ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 141:

  Which of the following is a disadvantage of a behavior-based ID system?

  A. The activity and behavior of the users while in the networked system may not be static enough to effectively implement a behavior-based ID system.
  B. The activity and behavior of the users while in the networked system may be dynamic enough to effectively implement a behavior-based ID system.
  C. The activity and behavior of the users while in the networked system may not be dynamic enough to effectively implement a behavior-based ID system.
  D. The system is characterized by high false negative rates where intrusions are missed.
  A. The activity and behavior of the users while in the networked system may not be static enough to effectively implement a behavior-based ID system.

• Question 142:

  During an investigation of database theft from an organization's web site, it was determined that the Structured Query Language (SQL) injection technique was used despite input validation with client-side scripting. Which of the following provides the GREATEST protection against the same attack occurring again?

  A. Encrypt communications between the servers
  B. Encrypt the web server traffic
  C. Implement server-side filtering
  D. Filter outgoing traffic at the perimeter firewall
  C. Implement server-side filtering

• Question 143:

  Which of the following is MOST appropriate for protecting confidentially of data stored on a hard drive?

  A. Triple Data Encryption Standard (3DES)
  B. Advanced Encryption Standard (AES)
  C. Message Digest 5 (MD5)
  D. Secure Hash Algorithm 2(SHA-2)
  B. Advanced Encryption Standard (AES)

• Question 144:

  In a data classification scheme, the data is owned by the

  A. system security managers
  B. business managers
  C. Information Technology (IT) managers
  D. end users
  B. business managers

• Question 145:

  What are the roles within a scrum methodoligy?

  A. System owner, scrum master, and development team
  B. prduct owner, scrum master, and scrum team
  C. Scrum master, requirements manager, and development team
  D. Scrum master, quality assurance team, and scrum team
  B. prduct owner, scrum master, and scrum team

• Question 146:

  What BEST describes data ownership?

  A. Geographic sovereignty
  B. Confidentiality and integrity
  C. Accuracy and precision
  D. Legal responsibilities
  D. Legal responsibilities

• Question 147:

  Which of the following is the PRIMARY risk associated with Extensible Markup Language (XML) applications?

  A. Users can manipulate the code.
  B. The stack data structure cannot be replicated.
  C. The stack data structure is repetitive.
  D. Potential sensitive data leakage.
  A. Users can manipulate the code.

• Question 148:

  Which of the following is the PRIMARY reason for selecting the appropriate level of detail for audit record generation?

  A. Lower costs throughout the System Development Life Cycle (SDLC)
  B. Facilitate a root cause analysis (RCA)
  C. Enable generation of corrective action reports
  D. Avoid lengthy audit reports
  B. Facilitate a root cause analysis (RCA)

• Question 149:

  The security architect has been mandated to assess the security of various brands of mobile devices. At what phase of the product lifecycle would this be MOST likely to occur?

  A. Disposal
  B. Implementation
  C. Development
  D. Operations and maintenance
  C. Development

• Question 150:

  Which of the following is a function of Security Assertion Markup Language (SAML)?

  A. File allocation
  B. Redundancy check
  C. Extended validation
  D. Policy enforcement
  D. Policy enforcement