ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1431:

  Which of the following provides the BEST method to verify that security baseline configurations are maintained?

  A. Perform regular system security testing
  B. Design security early in the development cycle
  C. Analyze logs to determine user activities
  D. Perform quarterly risk assessments
  A. Perform regular system security testing

• Question 1432:

  Which technique can be used to make an encryption scheme more resistant to a known plaintext attack?

  A. Hashing the data before encryption
  B. Hashing the data after encryption
  C. Compressing the data after encryption
  D. Compressing the data before encryption
  D. Compressing the data before encryption

• Question 1433:

  When using Security Assertion markup language (SAML), it is assumed that the principal subject

  A. accepts persistent cookies from the system.
  B. allows Secure Sockets Layer (SSL) for data exchanges.
  C. is on a system that supports remote authorization.
  D. enrolls with at least one identity provider.
  D. enrolls with at least one identity provider.

• Question 1434:

  The security team has been tasked with performing an interface test against a front-end external facing application and needs to verify that all input fields protect against invalid input. Which of the following BEST assists this process?

  A. Application fuzzing
  B. Instruction set simulation
  C. Regression testing
  D. Sanity testing
  A. Application fuzzing

• Question 1435:

  Which of the following security tools monitors devices and records the information in a central database for further analysis?

  A. Security orchestration automation and response
  B. Host-based intrusion detection system (HIDS)
  C. Antivirus
  D. Endpoint detection and response (EDR)
  D. Endpoint detection and response (EDR)

• Question 1436:

  Which of the following provides for the STRONGEST protection of data confidentiality in a Wi-Fi environment?

  A. Wi-Fi Protected Access (WPA) + Temporal Key Integrity Protocol (TKIP)
  B. Wi-Fi Protected Access 2 (WPA2) + Advanced Encryption Standard (AES)
  C. Wi-Fi Protected Access 2 (WPA2) + Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  D. Wired Equivalent Privacy (WEP) + Advanced Encryption Standard (AES)
  B. Wi-Fi Protected Access 2 (WPA2) + Advanced Encryption Standard (AES)

• Question 1437:

  Which of the following regulations dictates how data breaches are handled?

  A. Sarbanes-Oxley (SOX)
  B. National Institute of Standards and Technology (NIST)
  C. Payment Card Industry Data Security Standard (PCI-DSS)
  D. General Data Protection Regulation (GDPR)
  D. General Data Protection Regulation (GDPR)

• Question 1438:

  Point-to-Point Protocol (PPP) was designed to specifically address what issue?

  A. A common design flaw in telephone modems
  B. Speed and reliability issues between dial-up users and Internet Service Providers (ISP)
  C. Compatibility issues with personal computers and web browsers
  D. The security of dial-up connections to remote networks
  B. Speed and reliability issues between dial-up users and Internet Service Providers (ISP)

• Question 1439:

  Why is planning in Disaster Recovery (DR) an interactive process?

  A. It details off-site storage plans
  B. It identifies omissions in the plan
  C. It defines the objectives of the plan
  D. It forms part of the awareness process
  B. It identifies omissions in the plan

• Question 1440:

  What is the document that describes the measures that have been implemented or planned to correct any deficiencies noted during the assessment of the security controls?

  A. Business Impact Analysis (BIA)
  B. Security Assessment Report (SAR)
  C. Plan of Action and Milestones {POAandM)
  D. Security Assessment Plan (SAP)
  C. Plan of Action and Milestones {POAandM)