ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1451:

  Which of the following is the MOST important activity an organization performs to ensure that securiy is part of the overall organization culture?

  A. Ensue security policies are issued to all employees
  B. Perform formal reviews of security Incidents.
  C. Manage a program of security audits.
  D. Work with senior management to meet business goals.
  C. Manage a program of security audits.

• Question 1452:

  Which one of the following considerations has the LEAST impact when considering transmission security?

  A. Network availability
  B. Data integrity
  C. Network bandwidth
  D. Node locations
  C. Network bandwidth

• Question 1453:

  A web developer is completing a new web application security checklist before releasing the application to production. the task of disabling unecessary services is on the checklist. Which web application threat is being mitigated by this action?

  A. Security misconfiguration
  B. Sensitive data exposure
  C. Broken access control
  D. Session hijacking
  B. Sensitive data exposure

• Question 1454:

  During which of the following processes is least privilege implemented for a user account?

  A. Provision
  B. Approve
  C. Request
  D. Review
  A. Provision

• Question 1455:

  Which of the following BEST describes the responsibilities of a data owner?

  A. Ensuring quality and validation through periodic audits for ongoing data integrity
  B. Maintaining fundamental data availability, including data storage and archiving
  C. Ensuring accessibility to appropriate users, maintaining appropriate levels of data security
  D. Determining the impact the information has on the mission of the organization
  C. Ensuring accessibility to appropriate users, maintaining appropriate levels of data security

• Question 1456:

  A user is allowed to access the file labeled "Financial Forecast," but only between 9:00 a.m. and 5:00 p.m., Monday through Friday. Which type of access mechanism should be used to accomplish this?

  A. Minimum access control
  B. Rule-based access control
  C. Limited role-based access control (RBAC)
  D. Access control list (ACL)
  B. Rule-based access control

• Question 1457:

  Which of the following minimizes damage to information technology (IT) equipment stored in a data center when a false fire alarm event occurs?

  A. A pre-action system is installed.
  B. An open system is installed.
  C. A dry system is installed.
  D. A wet system is installed.
  C. A dry system is installed.

• Question 1458:

  Which of the following adds end-to-end security inside a Layer 2 Tunneling Protocol (L2TP) Internet Protocol Security (IPSec) connection?

  A. Temporal Key Integrity Protocol (TKIP)
  B. Secure Hash Algorithm (SHA)
  C. Secure Shell (SSH)
  D. Transport Layer Security (TLS)
  B. Secure Hash Algorithm (SHA)

• Question 1459:

  Which of the following examples is BEST to minimize the attack surface for a customer's private information?

  A. Obfuscation
  B. Collection limitation
  C. Authentication
  D. Data masking
  A. Obfuscation

• Question 1460:

  Which of the following methods MOST efficiently manages user accounts when using a third-party cloud-based application and directory solution?

  A. Cloud directory
  B. Directory synchronization
  C. Assurance framework
  D. Lightweight Directory Access Protocol (LDAP)
  B. Directory synchronization