ISC2 ISSAP PDF Exam Questions:

The usage gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market.

Mainly two figures are needed for this calculation:

Market potential: The maximum number of consumers available will usually be determined by market research, but it may sometimes be

calculated from demographic data or government statistics.

Existing usage: The existing usage by consumers makes up the total current market, from which market shares, for example, are

calculated. It is usually derived from marketing research, most accurately from panel research and also from ad hoc work.

Thus, the 'usage gap' can be calculated by:

usage gap = market potential - existing usage

Answer option B is incorrect. The product gap is also described as the segment or positioning gap. It represents that part of the market from

which the individual organization is excluded because of product or service characteristics. This may have come about because the market has

been segmented and the organization does not have offerings in some segments, or it may be because the positioning of its offering

effectively excludes it from certain groups of potential consumers, because there are competitive offerings much better placed in relation to

these groups.

The product gap is probably the main element of the planning gap in which the organization can have a productive input. Therefore the

emphasis is on the importance of correct positioning.

Answer option A is incorrect. The project gap is not a valid element of planning gap.

Answer option C is incorrect. The competitive gap is the share of business achieved among similar products, sold in the same market segment

and with similar distribution patterns or at least, in any comparison, after such effects have been discounted. The competitive gap represents

the effects of factors such as price and promotion, both the absolute level and the effectiveness of its messages. It is what marketing is

popularly supposed to be about.

Packet filtering is a method that allows or restricts the flow of specific types of packets to provide security. It analyzes the incoming and

outgoing packets and lets them pass or stops them at a network interface based on the source and destination addresses, ports, or

protocols. Packet filtering provides a way to define precisely which type of IP traffic is allowed to cross the firewall of an intranet. IP packet

filtering is important when users from private intranets connect to public networks, such as the Internet.

Answer option D is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the

IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his

identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the

responses to be misdirected.

Answer option C is incorrect. Web caching is a method for minimizing performance bottlenecks and reducing network traffic by serving locally

cached Web content. Web caching helps in reducing bandwidth utilization during periods of high network traffic. High network traffic is usually

caused when a large number of users use the network at the same time. With a caching solution in place, users' requests will be returned

from the cache without having to travel over a WAN link to the destination Web server.

Answer option A is incorrect. Hacking is a process by which a person acquires illegal access to a computer or network through a security break

or by implanting a virus on the computer or network.

traffic to obtain sensitive information. The two most commonly used methods for providing e-mail security are Pretty Good Privacy (PGP) and

Secure/Multipurpose Internet Mail Extensions (S/MIME). These methods typically include authentication of the originator and privacy of the

message.

Pretty Good Privacy (PGP) is an encryption method that uses public-key encryption to encrypt and digitally sign e-mail messages during

communication between e-mail clients. PGP is effective, easy to use, and free. Therefore, it is one of the most common ways to protect

messages on the Internet.

Answer option C is incorrect. Internet Protocol security (IPSec) provides secure communication over IP networks. It cannot be used to encrypt

e-mail messages.

be encrypted in order to maintain security.

The two modes available for data encryption are Microsoft Point-to-Point Encryption (MPPE) and IP Security (IPSec). The MPPE protocol is used

for data encryption in a PPTP connection. It supports MSCHAP v1 and v2, and the EAP-TLS authentication methods. However, L2TP does not

support the MPPE protocol. Therefore, for an L2TP connection, Peter will have to use the IPSec protocol to encrypt data. L2TP with IPSec

needs a certificate authority server (CA server) to generate certificates as well as to check their validity for providing secure communication

across both ends of the VPN.

in an IP multicast group. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. It can be effectively

used for gaming and showing online videos. IGMP is vulnerable to network attacks.

Answer option B is incorrect. Internet Control Message Protocol (ICMP) is an integral part of IP. It is used to report an error in datagram

processing. The Internet Protocol (IP) is used for host-to-host datagram service in a network. The network is configured with connecting

devices called gateways. When an error occurs in datagram processing, gateways or destination hosts report the error to the source hosts

through the ICMP protocol. The ICMP messages are sent in various situations, such as when a datagram cannot reach its destination, when

the gateway cannot direct the host to send traffic on a shorter route, when the gateway does not have the buffering capacity, etc.

Answer option A is incorrect. Address Resolution Protocol (ARP) is a network maintenance protocol of the TCP/IP protocol suite. It is

responsible for the resolution of IP addresses to media access control (MAC) addresses of a network interface card (NIC). The ARP cache is

used to maintain a correlation between a MAC address and its corresponding IP address. ARP provides the protocol rules for making this

correlation and providing address conversion in both directions. ARP is limited to physical network systems that support broadcast packets.

Answer option C is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of

the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of

packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for

accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can

transmit large amounts of data. Application-layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients

and servers.