ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1101:

  How is protection for hypervisor host and software administration functions BEST achieved?

  A. Enforce network controls using a host-based firewall.
  B. Deploy the management interface in a dedicated virtual network segment.
  C. The management traffic pathway should have separate physical network interface cards (NIC) and network.
  D. Deny permissions to specific virtual machines (VM) groups and objects.
  B. Deploy the management interface in a dedicated virtual network segment.

• Question 1102:

  When dealing with shared, privileged accounts, especially those for emergencies, what is the BEST way to assure non-repudiation of logs?

  A. Implement a password vaulting solution
  B. Lock passwords in tamperproof envelopes in a safe
  C. Regularly change the passwords
  D. Implement a strict access control policy
  D. Implement a strict access control policy

• Question 1103:

  What high Availability (HA) option of database allows multiple clients to access multiple database servers simultaneously?

  A. Non-Structured Query Language (NoSQL) database
  B. Relational database
  C. Shadow database
  D. Replicated database
  C. Shadow database

• Question 1104:

  Which of the following is a strategy of grouping requirements in developing a Security Test and Evaluation (STandE)?

  A. Tactical, strategic, and financial
  B. Management, operational, and technical
  C. Documentation, observation, and manual
  D. Standards, policies, and procedures
  B. Management, operational, and technical

• Question 1105:

  Which of the following steps should be performed FIRST when purchasing Commercial Off-The-Shelf (COTS) software?

  A. undergo a security assessment as part of authorization process
  B. establish a risk management strategy
  C. harden the hosting server, and perform hosting and application vulnerability scans
  D. establish policies and procedures on system and services acquisition
  D. establish policies and procedures on system and services acquisition

• Question 1106:

  One of Canada’s leading pharmaceutical firms recently hired a Chief Data Officer (CDO) to oversee its data privacy program. The CDO has discovered the firm’s marketing department has been collecting information from individuals without their knowledge and consent via the company website. Which of the following privacy regulations should concern the CDO regarding this practice?

  A. The Health Insurance Portability and Accountability Act (HIPAA)
  B. The Privacy Act of 1974
  C. The Fair Information Practice Principles (FIPPs)
  D. The Personal Information Protection and Electronic Documents Act (PIPEDA)
  D. The Personal Information Protection and Electronic Documents Act (PIPEDA)

• Question 1107:

  A global organization wants to implement hardware tokens as part of a multifactor authentication solution for remote access. The PRIMARY advantage of this implementation is

  A. the scalability of token enrollment.
  B. increased accountability of end users.
  C. it protects against unauthorized access.
  D. it simplifies user access administration.
  C. it protects against unauthorized access.

• Question 1108:

  What are the roles within a scrum methodology?

  A. Scrum master, retirements manager, and development team
  B. System owner, scrum master, and development team
  C. Scrum master, quality assurance team, and scrum team
  D. Product owner, scrum master, and scrum team
  D. Product owner, scrum master, and scrum team

• Question 1109:

  Which of the following is the MOST secure protocol for zremote command access to the firewall?

  A. Secure Shell (SSH)
  B. Trivial File Transfer Protocol (TFTP)
  C. Hypertext Transfer Protocol Secure (HTTPS)
  D. Simple Network Management Protocol (SNMP) v1
  A. Secure Shell (SSH)

• Question 1110:

  An organization outgrew its internal data center and is evaluating third-party hosting facilities. In this evaluation, which of the following is a PRIMARY factor for selection?

  A. Facility provides an acceptable level of risk
  B. Facility provides disaster recovery (DR) services
  C. Facility provides the most cost-effective solution
  D. Facility has physical access protection measures
  A. Facility provides an acceptable level of risk