ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1351:

  Which of the following are effective countermeasures against passive network-layer attacks?

  A. Federated security and authenticated access controls
  B. Trusted software development and run time integrity controls
  C. Encryption and security enabled applications
  D. Enclave boundary protection and computing environment defense
  C. Encryption and security enabled applications

• Question 1352:

  What balance MUST be considered when web application developers determine how informative application error messages should be constructed?

  A. Risk versus benefit
  B. Availability versus auditability
  C. Confidentiality versus integrity
  D. Performance versus user satisfaction
  A. Risk versus benefit

• Question 1353:

  Which algorithm gets its security from the difficulty of calculating discrete logarithms in a finite field and is used to distribute keys, but cannot be used to encrypt or decrypt messages?

  A. Diffie-Hellman
  B. Digital Signature Algorithm (DSA)
  C. Rivest-Shamir-Adleman (RSA)
  D. Kerberos
  C. Rivest-Shamir-Adleman (RSA)

• Question 1354:

  Within a large organization, what business unit is BEST positioned to initiate provisioning and deprovisioning of user accounts?

  A. Training department
  B. Internal audit
  C. Human resources
  D. Information technology (IT)
  C. Human resources

• Question 1355:

  Which of the (ISC)? Code of Ethics canons is MOST reflected when preserving the value of systems, applications, and entrusted information while avoiding conflicts of interest?

  A. Act honorably, honestly, justly, responsibly, and legally.
  B. Protect society, the commonwealth, and the infrastructure.
  C. Provide diligent and competent service to principles.
  D. Advance and protect the profession.
  C. Provide diligent and competent service to principles.

• Question 1356:

  A security architect is developing an information system for a client. One of the requirements is to deliver a platform that mitigates against common vulnerabilities and attacks, What is the MOST efficient option used to prevent buffer overflow attacks?

  A. Process isolation
  B. Address Space Layout Randomization (ASLR)
  C. Processor states
  D. Access control mechanisms
  B. Address Space Layout Randomization (ASLR)

• Question 1357:

  Which of the following is the BEST identity-as-a-service (IDaaS) solution for validating users?

  A. Lightweight Directory Access Protocol (LDAP)
  B. Security Assertion Markup Language (SAM.)
  C. Single Sign-on (SSO)
  D. Open Authentication (OAuth)
  A. Lightweight Directory Access Protocol (LDAP)

• Question 1358:

  Data leakage of sensitive information is MOST often concealed by which of the following?

  A. Secure Sockets Layer (SSL)
  B. Secure Hash Algorithm (SHA)
  C. Wired Equivalent Privacy (WEP)
  D. Secure Post Office Protocol (POP)
  A. Secure Sockets Layer (SSL)

• Question 1359:

  Which of the following will help identify the source internet protocol (IP) address of malware being exected on a computer?

  A. List of open network connections
  B. Display Transmission Control Protocol/Internet Protocol (TCP/IP) network configuration information.
  C. List of running processes
  D. Display the Address Resolution Protocol (APP) table.
  A. List of open network connections

• Question 1360:

  Which factors MUST be considered when classifying information and supporting assets for risk management, legal discovery, and compliance?

  A. System owner roles and responsibilities, data handling standards, storage and secure development lifecycle requirements
  B. Data stewardship roles, data handling and storage standards, data lifecycle requirements
  C. Compliance office roles and responsibilities, classified material handling standards, storage system lifecycle requirements
  D. System authorization roles and responsibilities, cloud computing standards, lifecycle requirements
  B. Data stewardship roles, data handling and storage standards, data lifecycle requirements