ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1241:

  How long should the records on a project be retained?

  A. For the duration of the project, or at the discretion of the record owner
  B. Until they are no longer useful or required by policy
  C. Until five years after the project ends, then move to archives
  D. For the duration of the organization fiscal year
  B. Until they are no longer useful or required by policy

• Question 1242:

  A post-implementation review has identified that the Voice Over Internet Protocol (VoIP) system was designed to have gratuitous Address Resolution Protocol (ARP) disabled. Why did the network architect likely design the VoIP system with gratuitous ARP disabled?

  A. Gratuitous ARP requires the use of Virtual Local Area Network (VLAN) 1.
  B. Gratuitous ARP requires the use of insecure layer 3 protocols.
  C. Gratuitous ARP requires the likelihood of a successful brute-force attack on the phone.
  D. Gratuitous ARP requires the risk of a Man-in-the-Middle (MITM) attack.
  D. Gratuitous ARP requires the risk of a Man-in-the-Middle (MITM) attack.

• Question 1243:

  Checking routing information on e-mail to determine it is in a valid format and contains valid information is an example of which of the following anti-spam approaches?

  A. Simple Mail Transfer Protocol (SMTP) blacklist
  B. Reverse Domain Name System (DNS) lookup
  C. Hashing algorithm
  D. Header analysis
  D. Header analysis

• Question 1244:

  Which of the following reports provides the BEST attestation of detailed controls when evaluating an Identity as a Service (IDaaS) solution?

  A. Service Organization Control (SOC) 1
  B. Service Organization Control (SOC) 2
  C. Service Organization Control (SOC) 3
  D. Statement on Auditing Standards (SAS) 70
  B. Service Organization Control (SOC) 2

• Question 1245:

  The Rivest-Shamir-Adleman (RSA) algorithm is BEST suited for which of the following operations?

  A. Bulk data encryption and decryption
  B. One-way secure hashing for user and message authentication
  C. Secure key exchange for symmetric cryptography
  D. Creating digital checksums for message integrity
  C. Secure key exchange for symmetric cryptography

• Question 1246:

  For a victim of a security breach to prevail in a negligence claim, what MUST the victim establish?

  A. Concern
  B. Breach of contract
  C. Proximate cause
  D. Hardship
  C. Proximate cause

• Question 1247:

  A control to protect from a Denial-of-Service (DoS) attach has been determined to stop 50% of attacks, and additionally reduces the impact of an attack by 50%. What is the residual risk?

  A. 25%
  B. 50%
  C. 75%
  D. 100%
  A. 25%

• Question 1248:

  Which of the following threats exists with an implementation of digital signatures?

  A. Spoofing
  B. Substitution
  C. Content tampering
  D. Eavesdropping
  D. Eavesdropping

• Question 1249:

  The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?

  A. Security information and event management (SIEM)
  B. Security perimeter
  C. Defense-in-depth
  D. Access control
  B. Security perimeter

• Question 1250:

  Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

  A. Lack of software documentation
  B. License agreements requiring release of modified code
  C. Expiration of the license agreement
  D. Costs associated with support of the software
  D. Costs associated with support of the software