ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1501:

  Which of the following is the MOST beneficial to review when performing an IT audit?

  A. Audit policy
  B. Security log
  C. Security policies
  D. Configuration settings
  C. Security policies

• Question 1502:

  A manufacturing organization wants to establish a Federated Identity Management (FIM) system with its 20 different supplier companies. Which of the following is the BEST solution for the manufacturing organization?

  A. Trusted third-party certification
  B. Lightweight Directory Access Protocol (LDAP)
  C. Security Assertion Markup language (SAML)
  D. Cross-certification
  C. Security Assertion Markup language (SAML)

• Question 1503:

  An internal Service Level Agreement (SLA) covering security is signed by senior managers and is in place. When should compliance to the SLA be reviewed to ensure that a good security posture is being delivered?

  A. As part of the SLA renewal process
  B. Prior to a planned security audit
  C. Immediately after a security breach
  D. At regularly scheduled meetings
  D. At regularly scheduled meetings

• Question 1504:

  Which of the following is a limitation of the Common Vulnerability Scoring System (CVSS) as it relates to conducting code review?

  A. It has normalized severity ratings.
  B. It has many worksheets and practices to implement.
  C. It aims to calculate the risk of published vulnerabilities.
  D. It requires a robust risk management framework to be put in place.
  C. It aims to calculate the risk of published vulnerabilities.

• Question 1505:

  An organization would like to secure a trusted and untrusted network. One of the requirements is to provide access to the trusted network from a few of the hosts from the untrusted network. Which of the following is the BEST device or system that should be deployed to enable this capability?

  A. Router
  B. Bastion host
  C. Forward proxy host
  D. Intrusion detection system (IDS)
  B. Bastion host

• Question 1506:

  Which of the following is an important design feature for the outer door o f a mantrap?

  A. Allow it to be opened by an alarmed emergency button.
  B. Do not allow anyone to enter it alone.
  C. Do not allow it to be observed by dosed-circuit television (CCTV) cameras.
  D. Allow it be opened when the inner door of the mantrap is also open
  A. Allow it to be opened by an alarmed emergency button.

• Question 1507:

  In Identity Management (IdM), when is the verification stage performed?

  A. As part of system sign-on
  B. Before creation of the identity
  C. After revocation of the identity
  D. During authorization of the identity
  A. As part of system sign-on

• Question 1508:

  Which of the following secure startup mechanisms are PRIMARILY designed to thwart attacks?

  A. Timing
  B. Cold boot
  C. Side channel
  D. Acoustic cryptanalysis
  B. Cold boot

• Question 1509:

  What is the BEST approach for controlling access to highly sensitive information when employees have the same level of security clearance?

  A. Audit logs
  B. Role-Based Access Control (RBAC)
  C. Two-factor authentication
  D. Application of least privilege
  B. Role-Based Access Control (RBAC)

• Question 1510:

  What is an advantage of Elliptic Curve Cryptography (ECC)?

  A. Cryptographic approach that does not require a fixed-length key
  B. Military-strength security that does not depend upon secrecy of the algorithm
  C. Opportunity to use shorter keys for the same level of security
  D. Ability to use much longer keys for greater security
  C. Opportunity to use shorter keys for the same level of security