ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1641:

  Which of the following BEST describes botnets?

  A. Computer systems on the Internet that are set up to trap people who attempt to penetrate other computer systems
  B. Set of related programs that protects the resources of a private network from other networks
  C. Small network inserted in a neutral zone between an organization's private network and the outside public network
  D. Groups of computers that are used to launch destructive attacks
  D. Groups of computers that are used to launch destructive attacks

• Question 1642:

  When configuring Extensible Authentication Protocol (EAP) in a Voice over Internet Protocol (VoIP) network, which of the following authentication types is the MOST secure?

  A. EAP-Transport Layer Security (TLS)
  B. EAP-Flexible Authentication via Secure Tunneling
  C. EAP-Tunneled Transport Layer Security (TLS)
  D. EAP-Protected Extensible Authentication Protocol (PEAP)
  A. EAP-Transport Layer Security (TLS)

• Question 1643:

  What is the FIRST step in risk management?

  A. Establish the expectations of stakeholder involvement.
  B. Identify the factors that have potential to impact business.
  C. Establish the scope and actions required.
  D. Identify existing controls in the environment.
  C. Establish the scope and actions required.

• Question 1644:

  When would an organization review a Business Continuity Management (BCM) system?

  A. When major changes occur on systems
  B. When personnel changes occur
  C. Before and after Disaster Recovery (DR) tests
  D. At planned intervals
  C. Before and after Disaster Recovery (DR) tests

• Question 1645:

  What is the MOST effective countermeasure to a malicious code attack against a mobile system?

  A. Sandbox
  B. Change control
  C. Memory management
  D. Public-Key Infrastructure (PKI)
  A. Sandbox

• Question 1646:

  Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

  A. Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery
  B. Data decrease related to storing personal information
  C. Reduction in operational costs to the agency
  D. Enable business objectives so departments can focus on mission rather than the business of identity management
  C. Reduction in operational costs to the agency

• Question 1647:

  Which of the following is a PRIMARY advantage of using a third-party identity service?

  A. Consolidation of multiple providers
  B. Directory synchronization
  C. Web based logon
  D. Automated account management
  D. Automated account management

• Question 1648:

  What principle requires that changes to the plaintext affect many parts of the ciphertext?

  A. Diffusion
  B. Encapsulation
  C. Obfuscation
  D. Permutation
  A. Diffusion

• Question 1649:

  Refer to the information below to answer the question.

  During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

  If it is discovered that large quantities of information have been copied by the unauthorized individual, what attribute of the data has been compromised?

  A. Availability
  B. Integrity
  C. Accountability
  D. Confidentiality
  D. Confidentiality

• Question 1650:

  Users require access rights that allow them to view the average salary of groups of employees. Which control would prevent the users from obtaining an individual employee's salary?

  A. Limit access to predefined queries
  B. Segregate the database into a small number of partitions each with a separate security level
  C. Implement Role Based Access Control (RBAC)
  D. Reduce the number of people who have access to the system for statistical purposes
  C. Implement Role Based Access Control (RBAC)