ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1041:

  Which of the following MUST be considered when developing business rules for a data loss prevention (DLP) solution?

  A. Data availability
  B. Data sensitivity
  C. Data ownership
  D. Data integrity
  B. Data sensitivity

• Question 1042:

  Which of the following has the responsibility of information technology (IT) governance?

  A. Chief Information Officer (CIO)
  B. Senior IT Management
  C. Board of Directors
  D. Chief Information Security Officer (CISO)
  A. Chief Information Officer (CIO)

• Question 1043:

  Which of the following is the PRIMARY benefit of implementing an Information Security Management System (ISMS)?

  A. Correlates system events to monitor and demonstrate system health
  B. Improves customer confidence by demonstrating adherence to best practices
  C. Increases employee education and awareness of security policies
  D. Ensures user compliance with computing standards
  B. Improves customer confidence by demonstrating adherence to best practices

• Question 1044:

  Intellectual property right are PRIMARILY concerned with which of the following?

  A. Right of the owner to enjoy their creation
  B. Owner's ability to maintain copyright
  C. Owner's ability to realize financial gain
  D. Right of the to control delivery method
  C. Owner's ability to realize financial gain

• Question 1045:

  In a large company, a system administrator needs to assign users access to files using Role Based Access Control (RBAC). Which option is an example of RBAC?

  A. Allowing users access to files based on their group membership
  B. Allowing users access to files based on username
  C. Allowing users access to files based on the users location at time of access
  D. Allowing users access to files based on the file type
  A. Allowing users access to files based on their group membership

• Question 1046:

  What is the MAIN feature that onion routing networks offer?

  A. Non-repudiation
  B. Traceability
  C. Anonymity
  D. Resilience
  C. Anonymity

• Question 1047:

  Which of the following Service Organization Control (SOC) report types should an organization request if they require a period of time report covering security and availability for a particular system?

  A. SOC 1 Type 1
  B. SOC 1 Type 2
  C. SOC 2 Type 1
  D. SOC 2 Type 2
  D. SOC 2 Type 2

• Question 1048:

  employee training, risk management, and data handling procedures and policies could be characterized as which type of security measure?

  A. Non-essential
  B. Management
  C. Preventative
  D. Administrative
  D. Administrative

• Question 1049:

  When is a Business Continuity Plan (BCP) considered to be valid?

  A. When it has been validated by the Business Continuity (BC) manager
  B. When it has been validated by the board of directors
  C. When it has been validated by all threat scenarios
  D. When it has been validated by realistic exercises
  D. When it has been validated by realistic exercises

• Question 1050:

  Which of the following features is MOST effective in mitigating against theft of data on a corporate mobile device Which has stolen?

  A. Whole device encryption with key escrow
  B. Mobile Device Management (MDMJ with device wipe
  C. Mobile device tracking with geolocation
  D. Virtual Private Network (VPN) with traffic encryption
  B. Mobile Device Management (MDMJ with device wipe