ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 1691:

  When implementing controls in a heterogeneous end-point network for an organization, it is critical that

  A. hosts are able to establish network communications.
  B. users can make modifications to their security software configurations.
  C. common software security components be implemented across all hosts.
  D. firewalls running on each host are fully customizable by the user.
  C. common software security components be implemented across all hosts.

• Question 1692:

  A new site's gateway isn't able to form a tunnel to the existing site-to-site Internet Protocol Security (IPsec) virtual private network (VPN) device at headquarters. Devices at the new site have no problem accessing resources on the Internet. When testing connectivity between the remote site's gateway, it was observed that the external Internet Protocol (IP) address of the gateway was set to 192.168.1.1. and was configured to send outbound traffic to the Internet Service Provider (ISP) gateway at4 192.168.1.2. Which of the following would be the BEST way to resolve the issue and get the remote site connected?

  A. Enable IPSec tunnel mode on the VPN devices at the new site and the corporate headquarters.
  B. Enable Layer 2 Tunneling Protocol (L2TP) on the VPN devices at the new site and the corporate headquarters.
  C. Enable Point-to-Point Tunneling Protocol (PPTP) on the VPN devices at the new site and the corporate headquarters.
  D. Enable Network Address Translation (NAT) - Traversal on the VPN devices at the new site and the corporate headquarters.
  A. Enable IPSec tunnel mode on the VPN devices at the new site and the corporate headquarters.

• Question 1693:

  Which of the following is of GREATEST assistance to auditors when reviewing system configurations?

  A. Change management processes
  B. User administration procedures
  C. Operating System (OS) baselines
  D. System backup documentation
  A. Change management processes

• Question 1694:

  What type of encryption is used to protect sensitive data in transit over a network?

  A. Payload encryption and transport encryption
  B. Authentication Headers (AH)
  C. Keyed-Hashing for Message Authentication
  D. Point-to-Point Encryption (P2PE)
  A. Payload encryption and transport encryption

• Question 1695:

  Which of the following is the MOST important reason for using a chain of custody from?

  A. To document those who were In possession of the evidence at every point In time
  B. To collect records of all digital forensic professionals working on a case
  C. To document collected digital evidence
  D. To ensure that digital evidence is not overlooked during the analysis
  A. To document those who were In possession of the evidence at every point In time

• Question 1696:

  A security architect is reviewing plans for an application with a Recovery Point Objective (RPO) of 15 minutes. The current design has all of the application infrastructure located within one co-location data center. Which security principle is the architect currently assessing?

  A. Availability
  B. Disaster recovery (DR)
  C. Redundancy
  D. Business continuity (BC)
  D. Business continuity (BC)

• Question 1697:

  Which of the following controls is the most for a system identified as critical in terms of data and function to the organization?

  A. Preventive controls
  B. Monitoring control
  C. Cost controls
  D. Compensating controls
  B. Monitoring control

• Question 1698:

  What maintenance activity is responsible for defining, implementing, and testing updates to application systems?

  A. Program change control
  B. Regression testing
  C. Export exception control
  D. User acceptance testing
  A. Program change control

• Question 1699:

  Which of the following protects personally identifiable information (PII) used by financial services organizations?

  A. National Institute of Standards and Technology (NIST) SP 800-53
  B. Gramm-Leach-Bliley Act (GLBA)
  C. Payment Card Industry Data Security Standard (PCI-DSS)
  D. Health Insurance Portability and Accountability Act (HIPAA)
  B. Gramm-Leach-Bliley Act (GLBA)

• Question 1700:

  From a cryptographic perspective, the service of non-repudiation includes which of the following features?

  A. Validity of digital certificates
  B. Validity of the authorization rules
  C. Proof of authenticity of the message
  D. Proof of integrity of the message
  C. Proof of authenticity of the message