ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1631:

  Which of the following violates identity and access management best practices?

  A. User accounts
  B. System accounts
  C. Generic accounts
  D. Privileged accounts
  C. Generic accounts

• Question 1632:

  Which of the following is most helpful in applying the principle of LEAST privilege?

  A. Establishing a sandboxing environment
  B. Setting up a Virtual Private Network (VPN) tunnel
  C. Monitoring and reviewing privileged sessions
  D. Introducing a job rotation program
  A. Establishing a sandboxing environment

• Question 1633:

  The Open Web Application Security Project's (OWASP) Software Assurance Maturity Model (SAMM) allows organizations to implement a flexible software security strategy to measure organizational impact based on what risk management aspect?

  A. Risk tolerance
  B. Risk exception
  C. Risk treatment
  D. Risk response
  D. Risk response

• Question 1634:

  Which one of the following security mechanisms provides the BEST way to restrict the execution of privileged procedures?

  A. Role Based Access Control (RBAC)
  B. Biometric access control
  C. Federated Identity Management (IdM)
  D. Application hardening
  A. Role Based Access Control (RBAC)

• Question 1635:

  Which of the following is the MAIN goal of a data retention policy?

  A. Ensure that data is destroyed properly.
  B. Ensure that data recovery can be done on the datA.
  C. Ensure the integrity and availability of data for a predetermined amount of time.
  D. Ensure the integrity and confidentiality of data for a predetermined amount of time.
  C. Ensure the integrity and availability of data for a predetermined amount of time.

• Question 1636:

  Which of the following is the MOST secure password technique?

  A. Passphrase
  B. One-time password
  C. Cognitive password
  D. Cipthertext
  B. One-time password

• Question 1637:

  The BEST way to check for good security programming practices, as well as auditing for possible backdoors, is to conduct

  A. log auditing.
  B. code reviews.
  C. impact assessments.
  D. static analysis.
  B. code reviews.

• Question 1638:

  Which of the following is a Key Performance Indicator (KPI) for a security training and awareness program?

  A. The number of security audits performed
  B. The number of attendees at security training events
  C. The number of security training materials created
  D. The number of security controls implemented
  D. The number of security controls implemented

• Question 1639:

  A security architect is reviewing an implemented security framework. After the review, the security architect wants to enhance the security by implementing segregation of duties (SoD) to address protection against fraud. Which security model BEST protects the integrity of data?

  A. The Brewer-Nash model
  B. The Biba Integrity model
  C. The Bell-LaPadula model
  D. The Clark-Wilson model
  D. The Clark-Wilson model

• Question 1640:

  Which of the following is the MOST effective corrective control to minimize the effects of a physical intrusion?

  A. Automatic videotaping of a possible intrusion
  B. Rapid response by guards or police to apprehend a possible intruder
  C. Activating bright lighting to frighten away a possible intruder
  D. Sounding a loud alarm to frighten away a possible intruder
  B. Rapid response by guards or police to apprehend a possible intruder