ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1541:

  Which of the following is the BEST countermeasure to brute force login attacks?

  A. Changing all canonical passwords
  B. Decreasing the number of concurrent user sessions
  C. Restricting initial password delivery only in person
  D. Introducing a delay after failed system access attempts
  D. Introducing a delay after failed system access attempts

• Question 1542:

  Which of the following is the BEST approach for a forensic examiner to obtain the greatest amount of relevant information form malicious software?

  A. Analyze the behavior of the program.
  B. Examine the file properties and permissions.
  C. Review the code to identify its origin.
  D. Analyze the logs generated by the software.
  A. Analyze the behavior of the program.

• Question 1543:

  Which of the following protection is provided when using a Virtual Private Network (VPN) with Authentication Header (AH)?

  A. Payload encryption
  B. Sender confidentiality
  C. Sender non-repudiation
  D. Multi-factor authentication (MFA)
  C. Sender non-repudiation

• Question 1544:

  An organization is implementing security review as part of system development. Which of the following is the BEST technique to follow?

  A. Engage a third-party auditing firm.
  B. Review security architecture.
  C. Perform incremental assessments.
  D. Conduct penetration testing.
  C. Perform incremental assessments.

• Question 1545:

  An employee's home address should be categorized according to which of the following references?

  A. The consent form terms and conditions signed by employees
  B. The organization's data classification model
  C. Existing employee data classifications
  D. An organization security plan for human resources
  B. The organization's data classification model

• Question 1546:

  An international medical organization with headquarters in the United States (US) and branches in France wants to test a drug in both countries. What is the organization allowed to do with the test subject's data?

  A. Aggregate it into one database in the US
  B. Process it in the US, but store the information in France
  C. Share it with a third party
  D. Anonymize it and process it in the US
  D. Anonymize it and process it in the US

• Question 1547:

  After the INITIAL input o f a user identification (ID) and password, what is an authentication system that prompts the user for a different response each time the user logs on?

  A. Persons Identification Number (PIN)
  B. Secondary password
  C. Challenge response
  D. Voice authentication
  C. Challenge response

• Question 1548:

  What type of attack sends Internet Control Message Protocol (ICMP) echo requests to the target machine with a larger payload than the target can handle?

  A. Man-in-the-Middle (MITM)
  B. Denial of Service (DoS)
  C. Domain Name Server (DNS) poisoning
  D. Buffer overflow
  B. Denial of Service (DoS)

• Question 1549:

  What is the MOST significant benefit of an application upgrade that replaces randomly generated session keys with certificate based encryption for communications with backend servers?

  A. Non-repudiation
  B. Efficiency
  C. Confidentially
  D. Privacy
  C. Confidentially

• Question 1550:

  What is the MOST effective way to protect privacy?

  A. Eliminate or reduce collection of personal information.
  B. Encrypt all collected personal information.
  C. Classify all personal information at the highest information classification level.
  D. Apply tokenization to all personal information records.
  D. Apply tokenization to all personal information records.