ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1521:

  The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using

  A. INSERT and DELETE.
  B. GRANT and REVOKE.
  C. PUBLIC and PRIVATE.
  D. ROLLBACK and TERMINATE.
  B. GRANT and REVOKE.

• Question 1522:

  A security practitioner has just been assigned to address an ongoing Denial of Service (DoS) attack against the company's network, which includes an e-commerce web site. The strategy has to include defenses for any size of attack without rendering the company network unusable. Which of the following should be a PRIMARY concern when addressing this issue?

  A. Deal with end user education and training.
  B. Pay more for a dedicated path to the Internet.
  C. Allow legitimate connections while blocking malicious connections.
  D. Ensure the web sites are properly backed up on a daily basis.
  C. Allow legitimate connections while blocking malicious connections.

• Question 1523:

  Refer to the information below to answer the question.

  A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classification. The organization is subject to periodic independent reviews of access controls and violations. The organization uses wired and wireless networks and remote access. The organization also uses secure connections to branch offices and secure backup and recovery strategies for selected information and processes. What MUST the access control logs contain in addition to the identifier?

  A. Time of the access
  B. Security classification
  C. Denied access attempts
  D. Associated clearance
  A. Time of the access

• Question 1524:

  Which of the following BEST describes the purpose of Border Gateway Protocol (BGP)?

  A. Maintain a list of network paths between internet routers.
  B. Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.
  C. Provide firewall services to cloud-enabled applications.
  D. Maintain a list of efficient network paths between autonomous systems.
  B. Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.

• Question 1525:

  What is the BEST location in a network to place Virtual Private Network (VPN) devices when an internal review reveals network design flaws in remote access?

  A. In a dedicated Demilitarized Zone (DMZ)
  B. In its own separate Virtual Local Area Network (VLAN)
  C. At the Internet Service Provider (ISP)
  D. Outside the external firewall
  A. In a dedicated Demilitarized Zone (DMZ)

• Question 1526:

  An organization wants to define its physical perimeter. What primary device should be used to accomplish this objective if the organization's perimeter MUST cost-efficiently deter casual trespassers?

  A. Fences eight or more feet high with three strands of barbed wire
  B. Fences three to four feet high with a turnstile
  C. Fences accompanied by patrolling security guards
  D. Fences six to seven feet high with a painted gate
  A. Fences eight or more feet high with three strands of barbed wire

• Question 1527:

  Refer to the information below to answer the question.

  A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization. The third party needs to have

  A. processes that are identical to that of the organization doing the outsourcing.
  B. access to the original personnel that were on staff at the organization.
  C. the ability to maintain all of the applications in languages they are familiar with.
  D. access to the skill sets consistent with the programming languages used by the organization.
  D. access to the skill sets consistent with the programming languages used by the organization.

• Question 1528:

  A network scan found 50% of the systems with one or more critical vulnerabilities. Which of the following represents the BEST action?

  A. Assess vulnerability risk and program effectiveness.
  B. Assess vulnerability risk and business impact.
  C. Disconnect all systems with critical vulnerabilities.
  D. Disconnect systems with the most number of vulnerabilities.
  B. Assess vulnerability risk and business impact.

• Question 1529:

  In systems security engineering, what does the security principle of modularity provide?

  A. Documentation of functions
  B. Isolated functions and data
  C. Secure distribution of programs and data
  D. Minimal access to perform a function
  B. Isolated functions and data

• Question 1530:

  Which of the following will have the MOST influence on the definition and creation of data classification and data ownership policies?

  A. Data access control policies
  B. Threat modeling
  C. Common Criteria (CC)
  D. Business Impact Analysis (BIA)
  A. Data access control policies