ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1671:

  Which of the following is an accurate statement when an assessment results in the discovery of vulnerabilities in a critical network component?

  A. The fact that every other host is sufficiently hardened does not change the fact frat the network is placed at risk of attack.
  B. There is little likelihood that the entire network is being placed at a significant risk of attack.
  C. A second assessment should immediately be performed after all vulnerabilities are corrected.
  D. There is a low possibility that any adjacently connected components have been compromised by an attacker
  C. A second assessment should immediately be performed after all vulnerabilities are corrected.

• Question 1672:

  Which of the following is a key responsibility for a data steward assigned to manage an enterprise data lake?

  A. Ensure proper business definition, value, and usage of data collected and stored within the enterprise data lake.
  B. Ensure adequate security controls applied to the enterprise data lake.
  C. Ensure proper and identifiable data owners for each data element stored within an enterprise data lake.
  D. Ensure that any data passing within remit is being used in accordance with the rules and regulations of the business.
  A. Ensure proper business definition, value, and usage of data collected and stored within the enterprise data lake.

• Question 1673:

  _______ are added to Linux passwords to increase their randomness.

  A. Salts
  B. Pepper
  C. Grains
  D. MD5 hashes
  E. Asymmetric algorithms
  A. Salts

• Question 1674:

  Which function does 802.1X provide?

  A. Network intrusion detection system (NIDS)
  B. Wireless access point (WAP)
  C. Wi-Fi Protected Access (WPA)
  D. Network Access Control (NAC)
  D. Network Access Control (NAC)

• Question 1675:

  During an audit, the auditor finds evidence of potentially illegal activity. Which of the following is the MOST appropriate action to take?

  A. Immediately call the police
  B. Work with the client to resolve the issue internally
  C. Advise the person performing the illegal activity to cease and desist
  D. Work with the client to report the activity to the appropriate authority
  D. Work with the client to report the activity to the appropriate authority

• Question 1676:

  Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

  A. Examine the device for physical tampering
  B. Implement more stringent baseline configurations
  C. Purge or re-image the hard disk drive
  D. Change access codes
  B. Implement more stringent baseline configurations

• Question 1677:

  Which of the following is MOST appropriate to collect evidence of a zero-day attack?

  A. Firewall
  B. Honeypot
  C. Antispam
  D. Antivirus
  B. Honeypot

• Question 1678:

  What is the MOST common security risk of a mobile device?

  A. Insecure communications link
  B. Data leakage
  C. Malware infection
  D. Data spoofing
  C. Malware infection

• Question 1679:

  Which of the following command line tools can be used in the reconnaissance phase of a network vulnerability assessment?

  A. dig
  B. ipconfig
  C. ifconfig
  D. nbstat
  A. dig

• Question 1680:

  An organization is required to comply with the Payment Card Industry Data Security Standard (PCI-DSS), what is the MOST effective approach to safeguard digital and paper media that contains cardholder data?

  A. Use and regularity update antivirus software.
  B. Maintain strict control over storage of media
  C. Mandate encryption of cardholder data.
  D. Configure firewall rules to protect the data.
  C. Mandate encryption of cardholder data.