ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1071:

  While investigating a malicious event, only six days of audit logs from the last month were available. What policy should be updated to address this problem?

  A. Retention
  B. Reporting
  C. Recovery
  D. Remediation
  A. Retention

• Question 1072:

  An analysis finds unusual activity coming from a computer that was thrown away several months prior, which of the following steps ensure the proper removal of the system?

  A. Deactivation
  B. Decommission
  C. Deploy
  D. Procure
  B. Decommission

• Question 1073:

  Which of the following needs to be taken into account when assessing vulnerability?

  A. Risk identification and validation
  B. Threat mapping
  C. Risk acceptance criteria
  D. Safeguard selection
  A. Risk identification and validation

• Question 1074:

  The Chief Information Security Officer (CISO) is concerned about business application availability. The organization was recently subject to a ransomware attack that resulted in the unavailability of applications and services for 10 working days that required paper-based running of all main business processes. There are now aggressive plans to enhance the Recovery Time Objective (RTO) and cater for more frequent data captures. Which of the following solutions should be implemented to fully comply to the new business requirements?

  A. Virtualization
  B. Antivirus
  C. Process isolation
  D. Host-based intrusion prevention system (HIPS)
  A. Virtualization

• Question 1075:

  Which of the following restricts the ability of an individual to carry out all the steps of a particular process?

  A. Job rotation
  B. Separation of duties
  C. Least privilege
  D. Mandatory vacations
  B. Separation of duties

• Question 1076:

  A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS). Which of the following factors leads the company to choose an IDaaS as their solution?

  A. In-house development provides more control.
  B. In-house team lacks resources to support an on-premise solution.
  C. Third-party solutions are inherently more secure.
  D. Third-party solutions are known for transferring the risk to the vendor.
  B. In-house team lacks resources to support an on-premise solution.

• Question 1077:

  Which process compares its results against a standard to determine whether the results meet the standard?

  A. Penetration test
  B. Security audit
  C. Security assessment
  D. Functional review
  B. Security audit

• Question 1078:

  Which of the following is a network intrusion detection technique?

  A. Statistical anomaly
  B. Perimeter intrusion
  C. Port scanning
  D. Network spoofing
  A. Statistical anomaly

• Question 1079:

  A developer is creating an application that requires secure logging of all user activity. What is the BEST permission the developer should assign to the log file to ensure requirements are met?

  A. Read
  B. Execute
  C. Write
  D. Append
  D. Append

• Question 1080:

  Which of the following MUST a security professional do in order to quantify the value of a security program to organization management?

  A. Report using metrics.
  B. Rank priorities as high, medium, or low.
  C. Communicate compliance obstacles.
  D. Report en employee activities
  A. Report using metrics.