ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1221:

  Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

  A. A network-based firewall is stateful, while a host-based firewall is stateless.
  B. A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.
  C. A network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.
  D. A network-based firewall blocks network intrusions, while a host-based firewall blocks malware.
  B. A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.

• Question 1222:

  Which of the following BEST describes a rogue Access Point (AP)?

  A. An AP that is not protected by a firewall
  B. An AP not configured to use Wired Equivalent Privacy (WEP) with Triple Data Encryption Algorithm (3DES)
  C. An AP connected to the wired infrastructure but not under the management of authorized network administrators
  D. An AP infected by any kind of Trojan or Malware
  C. An AP connected to the wired infrastructure but not under the management of authorized network administrators

• Question 1223:

  Which access control method is based on users issuing access requests on system resources, features assigned to those resources, the operational or situational context, and a set of policies specified in terms of those features and context?

  A. Mandatory Access Control (MAC)
  B. Role Based Access Control (RBAC)
  C. Discretionary Access Control (DAC)
  D. Attribute Based Access Control (ABAC)
  B. Role Based Access Control (RBAC)

• Question 1224:

  Which one of the following affects the classification of data?

  A. Assigned security label
  B. Multilevel Security (MLS) architecture
  C. Minimum query size
  D. Passage of time
  D. Passage of time

• Question 1225:

  Which of the following BEST describes the purpose of the security functional requirements of Common Criteria?

  A. Level of assurance of the Target of Evaluation (TOE) in intended operational environment
  B. Selection to meet the security objectives stated in test documents
  C. Security behavior expected of a TOE
  D. Definition of the roles and responsibilities
  C. Security behavior expected of a TOE

• Question 1226:

  The security team plans on using automated account reconciliation in the corporate user access review process. Which of the following must be implemented for the BEST results with fewest errors when running the audit?

  A. Removal of service accounts from review
  B. Segregation of Duties (SoD)
  C. Clear provisioning policies
  D. Frequent audits
  C. Clear provisioning policies

• Question 1227:

  Which of the following is a common risk with fiber optical communications, and what is the associated mitigation measure?

  A. Data emanation, deploying Category (CAT) 6 and higher cable wherever feasible
  B. Light leakage, deploying shielded cable wherever feasible
  C. Cable damage, deploying ring architecture wherever feasible
  D. Electronic eavesdropping, deploying end-to-end encryption wherever feasible
  B. Light leakage, deploying shielded cable wherever feasible

• Question 1228:

  Which security feature fully encrypts code and data as it passes to the servers and only decrypts below the hypervisor layer?

  A. File-system level encryption
  B. Transport Layer Security (TLS)
  C. Key management service
  D. Trusted execution environments
  D. Trusted execution environments

• Question 1229:

  The core component of Role Based Access Control (RBAC) must be constructed of defined data elements. Which elements are required?

  A. Users, permissions, operations, and protected objects
  B. Roles, accounts, permissions, and protected objects
  C. Users, roles, operations, and protected objects
  D. Roles, operations, accounts, and protected objects
  C. Users, roles, operations, and protected objects

• Question 1230:

  What is the BEST approach to addressing security issues in legacy web applications?

  A. Debug the security issues
  B. Migrate to newer, supported applications where possible
  C. Conduct a security assessment
  D. Protect the legacy application with a web application firewall
  D. Protect the legacy application with a web application firewall