ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1211:

  An information technology (IT) employee who travels frequently to various ies remotely to an organization the following solutions BEST serves as a secure control mechanism to meet the organization's requirements.

  Which of the following solutions BEST serves as a secure control mechanisn to meet the organization's requirements?

  A. Update the firewall rules to include the static Internet Protocol (IP) addresses of the locations where the employee connects from.
  B. Install a third-party screen sharing solution that provides remote connection from a public website.
  C. Implement a Dynamic Domain Name Services (DDNS) account to initiate a virtual private network (VPN) using the DDNS record.
  D. Install a bastion host in the demilitarized zone (DMZ) and allow multi-factor authentication (MFA) access.
  D. Install a bastion host in the demilitarized zone (DMZ) and allow multi-factor authentication (MFA) access.

• Question 1212:

  Which of the following offers the BEST security functionality for transmitting authentication tokens?

  A. JavaScript Object Notation (JSON)
  B. Terminal Access Controller Access Control System (TACACS)
  C. Security Assertion Markup Language (SAML)
  D. Remote Authentication Dial-In User Service (RADIUS)
  C. Security Assertion Markup Language (SAML)

• Question 1213:

  An organization has decided to contract with a cloud-based service provider to leverage their identity as a service offering. They will use Open Authentication (OAuth) 2.0 to authenticate external users to the organization's services. As part of the authentication process, which of the following must the end user provide?

  A. An access token
  B. A username and password
  C. A username
  D. A password
  A. An access token

• Question 1214:

  Why is it important that senior management clearly communicates the formal Maximum Tolerable Downtime (MTD) decision?

  A. To provide each manager with precise direction on selecting an appropriate recovery alternative
  B. To demonstrate to the regulatory bodies that the company takes business continuity seriously
  C. To demonstrate to the board of directors that senior management is committed to continuity recovery efforts
  D. To provide a formal declaration from senior management as required by internal audit to demonstrate sound business practices
  D. To provide a formal declaration from senior management as required by internal audit to demonstrate sound business practices

• Question 1215:

  DRAG DROP

  Given the various means to protect physical and logical assets, match the access management area to the technology.

  Select and Place:

  

  

• Question 1216:

  Write Once, Read Many (WORM) data storage devices are designed to BEST support which of the following core security concepts?

  A. lntegrity
  B. Scalability
  C. Availability
  D. Confidentiality
  A. lntegrity

• Question 1217:

  When dealing with shared, privilaged accounts, especially those for emergencies, what is the BEST way to assure non-repudiation of logs?

  A. Regularity change the passwords,
  B. implement a password vaulting solution.
  C. Lock passwords in tamperproof envelopes in a safe.
  D. Implement a strict access control policy.
  B. implement a password vaulting solution.

• Question 1218:

  A security professional has just completed their organization's Business Impact Analysis (BIA). Following Business Continuity Plan/Disaster Recovery Plan (BCP/DRP) best practices, what would be the professional's NEXT step?

  A. Identify and select recovery strategies.
  B. Present the findings to management for funding.
  C. Select members for the organization's recovery teams.
  D. Prepare a plan to test the organization's ability to recover its operations.
  A. Identify and select recovery strategies.

• Question 1219:

  Which of the following techniques BEST prevents buffer overflows?

  A. Boundary and perimeter offset
  B. Character set encoding
  C. Code auditing
  D. Variant type and bit length
  B. Character set encoding

• Question 1220:

  An organization is building an enterprise system using attribute-based access control (ABAC). To avoid inadvertent exposure, what should organizations do to ensure the proper handling of personally identifiable information (PII) and enforcement of PII regulations across the enterprise?

  A. Employ trust agent.
  B. Employ trust agreements.
  C. Employ training program.
  D. Employ regulations from leadership.
  B. Employ trust agreements.