ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1051:

  Which of the following access control models is MOST restrictive?

  A. Discretionary Access Control (DAC)
  B. Mandatory Access Control (MAC)
  C. Role Based Access Control (RBAC)
  D. Rule based access control
  B. Mandatory Access Control (MAC)

• Question 1052:

  Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?

  A. Senior management
  B. Information security department
  C. Audit committee
  D. All users
  C. Audit committee

• Question 1053:

  Which one of the following affects the classification of data?

  A. Passage of time
  B. Assigned security label
  C. Multilevel Security (MLS) architecture
  D. Minimum query size
  A. Passage of time

• Question 1054:

  What Is the GREATEST challenge of an agent-based patch management solution?

  A. Time to gather vulnerability information about the computers in the program
  B. The significant amount of network bandwidth while scanning computers
  C. The consistency of distributing patches to each participating computer
  D. Requires that software be installed, running, and managed on all participating computers
  D. Requires that software be installed, running, and managed on all participating computers

• Question 1055:

  Proven application security principles include which of the following?

  A. Minimizing attack surface area
  B. Hardening the network perimeter
  C. Accepting infrastructure security controls
  D. Developing independent modules
  A. Minimizing attack surface area

• Question 1056:

  Two computers, each with a single connection on the same physical 10 gigabit Ethernet network segment, need to communicate with each other. The first machine has a single Internet Protocol (IP) Classless Inter-Domain Routing (CIDR) address of 192.168.1.3/30 and the second machine has an IP/CIDR address 192.168.1.6/30. Which of the following is correct?

  A. Since each computer is on a different layer 3 network, traffic between the computers must be processed by a network bridge in order to communicate.
  B. Since each computer is on the same layer 3 network, traffic between the computers may be processed by a network bridge in order to communicate.
  C. Since each computer is on the same layer 3 network, traffic between the computers may be processed by a network router in order to communicate.
  D. Since each computer is on a different layer 3 network, traffic between the computers must be processed by a network router in order to communicate.
  A. Since each computer is on a different layer 3 network, traffic between the computers must be processed by a network bridge in order to communicate.

• Question 1057:

  How does identity as a service (IDaaS) provide an easy mechanism for integrating identity service into individual applications with minimal development effort?

  A. By allowing the identification logic and storage of an identity's attributes to be maintained externally
  B. By integrating internal provisioning procedures with external authentication processes
  C. By allowing for internal provisioning of user accounts
  D. By keeping all user information in easily accessible cloud repositories
  D. By keeping all user information in easily accessible cloud repositories

• Question 1058:

  Which of the following is the PRIMARY issue when analyzing detailed log information?

  A. Logs may be unavailable when required
  B. Timely review of the data is potentially difficult
  C. Most systems and applications do not support logging
  D. Logs do not provide sufficient details of system and individual activities
  B. Timely review of the data is potentially difficult

• Question 1059:

  An attacker is able to remain indefinitely logged into a exploiting to remain on the web service?

  A. Alert management
  B. Password management
  C. Session management
  D. Identity management (IM)
  C. Session management

• Question 1060:

  Which media sanitization methods should be used for data with a high security categorization?

  A. Clear or destroy
  B. Clear or purge
  C. Destroy or delete
  D. Purge or destroy
  D. Purge or destroy