ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1581:

  In which of the following scenarios is locking server cabinets and limiting access to keys preferable to locking the server room to prevent unauthorized access?

  A. Server cabinets are located in an unshared workspace.
  B. Server cabinets are located in an isolated server farm.
  C. Server hardware is located in a remote area.
  D. Server cabinets share workspace with multiple projects.
  D. Server cabinets share workspace with multiple projects.

• Question 1582:

  A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data?

  A. Public Key Infrastructure (PKI) and digital signatures
  B. Trusted server certificates and passphrases
  C. User ID and password
  D. Asymmetric encryption and User ID
  A. Public Key Infrastructure (PKI) and digital signatures

• Question 1583:

  Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Which of the following is the FIRST step in developing an ISCM strategy and implementing an ISCM program?

  A. Define a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.
  B. Conduct a vulnerability assessment to discover current threats against the environment and incorporate them into the program.
  C. Respond to findings with technical management, and operational mitigating activities or acceptance, transference/sharing, or avoidance/rejection.
  D. Analyze the data collected and report findings, determining the appropriate response. It may be necessary to collect additional information to clarify or supplement existing monitoring data.
  A. Define a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.

• Question 1584:

  A vulnerability test on an Information System (IS) is conducted to

  A. exploit security weaknesses in the IS.
  B. measure system performance on systems with weak security controls.
  C. evaluate the effectiveness of security controls.
  D. prepare for Disaster Recovery (DR) planning.
  C. evaluate the effectiveness of security controls.

• Question 1585:

  Which of the following is ensured when hashing files during chain of custody handling?

  A. Availability
  B. Accountability
  C. Integrity
  D. Non-repudiation
  C. Integrity

• Question 1586:

  Who should perform the design review to uncover security design flaws as part of the Software Development Life Cycle (SDLC)?

  A. The business owner
  B. security subject matter expert (SME)
  C. The application owner
  D. A developer subject matter expert (SME)
  B. security subject matter expert (SME)

• Question 1587:

  What is the BEST method if an investigator wishes to analyze a hard drive which may be used as evidence?

  A. Leave the hard drive in place and use only verified and authenticated Operating Systems (OS) utilities to analyze the contents
  B. Log into the system and immediately make a copy of all relevant files to a Write Once, Read Many (WORM) device
  C. Remove the hard drive from the system and make a copy of the hard drive's contents using imaging hardware
  D. Use a separate bootable device to make a copy of the hard drive before booting the system and analyzing the hard drive
  C. Remove the hard drive from the system and make a copy of the hard drive's contents using imaging hardware

• Question 1588:

  An Intrusion Detection System (IDS) has recently been deployed in a Demilitarized Zone (DMZ). The IDS detects a flood of malformed packets. Which of the following BEST describes what has occurred?

  A. Denial of Service (DoS) attack
  B. Address Resolution Protocol (ARP) spoof
  C. Buffer overflow
  D. Ping flood attack
  A. Denial of Service (DoS) attack

• Question 1589:

  The initial security categorization should be done early in the system life cycle and should be reviewed periodically. Why is it important for this to be done correctly?

  A. It determines the security requirements.
  B. It affects other steps in the certification and accreditation process.
  C. It determines the functional and operational requirements.
  D. The system engineering process works with selected security controls.
  B. It affects other steps in the certification and accreditation process.

• Question 1590:

  In a DevOps environment, which of the following actions is MOST necessary to have confidence in the quality of the changes being made?

  A. Prepare to take corrective actions quickly.
  B. Receive approval from the change review board.
  C. Review logs for any anomalies.
  D. Automate functionality testing.
  B. Receive approval from the change review board.