ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1331:

  Which of the following could elicit a Denial of Service (DoS) attack against a credential management system?

  A. Delayed revocation or destruction of credentials
  B. Modification of Certificate Revocation List
  C. Unauthorized renewal or re-issuance
  D. Token use after decommissioning
  B. Modification of Certificate Revocation List

• Question 1332:

  What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?

  A. Take the computer to a forensic lab
  B. Make a copy of the hard drive
  C. Start documenting
  D. Turn off the computer
  C. Start documenting

• Question 1333:

  Which of the following is a strategy of grouping requirements in developing a security test and Evolution (STandE)?

  A. Standards, policies, and procedures
  B. Management, operational, and technical
  C. Documentation, observation, and manual
  D. Tactical, strategic, and financial
  B. Management, operational, and technical

• Question 1334:

  In a High Availability (HA) environment, what is the PRIMARY goal of working with a virtual router address as the gateway to a network?

  A. The second of two routers can periodically check in to make sure that the first router is operational.
  B. The second of two routers can better absorb a Denial of Service (DoS) attack knowing the first router is present.
  C. The first of two routers fails and is reinstalled, while the second handles the traffic flawlessly.
  D. The first of two routers can better handle specific traffic, while the second handles the rest of the traffic seamlessly.
  C. The first of two routers fails and is reinstalled, while the second handles the traffic flawlessly.

• Question 1335:

  Which of the following is the BEST Identity-as-a-Service (IDaaS) solution for validating users?

  A. Single Sign-On (SSO)
  B. Security Assertion Markup Language (SAML)
  C. Lightweight Directory Access Protocol (LDAP)
  D. Open Authentication (OAuth)
  B. Security Assertion Markup Language (SAML)

• Question 1336:

  What is the FIRST step for an organization to take before allowing personnel to access social media from a corporate device or user account?

  A. Publish a social media guidelines document.
  B. Publish an acceptable usage policy.
  C. Document a procedure for accessing social media sites.
  D. Deliver security awareness training.
  A. Publish a social media guidelines document.

• Question 1337:

  Which type of test suite should be run for fast feedback during application develoment?

  A. Full recession
  B. End-to-end
  C. Smoke
  D. Specific functionality
  C. Smoke

• Question 1338:

  Which of the following MUST be part of a contract to support electronic discovery of data stored in a cloud environment?

  A. Integration with organizational directory services for authentication
  B. Tokenization of data
  C. Accommodation of hybrid deployment models
  D. Identification of data location
  D. Identification of data location

• Question 1339:

  Who is the BEST person to review developed application code to ensure it has been tested and verified?

  A. A developer who knows what is expected of the application, but not the same one who developed it.
  B. A member of quality assurance (QA) should review the developer’s code.
  C. A developer who understands the application requirements document, and who also developed the code.
  D. The manager should review the developer’s application code.
  B. A member of quality assurance (QA) should review the developer’s code.

• Question 1340:

  Which of the following is the BEST method to prevent malware from being introduced into a production environment?

  A. Purchase software from a limited list of retailers
  B. Verify the hash key or certificate key of all updates
  C. Do not permit programs, patches, or updates from the Internet
  D. Test all new software in a segregated environment
  D. Test all new software in a segregated environment