ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1141:

  In software development, which of the following entities normally signs the code to protect the code integrity?

  A. The organization developing the code
  B. The quality control group
  C. The data owner
  D. The developer
  D. The developer

• Question 1142:

  Refer to the information below to answer the question.

  A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of

  several critical, customer-based applications used by the organization.

  What additional considerations are there if the third party is located in a different country?

  A. The organizational structure of the third party and how it may impact timelines within the organization
  B. The ability of the third party to respond to the organization in a timely manner and with accurate information
  C. The effects of transborder data flows and customer expectations regarding the storage or processing of their data
  D. The quantity of data that must be provided to the third party and how it is to be used
  C. The effects of transborder data flows and customer expectations regarding the storage or processing of their data

• Question 1143:

  In a quarterly system access review, an active privileged account was discovered that did not exist in the prior review on the production system. The account was created one hour after the previous access review. Which of the following is the BEST option to reduce overall risk in addition to quarterly access reviews?

  A. Increase logging levels.
  B. Implement bi-annual reviews.
  C. Create policies for system access.
  D. Implement and review risk-based alerts.
  D. Implement and review risk-based alerts.

• Question 1144:

  Why do certificate Authorities (CA) add value to the security of electronic commerce transactions?

  A. They maintain the certificate revocation list.
  B. They maintain the private keys of transition parties.
  C. They verify the transaction parties' private keys.
  D. They provide a secure communication enamel to the transaction parties.
  D. They provide a secure communication enamel to the transaction parties.

• Question 1145:

  An attack utilizing social engineering and a malicious Uniform Resource Locator (URL) link to take advantage of a victim's existing browser session with a web application is an example of which of the following types of attack?

  A. Cross-Site Scripting (XSS)
  B. Cross-site request forgery (CSRF)
  C. Injection
  D. Click jacking
  B. Cross-site request forgery (CSRF)

• Question 1146:

  What is the BEST approach for maintaining ethics when a security professional is unfamiliar with the culture of a country and is asked to perform a questionable task?

  A. Exercise due diligence when deciding to circumvent host government requests
  B. Become familiar with the means in which the code of ethics is applied and considered
  C. Complete the assignment based on the customer's wishes
  D. Execute according to the professional's comfort level with the code of ethics
  B. Become familiar with the means in which the code of ethics is applied and considered

• Question 1147:

  Which of the following is the MOST important first step in preparing for a security audit?

  A. Identify team members.
  B. Define the scope.
  C. Notify system administrators.
  D. Collect evidence.
  B. Define the scope.

• Question 1148:

  What would be the BEST action to take in a situation where collected evidence was left unattended overnight in an unlocked vehicle?

  A. Report the matter to the local police authorities.
  B. Move evidence to a climate-controlled environment.
  C. Re-inventory the evidence and provide it to the evidence custodian.
  D. Immediately report the matter to the case supervisor.
  D. Immediately report the matter to the case supervisor.

• Question 1149:

  Which change management role is responsible for the overall success of the project and supporting the change throughout the organization?

  A. Change driver
  B. Change implementer
  C. Program sponsor
  D. Project manager
  D. Project manager

• Question 1150:

  Which of the following is a unique feature of attribute-based access control (ABAC)?

  A. A user is granted access to a system based on group affinity.
  B. A user is granted access to a system with biometric authentication.
  C. A user is granted access to a system at a particular time of day.
  D. A user is granted access to a system based on username and password.
  C. A user is granted access to a system at a particular time of day.