ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1391:

  If compromised, which of the following would lead to the exploitation of multiple virtual machines?

  A. Virtual device drivers
  B. Virtual machine monitor
  C. Virtual machine instance
  D. Virtual machine file system
  B. Virtual machine monitor

• Question 1392:

  Which of the following is a recommended alternative to an integrated email encryption system?

  A. Sign emails containing sensitive data
  B. Send sensitive data in separate emails
  C. Encrypt sensitive data separately in attachments
  D. Store sensitive information to be sent in encrypted drives
  C. Encrypt sensitive data separately in attachments

• Question 1393:

  Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?

  A. Trusted Computing Base (TCB)
  B. Time separation
  C. Security kernel
  D. Reference monitor
  C. Security kernel

• Question 1394:

  Which of the following is a characteristic of covert security testing?

  A. Induces less risk than overt testing
  B. Focuses on identifying vulnerabilities
  C. Tests and validates all security controls in the organization
  D. Tests staff knowledge and implementation of the organization's security policy
  B. Focuses on identifying vulnerabilities

• Question 1395:

  The application of which of the following standards would BEST reduce the potential for data breaches?

  A. ISO 9000
  B. ISO 20121
  C. ISO 26000
  D. ISO 27001
  D. ISO 27001

• Question 1396:

  An organization has hired a security services firm to conduct a penetration test. Which of the following will the organization provide to the tester?

  A. Limits and scope of the testing.
  B. Physical location of server room and wiring closet.
  C. Logical location of filters and concentrators.
  D. Employee directory and organizational chart.
  A. Limits and scope of the testing.

• Question 1397:

  In which identity management process is the subject's identity established?

  A. Trust
  B. Provisioning
  C. Authorization
  D. Enrollment
  D. Enrollment

• Question 1398:

  What is the MOST effective way to determine a mission critical asset in an organization?

  A. Vulnerability analysis
  B. business process analysis
  C. Threat analysis
  D. Business risk analysis
  B. business process analysis

• Question 1399:

  Why should Open Web Application Security Project (OWASP) Application Security Verification Standards (ASVS) Level 1 be considered a MINIMUM level of protection for any web application?

  A. Most regulatory bodies consider ASVS Level 1 as a baseline set of controls for applications
  B. Securing applications at ASVS Level 1 provides adequate protection for sensitive data
  C. ASVS Level 1 ensures that applications are invulnerable to OWASP top 10 threats
  D. Opportunistic attackers will look for any easily exploitable vulnerable applications
  D. Opportunistic attackers will look for any easily exploitable vulnerable applications

• Question 1400:

  Which of the following is a method of attacking internet (IP) v6 Layer 3 and Layer 4 ?

  A. Synchronize sequence numbers (SVN) flooding
  B. Internet Control Message Protocol (IOP) flooring
  C. Domain Name Server [DNS) cache poisoning
  D. Media Access Control (MAC) flooding
  A. Synchronize sequence numbers (SVN) flooding