ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1011:

  Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

  A. Implement processes for automated removal of access for terminated employees.
  B. Delete employee network and system IDs upon termination.
  C. Manually remove terminated employee user-access to all systems and applications.
  D. Disable terminated employee network ID to remove all access.
  B. Delete employee network and system IDs upon termination.

• Question 1012:

  Which of the following methods can be used to achieve confidentiality and integrity for data in transit?

  A. Multiprotocol Label Switching (MPLS)
  B. Internet Protocol Security (IPSec)
  C. Federated identity management
  D. Multi-factor authentication
  B. Internet Protocol Security (IPSec)

• Question 1013:

  How is it possible to extract private keys securely stored on a cryptographic smartcard?

  A. Bluebugging
  B. Focused ion-beam
  C. Bluejacking
  D. Power analysis
  D. Power analysis

• Question 1014:

  If virus infection is suspected, which of the following is the FIRST step for the user to take?

  A. Unplug the computer from the network.
  B. Save the opened files and shutdown the computer.
  C. Report the incident to service desk.
  D. Update the antivirus to the latest version.
  C. Report the incident to service desk.

• Question 1015:

  An organization has doubled in size due to a rapid market share increase. The size of the Information Technology (IT) staff has maintained pace with this growth. The organization hires several contractors whose onsite time is limited. The IT department has pushed its limits building servers and rolling out workstations and has a backlog of account management requests.

  Which contract is BEST in offloading the task from the IT staff?

  A. Platform as a Service (PaaS)
  B. Identity as a Service (IDaaS)
  C. Desktop as a Service (DaaS)
  D. Software as a Service (SaaS)
  B. Identity as a Service (IDaaS)

• Question 1016:

  Which of the following languages supports a modular program structure and was designed for military and real-time systems?

  A. C++
  B. Personal Home Page (PHP)
  C. Ada
  D. Java
  C. Ada

• Question 1017:

  Assessing a third party's risk by counting bugs in the code may not be the best measure of an attack surface within the supply chain. Which of the following is LEAST associated with the attack surface?

  A. Input protocols
  B. Target processes
  C. Error messages
  D. Access rights
  C. Error messages

• Question 1018:

  A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use to detect the exact break point of the fiber link?

  A. OTDR
  B. Tone generator
  C. Fusion splicer
  D. Cable tester
  E. PoE injector
  A. OTDR

• Question 1019:

  Which of the following is the PRIMARY security consideration for how an organization should handle Information Technology (IT) assets?

  A. The monetary value of the asset
  B. The controls implemented on the asset
  C. The physical form factor of the asset
  D. The classification of the data on the asset
  D. The classification of the data on the asset

• Question 1020:

  Without proper signal protection, embedded systems may be prone to which type of attack?

  A. Brute force
  B. Tampering
  C. Information disclosure
  D. Denial of Service (DoS)
  C. Information disclosure