ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 161:

  Which of the following is considered the PRIMARY security issue associated with encrypted e-mail messages?

  A. Key distribution
  B. Storing attachments in centralized repositories
  C. Scanning for viruses and other malware
  D. Greater costs associated for backups and restores
  C. Scanning for viruses and other malware

• Question 162:

  A minima l implementation of endpoint security includes which of the following?

  A. Trusted platforms
  B. Host-based firewalls
  C. Token-based authentication
  D. Wireless Access Points (AP)
  B. Host-based firewalls

• Question 163:

  Concerning appropriate data retention policies, which of the following is the MAIN risk factor for the availability of archived information?

  A. Data stored in third-party environments.
  B. Data maintained offline requires a higher time to access.
  C. Data recorded in obsolete media cannot be read.
  D. Retention of data involves a cost.
  C. Data recorded in obsolete media cannot be read.

• Question 164:

  Which of the following is the BEST reason for writing an information security policy?

  A. To support information security governance
  B. To reduce the number of audit findings
  C. To deter attackers
  D. To implement effective information security controls
  A. To support information security governance

• Question 165:

  Which of the following is a common feature of an Identity as a Service (IDaaS) solution?

  A. Single Sign-On (SSO) authentication support
  B. Privileged user authentication support
  C. Password reset service support
  D. Terminal Access Controller Access Control System (TACACS) authentication support
  A. Single Sign-On (SSO) authentication support

• Question 166:

  A web application requires users to register before they can use its services. Users must choose a unique username and a password that contains a minimum of eight characters. Which method MUST be used to store these passwords to ensure offline attacks are difficult?

  A. Use an encryption algorithm that is fast with a random per-user encryption key.
  B. Use a hash function that is fast with a per-user random salt.
  C. Use a hash function with a cost factor and a per-user random salt.
  D. Use an encryption algorithm with a random master key.
  C. Use a hash function with a cost factor and a per-user random salt.

• Question 167:

  In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what changes should be made to the resource's access to the production operating system (OS) directory structure?

  A. From Read Only privileges to No Access Privileges
  B. From Author privileges to Administrator privileges
  C. From Administrator privileges to No Access privileges
  D. From No Access Privileges to Author privileges
  C. From Administrator privileges to No Access privileges

• Question 168:

  Which of the following is the BEST way to protect against structured Query Language (SQL) injection?

  A. Restrict use of SELECT command.
  B. Restrict stored procedures.
  C. Enforce boundary checking.
  D. Restrict Hyper Text Markup Language (HTML) source code access.
  B. Restrict stored procedures.

• Question 169:

  Which of the following terms BEST describes a system which allows a user to log in and access multiple related servers and applications?

  A. Remote Desktop Protocol (RDP)
  B. Federated identity management (FIM)
  C. Single sign-on (SSO)
  D. Multi-factor authentication (MFA)
  B. Federated identity management (FIM)

• Question 170:

  The Secure Shell (SSH) version 2 protocol supports

  A. availability, accountability, compression, and integrity
  B. authentication, availability, confidentiality, and integrity
  C. accountability, compression, confidentiality, and integrity
  D. authentication, compression, confidentiality, and integrity
  D. authentication, compression, confidentiality, and integrity