ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1681:

  How does security in a distributed file system using mutual authentication differ from file security in a multi-user host?

  A. Access control can rely on the Operating System (OS), but eavesdropping is not a risk
  B. Access control cannot rely on the Operating System (OS), and eavesdropping is a risk
  C. Access control can rely on the Operating System (OS), and eavesdropping is a risk
  D. Access control cannot rely on the Operating System (OS), and eavesdropping is not a risk
  C. Access control can rely on the Operating System (OS), and eavesdropping is a risk

• Question 1682:

  The goal of a Business Continuity Plan (BCP) training and awareness program is to

  A. enhance the skills required to create, maintain, and execute the plan.
  B. provide for a high level of recovery in case of disaster.
  C. describe the recovery organization to new employees.
  D. provide each recovery team with checklists and procedures.
  A. enhance the skills required to create, maintain, and execute the plan.

• Question 1683:

  Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

  A. Turn the computer on and collect volatile data
  B. Turn the computer on and collect network information
  C. Leave the computer off and prepare the computer for transportation to the laboratory
  D. Remove the hard drive, prepare it for transportation, and leave the hardware at the scene
  C. Leave the computer off and prepare the computer for transportation to the laboratory

• Question 1684:

  Which of the following MUST be in place to recognize a system attack?

  A. Stateful firewall
  B. Distributed antivirus
  C. Log analysis
  D. Passive honeypot
  C. Log analysis

• Question 1685:

  Which one of the following transmission media is MOST effective in preventing data interception?

  A. Microwave
  B. Twisted-pair
  C. Fiber optic
  D. Coaxial cable
  C. Fiber optic

• Question 1686:

  What is the motivation for use of the Online Certificate Status Protocol (OCSP)?

  A. To return information on multiple certificates
  B. To control access to Certificate Revocation List (CRL) requests
  C. To provide timely up-to-date responses to certificate queries
  D. To issue X.509v3 certificates more quickly
  D. To issue X.509v3 certificates more quickly

• Question 1687:

  A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a radio. Which of the following antenna types should the AP utilize?

  A. Omni
  B. Directional
  C. Yagi
  D. Parabolic
  A. Omni

• Question 1688:

  When conducting a third-party risk assessment of a new supplier, which of the following reports should be reviewed to confirm the operating effectiveness of the security, availability, confidentiality, and privacy trust principles?

  A. Service Organization Control (SOC) 1, Type 2
  B. Service Organization Control (SOC) 2, Type 2
  C. International Organization for Standardization (ISO) 27001
  D. International Organization for Standardization (ISO) 27002
  B. Service Organization Control (SOC) 2, Type 2

• Question 1689:

  An Information Technology (IT) professional attends a cybersecurity seminar on current incident response methodologies. What code of ethics canon is being observed?

  A. Provide diligent and competent service to principals
  B. Protect society, the commonwealth, and the infrastructure
  C. Advance and protect the profession
  D. Act honorable, honesty, justly, responsibly, and legally
  C. Advance and protect the profession

• Question 1690:

  A disadvantage of an application filtering firewall is that it can lead to

  A. a crash of the network as a result of user activities.
  B. performance degradation due to the rules applied.
  C. loss of packets on the network due to insufficient bandwidth.
  D. Internet Protocol (IP) spoofing by hackers.
  B. performance degradation due to the rules applied.