ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1621:

  Host-Based Intrusion Protection (HIPS) systems are often deployed in monitoring or learning mode during their initial implementation. What is the objective of starting in this mode?

  A. Automatically create exceptions for specific actions or files
  B. Determine which files are unsafe to access and blacklist them
  C. Automatically whitelist actions or files known to the system
  D. Build a baseline of normal or safe system events for review
  D. Build a baseline of normal or safe system events for review

• Question 1622:

  When building a data classification scheme, which of the following is the PRIMARY concern?

  A. Purpose
  B. Cost effectiveness
  C. Availability
  D. Authenticity
  D. Authenticity

• Question 1623:

  Discretionary Access Control (DAC) is based on which of the following?

  A. Information source and destination
  B. Identification of subjects and objects
  C. Security labels and privileges
  D. Standards and guidelines
  B. Identification of subjects and objects

• Question 1624:

  Which of the following techniques is effective to detect taps in fiber optic cables?

  A. Taking baseline signal level of the cable
  B. Measuring signal through external oscillator solution devices
  C. Outlining electromagnetic field strength
  D. Performing network vulnerability scanning
  B. Measuring signal through external oscillator solution devices

• Question 1625:

  Which of the following uses the destination IP address to forward packets?

  A. A bridge
  B. A Layer 2 switch
  C. A router
  D. A repeater
  C. A router

• Question 1626:

  Which of the following is the MOST appropriate control for asset data labeling procedures?

  A. Logging data media to provide a physical inventory control
  B. Reviewing audit trails of logging records
  C. Categorizing the types of media being used
  D. Reviewing off-site storage access controls
  C. Categorizing the types of media being used

• Question 1627:

  Which of the following problems is not addressed by using OAuth (Open Standard to Authorization) 2.0 to integrate a third-party identity provider for a service?

  A. Resource Servers are required to use passwords to authenticate end users.
  B. Revocation of access of some users of the third party instead of all the users from the third party.
  C. Compromise of the third party means compromise of all the users in the service.
  D. Guest users need to authenticate with the third party identity provider.
  C. Compromise of the third party means compromise of all the users in the service.

• Question 1628:

  Which stage in the identity management (IdM) lifecycle constitutes the GREATEST risk for an enterprise if performed incorrectly?

  A. Propagating
  B. Deprovisioning
  C. Provisioning
  D. Maintaining
  B. Deprovisioning

• Question 1629:

  An architect has observed the complexity of a new design has introduced increased risk. After review, the test team lead cannot determine how to test for some of the security controls the organization requires to be in place. Which of the following secure design principles has MOST likely been violated?

  A. Complete remediation
  B. Economy of mechanism
  C. Psychological acceptability
  D. Least privilege
  D. Least privilege

• Question 1630:

  Which of the following open source software issues pose the MOST risk to an application?

  A. The software is beyond end of life and the vendor is out of business.
  B. The software is not used or popular in the development community.
  C. The software has multiple Common Vulnerabilities and Exposures (CVE) and only some are remediated.
  D. The software has multiple Common Vulnerabilities and Exposures (CVE) but the CVEs are classified as low risks.
  C. The software has multiple Common Vulnerabilities and Exposures (CVE) and only some are remediated.