ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1491:

  Information security metrics provide the GREATEST value tp management when based upon the security manager's knowledge, which of following answer is conrrect?

  A. Likelihood of a security breach
  B. Value of information assets
  C. Cost of implementing effective controls
  D. Benefits related to quantitative analysts
  B. Value of information assets

• Question 1492:

  What is the P R IM A R Y reason criminal law is difficult to enforce when dealing with cyber-crime?

  A. Extradition treaties are rarely enforced.
  B. Numerous language barriers exist.
  C. Law enforcement agencies are understaffed.
  D. Jurisdiction is hard to define.
  D. Jurisdiction is hard to define.

• Question 1493:

  What is the MOST common cause of Remote Desktop Protocol (RDP) compromise?

  A. Port scan
  B. Brute force attack
  C. Remote exploit
  D. Social engineering
  B. Brute force attack

• Question 1494:

  Which of the following prevents improper aggregation of privileges in Role Based Access Control (RBAC)?

  A. Hierarchical inheritance
  B. Dynamic separation of duties
  C. The Clark-Wilson security model
  D. The Bell-LaPadula security model
  B. Dynamic separation of duties

• Question 1495:

  Which of the following BEST describes the purpose of performing security certification?

  A. To identify system threats, vulnerabilities, and acceptable level of risk
  B. To formalize the confirmation of compliance to security policies and standards
  C. To formalize the confirmation of completed risk mitigation and risk analysis
  D. To verify that system architecture and interconnections with other systems are effectively implemented
  B. To formalize the confirmation of compliance to security policies and standards

• Question 1496:

  What is the BEST approach to annual safety training?

  A. Base safety training requirements on staff member job descriptions.
  B. Safety training should address any gaps in a staff member's skill set.
  C. Ensure that staff members in positions with known safety risks are given proper training.
  D. Ensure that all staff members are provided with identical safety training.
  C. Ensure that staff members in positions with known safety risks are given proper training.

• Question 1497:

  Why would a system be structured to isolate different classes of information from one another and segregate them by user jurisdiction?

  A. The organization can avoid e-discovery processes in the event of litigation.
  B. The organization's infrastructure is clearly arranged and scope of responsibility is simplified.
  C. The organization can vary its system policies to comply with conflicting national laws.
  D. The organization is required to provide different services to various third-party organizations.
  C. The organization can vary its system policies to comply with conflicting national laws.

• Question 1498:

  At what level of the Open System Interconnection (OSI) model is data at rest on a Storage Area Network (SAN) located?

  A. Link layer
  B. Physical layer
  C. Session layer
  D. Application layer
  D. Application layer

• Question 1499:

  Which of the following is MOST critical in a contract in a contract for data disposal on a hard drive with a third party?

  A. Authorized destruction times
  B. Allowed unallocated disk space
  C. Amount of overwrites required
  D. Frequency of recovered media
  C. Amount of overwrites required

• Question 1500:

  Which of the following statements is TRUE regarding state-based analysis as a functional software testing technique?

  A. It is useful for testing communications protocols and graphical user interfaces.
  B. It is characterized by the stateless behavior of a process implemented in a function.
  C. Test inputs are obtained from the derived boundaries of the given functional specifications.
  D. An entire partition can be covered by considering only one representative value from that partition.
  A. It is useful for testing communications protocols and graphical user interfaces.