- Home
- ISC Certification
- CISSP Exam
- ISC.CISSP.v2024-09-21.q999 Practice Test
Question 976
RAID levels 3 and 5 run:
Correct Answer: A
RAID levels 3 and 5 run faster on hardware.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, 2001, John Wiley & Sons, Page 67.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, 2001, John Wiley & Sons, Page 67.
Question 977
Match the name of access control model with its associated restriction.
Drag each access control model to its appropriate restriction access on the right.

Drag each access control model to its appropriate restriction access on the right.

Correct Answer:

Explanation

Question 978
How many bits is the address space reserved for the source IP address within an IPv6 header?
Correct Answer: A
Discussion: An IPv6 address space is 128 bits or:
2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456
When IPv4 was conceived in the late 1970s they thought that we would never need 4.3
Billion addresses but we ran out of them years ago. It is not likely that we will ever run out of addresses any time soon with numbers like those.
We've gotten by with IPv4 by using NAT - Network Address Translation where private IP
Addresses are used by a single or a few externally routable IP Addresses.
Unfortunately, early on companies were given huge blocks of address spaces like class A networks with 224 or 16,777,216 addresses even when only a small handful were used within the company. Also, 127.0.0.0 loopback wasted as many.
IPv6 addresses are written in 8 groups of 4 hexadecimal digits separated by colons like this:
2001:0db8:85a3:0000:0000:8a2e:0370:7334
What is an IPv6 Header?
An Internet Protocol version 6 (IPv6) data packet comprises of two main parts: the header and the payload. The first 40 bytes/octets (40x8 = 320 bits) of an IPv6 packet comprise of the header (see Figure 1) that contains the following fields:
IPv6
Source address (128 bits) The 128-bit source address field contains the IPv6 address of the originating node of the packet. It is the address of the originator of the IPv6 packet.
Destination address (128 bits) The 128-bit contains the destination address of the recipient node of the IPv6 packet. It is the address of the intended recipient of the IPv6 packet.
Version/IP version (4-bits) The 4-bit version field contains the number 6. It indicates the version of the IPv6 protocol. This field is the same size as the IPv4 version field that contains the number 4. However, this field has a limited use because IPv4 and IPv6 packets are not distinguished based on the value in the version field but by the protocol type present in the layer 2 envelope.
Packet priority/Traffic class (8 bits) The 8-bit Priority field in the IPv6 header can assume different values to enable the source node to differentiate between the packets generated by it by associating different delivery priorities to them. This field is subsequently used by the originating node and the routers to identify the data packets that belong to the same traffic class and distinguish between packets with different priorities.
Flow Label/QoS management (20 bits) The 20-bit flow label field in the IPv6 header can be used by a source to label a set of packets belonging to the same flow. A flow is uniquely identified by the combination of the source address and of a non-zero Flow label. Multiple active flows may exist from a source to a destination as well as traffic that are not associated with any flow (Flow label = 0).
The IPv6 routers must handle the packets belonging to the same flow in a similar fashion.
The information on handling of IPv6 data packets belonging to a given flow may be specified within the data packets themselves or it may be conveyed by a control protocol such as the RSVP (Resource reSerVation Protocol).
When routers receive the first packet of a new flow, they can process the information carried by the IPv6 header, Routing header, and Hop-by-Hop extension headers, and store the result (e.g. determining the retransmission of specific IPv6 data packets) in a cache memory and use the result to route all other packets belonging to the same flow (having the same source address and the same Flow Label), by using the data stored in the cache memory.
Payload length in bytes(16 bits) The 16-bit payload length field contains the length of the data field in octets/bits following the IPv6 packet header. The 16-bit Payload length field puts an upper limit on the maximum packet payload to 64 kilobytes. In case a higher packet payload is required, a Jumbo payload extension header is provided in the IPv6 protocol. A
Jumbo payload (Jumbogram) is indicated by the value zero in the Payload Length field.
Jumbograms are frequently used in supercomputer communication using the IPv6 protocol to transmit heavy data payload.
Next Header (8 bits) The 8-bit Next Header field identifies the type of header immediately following the IPv6 header and located at the beginning of the data field (payload) of the
