ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1151:

  The Industrial Control System (ICS) Computer Emergency Response Team (CERT) has released an alert regarding ICS-focused malware specifically propagating through Windows-based business networks. Technicians at a local water utility note that their dams, canals, and locks controlled by an internal Supervisory Control and Data Acquisition (SCADA) system have been malfunctioning. A digital forensics professional is consulted in the Incident Response (IR) and recovery. Which of the following is the MOST challenging aspect of this investigation?

  A. SCADA network latency
  B. Group policy implementation
  C. Volatility of data
  D. Physical access to the system
  C. Volatility of data

• Question 1152:

  Software Code signing is used as a method of verifying what security concept?

  A. Integrity
  B. Confidentiality
  C. Availability
  D. Access Control
  A. Integrity

• Question 1153:

  Which of the following is the BEST approach to implement multiple servers on a virtual system?

  A. Implement multiple functions per virtual server and apply the same security configuration for each virtual server.
  B. Implement one primary function per virtual server and apply high security configuration on the host operating system.
  C. Implement one primary function per virtual server and apply individual security configuration for each virtual server.
  D. Implement multiple functions within the same virtual server and apply individual security configurations to each function.
  C. Implement one primary function per virtual server and apply individual security configuration for each virtual server.

• Question 1154:

  An organization with divisions in the United States (US) and the United Kingdom (UK) processes data comprised of personal information belonging to subjects living in the European Union (EU) and in the US. Which data MUST be handled according to the privacy protections of General Data Protection Regulation (GDPR)?

  A. Only the EU citizens' data
  B. Only the EU residents' data
  C. Only the UK citizens' data
  D. Only data processed in the UK
  A. Only the EU citizens' data

• Question 1155:

  An organization has a short-term agreement with a public Cloud Service Provider (CSP). Which of the following BEST protects sensitive data once the agreement expires and the assets are reused?

  A. Recommend that the business data owners use continuous monitoring and analysis of applications to prevent data loss
  B. Recommend that the business data owners use internal encryption keys for data-at-rest and data-in-transit to the storage environment
  C. Use a contractual agreement to ensure the CSP wipes and data from the storage environment
  D. Use a National Institute of Standards and Technology (NIST) recommendation for wiping data on the storage environment
  D. Use a National Institute of Standards and Technology (NIST) recommendation for wiping data on the storage environment

• Question 1156:

  In which process MUST security be considered during the acquisition of new software?

  A. Contract negotiation
  B. Request for proposal (RFP)
  C. Implementation
  D. Vendor selection
  B. Request for proposal (RFP)

• Question 1157:

  Wi-Fi Protected Access 2 (WPA2) provides users with a higher level of assurance that their data will remain protected by using which protocol?

  A. Secure Shell (SSH)
  B. Internet Protocol Security (IPsec)
  C. Secure Sockets Layer (SSL)
  D. Extensible Authentication Protocol (EAP)
  A. Secure Shell (SSH)

• Question 1158:

  A business has implemented Payment Card Industry Data Security Standard (PCI-DSS) compliant handheld credit card processing on their Wireless Local Area Network (WLAN) topology. The network team partitioned the WLAN to create a private segment for credit card processing using a firewall to control device access and route traffic to the card processor on the Internet.

  What components are in the scope of PCI-DSS?

  A. The entire enterprise network infrastructure.
  B. The handheld devices, wireless access points and border gateway.
  C. The end devices, wireless access points, WLAN, switches, management console, and firewall.
  D. The end devices, wireless access points, WLAN, switches, management console, and Internet
  C. The end devices, wireless access points, WLAN, switches, management console, and firewall.

• Question 1159:

  The restoration priorities of a Disaster Recovery Plan (DRP) are based on which of the following documents?

  A. Service Level Agreement (SLA)
  B. Business Continuity Plan (BCP)
  C. Business Impact Analysis (BIA)
  D. Crisis management plan
  B. Business Continuity Plan (BCP)

• Question 1160:

  What is the benefit of using Network Admission Control (NAC)?

  A. Operating system (OS) versions can be validated prior to allowing network access.
  B. NAC supports validation of the endpoint's security posture prior to allowing the session to go into an authorized state.
  C. NAC can require the use of certificates, passwords, or a combination of both before allowing network admission.
  D. NAC only supports Windows operating systems (OS).
  B. NAC supports validation of the endpoint's security posture prior to allowing the session to go into an authorized state.