ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1551:

  To protect auditable information, which of the following MUST be configured to only allow read access?

  A. Logging configurations
  B. Transaction log files
  C. User account configurations
  D. Access control lists (ACL)
  B. Transaction log files

• Question 1552:

  Why are mobile devices sometimes difficult to investigate in a forensic examination?

  A. There are no forensics tools available for examination.
  B. They may contain cryptographic protection.
  C. They have password-based security at logon.
  D. They may have proprietary software installed to protect them.
  D. They may have proprietary software installed to protect them.

• Question 1553:

  DRAG DROP

  Match the functional roles in an external audit to their responsibilities. Drag each role on the left to its corresponding responsibility on the right.

  Select and Place:

  

  

• Question 1554:

  A client has reviewed a vulnerability assessment report and has stated it is inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operating system (OS) was not properly detected. Where in the vulnerability assessment process did the error MOST likely occur?

  A. Enumeration
  B. Detection
  C. Reporting
  D. Discovery
  B. Detection

• Question 1555:

  Which of the following practices provides the development team with a definition of security and identification of threats in designing software?

  A. Penetration testing
  B. Stakeholder review
  C. Threat modeling
  D. Requirements review
  C. Threat modeling

• Question 1556:

  Which is the MOST effective countermeasure to prevent electromagnetic emanations on unshielded data cable?

  A. Move cable are away from exterior facing windows
  B. Encase exposed cable runs in metal conduit
  C. Enable Power over Ethernet (PoE) to increase voltage
  D. Bundle exposed cables together to disguise their signals
  B. Encase exposed cable runs in metal conduit

• Question 1557:

  An organization is setting a security assessment scope with the goal of developing a Security Management Program (SMP). The next step is to select an approach for conducting the risk assessment. Which of the following approaches is MOST effective for the SMP?

  A. Data driven risk assessment with a focus on data
  B. Security controls driven assessment that focuses on controls management
  C. Business processes based risk assessment with a focus on business goals
  D. Asset driven risk assessment with a focus on the assets
  A. Data driven risk assessment with a focus on data

• Question 1558:

  Who in the organization is accountable for classification of data information assets?

  A. Data owner
  B. Data architect
  C. Chief Information Security Officer (CISO)
  D. Chief Information Officer (CIO)
  A. Data owner

• Question 1559:

  Which one of the following documentation should be included in a Disaster Recovery (DR) package?

  A. Source code, compiled code, firmware updates, operational log book and manuals
  B. Data encrypted in original format, auditable transaction data, and recovery instructions tailored for future extraction on demand
  C. Hardware configuration instructions, hardware configuration software, an operating system image, a data restoration option, media retrieval instructions, and contact information
  D. System configuration including hardware, software hardware interfaces, software Application Programming Interface (API) configuration, data structure, and transaction data from the previous period
  C. Hardware configuration instructions, hardware configuration software, an operating system image, a data restoration option, media retrieval instructions, and contact information

• Question 1560:

  Which of the following is the MOST challenging issue in apprehending cyber criminals?

  A. They often use sophisticated method to commit a crime.
  B. It is often hard to collect and maintain integrity of digital evidence.
  C. The crime is often committed from a different jurisdiction.
  D. There is often no physical evidence involved.
  C. The crime is often committed from a different jurisdiction.