IPv6 packet. This field usually specifies the transport layer protocol used by a packet's payload. The two most common kinds of Next Headers are TCP (6) and UDP (17), but many other headers are also possible. The format adopted for this field is the one proposed for IPv4 by RFC 1700. In case of IPv6 protocol, the Next Header field is similar to the IPv4
Protocol field.
Time To Live (TTL)/Hop Limit (8 bits) The 8-bit Hop Limit field is decremented by one, by each node (typically a router) that forwards a packet. If the Hop Limit field is decremented to zero, the packet is discarded. The main function of this field is to identify and to discard packets that are stuck in an indefinite loop due to any routing information errors. The 8-bit field also puts an upper limit on the maximum number of links between two IPv6 nodes. In this way, an IPv6 data packet is allowed a maximum of 255 hops before it is eventually discarded. An IPv6 data packet can pas through a maximum of 254 routers before being discarded.
In case of IPv6 protocol, the fields for handling fragmentation do not form a part of the basic header. They are put into a separate extension header. Moreover, fragmentation is exclusively handled by the sending host. Routers are not employed in the Fragmentation process.
For further details, please see RFC 2460 - Internet Protocol, Version 6 (IPv6) Specification.
The following answers are incorrect:
- 32: This answer would be right if the question was about IPv4 but it isn't so the answer is wrong. 32 Bits yields 4,294,967,296 unique IP Address and considering the RFC for that was released in 1981, IPv4 has proven to have a remarkable lifespan. After more than 30 years and the huge growth the internet it's no wonder its lifespan is coming to an end.
- 64: This is only half the size of an IPv6 header address space so this isn't correct. 64 Bits would yield a huge number of addresses which probably would have been enough but designers wanted to be sure to never ever run out of addresses on planet earth with 128-bit address spaces in IPv6.
- 256: This isn't correct because 256 is twice the size of an IPv6 address size, far to many addresses necessary at this or any other point in time.
The following reference(s) was used to create this question:
Gregg, Michael; Haines, Billy (2012-02-16). CASP: CompTIA Advanced Security
Practitioner Study Guide Authorized Courseware: Exam CAS-001 (p. 53). Wiley. Kindle
Edition.
2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456
When IPv4 was conceived in the late 1970s they thought that we would never need 4.3
Billion addresses but we ran out of them years ago. It is not likely that we will ever run out of addresses any time soon with numbers like those.
We've gotten by with IPv4 by using NAT - Network Address Translation where private IP
Addresses are used by a single or a few externally routable IP Addresses.
Unfortunately, early on companies were given huge blocks of address spaces like class A networks with 224 or 16,777,216 addresses even when only a small handful were used within the company. Also, 127.0.0.0 loopback wasted as many.
IPv6 addresses are written in 8 groups of 4 hexadecimal digits separated by colons like this:
2001:0db8:85a3:0000:0000:8a2e:0370:7334
What is an IPv6 Header?
An Internet Protocol version 6 (IPv6) data packet comprises of two main parts: the header and the payload. The first 40 bytes/octets (40x8 = 320 bits) of an IPv6 packet comprise of the header (see Figure 1) that contains the following fields:
IPv6
Source address (128 bits) The 128-bit source address field contains the IPv6 address of the originating node of the packet. It is the address of the originator of the IPv6 packet.
Destination address (128 bits) The 128-bit contains the destination address of the recipient node of the IPv6 packet. It is the address of the intended recipient of the IPv6 packet.
Version/IP version (4-bits) The 4-bit version field contains the number 6. It indicates the version of the IPv6 protocol. This field is the same size as the IPv4 version field that contains the number 4. However, this field has a limited use because IPv4 and IPv6 packets are not distinguished based on the value in the version field but by the protocol type present in the layer 2 envelope.
Packet priority/Traffic class (8 bits) The 8-bit Priority field in the IPv6 header can assume different values to enable the source node to differentiate between the packets generated by it by associating different delivery priorities to them. This field is subsequently used by the originating node and the routers to identify the data packets that belong to the same traffic class and distinguish between packets with different priorities.
Flow Label/QoS management (20 bits) The 20-bit flow label field in the IPv6 header can be used by a source to label a set of packets belonging to the same flow. A flow is uniquely identified by the combination of the source address and of a non-zero Flow label. Multiple active flows may exist from a source to a destination as well as traffic that are not associated with any flow (Flow label = 0).
The IPv6 routers must handle the packets belonging to the same flow in a similar fashion.
