ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 111:

  What is the correct order of execution for security architecture?

  A. Governance, strategy and program management, project delivery, operations
  B. Strategy and program management, governance, project delivery, operations
  C. Governance, strategy and program management, operations, project delivery
  D. Strategy and program management, project delivery, governance, operations
  A. Governance, strategy and program management, project delivery, operations

• Question 112:

  Which of the following is an effective method for avoiding magnetic media data remanence?

  A. Degaussing
  B. Encryption
  C. Data Loss Prevention (DLP)
  D. Authentication
  A. Degaussing

• Question 113:

  Which of the following MUST be scalable to address security concerns raised by the integration of third-party identity services?

  A. Mandatory Access Controls (MAC)
  B. Enterprise security architecture
  C. Enterprise security procedures
  D. Role Based Access Controls (RBAC)
  B. Enterprise security architecture

• Question 114:

  Which of the following is a common term for log reviews, synthetic transactions, and code reviews?

  A. Security control testing
  B. Application development
  C. Spiral development functional testing
  D. DevOps Integrated Product Team (IPT) development
  A. Security control testing

• Question 115:

  An organization needs a general purpose document to prove that its internal controls properly address security, availability, processing integrity, confidentiality or privacy risks. Which of the following reports is required?

  A. A Service Organization Control (SOC) 3 report
  B. The Statement on Standards for Attestation Engagements No. 18 (SSAE 18)
  C. A Service Organization Control (SOC) 2 report
  D. The International Organization for Standardization (ISO) 27001
  C. A Service Organization Control (SOC) 2 report

• Question 116:

  What is the MOST appropriate hierarchy of documents when implementing a security program?

  A. Organization principle, policy, standard, guideline
  B. Policy, organization principle, standard, guideline
  C. Standard, policy, organization principle, guideline
  D. Organization principle, guideline, policy, standard
  C. Standard, policy, organization principle, guideline

• Question 117:

  When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

  A. Log all activities associated with sensitive systems
  B. Provide links to security policies
  C. Confirm that confidentially agreements are signed
  D. Employ strong access controls
  D. Employ strong access controls

• Question 118:

  The Chief Information Security Officer (CISO) of a large financial institution is responsible for implementing the security controls to protect the confidentiality and integrity of the organization’s Information Systems. Which of the controls below is prioritized FIRST?

  A. Firewall and reverse proxy
  B. Web application firewall (WAF) and HyperText Transfer Protocol Secure (HTTPS)
  C. Encryption of data in transit and data at rest
  D. Firewall and intrusion prevention system (IPS)
  C. Encryption of data in transit and data at rest

• Question 119:

  Which of the following global privacy legislation principles ensures that data handling policies and the name of the data controller are easily accessible to the public?

  A. Use limitation
  B. Openness
  C. Purpose specification
  D. Individual participation
  B. Openness

• Question 120:

  When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

  A. Provide links to security policies
  B. Log all activities associated with sensitive systems
  C. Employ strong access controls
  D. Confirm that confidentiality agreements are signed
  C. Employ strong access controls