ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1361:

  Single sign-on (SSO) for federated identity management (FIM) must be implemented and managed so that authorization mechanisms protect access to privileged information using OpenID Connect (OIDC) token or Security Assertion Markup Language (SAML) assertion. What is the BEST method to use to protect them?

  A. Pass data in a bearer assertion, only signed by the identity provider.
  B. Tokens and assertion should use base64 encoding to assure confidentiality.
  C. Use a challenge and response mechanism such as Challenge Handshake Authentication Protocol (CHAP).
  D. The access token or assertion should be encrypted to ensure privacy.
  D. The access token or assertion should be encrypted to ensure privacy.

• Question 1362:

  When implementing a data classification program, why is it important to avoid too much granularity?

  A. The process will require too many resources
  B. It will be difficult to apply to both hardware and software
  C. It will be difficult to assign ownership to the data
  D. The process will be perceived as having value
  A. The process will require too many resources

• Question 1363:

  A company needs to provide shared access of sensitive data on a cloud storage to external business partners. Which of the following identity models is the BEST to blind identity providers (IdP) and relying parties (RP) so that subscriber lists of other parties are not disclosed?

  A. Federation authorities
  B. Proxied federation
  C. Static registration
  D. Dynamic registration
  B. Proxied federation

• Question 1364:

  After acquiring the latest security updates, what must be done before deploying to production systems?

  A. Use tools to detect missing system patches
  B. Install the patches on a test system
  C. Subscribe to notifications for vulnerabilities
  D. Assess the severity of the situation
  B. Install the patches on a test system

• Question 1365:

  Which of the following can be used to calculate the loss event probability?

  A. Total number of possible outcomes divided by frequency of outcomes
  B. Number of outcomes divided by total number of possible outcomes
  C. Number of outcomes multiplied by total number of possible outcomes
  D. Total number of possible outcomes multiplied by frequency of outcomes
  B. Number of outcomes divided by total number of possible outcomes

• Question 1366:

  The PRIMARY characteristic of a Distributed Denial of Service (DDoS) attack is that it

  A. exploits weak authentication to penetrate networks.
  B. can be detected with signature analysis.
  C. looks like normal network activity.
  D. is commonly confused with viruses or worms.
  C. looks like normal network activity.

• Question 1367:

  To prevent inadvertent disclosure of restricted information, which of the following would be the LEAST effective process for eliminating data prior to the media being discarded?

  A. Multiple-pass overwriting
  B. Degaussing
  C. High-level formatting
  D. Physical destruction
  C. High-level formatting

• Question 1368:

  The security architect is designing and implementing an internal certification authority to generate digital certificates for all employees. Which of the following is the BEST solution to securely store the private keys?

  A. Physically secured storage device
  B. Encrypted flash drive
  C. Public key infrastructure (PKI)
  D. Trusted Platform Module (TPM)
  C. Public key infrastructure (PKI)

• Question 1369:

  Using the cipher text and resultant cleartext message to derive the monoalphabetic cipher key is an example of which method of cryptanalytic attack?

  A. Frequency analysis
  B. Ciphertext-only attack
  C. Probable-plaintext attack
  D. Known-plaintext attack
  D. Known-plaintext attack

• Question 1370:

  A security professional can BEST mitigate the risk of using a Commercial Off-The-Shelf (COTS) solution by deploying the application with which of the following controls in ?

  A. Whitelisting application
  B. Network segmentation
  C. Hardened configuration
  D. Blacklisting application
  A. Whitelisting application