ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1511:

  Which of the following MUST a security policy include to be effective within an organization?

  A. A list of all standards that apply to the policy
  B. Owner information and date of last revision
  C. Disciplinary measures for non-compliance
  D. Strong statements that clearly define the problem
  B. Owner information and date of last revision

• Question 1512:

  What should be the INITIAL response to Intrusion Detection System/Intrusion Prevention System (IDS/IPS) alerts?

  A. Ensure that the Incident Response Plan is available and current.
  B. Determine the traffic's initial source and block the appropriate port.
  C. Disable or disconnect suspected target and source systems.
  D. Verify the threat and determine the scope of the attack.
  D. Verify the threat and determine the scope of the attack.

• Question 1513:

  Which of the following is the MOST common use of the Online Certificate Status Protocol (OCSP)?

  A. To obtain the expiration date of an X.509 digital certificate
  B. To obtain the revocation status of an X.509 digital certificate
  C. To obtain the author name of an X.509 digital certificate
  D. To verify the validity of an X.509 digital certificate
  D. To verify the validity of an X.509 digital certificate

• Question 1514:

  If the wide area network (WAN) is supporting converged applications like Voice over Internet Protocol (VoIP), which of the following becomes even MORE essential to the assurance of network?

  A. Classless Inter-Domain Routing (CIDR)
  B. Deterministic routing
  C. Internet Protocol (IP) routing lookups
  D. Boundary routing
  C. Internet Protocol (IP) routing lookups

• Question 1515:

  Alternate encoding such as hexadecimal representations is MOST often observed in which of the following forms of attack?

  A. Smurf
  B. Rootkit exploit
  C. Denial of Service (DoS)
  D. Cross site scripting (XSS)
  D. Cross site scripting (XSS)

• Question 1516:

  A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MOST likely to resolve the issues associated with user access?

  A. Implement a Privileged Access Management (PAM) system.
  B. Implement a role-based access control (RBAC) system.
  C. Implement identity and access management (IAM) platform.
  D. Implement a single sign-on (SSO) platform.
  C. Implement identity and access management (IAM) platform.

• Question 1517:

  According to best practice, which of the following groups is the MOST effective in performing an information security compliance audit?

  A. In-house security administrators
  B. In-house Network Team
  C. Disaster Recovery (DR) Team
  D. External consultants
  D. External consultants

• Question 1518:

  Which of the following MUST system and database administrators be aware of and apply when configuring systems used for storing personal employee data?

  A. Secondary use of the data by business users
  B. The organization's security policies and standards
  C. The business purpose for which the data is to be used
  D. The overall protection of corporate resources and data
  B. The organization's security policies and standards

• Question 1519:

  How should the retention period for an organization's social media content be defined?

  A. By the retention policies of each social media service
  B. By the records retention policy of the organization
  C. By the Chief Information Officer (CIO)
  D. By the amount of available storage space
  B. By the records retention policy of the organization

• Question 1520:

  An organization plan on purchasing a custom software product developed by a small vendor to support its business model.

  Which unique consideration should be made part of the contractual agreement potential long-term risks associated with creating this dependency?

  A. A source code escrow clause
  B. Right to request an independent review of the software source code
  C. Due diligence form requesting statements of compliance with security requirements
  D. Access to the technical documentation
  B. Right to request an independent review of the software source code