ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1001:

  When designing on Occupent Emergency plan (OEP) for United states (US) Federal government facilities, what factor must be considered?

  A. location of emergency exits in building
  B. Average age of the agency employees
  C. Geographical location and structural design of building
  D. Federal agency for which plan is being drafted
  A. location of emergency exits in building

• Question 1002:

  Which of the following techniques evaluates the secure design principles of network OF software architectures?

  A. Risk modeling
  B. Threat modeling
  C. Fuzzing
  D. Waterfall method
  B. Threat modeling

• Question 1003:

  Which of the following routing protocols is used to exchange route information between public autonomous systems?

  A. OSPF
  B. BGP
  C. EIGRP
  D. RIP
  B. BGP

• Question 1004:

  Which of the following is the weakest form of protection for an application that handles personally identifiable information (PII)?

  A. Multifactor authentication
  B. Ron Rivest Cipher A (RC4) encryption
  C. Transport Layer Security (US)
  D. Security Assertion Markup Language (SAML)
  B. Ron Rivest Cipher A (RC4) encryption

• Question 1005:

  Which of the following Disaster Recovery (DR) sites is the MOST difficult to test?

  A. Hot site
  B. Cold site
  C. Warm site
  D. Mobile site
  B. Cold site

• Question 1006:

  The MAIN reason an organization conducts a security authorization process is to

  A. force the organization to make conscious risk decisions.
  B. assure the effectiveness of security controls.
  C. assure the correct security organization exists.
  D. force the organization to enlist management support.
  A. force the organization to make conscious risk decisions.

• Question 1007:

  Which element of software supply chain management has the GREATEST security risk to organizations?

  A. New software development skills are hard to acquire.
  B. Unsupported libraries are often used.
  C. Applications with multiple contributors are difficult to evaluate.
  D. Vulnerabilities are difficult to detect.
  B. Unsupported libraries are often used.

• Question 1008:

  Which of the following describes the concept of a Single Sign-On (SSO) system?

  A. Users are authenticated to one system at a time.
  B. Users are identified to multiple systems with several credentials.
  C. Users are authenticated to multiple systems with one login.
  D. Only one user is using the system at a time.
  C. Users are authenticated to multiple systems with one login.

• Question 1009:

  Which inherent password weakness does a One Time Password (OTP) generator overcome?

  A. Static passwords must be changed frequently.
  B. Static passwords are too predictable.
  C. Static passwords are difficult to generate.
  D. Static passwords are easily disclosed.
  D. Static passwords are easily disclosed.

• Question 1010:

  Which of the following initiates the systems recovery phase of a disaster recovery plan?

  A. Issuing a formal disaster declaration
  B. Activating the organization's hot site
  C. Evacuating the disaster site
  D. Assessing the extent of damage following the disaster
  A. Issuing a formal disaster declaration