The information on handling of IPv6 data packets belonging to a given flow may be specified within the data packets themselves or it may be conveyed by a control protocol such as the RSVP (Resource reSerVation Protocol).
When routers receive the first packet of a new flow, they can process the information carried by the IPv6 header, Routing header, and Hop-by-Hop extension headers, and store the result (e.g. determining the retransmission of specific IPv6 data packets) in a cache memory and use the result to route all other packets belonging to the same flow (having the same source address and the same Flow Label), by using the data stored in the cache memory.
Payload length in bytes(16 bits) The 16-bit payload length field contains the length of the data field in octets/bits following the IPv6 packet header. The 16-bit Payload length field puts an upper limit on the maximum packet payload to 64 kilobytes. In case a higher packet payload is required, a Jumbo payload extension header is provided in the IPv6 protocol. A
Jumbo payload (Jumbogram) is indicated by the value zero in the Payload Length field.
Jumbograms are frequently used in supercomputer communication using the IPv6 protocol to transmit heavy data payload.
Next Header (8 bits) The 8-bit Next Header field identifies the type of header immediately following the IPv6 header and located at the beginning of the data field (payload) of the
IPv6 packet. This field usually specifies the transport layer protocol used by a packet's payload. The two most common kinds of Next Headers are TCP (6) and UDP (17), but many other headers are also possible. The format adopted for this field is the one proposed for IPv4 by RFC 1700. In case of IPv6 protocol, the Next Header field is similar to the IPv4
Protocol field.
Time To Live (TTL)/Hop Limit (8 bits) The 8-bit Hop Limit field is decremented by one, by each node (typically a router) that forwards a packet. If the Hop Limit field is decremented to zero, the packet is discarded. The main function of this field is to identify and to discard packets that are stuck in an indefinite loop due to any routing information errors. The 8-bit field also puts an upper limit on the maximum number of links between two IPv6 nodes. In this way, an IPv6 data packet is allowed a maximum of 255 hops before it is eventually discarded. An IPv6 data packet can pas through a maximum of 254 routers before being discarded.
In case of IPv6 protocol, the fields for handling fragmentation do not form a part of the basic header. They are put into a separate extension header. Moreover, fragmentation is exclusively handled by the sending host. Routers are not employed in the Fragmentation process.
For further details, please see RFC 2460 - Internet Protocol, Version 6 (IPv6) Specification.
The following answers are incorrect:
- 32: This answer would be right if the question was about IPv4 but it isn't so the answer is wrong. 32 Bits yields 4,294,967,296 unique IP Address and considering the RFC for that was released in 1981, IPv4 has proven to have a remarkable lifespan. After more than 30 years and the huge growth the internet it's no wonder its lifespan is coming to an end.
- 64: This is only half the size of an IPv6 header address space so this isn't correct. 64 Bits would yield a huge number of addresses which probably would have been enough but designers wanted to be sure to never ever run out of addresses on planet earth with 128-bit address spaces in IPv6.
- 256: This isn't correct because 256 is twice the size of an IPv6 address size, far to many addresses necessary at this or any other point in time.
The following reference(s) was used to create this question:
Gregg, Michael; Haines, Billy (2012-02-16). CASP: CompTIA Advanced Security
Practitioner Study Guide Authorized Courseware: Exam CAS-001 (p. 53). Wiley. Kindle
Edition.
Question 979
One of the following statements about the differences between PPTP and L2TP is NOT true
Correct Answer: C
Explanation/Reference:
Explanation:
L2TP is not compatible with NAT.
Incorrect Answers:
A: PPTP was designed to provide a way to tunnel PPP connections through an IP network.
B: PPTP uses PPP data packets that encrypted using Microsoft Point to Point Encryption (MPPE), while L2TP on the other hand does not provide any encryption or confidentiality by itself.
D: Radius AAA servers can be configured to use L2TP tunnels.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 702-703
Explanation:
L2TP is not compatible with NAT.
Incorrect Answers:
A: PPTP was designed to provide a way to tunnel PPP connections through an IP network.
B: PPTP uses PPP data packets that encrypted using Microsoft Point to Point Encryption (MPPE), while L2TP on the other hand does not provide any encryption or confidentiality by itself.
D: Radius AAA servers can be configured to use L2TP tunnels.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 702-703
Question 980
Which of the following cloud deployment model operates solely for an organization?
Correct Answer: A
In Private cloud, the cloud infrastructure is provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned,managed, and operated by the organization, a third party, or some combination of them,and it may exist on or off premises.

