ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 231:

  Which of the following is an authentication protocol in which a new random number is generated uniquely for each login session?

  A. Challenge Handshake Authentication Protocol (CHAP)
  B. Point-to-Point Protocol (PPP)
  C. Extensible Authentication Protocol (EAP)
  D. Password Authentication Protocol (PAP)
  A. Challenge Handshake Authentication Protocol (CHAP)

• Question 232:

  In a disaster recovery (DR) test, which of the following would be a trait of crisis management?

  A. Wide focus
  B. Strategic
  C. Anticipate
  D. Process
  D. Process

• Question 233:

  Which of the following determines how traffic should flow based on the status of the infrastructure true?

  A. Application plane
  B. Data plane
  C. Control plane
  D. Traffic plane
  D. Traffic plane

• Question 234:

  Which of the following is the BIGGEST weakness when using native Lightweight Directory Access Protocol (LDAP) for authentication?

  A. Authorizations are not included in the server response
  B. Unsalted hashes are passed over the network
  C. The authentication session can be replayed
  D. Passwords are passed in cleartext
  D. Passwords are passed in cleartext

• Question 235:

  Which of the following is the PRIMARY benefit of a formalized information classification program?

  A. It drives audit processes.
  B. It supports risk assessment.
  C. It reduces asset vulnerabilities.
  D. It minimizes system logging requirements.
  B. It supports risk assessment.

• Question 236:

  Which of the following is the MOST significant key management problem due to the number of keys created?

  A. Keys are more difficult to provision and
  B. Storage of the keys require increased security
  C. Exponential growth when using asymmetric keys
  D. Exponential growth when using symmetric keys
  D. Exponential growth when using symmetric keys

• Question 237:

  Recovery strategies of a Disaster Recovery planning (DRIP) MUST be aligned with which of the following?

  A. Hardware and software compatibility issues
  B. Applications' critically and downtime tolerance
  C. Budget constraints and requirements
  D. Cost/benefit analysis and business objectives
  D. Cost/benefit analysis and business objectives

• Question 238:

  Which of the following is the MOST important part of an awareness and training plan to prepare employees for emergency situations?

  A. Having emergency contacts established for the general employee population to get information
  B. Conducting business continuity and disaster recovery training for those who have a direct role in the recovery
  C. Designing business continuity and disaster recovery training programs for different audiences
  D. Publishing a corporate business continuity and disaster recovery plan on the corporate website
  C. Designing business continuity and disaster recovery training programs for different audiences

• Question 239:

  Which of the following analyses is performed to protect information assets?

  A. Business impact analysis
  B. Feasibility analysis
  C. Cost benefit analysis
  D. Data analysis
  A. Business impact analysis

• Question 240:

  Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

  A. Identifying the events and environmental factors that can adversely affect an organization
  B. Identifying what is important and critical based on disruptions that can affect the organization
  C. Establishing the need for a Business Continuity Plan (BCP) based on threats that can affect an organization
  D. Preparing a program to create an organizational awareness for executing the Business Continuity Plan (BCP)
  A. Identifying the events and environmental factors that can adversely affect an organization