ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1061:

  A hospital's building controls system monitors and operates the environmental equipment to maintain a safe and comfortable environment. Which of the following could be used to minimize the risk of utility supply interruption?

  A. Digital devices that can turn equipment off and continuously cycle rapidly in order to increase supplies and conceal activity on the hospital network
  B. Standardized building controls system software with high connectivity to hospital networks
  C. Lock out maintenance personnel from the building controls system access that can impact critical utility supplies
  D. Digital protection and control devices capable of minimizing the adverse impact to critical utility
  D. Digital protection and control devices capable of minimizing the adverse impact to critical utility

• Question 1062:

  Which of the following is the reason that transposition ciphers are easily recognizable?

  A. Key
  B. Block
  C. Stream
  D. Character
  D. Character

• Question 1063:

  In the last 15 years a company has experienced three electrical failures. The cost associated with each failure is listed below. Which of the following would be a reasonable annual loss expectation?

  

  A. 140,000
  B. 3,500
  C. 350,000
  D. 14,000
  B. 3,500

• Question 1064:

  What are the three key benefits that application developers should derive from the northbound application programming interface (API) of software defined networking (SDN)?

  A. Familiar syntax, abstraction of network topology, and definition of network protocols
  B. Network syntax, abstraction of network flow, and abstraction of network protocols
  C. Network syntax, abstraction of network commands, and abstraction of network protocols
  D. Familiar syntax, abstraction of network topology, and abstraction of network protocols
  A. Familiar syntax, abstraction of network topology, and definition of network protocols

• Question 1065:

  Which security service is served by the process of encryption plaintext with the sender's private key and decrypting cipher text with the sender's public key?

  A. Confidentiality
  B. Integrity
  C. Identification
  D. Availability
  B. Integrity

• Question 1066:

  Which of the following activities should a forensic examiner perform FIRST when determining the priority of digital evidence collection at a crime scene?

  A. Gather physical evidence,
  B. Establish order of volatility.
  C. Assign responsibilities to personnel on the scene.
  D. Establish a list of files to examine.
  C. Assign responsibilities to personnel on the scene.

• Question 1067:

  An organization is found lacking the ability to properly establish performance indicators for its Web hosting solution dring an audit. What would be the MOST probable cause?

  A. Improper deployment of the service-Oriented Architecture (SOA)
  B. Insufficient service level agreement (SLA)
  C. Inadequate cost modeling
  D. Absence of a business Intelligence (BI) solution
  B. Insufficient service level agreement (SLA)

• Question 1068:

  An organization that has achieved a Capability Maturity Model Integration (CMMI) level of 4 has done which of the following?

  A. Achieved optimized process performance
  B. Achieved predictable process performance
  C. Addressed the causes of common process variance
  D. Addressed continuous innovative process improvement
  A. Achieved optimized process performance

• Question 1069:

  Activity to baseline, tailor, and scope security controls tikes place dring which National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) step?

  A. Authorize IS.
  B. Assess security controls.
  C. Categorize Information system (IS).
  D. Select security controls.
  D. Select security controls.

• Question 1070:

  Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

  A. Peer authentication
  B. Payload data encryption
  C. Session encryption
  D. Hashing digest
  C. Session encryption