ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1481:

  The 802.1x standard provides a framework for what?

  A. Network authentication for only wireless networks
  B. Network authentication for wired and wireless networks
  C. Wireless encryption using the Advanced Encryption Standard (AES)
  D. Wireless network encryption using Secure Sockets Layer (SSL)
  B. Network authentication for wired and wireless networks

• Question 1482:

  Which of the following is an advantage of on-premise Credential Management Systems?

  A. Lower infrastructure capital costs
  B. Control over system configuration
  C. Reduced administrative overhead
  D. Improved credential interoperability
  B. Control over system configuration

• Question 1483:

  What is the FIRST step in developing a security test and its evaluation?

  A. Determine testing methods
  B. Develop testing procedures
  C. Identify all applicable security requirements
  D. Identify people, processes, and products not in compliance
  C. Identify all applicable security requirements

• Question 1484:

  Which layer of the Open system Interconnect (OSI) model is responsible for secure data transfer between applications, flow control, and error detection and correction?

  A. Layer 2
  B. Layer 4
  C. Layer 5
  D. Layer 6
  B. Layer 4

• Question 1485:

  What is the PRIMARY purpose of auditing, as it relates to the security review cycle?

  A. To ensure the organization's controls and policies are working as intended
  B. To ensure the organization can still be publicly traded
  C. To ensure the organization's executive team won't be sued
  D. To ensure the organization meets contractual requirements
  A. To ensure the organization's controls and policies are working as intended

• Question 1486:

  A new Chief Information Officer (CIO) created a group to write a data retention policy based on applicable laws. Which of the following is the PRIMARY motivation for the policy?

  A. To back up data that is used on a daily basis
  B. To dispose of data in order to limit liability
  C. To reduce costs by reducing the amount of retained data
  D. To classify data according to what it contains
  D. To classify data according to what it contains

• Question 1487:

  Which of the following secures web transactions at the Transport Layer?

  A. Secure HyperText Transfer Protocol (S-HTTP)
  B. Secure Sockets Layer (SSL)
  C. Socket Security (SOCKS)
  D. Secure Shell (SSH)
  B. Secure Sockets Layer (SSL)

• Question 1488:

  Which of the following are important criteria when designing procedures and acceptance criteria for acquired software?

  A. Code quality, security, and origin
  B. Architecture, hardware, and firmware
  C. Data quality, provenance, and scaling
  D. Distributed, agile, and bench testing
  A. Code quality, security, and origin

• Question 1489:

  Which of the following can BEST prevent security flaws occurring in outsourced software development?

  A. Contractual requirements for code quality
  B. Licensing, code ownership and intellectual property rights
  C. Certification of the quality and accuracy of the work done
  D. Delivery dates, change management control and budgetary control
  C. Certification of the quality and accuracy of the work done

• Question 1490:

  Which of the following is the MOST efficient mechanism to account for all staff during a speedy nonemergency evacuation from a large security facility?

  A. Large mantrap where groups of individuals leaving are identified using facial recognition technology
  B. Radio Frequency Identification (RFID) sensors worn by each employee scanned by sensors at each exitdoor
  C. Emergency exits with push bars with coordinates at each exit checking off the individual against a predefined list
  D. Card-activated turnstile where individuals are validated upon exit
  B. Radio Frequency Identification (RFID) sensors worn by each employee scanned by sensors at each exitdoor