ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 171:

  The MAIN use of Layer 2 Tunneling Protocol (L2TP) is to tunnel data

  A. through a firewall at the Session layer
  B. through a firewall at the Transport layer
  C. in the Point-to-Point Protocol (PPP)
  D. in the Payload Compression Protocol (PCP)
  C. in the Point-to-Point Protocol (PPP)

• Question 172:

  A company needs to provide employee access to travel services, which are hosted by a third-party service provider, Employee experience is important, and when users are already authenticated, access to the travel portal is seamless. Which of the following methods is used to share information and grant user access to the travel portal?

  A. Security Assertion Markup Language (SAML) access
  B. Single sign-on (SSO) access
  C. Open Authorization (OAuth) access
  D. Federated access
  D. Federated access

• Question 173:

  At which layer of the Open Systems Interconnect (OSI) model are the source and destination address for a datagram handled?

  A. Transport Layer
  B. Data-Link Layer
  C. Network Layer
  D. Application Layer
  C. Network Layer

• Question 174:

  Digital non-repudiation requires which of the following?

  A. A trusted third-party
  B. Appropriate corporate policies
  C. Symmetric encryption
  D. Multifunction access cards
  A. A trusted third-party

• Question 175:

  At which of the following phases of a software development life cycle are security and access controls normally designed?

  A. Coding
  B. Product design
  C. Software plans and requirements
  D. Detailed design
  D. Detailed design

• Question 176:

  Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?

  A. Time separation
  B. Trusted Computing Base (TCB)
  C. Reference monitor
  D. Security kernel
  D. Security kernel

• Question 177:

  A security architect is responsible for the protection of a new home banking system. Which of the following solutions can BEST improve the confidentiality and integrity of this external system?

  A. Intrusion Prevention System (IPS)
  B. Denial of Service (DoS) protection solution
  C. One-time Password (OTP) token
  D. Web Application Firewall (WAF)
  A. Intrusion Prevention System (IPS)

• Question 178:

  A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3) to it. Which of the following is the MOST likely reason for doing so?

  A. It verifies the integrity of the file.
  B. It checks the file for malware.
  C. It ensures the entire file downloaded.
  D. It encrypts the entire file.
  A. It verifies the integrity of the file.

• Question 179:

  Which of the following is an attacker MOST likely to target to gain privileged access to a system?

  A. Programs that write to system resources
  B. Programs that write to user directories
  C. Log files containing sensitive information
  D. Log files containing system calls
  A. Programs that write to system resources

• Question 180:

  copyright provides protection for which of the following?

  A. Discoveries of natural phenomena
  B. New and non-obvious invention
  C. A particular expression of an idea
  D. Ideas expressed n literary works
  C. A particular expression of an idea