ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1531:

  Multi-threaded applications are more at risk than single-threaded applications to

  A. race conditions.
  B. virus infection.
  C. packet sniffing.
  D. database injection.
  A. race conditions.

• Question 1532:

  An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

  A. Implement packet filtering on the network firewalls
  B. Install Host Based Intrusion Detection Systems (HIDS)
  C. Require strong authentication for administrators
  D. Implement logical network segmentation at the switches
  D. Implement logical network segmentation at the switches

• Question 1533:

  Which of the following is the PRIMARY objective of performing scans with an active discovery tool?

  A. Discovering virus and malware activity
  B. Discovering changes for security configuration management (CM)
  C. Asset identification (ID) and inventory management
  D. Vulnerability management and remediation
  C. Asset identification (ID) and inventory management

• Question 1534:

  Which is the RECOMMENDED configuration mode for sensors for an intrusion prevention system (IPS) if the prevention capabilities will be used?

  A. Active
  B. Passive
  C. Inline
  D. Span
  C. Inline

• Question 1535:

  A security professional was tasked with rebuilding a company's wireless infrastructure. Which of the following are the MOST important factors to consider while making a decision on which wireless spectrum to deploy?

  A. Hybrid frequency band, service set identifier (SSID), and interpolation
  B. Performance, geographic location, and radio signal interference
  C. Facility size, intermodulation, and direct satellite service
  D. Existing client devices, manufacturer reputation, and electrical interference
  D. Existing client devices, manufacturer reputation, and electrical interference

• Question 1536:

  Which one of the following describes granularity?

  A. Maximum number of entries available in an Access Control List (ACL)
  B. Fineness to which a trusted system can authenticate users
  C. Number of violations divided by the number of total accesses
  D. Fineness to which an access control system can be adjusted
  D. Fineness to which an access control system can be adjusted

• Question 1537:

  Which is the second phase of public key Infrastructure (pk1) key/certificate life-cycle management?

  A. Issued Phase
  B. Cancellation Phase
  C. Implementation phase
  D. Initialization Phase
  C. Implementation phase

• Question 1538:

  As part of the security assessment plan, the security professional has been asked to use a negative testing strategy on a new website. Which of the following actions would be performed?

  A. Use a web scanner to scan for vulnerabilities within the website.
  B. Perform a code review to ensure that the database references are properly addressed.
  C. Establish a secure connection to the web server to validate that only the approved ports are open.
  D. Enter only numbers in the web form and verify that the website prompts the user to enter a valid input.
  D. Enter only numbers in the web form and verify that the website prompts the user to enter a valid input.

• Question 1539:

  The development team has been tasked with collecting data from biometric devices. The application will support a variety of collection data streams. During the testing phase, the team utilizes data from an old production database in a secure testing environment. What principle has the team taken into consideration?

  A. biometric data cannot be changed.
  B. Separate biometric data streams require increased security.
  C. The biometric devices are unknown.
  D. Biometric data must be protected from disclosure.
  D. Biometric data must be protected from disclosure.

• Question 1540:

  Who determines the required level of independence for security control Assessors (SCA)?

  A. Business owner
  B. Authorizing Official (AO)
  C. Chief Information Security Officer (CISC)
  D. System owner
  B. Authorizing Official (AO)