ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1161:

  Which of the following is a MAJOR consideration in implementing a Voice over IP (VoIP) network?

  A. Use of a unified messaging.
  B. Use of separation for the voice network.
  C. Use of Network Access Control (NAC) on switches.
  D. Use of Request for Comments (RFC) 1918 addressing.
  B. Use of separation for the voice network.

• Question 1162:

  What Hypertext Transfer Protocol (HTTP) response header can be used to disable the execution of inline JavaScript and the execution of eval()-type functions?

  A. Strict-Transport-Security
  B. X-XSS-Protection
  C. X-Frame-Options
  D. Content-Security-Policy
  D. Content-Security-Policy

• Question 1163:

  When designing a business continuity plan (BCP), what is the formula to determine the Maximum Tolerable Downtime (MTD)?

  A. Annual Loss Expectancy (ALE) + Work Recovery Time (WRT)
  B. Business impact analysis (BIA) + Recovery Point Objective (RPO)
  C. Recovery Time Objective (RTO) + Work Recovery Time (WRT)
  D. Estimated Maximum Loss (EML) + Recovery Time Objective (RTO)
  C. Recovery Time Objective (RTO) + Work Recovery Time (WRT)

• Question 1164:

  An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which of the following is the BEST resolution?

  A. Implement port security on the switch ports for the printers.
  B. Implement a virtual local area network (VLAN) for the printers.
  C. Do nothing; IEEE 802.1x is irrelevant to printers.
  D. Install an IEEE 802. 1x bridge for the printers.
  A. Implement port security on the switch ports for the printers.

• Question 1165:

  What technique BEST describes antivirus software that detects viruses by watching anomalous behavior?

  A. Signature
  B. Inference
  C. Induction
  D. Heuristic
  D. Heuristic

• Question 1166:

  The Chief Information Officer (CIO) has decided that as part of business modernization efforts the organization will move towards a cloud architecture. All business-critical data will be migrated to either internal or external cloud services within the next two years. The CIO has a PRIMARY obligation to work with personnel in which role in order to ensure proper protection of data during and after the cloud migration?

  A. Information owner
  B. General Counsel
  C. Chief Information Security Officer (CISO)
  D. Chief Security Officer (CSO)
  A. Information owner

• Question 1167:

  A security professional has been asked to evaluate the options for the location of a new data center within a multifloor building. Concerns for the data center include emanations and physical access controls. Which of the following is the BEST location?

  A. On the top floor
  B. In the basement
  C. In the core of the building
  D. In an exterior room with windows
  C. In the core of the building

• Question 1168:

  Which of the following is the BEST way to mitigate circumvention of access controls?

  A. Multi-layer access controls working in isolation
  B. Multi-vendor approach to technology implementation
  C. Multi-layer firewall architecture with Internet Protocol (IP) filtering enabled
  D. Multi-layer access controls with diversification of technologies
  D. Multi-layer access controls with diversification of technologies

• Question 1169:

  Which of the following practices provides the development of security and identification of threats in designing software?

  A. Stakeholder review
  B. Requirements review
  C. Penetration testing
  D. Threat modeling
  D. Threat modeling

• Question 1170:

  In an organization where Network Access Control (NAC) has been deployed, a device trying to connect to the network is being placed into an isolated domain. What could be done on this device in order to obtain proper connectivity?

  A. Connect the device to another network jack
  B. Apply remediation's according to security requirements
  C. Apply Operating System (OS) patches
  D. Change the Message Authentication Code (MAC) address of the network interface
  B. Apply remediation's according to security requirements