ISC CISSP-ISSMP Online Practice Questions and Exam Preparation

ISC CISSP-ISSMP Online Questions & Answers

• Question 111:

  Fill in the blank with an appropriate phrase.______________ is used to provide security mechanisms for the storage, processing, and transfer of data.

  A. Data classification
  A. Data classification

• Question 112:

  The incident response team has turned the evidence over to the forensic team. Now, it is the time to begin looking for the ways to improve the incident response process for next time. What are the typical areas for improvement? Each correct answer represents a complete solution. Choose all that apply.

  A. Information dissemination policy
  B. Electronic monitoring statement
  C. Additional personnel security controls
  D. Incident response plan
  A. Information dissemination policy
  B. Electronic monitoring statement
  C. Additional personnel security controls
  D. Incident response plan

• Question 113:

  Which of the following options is an approach to restricting system access to authorized users?

  A. DAC
  B. MIC
  C. RBAC
  D. MAC
  C. RBAC

• Question 114:

  Which of the following protocols is used with a tunneling protocol to provide security?

  A. FTP
  B. IPX/SPX
  C. IPSec
  D. EAP
  C. IPSec

• Question 115:

  Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

  A. Disaster recovery plan
  B. Contingency plan
  C. Continuity of Operations Plan
  D. Business continuity plan
  B. Contingency plan

• Question 116:

  Which of the following are the examples of administrative controls? Each correct answer represents a complete solution. Choose all that apply.

  A. Security awareness training
  B. Security policy
  C. Data Backup
  D. Auditing
  A. Security awareness training
  B. Security policy

• Question 117:

  You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident.

  Which of the following steps of an incident handling process was performed by the incident response team?

  A. Containment
  B. Eradication
  C. Preparation
  D. Identification
  D. Identification

• Question 118:

  Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

  A. It uses TCP port 80 as the default port.
  B. It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.
  C. It uses TCP port 443 as the default port.
  D. It is a protocol used to provide security for a database server in an internal network.
  B. It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.
  C. It uses TCP port 443 as the default port.

• Question 119:

  Which of the following are examples of physical controls used to prevent unauthorized access to sensitive materials?

  A. Thermal alarm systems
  B. Closed circuit cameras
  C. Encryption
  D. Security Guards
  A. Thermal alarm systems
  B. Closed circuit cameras
  D. Security Guards

• Question 120:

  Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?

  A. Electronic Communications Privacy Act of 1986
  B. Wiretap Act
  C. Computer Fraud and Abuse Act
  D. Economic Espionage Act of 1996
  A. Electronic Communications Privacy Act of 1986