ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 991:

  In Disaster Recovery (DR) and Business Continuity (DC) training, which BEST describes a functional drill?

  A. a functional evacuation of personnel
  B. a specific test by response teams of individual emergency response functions
  C. an activation of the backup site
  D. a full-scale simulation of an emergency and the subsequent response functions.
  B. a specific test by response teams of individual emergency response functions

• Question 992:

  An organization seeks to use a cloud Identity and Access Management (IAM) provider whose protocols and data formats are incompatible with existing systems. Which of the following techniques addresses the compatibility issue?

  A. Require the cloud 1AM provider to use declarative security instead of programmatic authentication checks.
  B. Integrate a Web-Application Firewall (WAF) In reverie-proxy mode in front of the service provider.
  C. Apply Transport layer Security (TLS) to the cloud-based authentication checks.
  D. Install an on-premise Authentication Gateway Service (AGS) In front of the service provider.
  D. Install an on-premise Authentication Gateway Service (AGS) In front of the service provider.

• Question 993:

  An organization lacks a data retention policy. Of the following, who is the BEST person to consult for such requirement?

  A. Application Manager
  B. Database Administrator
  C. Privacy Officer
  D. Finance Manager
  C. Privacy Officer

• Question 994:

  How can an attacker exploit a stack overflow to execute arbitrary code?

  A. Modify a function's return address.
  B. Move the stack pointer
  C. Substitute elements in the stack.
  D. Alter the address of the stack.
  A. Modify a function's return address.

• Question 995:

  Which of the following virtual network configuration options is BEST to protect virtual machines (VM)?

  A. Traffic filtering
  B. Data encryption
  C. Data segmentation
  D. Traffic throttling
  D. Traffic throttling

• Question 996:

  Which of the following security objectives for industrial control systems (ICS) can be adapted to securing any Internet of Things (IoT) system?

  A. Prevent unauthorized modification of data.
  B. Restore the system after an incident.
  C. Detect security events and incidents.
  D. Protect individual components from exploitation
  D. Protect individual components from exploitation

• Question 997:

  Wi-Fi Protected Access 2 (WPA2) is a security protocol designed with which of the following security feature?

  A. Encryption control
  B. Malware attack protection
  C. Data availability
  D. Replay attack protection
  A. Encryption control

• Question 998:

  Which of the following is the MOST important goal of information asset valuation?

  A. Developing a consistent and uniform method of controlling access on information assets
  B. Developing appropriate access control policies and guidelines
  C. Assigning a financial value to an organization's information assets
  D. Determining the appropriate level of protection
  D. Determining the appropriate level of protection

• Question 999:

  An information security administrator wishes to block peer-to-peer (P2P) traffic over Hypertext Transfer Protocol (HTTP) tunnels. Which of the following layers of the Open Systems Interconnection (OSI) model requires inspection?

  A. Presentation
  B. Transport
  C. Session
  D. Application
  D. Application

• Question 1000:

  Which of the following is a common characteristic of privacy?

  A. Provision for maintaining an audit trail of access to the private data
  B. Notice to the subject of the existence of a database containing relevant credit card data
  C. Process for the subject to inspect and correct personal data on-site
  D. Database requirements for integration of privacy data
  A. Provision for maintaining an audit trail of access to the private data