ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1231:

  Which of the following is the BEST method to reduce the effectiveness of phishing attacks?

  A. User awareness
  B. Two-factor authentication
  C. Anti-phishing software
  D. Periodic vulnerability scan
  A. User awareness

• Question 1232:

  An organization is developing employee training content to increase awareness of Payment Card Industry (PCI) standards. What are the three types of awareness roles applicable to the organization?

  A. All personnel, specialized, management
  B. Standard, privileged, administrator
  C. Basic, intermediate, advanced
  D. Technical, operational, administrative
  D. Technical, operational, administrative

• Question 1233:

  Which of the following combinations would MOST negatively affect availability?

  A. Denial of Service (DoS) attacks and outdated hardware
  B. Unauthorized transactions and outdated hardware
  C. Fire and accidental changes to data
  D. Unauthorized transactions and denial of service attacks
  A. Denial of Service (DoS) attacks and outdated hardware

• Question 1234:

  If a medical analyst independently provides protected health information (PHI) to an external marketing organization, which ethical principal is this a violation of?

  A. Higher ethic in the worst case
  B. Informed consent
  C. Change of scale test
  D. Privacy regulations
  D. Privacy regulations

• Question 1235:

  Which of the following addresses requirements of security assessments during software acquisition?

  A. Software configuration management (SCM)
  B. Data loss prevention (DLP) policy
  C. Continuous monitoring
  D. Software assurance policy
  A. Software configuration management (SCM)

• Question 1236:

  An auditor carrying out a compliance audit requests passwords that are encrypted in the system to verify that the passwords are compliant with policy. Which of the following is the BEST response to the auditor?

  A. Provide the encrypted passwords and analysis tools to the auditor for analysis.
  B. Analyze the encrypted passwords for the auditor and show them the results.
  C. Demonstrate that non-compliant passwords cannot be created in the system.
  D. Demonstrate that non-compliant passwords cannot be encrypted in the system.
  C. Demonstrate that non-compliant passwords cannot be created in the system.

• Question 1237:

  Which of the following is a strong security protection provided by Trusted Platform Module (TPM)?

  A. Providing data integrity through digital signatures
  B. Creation of a secure kernel
  C. Separation of encryption keys from storage devices
  D. Reporting of system integrity
  C. Separation of encryption keys from storage devices

• Question 1238:

  The security architect has been assigned the responsibility of ensuring integrity of the organization's electronic records. Which of the following methods provides the strongest level of integrity?

  A. Time stamping
  B. Encryption
  C. Hashing
  D. Digital signature
  D. Digital signature

• Question 1239:

  Which of the following needs to be tested to achieve a Cat 6a certification for a company's data cabling?

  A. RJ11
  B. LC ports
  C. Patch panel
  D. F-type connector
  C. Patch panel

• Question 1240:

  Which of the following initiates the system recovery phase of a disaster recovery plan?

  A. Evacuating the disaster site
  B. Assessing the extent of damage following the disaster
  C. Issuing a formal disaster declaration
  D. Activating the organization's hot site
  C. Issuing a formal disaster declaration