ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1181:

  Which of the following best describes the purpose of debugging programs?

  A. To generate random data that can be used to test programs before implementing them
  B. To ensure that program coding flaws are detected and corrected.
  C. To protect, during the programming phase, valid changes from being overwritten by other changes.
  D. To compare source code versions before transferring to the test environment.
  B. To ensure that program coding flaws are detected and corrected.

• Question 1182:

  Extensible Authentication Protocol-Message Digest 5 (EAP-MD5) only provides which of the following?

  A. Mutual authentication
  B. Server authentication
  C. User authentication
  D. Streaming ciphertext data
  B. Server authentication

• Question 1183:

  A subscription service which provides power, climate control, raised flooring, and telephone wiring but NOT the computer and peripheral equipment is BEST described as a:

  A. warm site.
  B. reciprocal site.
  C. sicold site.
  D. hot site.
  C. sicold site.

• Question 1184:

  What is a warn site when conducting Business continuity planning (BCP)

  A. A location, other than the normal facility, used to process data on a daily basis
  B. An area partially equipped with equipment and resources to recover business functions
  C. A place void of any resources or equipment except air conditioning and raised flooring
  D. An alternate facility that allows for Immediate cutover to enable continuation of business functions
  B. An area partially equipped with equipment and resources to recover business functions

• Question 1185:

  Mandatory Access Controls (MAC) are based on:

  A. security classification and security clearance
  B. data segmentation and data classification
  C. data labels and user access permissions
  D. user roles and data encryption
  A. security classification and security clearance

• Question 1186:

  Which of the following is an open standard for exchanging authentication and authorization data between parties?

  A. Wired markup language
  B. Hypertext Markup Language (HTML)
  C. Extensible Markup Language (XML)
  D. Security Assertion Markup Language (SAML)
  D. Security Assertion Markup Language (SAML)

• Question 1187:

  A security practitioner has been tasked with establishing organizational asset handling procedures. What should be considered that would have the GRFATEST impact to the development of these procedures?

  A. Media handling procedures
  B. User roles and responsibilities
  C. Acceptable Use Policy (ALP)
  D. Information classification scheme
  D. Information classification scheme

• Question 1188:

  Which of the following is the MOST important rule for digital investigations?

  A. Ensure event logs are rotated.
  B. Ensure original data is never modified.
  C. Ensure individual privacy is protected.
  D. Ensure systems are powered on.
  C. Ensure individual privacy is protected.

• Question 1189:

  Which of the following is the BEST type of authentication and encryption for a Secure Shell (SSH) implementation when network traffic traverses between a host and an infrastructure device?

  A. Lightweight Directory Access Protocol (LDAP)
  B. Public-key cryptography
  C. Remote Authentication Dial-In User Service (RADIUS)
  D. Private-key cryptography
  B. Public-key cryptography

• Question 1190:

  A large corporation is locking for a solution to automate access based on where on request is coming from, who the user is, what device they are connecting with, and what time of day they are attempting this access. What type of solution would suit their needs?

  A. Discretionary Access Control (DAC)
  B. Role Based Access Control (RBAC)
  C. Mandater Access Control (MAC)
  D. Network Access Control (NAC)
  D. Network Access Control (NAC)