ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1201:

  Which one of the following is a fundamental objective in handling an incident?

  A. To restore control of the affected systems
  B. To confiscate the suspect's computers
  C. To prosecute the attacker
  D. To perform full backups of the system
  A. To restore control of the affected systems

• Question 1202:

  Which of the following countermeasures is the MOST effective in defending against a social engineering attack?

  A. Mandating security policy acceptance
  B. Changing individual behavior
  C. Evaluating security awareness training
  D. Filtering malicious e-mail content
  C. Evaluating security awareness training

• Question 1203:

  The use of strong authentication, the encryption of Personally Identifiable Information (PII) on database servers, application security reviews, and the encryption of data transmitted across networks provide

  A. data integrity.
  B. defense in depth.
  C. data availability.
  D. non-repudiation.
  B. defense in depth.

• Question 1204:

  In Disaster Recovery (DR) and business continuity training, which BEST describes a functional drill?

  A. A full-scale simulation of an emergency and the subsequent response functions
  B. A specific test by response teams of individual emergency response functions
  C. A functional evacuation of personnel
  D. An activation of the backup site
  B. A specific test by response teams of individual emergency response functions

• Question 1205:

  Which of the following is the MOST common method of memory protection?

  A. Compartmentalization
  B. Segmentation
  C. Error correction
  D. Virtual Local Area Network (VLAN) tagging
  B. Segmentation

• Question 1206:

  An organization's security policy delegates to the data owner the ability to assign which user roles have access to a particular resource. What type of authorization mechanism is being used?

  A. Discretionary Access Control (DAC)
  B. Role Based Access Control (RBAC)
  C. Media Access Control (MAC)
  D. Mandatory Access Control (MAC)
  A. Discretionary Access Control (DAC)

• Question 1207:

  In order to assure authenticity, which of the following are required?

  A. Confidentiality and authentication
  B. Confidentiality and integrity
  C. Authentication and non-repudiation
  D. Integrity and non-repudiation
  D. Integrity and non-repudiation

• Question 1208:

  Which programming methodology allows a programmer to use pre-determined blocks of code end consequently reducing development time and programming costs?

  A. Application security
  B. Object oriented
  C. Blocked algorithm
  D. Assembly language
  B. Object oriented

• Question 1209:

  A security engineer is conducting an audit of an organization’s Voice over Internet Protocol (VoIP) phone network due to a large increase in charges from their phone provider. The engineer discovers unauthorized endpoints have connected to the phone server from the public internet and placed hundreds of unauthorized calls to parties around the globe. Which type of attack occurred?

  A. Control eavesdropping
  B. Toll fraud
  C. Call hijacking
  D. Address spoofing
  B. Toll fraud

• Question 1210:

  A software development company found odd behavior in some recently developed software, creating a need for a more thorough code review. What is the MOST effective argument for a more thorough code review?

  A. It will increase flexibility of the applications developed.
  B. It will increase accountability with the customers.
  C. It will impede the development process.
  D. lt will reduce the potential for vulnerabilities.
  D. lt will reduce the potential for vulnerabilities.