ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1261:

  What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

  A. Resumption procedures describing the actions to be taken to return to normal business operations
  B. Emergency procedures describing the necessary actions to be taken following an incident jeopardizes business operations
  C. Fallback procedures describing what action are to be taken to more essential business activities to alternative temporary locations
  D. Maintain schedule how and the plan will be tested and the process for maintaining the plan
  B. Emergency procedures describing the necessary actions to be taken following an incident jeopardizes business operations

• Question 1262:

  When designing a new Voice over Internet Protocol (VoIP) network, an organization's top concern is preventing unauthorized users accessing the VoIP network. Which of the following will BEST help secure the VoIP network?

  A. Transport Layer Security (TLS)
  B. 802.1x
  C. 802.119
  D. Web application firewall (WAF)
  A. Transport Layer Security (TLS)

• Question 1263:

  The act of requiring two of the three factors to be used in the authentication process refers to?

  A. Two-Factor Authentication
  B. One-Factor Authentication
  C. Bi-Factor Authentication
  D. Double Authentication
  A. Two-Factor Authentication

• Question 1264:

  What is the GREATEST challenge of an agent-based patch management solution?

  A. Time to gather vulnerability information about the computers in the program
  B. Requires that software be installed, running, and managed on all participating computers
  C. The significant amount of network bandwidth while scanning computers
  D. The consistency of distributing patches to each participating computer
  B. Requires that software be installed, running, and managed on all participating computers

• Question 1265:

  Refer to the information below to answer the question.

  Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data

  that was formerly stored on the magnetic drives were removed.

  After magnetic drives were degaussed twice according to the product manufacturer's directions, what is the MOST LIKELY security issue with degaussing?

  A. Commercial products often have serious weaknesses of the magnetic force available in the degausser product.
  B. Degausser products may not be properly maintained and operated.
  C. The inability to turn the drive around in the chamber for the second pass due to human error.
  D. Inadequate record keeping when sanitizing mediA.
  B. Degausser products may not be properly maintained and operated.

• Question 1266:

  Which Identity and Access Management (IAM) process can be used to maintain the principle of least privilege?

  A. identity provisioning
  B. access recovery
  C. multi-factor authentication (MFA)
  D. user access review
  D. user access review

• Question 1267:

  A security engineer is assigned to work with the patch and vulnerability management group. The deployment of a new patch has been approved and needs to be applied. The research is complete, and the security engineer has provided recommendations. Where should the patch be applied FIRST?

  A. Server environment
  B. Desktop environment
  C. Lower environment
  D. Production environment
  C. Lower environment

• Question 1268:

  A large organization uses biometrics to allow access to its facilities. It adjusts the biometric value for incorrectly granting or denying access so that the two numbers are the same. What is this value called?

  A. False Rejection Rate (FRR)
  B. Accuracy acceptance threshold
  C. Equal error rate
  D. False Acceptance Rate (FAR)
  C. Equal error rate

• Question 1269:

  The BEST method to mitigate the risk of a dictionary attack on a system is to

  A. use a hardware token.
  B. use complex passphrases.
  C. implement password history.
  D. encrypt the access control list (ACL).
  A. use a hardware token.

• Question 1270:

  A group of organizations follows the same access standards and practices. One manages the verification and due diligence processes for the others. For a user to access a resource from one of the organizations, a check is made to see if that user has been certified. Which Federated Identity Management (FIM) process is this an example of?

  A. One-time authentication
  B. Web based access management
  C. Cross-certification model
  D. Bridge model
  B. Web based access management