems, and clipping levels. Which of the following categories of implementation of the access control includes all these security services?

Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?

Which of the following SDLC phases consists of the given security controls: Misuse Case Modeling Security Design and Architecture Review Threat and Risk Modeling Security Requirements and Test Cases Generation

Which of the following protocols provides certificate-based authentication for virtual private networks (VPNs)?

You work as a remote support technician. A user named Rick calls you for support. Rick wants to connect his LAN connection to the Internet. Which of the following devices will you suggest that he use?

Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.

Which of the following statements about Discretionary Access Control List (DACL) is true?

Which of the following statements are true about Public-key cryptography? Each correct answer represents a complete solution. Choose two.

Which of the following security architectures defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms?

You work as a Network Administrator for McRoberts Inc. You are expanding your company ' s network. After you have implemented the network, you test the connectivity to a remote host by using the PING command. You get the ICMP echo reply message from the remote host. Which of the following layers of the OSI model are tested through this process? Each correct answer represents a complete solution. Choose all that apply.

Which of the following protocols provides the highest level of VPN security with a VPN connection that uses the L2TP protocol?

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

You work as a Security Manager for Tech Perfect Inc. A number of people are involved with you in the DRP efforts. You have maintained several different types of plan documents, intended for different audiences. Which of the following documents will be useful for you as well as public relations personnel who require a non-technical perspective on the entire organization ' s disaster recovery efforts?

Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose three.

Which of the following are natural environmental threats that an organization faces? Each correct answer represents a complete solution. Choose two.

You work as a Network Administrator for Net Perfect Inc. The company has a Linux-based network. You need to configure a firewall for the company. The firewall should be able to keep track of the state of network connections traveling across the network. Which of the following types of firewalls will you configure to accomplish the task?

You work as an administrator for Techraft Inc. Employees of your company create ' products ' , which are supposed to be given different levels of access. You need to configure a security policy in such a way that an employee (producer of the product) grants accessing privileges (such as read, write, or alter) for his product. Which of the following access control models will you use to accomplish this task?

Which of the following encryption algorithms are based on block ciphers?

Which of the following user authentications are supported by the SSH-1 protocol but not by the SSH-2 protocol? Each correct answer represents a complete solution. Choose all that apply.

You are responsible for security at a building that has a lot of traffic. There are even a significant number of non-employees coming in and out of the building. You are concerned about being able to find out who is in the building at a particular time. What is the simplest way to accomplish this?

You work as a Network Administrator for McNeil Inc. The company has a TCP/IP-based network. Performance of the network is slow because of heavy traffic. A hub is used as a central connecting device in the network. Which of the following devices can be used in place of a hub to control the network traffic efficiently?

Which of the following are used to suppress electrical and computer fires? Each correct answer represents a complete solution. Choose two.

Which of the following security protocols provides confidentiality, integrity, and authentication of network traffic with end-to-end and intermediate-hop security?

Adam works as a Network Administrator. He discovers that the wireless AP transmits 128 bytes of plaintext, and the station responds by encrypting the plaintext. It then transmits the resulting ciphertext using the same key and cipher that are used by WEP to encrypt subsequent network traffic. Which of the following types of authentication mechanism is used here?

You work as an Incident handling manager for a company. The public relations process of the company includes an event that responds to the e-mails queries. But since few days, it is identified that this process is providing a way to spammers to perform different types of e-mail attacks. Which of the following phases of the Incident handling process will now be involved in resolving this process and find a solution? Each correct answer represents a part of the solution. Choose all that apply.

Which of the following are used to suppress gasoline and oil fires? Each correct answer represents a complete solution. Choose three.

Which of the following is a form of gate that allows one person to pass at a time?

The ATM of a bank is robbed by breaking the ATM machine. Which of the following physical security devices can now be used for verification and historical analysis of the ATM robbery?

Which of the following are the examples of technical controls? Each correct answer represents a complete solution. Choose three.

Which of the following firewalls inspects the actual contents of packets?

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

Which of the following protocols is an alternative to certificate revocation lists (CRL) and allows the authenticity of a certificate to be immediately verified?

Sam is creating an e-commerce site. He wants a simple security solution that does not require each customer to have an individual key. Which of the following encryption methods will he use?

Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each correct answer represents a complete solution. Choose two.

Which of the following statements about incremental backup are true? Each correct answer represents a complete solution. Choose two.

You have decided to implement video surveillance in your company in order to enhance network security. Which of the following locations must have a camera in order to provide the minimum level of security for the network resources? Each correct answer represents a complete solution. Choose two.

Which of the following processes is used to identify relationships between mission critical applications, processes, and operations and all supporting elements?

In which of the following network topologies does the data travel around a loop in a single direction and pass through each device?

You work as a Network Administrator for NetTech Inc. You want to have secure communication on the company ' s intranet. You decide to use public key and private key pairs. What will you implement to accomplish this?

Which of the following terms refers to a mechanism which proves that the sender really sent a particular message?

You have been assigned the task of selecting a hash algorithm. The algorithm will be specifically used to ensure the integrity of certain sensitive files. It must use a 128 bit hash value. Which of the following should you use?

Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market?

An organization is seeking to implement a hot site and wants to maintain a live database server at the backup site. Which of the following solutions will be the best for the organization?

Which of the following protocols is used to compare two values calculated using the Message Digest (MD5) hashing function?

Which of the following statements best describes a certification authority?

You work as a Project Manager for Tech Perfect Inc. You are creating a document which emphasizes the formal study of what your organization is doing currently and where it will be in the future. Which of the following analysis will help you in accomplishing the task?

Which of the following electrical events shows a sudden drop of power source that can cause a wide variety of problems on a PC or a network?

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

You work as a Network Administrator for Blue Bell Inc. The company has a TCP-based network. The company has two offices in different cities. The company wants to connect the two offices by using a public network. You decide to configure a virtual private network (VPN) between the offices. Which of the following protocols is used by VPN for tunneling?

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

Which of the following types of halon is found in portable extinguishers and is stored as a liquid?

You want to connect a twisted pair cable segment to a fiber-optic cable segment. Which of the following networking devices will you use to accomplish the task?

SSH is a network protocol that allows data to be exchanged between two networks using a secure channel. Which of the following encryption algorithms can be used by the SSH protocol? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is used to authenticate asymmetric keys?

Which of the following should the administrator ensure during the test of a disaster recovery plan?

Which of the following protocols is designed to efficiently handle high-speed data over wide area networks (WANs)?

The simplest form of a firewall is a packet filtering firewall. Typically a router works as a packet-filtering firewall and has the capability to filter on some of the contents of packets. On which of the following layers of the OSI reference model do these routers filter information? Each correct answer represents a complete solution. Choose all that apply.

Which of the following are the primary components of a discretionary access control (DAC) model? Each correct answer represents a complete solution. Choose two.

Which of the following statements about a stream cipher are true? Each correct answer represents a complete solution. Choose three.

Which of the following protocols provides connectionless integrity and data origin authentication of IP packets?

Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Which of the following statements are true about the Kerberos authentication scheme? Each correct answer represents a complete solution. Choose all that apply.