ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 191:

  Which of the following BEST represents the concept of least privilege?

  A. Access to an object is denied unless access is specifically allowed.
  B. Access to an object is only available to the owner.
  C. Access to an object is allowed unless it is protected by the information security policy.
  D. Access to an object is only allowed to authenticated users via an Access Control List (ACL).
  A. Access to an object is denied unless access is specifically allowed.

• Question 192:

  Which audit type is MOST appropriate for evaluating the effectiveness of a security program?

  A. Threat
  B. Assessment
  C. Analysis
  D. Validation
  B. Assessment

• Question 193:

  Which of the following is the FIRST step in the incident response process?

  A. Determine the cause of the incident
  B. Disconnect the system involved from the network
  C. Isolate and contain the system involved
  D. Investigate all symptoms to confirm the incident
  D. Investigate all symptoms to confirm the incident

• Question 194:

  Which of the following mobile code security models relies only on trust?

  A. Code signing
  B. Class authentication
  C. Sandboxing
  D. Type safety
  A. Code signing

• Question 195:

  An organization's internal audit team performed a security audit on the company's system and reported that the manufacturing application is rarely updated along with other issues categorized as minor. Six months later, an external audit team reviewed the same system with the same scope, but identified severe weaknesses in the manufacturing application's security controls. What is MOST likely to be the root cause of the internal audit team's failure in detecting these security issues?

  A. Inadequate test coverage analysis
  B. Inadequate security patch testing
  C. Inadequate log reviews
  D. Inadequate change control procedures
  A. Inadequate test coverage analysis

• Question 196:

  An Intrusion Detection System (IDS) is based on the general hypothesis that a security violation is associated with a pattern of system usage, which can be

  A. differentiated from a normal usage pattern
  B. used to detect known violations
  C. used to detect a masquerader
  D. differentiated to detect all security violations
  B. used to detect known violations

• Question 197:

  A technician is troubleshooting a client's report about poor wireless performance. Using a client monitor, the technician notes the following information:

  

  Which of the following is MOST likely the cause of the issue?

  A. Channel overlap
  B. Poor signal
  C. Incorrect power settings
  D. Wrong antenna type
  A. Channel overlap

• Question 198:

  DRAG DROP

  Match the types of e-authentication tokens to their description.

  Drag each e-authentication token on the left to its corresponding description on the right.

  Select and Place:

  

  

• Question 199:

  Which of the following are the three MAIN categories of security controls?

  A. Administrative, technical, physical
  B. Corrective, detective, recovery
  C. Confidentiality, integrity, availability
  D. Preventative, corrective, detective
  A. Administrative, technical, physical

• Question 200:

  Before allowing a web application into the production environment, the security practitioner performs multiple types of tests to confirm that the web application performs as expected. To test the username field, the security practitioner creates a test that enters more characters into the field than is allowed. Which of the following BEST describes the type of test performed?

  A. Misuse case testing
  B. Penetration testing
  C. Web session testing
  D. Interface testing
  A. Misuse case testing