ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1191:

  Which of the following is an initial consideration when deveoping an information security management system (ISMS)?

  A. Identify the contractual security obligations that apply to the organizations
  B. Understand the value of the information assets
  C. Identify the level of resioual risk lhat is tolerable to management
  D. Identify relevant legislative and regulatory compliance requirements
  B. Understand the value of the information assets

• Question 1192:

  Which of the following media is least problematic with data remanence?

  A. Magnetic disk
  B. Electrically Erasable Programming read-only Memory (EEPROM)
  C. Dynamic Random Access Memory (DRAM)
  D. Flash memory
  C. Dynamic Random Access Memory (DRAM)

• Question 1193:

  Which type of access control includes a system that allows only users that are type=managers and department=sales to access employee records?

  A. Discretionary access control (DAC)
  B. Mandatory access control (MAC)
  C. Role-based access control (RBAC)
  D. Attribute-based access control (ABAC)
  C. Role-based access control (RBAC)

• Question 1194:

  Which of the following are all elements of a disaster recovery plan (DRP)?

  A. Document the actual location of the ORP, developing an incident notification procedure, evaluating costs of critical components
  B. Document the actual location of the ORP, developing an incident notification procedure, establishing recovery locations
  C. Maintain proper documentation of all server logs, developing an incident notification procedure, establishing recovery locations
  D. Document the actual location of the ORP, recording minutes at all ORP planning sessions, establishing recovery locations
  C. Maintain proper documentation of all server logs, developing an incident notification procedure, establishing recovery locations

• Question 1195:

  Which of the following would BEST describe the role directly responsible for data within an organization?

  A. Data custodian
  B. Information owner
  C. Database administrator
  D. Quality control
  A. Data custodian

• Question 1196:

  A software scanner identifies a region within a binary image having high entropy. What does this MOST likely indicate?

  A. Encryption routines
  B. Random number generator
  C. Obfuscated code
  D. Botnet command and control
  C. Obfuscated code

• Question 1197:

  Refer to the information below to answer the question.

  During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

  If the intrusion causes the system processes to hang, which of the following has been affected?

  A. System integrity
  B. System availability
  C. System confidentiality
  D. System auditability
  B. System availability

• Question 1198:

  Which of the following actions MUST be performed when using secure multipurpose internet mail Extension (S/MIME) before sending an encrypted message to a recipient?

  A. Digitally sign foe message.
  B. Obtain the recipients private key.
  C. Obtain the recipient's digital certificate.
  D. Encrypt attachments.
  A. Digitally sign foe message.

• Question 1199:

  Which mechanism provides the BEST protection against buffer overflow attacks in memory?

  A. Address Space Layout Randomization (ASLR)
  B. Memory management unit
  C. Stack and heap allocation
  D. Dynamic random access memory (DRAM)
  A. Address Space Layout Randomization (ASLR)

• Question 1200:

  Which of the following access control mechanisms characterized subjects and objects using a set of encoded security-relevant properties?

  A. Mandatory access control (MAC)
  B. Role-based access control (RBAC)
  C. Attribute-based access control (ABAC)
  D. Discretionary access control (DAC)
  C. Attribute-based access control (ABAC)