ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1461:

  Which of the following is the MOST effective countermeasure against data remanence?

  A. Destruction
  B. Clearing
  C. Purging
  D. Encryption
  A. Destruction

• Question 1462:

  Which of the following is the MOST important consideration when developing a Disaster Recovery Plan (DRP)?

  A. The dynamic reconfiguration of systems
  B. The cost of downtime
  C. A recovery strategy for all business processes
  D. A containment strategy
  C. A recovery strategy for all business processes

• Question 1463:

  Which evidence collecting technique would be utilized when it is believed an attacker is employing a rootkit and a quick analysis is needed?

  A. Memory collection
  B. Forensic disk imaging
  C. Malware analysis
  D. Live response
  A. Memory collection

• Question 1464:

  An organization acquired used technological equipment. This equipment will be integrated with new and existing business processes. What is the MOST appropriate consideration to identify the equipment that requires protection?

  A. Total monetary value of the acquisition
  B. The age of the computing hardware
  C. Stakeholder concerns of how the assets are used
  D. Length and extent of support by the vendor
  C. Stakeholder concerns of how the assets are used

• Question 1465:

  What is the PRIMARY objective of business continuity planning?

  A. Establishing a cost estimate for business continuity recovery operations
  B. Restoring computer systems to normal operations as soon as possible
  C. Strengthening the perceived importance of business continuity planning among senior management
  D. Ensuring timely recovery of mission-critical business processes
  B. Restoring computer systems to normal operations as soon as possible

• Question 1466:

  While classifying credit card data related to Payment Card Industry Data Security Standards (PCI-DSS), which of the following is a PRIMARY security requirement?

  A. Processor agreements with card holders
  B. Three-year retention of data
  C. Encryption of data
  D. Specific card disposal methodology
  C. Encryption of data

• Question 1467:

  Which of the following statements is TRUE regarding equivalence class testing?

  A. Test inputs are obtained from the derived boundaries of the given functional specifications.
  B. It is characterized by the stateless behavior of a process implemented in a function.
  C. An entire partition can be covered by considering only one representative value from that partition.
  D. It is useful for testing communications protocols and graphical user interfaces.
  C. An entire partition can be covered by considering only one representative value from that partition.

• Question 1468:

  Why are mobile devices sometimes difficult to investigate in a forensic examination?

  A. There are no forensic tools available for examination.
  B. They may have proprietary software installed to protect them.
  C. They have password-based security at logon.
  D. They may contain cryptographic protection.
  B. They may have proprietary software installed to protect them.

• Question 1469:

  Which of the following statements BEST distinguishes a stateful packet inspection firewall from a stateless packet filter firewall?

  A. The SPI inspects the flags on Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) packets.
  B. The SPI inspects the traffic in the context of a session.
  C. The SPI is capable of dropping packets based on a pre-defined rule set.
  D. The SPI inspects traffic on a packet-by-packet basis.
  B. The SPI inspects the traffic in the context of a session.

• Question 1470:

  Which of the following four iterative steps are conducted on third-party vendors in an on-going basis?

  A. Investigate, Evaluate, Respond, Monitor
  B. Frame, Assess, Respond, Monitor
  C. Frame, Assess, Remediate, Monitor
  D. Investigate, Assess, Remediate, Monitor
  C. Frame, Assess, Remediate, Monitor