For your exam you should know below information about Cloud Computing deployment models:
Private cloud
The cloud infrastructure is provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned,managed, and operated by the organization, a third party, or some combination of them,and it may exist on or off premises.

Private Cloud
Image Reference - http://www.inflectionpoint.co.uk/Portals/5/VMware-vCloud.jpg
Community Cloud
The cloud infrastructure is provisioned for exclusive use by a specific community of consumers
from organizations that have shared concerns (e.g., mission,security requirements, policy, and
compliance considerations). It may be owned, managed, and operated by one or more of the
organizations in the community, a third party, or some combination of them, and it may exist on or
off premises.
Community Cloud
Image Reference - http://cloudcomputingksu.files.wordpress.com/2012/05/community-cloud.png
Public Cloud
The cloud infrastructure is provisioned for open use by the general public. It may be owned,
managed, and operated by a business, academic, or government organization, or some
combination of them. It exists on the premises of the cloud provider.

Public Cloud Image reference - http://definethecloud.files.wordpress.com/2010/04/image3.png
Hybrid cloud The cloud infrastructure is a composition of two or more distinct cloud infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds)

hybrid cloud
Image reference - http://www.virtualizationpractice.com/wp-content/uploads/2013/04/Hybrid-Cloud-Computing-Solution1.jpg
The following answers are incorrect:
Community cloud - The cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns (e.g., mission,security requirements, policy, and compliance considerations). It may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises.
Public cloud - The cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider.
Hybrid cloud - The cloud infrastructure is a composition of two or more distinct cloud
infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds)
The following reference(s) were/was used to create this question:
CISA review manual 2014 page number 102 Official ISC2 guide to CISSP 3rd edition Page number 689 and 690

For your exam you should know below information about Cloud Computing deployment models:
Private cloud
The cloud infrastructure is provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned,managed, and operated by the organization, a third party, or some combination of them,and it may exist on or off premises.

Private Cloud
Image Reference - http://www.inflectionpoint.co.uk/Portals/5/VMware-vCloud.jpg
Community Cloud
The cloud infrastructure is provisioned for exclusive use by a specific community of consumers
from organizations that have shared concerns (e.g., mission,security requirements, policy, and
compliance considerations). It may be owned, managed, and operated by one or more of the
organizations in the community, a third party, or some combination of them, and it may exist on or
off premises.
Community Cloud
Image Reference - http://cloudcomputingksu.files.wordpress.com/2012/05/community-cloud.png
Public Cloud
The cloud infrastructure is provisioned for open use by the general public. It may be owned,
managed, and operated by a business, academic, or government organization, or some
combination of them. It exists on the premises of the cloud provider.

Public Cloud Image reference - http://definethecloud.files.wordpress.com/2010/04/image3.png
Hybrid cloud The cloud infrastructure is a composition of two or more distinct cloud infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds)

hybrid cloud
Image reference - http://www.virtualizationpractice.com/wp-content/uploads/2013/04/Hybrid-Cloud-Computing-Solution1.jpg
The following answers are incorrect:
Community cloud - The cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns (e.g., mission,security requirements, policy, and compliance considerations). It may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises.
Public cloud - The cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider.
Hybrid cloud - The cloud infrastructure is a composition of two or more distinct cloud
infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds)
The following reference(s) were/was used to create this question:
CISA review manual 2014 page number 102 Official ISC2 guide to CISSP 3rd edition Page number 689 and 690
- Other Version
- 510ISC.CISSP.v2026-04-20.q414
- 8526ISC.CISSP.v2024-12-05.q999
- 8019ISC.CISSP.v2023-07-03.q999
- 2918ISC.CISSP.v2023-04-20.q206
- 6882ISC.CISSP.v2022-09-06.q331
- 7583ISC.CISSP.v2022-08-27.q376
- 12929ISC.CISSP.v2022-04-07.q650
- 145ISC.Fast2test.CISSP.v2021-12-03.by.osborn.827q.pdf
- 22303ISC.CISSP.v2021-10-01.q353
- Latest Upload
- 202PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43
- 299Nokia.4A0-113.v2026-05-01.q69
- 255EC-COUNCIL.312-49v11.v2026-04-30.q214
- 228Microsoft.MB-820.v2026-04-30.q101
- 211Salesforce.MC-202.v2026-04-30.q57
- 206BICSI.INSTC_V8.v2026-04-29.q53
- 335NMLS.MLO.v2026-04-28.q82
- 243NCARB.Project-Management.v2026-04-28.q27
- 462EMC.D-AV-DY-23.v2026-04-27.q184
- 1116ServiceNow.CSA.v2026-04-27.q483
