ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1281:

  What is the MOST efficient way to secure a production program and its data?

  A. Disable default accounts and implement access control lists (ACL)
  B. Harden the application and encrypt the data
  C. Disable unused services and implement tunneling
  D. Harden the servers and backup the data
  B. Harden the application and encrypt the data

• Question 1282:

  The PRIMARY security concern for handheld devices is the

  A. strength of the encryption algorithm.
  B. spread of malware during synchronization.
  C. ability to bypass the authentication mechanism.
  D. strength of the Personal Identification Number (PIN).
  C. ability to bypass the authentication mechanism.

• Question 1283:

  Which of the following is a characteristic of the independent testing of a program?

  A. Independent testing increases the likelihood that a test will expose the effect of a hidden feature.
  B. Independent testing decreases the likelihood that a test will expose the effect of a hidden feature.
  C. Independent testing teams help decrease the cost of creating test data and system design specifications.
  D. Independent testing teams help identify functional requirements and Service Level Agreements (SLA) to improve program reliability.
  D. Independent testing teams help identify functional requirements and Service Level Agreements (SLA) to improve program reliability.

• Question 1284:

  Which of the following is a PRIMARY security weakness in the design of Domain Name System (DNS)?

  A. A DNS server can be disabled in a denial-of-service (DoS) attack.
  B. A DNS server does not authenticate source of information.
  C. Each DNS server must hold the address of the root servers.
  D. A DNS server database can be injected with falsified checksums.
  A. A DNS server can be disabled in a denial-of-service (DoS) attack.

• Question 1285:

  Which of the following types of business continuity tests includes assessment of resilience to internal and external risks without endangering live operations?

  A. Walkthrough
  B. Simulation
  C. Parallel
  D. White box
  C. Parallel

• Question 1286:

  Which of the following has the GREATEST Impact on an organization's security posture?

  A. Audit findings related to employee access and permissions process
  B. International and country-specific compliance requirements
  C. Security violations by employees and contractors
  D. Resource constraints due to increasing costs of Supporting security
  B. International and country-specific compliance requirements

• Question 1287:

  The disaster recovery (DR) process should always include

  A. plan maintenance.
  B. periodic vendor review.
  C. financial data analysis.
  D. periodic inventory review.
  A. plan maintenance.

• Question 1288:

  What should be used to determine the risks associated with using Software as a Service (SaaS) for collaboration and email?

  A. Cloud access security broker (CASB)
  B. Open Web Application Security Project (OWASP)
  C. Process for Attack Simulation and Threat Analysis (PASTA)
  D. Common Security Framework (CSF)
  A. Cloud access security broker (CASB)

• Question 1289:

  To monitor the security of buried data lines inside the perimeter of a facility, which of the following is the MOST effective control?

  A. Fencing around the facility with closed-circuit television (CCTV) cameras at all entry points
  B. Ground sensors installed and reporting to a security event management (SEM) system
  C. Steel casing around the facility ingress points
  D. Regular sweeps of the perimeter, including manual inspection of the cable ingress points
  D. Regular sweeps of the perimeter, including manual inspection of the cable ingress points

• Question 1290:

  The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hybrid capability, which of the following would be the MAIN consideration, regardless of the model?

  A. Skill set and training
  B. Headcount and capacity
  C. Tools and technologies
  D. Scope and service catalog
  A. Skill set and training