ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1031:

  The adoption of an enterprise-wide Business Continuity (BC) program requires which of the following?

  A. Good communication throughout the organization
  B. A completed Business Impact Analysis (BIA)
  C. Formation of Disaster Recovery (DR) project team
  D. Well-documented information asset classification
  A. Good communication throughout the organization

• Question 1032:

  When developing an electronic health record (EHR) in the United States (US), which of the following would be the BEST source of information for any compliance requirements?

  A. World Health Organization (WHO)
  B. International Organization for Standardization (ISO)
  C. Health and Human Services (HHS)
  D. American Public Health Association (APHA)
  C. Health and Human Services (HHS)

• Question 1033:

  Which of the following MUST be done before a digital forensics investigator may acquire digital evidence?

  A. Inventory the digital evidence.
  B. Isolate the digital evidence.
  C. Verify that the investigator has the appropriate legal authority to proceed.
  D. Perform hashing to verify the integrity of the digital evidence.
  C. Verify that the investigator has the appropriate legal authority to proceed.

• Question 1034:

  Which of the following services can be deployed via a cloud service or on-premises to integrate with Identity as a Service (IDaaS) as the authoritative source of user identities?

  A. Directory
  B. User database
  C. Multi-factor authentication (MFA)
  D. Single sign-on (SSO)
  A. Directory

• Question 1035:

  Which of the following is a MAJOR concern when there is a need to preserve or retain information for future retrieval?

  A. Laws and regulations may change in the interim, making it unnecessary to retain the information
  B. The expense of retaining the information could become untenable for the organization
  C. The organization may lose track of the information and not dispose of it securely
  D. The technology needed to retrieve the information may not be available in the future
  C. The organization may lose track of the information and not dispose of it securely

• Question 1036:

  Which of the following BEST describes the responsibilities of data owner?

  A. Ensuing Quality and validation trough periodic audits for ongoing data integrity
  B. Determining the impact the information has on the mission of the organization
  C. Maintaining fundamental data availability, including data storage and archiving
  D. Ensuring accessibility to appropriate users, maintaining appropriate levels of data security
  D. Ensuring accessibility to appropriate users, maintaining appropriate levels of data security

• Question 1037:

  Which of the following factors contributes to the weakness of Wired Equivalent Privacy (WEP) protocol?

  A. WEP uses a small range Initialization Vector (IV)
  B. WEP uses Message Digest 5 (MD5)
  C. WEP uses Diffie-Hellman
  D. WEP does not use any Initialization Vector (IV)
  A. WEP uses a small range Initialization Vector (IV)

• Question 1038:

  Which type of disaster recovery plan (DRP) testing carries the MOST operational risk?

  A. Cutover
  B. Walkthrough
  C. Tabletop
  D. Parallel
  C. Tabletop

• Question 1039:

  A security engineer is required to integrate security into a software project that is implemented by small groups test quickly, continuously, and independently develop, test, and deploy code to the cloud. The engineer will MOST likely integrate with which software development process'

  A. Service-oriented architecture (SOA)
  B. Spiral Methodology
  C. Structured Waterfall Programming Development
  D. Devops Integrated Product Team (IPT)
  D. Devops Integrated Product Team (IPT)

• Question 1040:

  Which of the following BEST provides for non-repudiation od user account actions?

  A. Centralized authentication system
  B. File auditing system
  C. Managed Intrusion Detection System (IDS)
  D. Centralized logging system
  D. Centralized logging system