ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1081:

  Upon commencement of an audit within an organization, which of the following actions is MOST important for the auditor(s) to take?

  A. Understand circumstances which may delay the overall audit timelines.
  B. Review all prior audit results to remove all areas of potential concern from the audit scope.
  C. Meet with stakeholders to review methodology, people to be interviewed, and audit scope.
  D. Meet with stakeholders to understand which types of audits have been completed.
  C. Meet with stakeholders to review methodology, people to be interviewed, and audit scope.

• Question 1082:

  The Chief Executive Officer (CEO) wants to implement an internal audit of the company's information security posture. The CEO wants to avoid any bias in the audit process; therefore, has assigned the Sales Director to conduct the audit. After significant interaction over a period of weeks the audit concludes that the company's policies and procedures are sufficient, robust and well established. The CEO then moves on to engage an external penetration testing company in order to showcase the organization's robust information security stance. This exercise reveals significant failings in several critical security controls and shows that the incident response processes remain undocumented. What is the MOST likely reason for this disparity in the results of the audit and the external penetration test?

  A. The external penetration testing company used custom zero-day attacks that could not have been predicted.
  B. The information technology (IT) and governance teams have failed to disclose relevant information to the internal audit team leading to an incomplete assessment being formulated.
  C. The scope of the penetration test exercise and the internal audit were significantly different.
  D. The audit team lacked the technical experience and training to make insightful and objective assessments of the data provided to them.
  C. The scope of the penetration test exercise and the internal audit were significantly different.

• Question 1083:

  What type of risk is related to the sequences of value-adding and managerial activities undertaken in an organization?

  A. Demand risk
  B. Process risk
  C. Control risk
  D. Supply risk
  B. Process risk

• Question 1084:

  Which of the following is the BEST way to determine the success of a patch management process?

  A. Analysis and impact assessment
  B. Auditing and assessment
  C. Configuration management (CM)
  D. Change management
  A. Analysis and impact assessment

• Question 1085:

  Which of the following is MOST important when deploying digital certificates?

  A. Validate compliance with X.509 digital certificate standards
  B. Establish a certificate life cycle management framework
  C. Use a third-party Certificate Authority (CA)
  D. Use no less than 256-bit strength encryption when creating a certificate
  B. Establish a certificate life cycle management framework

• Question 1086:

  A hacker can use a lockout capability to start which of the following attacks?

  A. Denial of service (DoS)
  B. Dictionary
  C. Ping flood
  D. Man-in-the-middle (MITM)
  A. Denial of service (DoS)

• Question 1087:

  Which of the following is the strongest physical access control?

  A. Biometrics and badge reader
  B. Biometrics, a password, and personal identification number (PIN)
  C. Individual password for each user
  D. Biometrics, a password, and badge reader
  D. Biometrics, a password, and badge reader

• Question 1088:

  What is the BEST way to establish identity over the internet?

  A. Challenge Handshake Authentication Protocol (CHAP) and strong passwords
  B. Internet Mail Access Protocol (IMAP) with Triple Data Encryption Standard (3DES)
  C. Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens
  D. Remote user authentication via Simple Object Access Protocol (SOAP)
  C. Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens

• Question 1089:

  Which of the following types of data would be MOST difficult to detect by a forensic examiner?

  A. Slack space data
  B. Steganographic data
  C. File system deleted data
  D. Data stored with a different file type extension
  B. Steganographic data

• Question 1090:

  What is a common mistake in records retention?

  A. Having the organization legal department create a retention policy
  B. Adopting a retention policy based on applicable organization requirements
  C. Having the Human Resource (HR) department create a retention policy
  D. Adopting a retention policy with the longest requirement period
  D. Adopting a retention policy with the longest requirement period