| Question.26 The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following? (A) clipping level (B) acceptance level (C) forgiveness level (D) logging level |
26. Click here to View Answer
Correct Answer: A
The correct answer is “clipping level”. This is the point at which a system decides to take some sort of action when an action repeats a preset number of times.
That action may be to log the activity, lock a user account, temporarily close a port, etc.
Example: The most classic example of a clipping level is failed login attempts. If you have a system configured to lock a user’s account after three failed login attemts, that is the “clipping level”.
The other answers are not correct because:
Acceptance level, forgiveness level, and logging level are nonsensical terms that do not exist (to my knowledge) within network security.
Reference:
Official ISC2 Guide – The term “clipping level” is not in the glossary or index of that book. I cannot find it in the text either. However, I’m quite certain that it would be considered part of the CBK, despite its exclusion from the Official Guide.
All in One Third Edition page: 136 – 137
| Question.27 Examples of types of physical access controls include all EXCEPT which of the following? (A)badges (B) locks (C) guards (D) passwords |
27. Click here to View Answer
Correct Answer: D
Passwords are considered a Preventive/Technical (logical) control.
The following answers are incorrect:
badges Badges are a physical control used to identify an individual. A badge can include a smart device which can be used for authentication and thus a
Technical control, but the actual badge itself is primarily a physical control. locks Locks are a Preventative Physical control and has no Technical association. guards Guards are a Preventative Physical control and has no Technical association.
The following reference(s) were/was used to create this question:
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 2:
Access control systems (page 35).
| Question.28 Guards are appropriate whenever the function required by the security program involves which of the following? A. The use of discriminating judgment B. The use of physical force C. The operation of access control devices D. The need to detect unauthorized access |
28. Click here to View Answer
Correct Answer: A
| Question.29 What physical characteristic does a retinal scan biometric device measure? (A) The amount of light reaching the retina (B0 The amount of light reflected by the retina (C) The pattern of light receptors at the back of the eye (D) The pattern of blood vessels at the back of the eye |
29. Click here to View Answer
Correct Answer: D
The retina, a thin nerve (1/50th of an inch) on the back of the eye, is the part of the eye which senses light and transmits impulses through the optic nerve to the brain – the equivalent of film in a camera. Blood vessels used for biometric identification are located along the neural retina, the outermost of retina’s four cell layers.
The following answers are incorrect:
The amount of light reaching the retina The amount of light reaching the retina is not used in the biometric scan of the retina.
The amount of light reflected by the retina The amount of light reflected by the retina is not used in the biometric scan of the retina.
The pattern of light receptors at the back of the eye This is a distractor
The following reference(s) were/was used to create this question:
Reference: Retina Scan Technology.
ISC2 Official Guide to the CBK, 2007 (Page 161)
| Question.30 Which is the last line of defense in a physical security sense? (A) people (B) interior barriers (C) exterior barriers (D) perimeter barriers |
30. Click here to View Answer
Correct Answer: A
“Ultimately, people are the last line of defense for your companys assets” (Pastore & Dulaney, 2006, p. 529).
Pastore, M. and Dulaney, E. (2006). CompTIA Security+ study guide: Exam SY0-101. Indianapolis, IN: Sybex.