ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1371:

  An organization has developed a major application that has undergone accreditation testing. After receiving the results of the evaluation, what is the final step before the application can be accredited?

  A. Acceptance of risk by the authorizing official
  B. Remediation of vulnerabilities
  C. Adoption of standardized policies and procedures
  D. Approval of the System Security Plan (SSP)
  A. Acceptance of risk by the authorizing official

• Question 1372:

  Which of the following is a BEST practice when traveling internationally with laptops containing Personally Identifiable Information (PII)?

  A. Use a thumb drive to transfer information from a foreign computer.
  B. Do not take unnecessary information, including sensitive information.
  C. Connect the laptop only to well-known networks like the hotel or public Internet cafes.
  D. Request international points of contact help scan the laptop on arrival to ensure it is protected.
  B. Do not take unnecessary information, including sensitive information.

• Question 1373:

  Refer to the information below to answer the question.

  A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a child that uses the computer to send and receive e-mail, search the web, and use instant

  messaging. The organization's Information Technology (IT) department discovers that a peer-to-peer program has been installed on the computer using the employee's access.

  Which of the following could have MOST likely prevented the Peer-to-Peer (P2P) program from being installed on the computer?

  A. Removing employee's full access to the computer
  B. Supervising their child's use of the computer
  C. Limiting computer's access to only the employee
  D. Ensuring employee understands their business conduct guidelines
  A. Removing employee's full access to the computer

• Question 1374:

  Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

  A. Two-factor authentication
  B. Digital certificates and hardware tokens
  C. Timed sessions and Secure Socket Layer (SSL)
  D. Passwords with alpha-numeric and special characters
  C. Timed sessions and Secure Socket Layer (SSL)

• Question 1375:

  While dealing with the consequences of a security incident, which of the following security controls are MOST appropriate?

  A. Detective and recovery controls
  B. Corrective and recovery controls
  C. Preventative and corrective controls
  D. Recovery and proactive controls
  C. Preventative and corrective controls

• Question 1376:

  A security operations center (SOC) discovers a recently deployed router beaconing to a malicious website. Replacing the router fixes the issue. What is the MOST likely cause of the router’s behavior?

  A. The network administrator failed to reconfigure the router’s access control list (ACL).
  B. The router was damaged during shipping or installed incorrectly.
  C. The router was counterfeit and acquired through unauthorized channels.
  D. The network administrator failed to update the router’s firmware.
  D. The network administrator failed to update the router’s firmware.

• Question 1377:

  The ability to send malicious code, generally in the form of a client side script, to a different end user is categorized as which type of vulnerability?

  A. Session hijacking
  B. Cross-site request forgery (CSRF)
  C. Cross-Site Scripting (XSS)
  D. Command injection
  C. Cross-Site Scripting (XSS)

• Question 1378:

  Secure Sockets Layer (SSL) encryption protects

  A. data at rest.
  B. the source IP address.
  C. data transmitted.
  D. data availability.
  C. data transmitted.

• Question 1379:

  When selecting a disk encryption technology, which of the following MUST also be assured to be encrypted?

  A. Master Boot Record (MBR)
  B. Pre-boot environment
  C. Basic Input Output System (BIOS)
  D. Hibernation file
  A. Master Boot Record (MBR)

• Question 1380:

  In a multi-tenant cloud environment, what approach will secure logical access to assets?

  A. Hybrid cloud
  B. Transparency/Auditability of administrative access
  C. Controlled configuration management (CM)
  D. Virtual private cloud (VPC)
  D. Virtual private cloud (VPC)