ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 261:

  Which of the following outsourcing agreement provisions has the HIGHEST priority from a security operations perspective?

  A. Conditions to prevent the use of subcontractors
  B. Terms for contract renegotiation in case of disaster
  C. Escalation process for problem resolution during incidents
  D. Root cause analysis for application performance issue
  D. Root cause analysis for application performance issue

• Question 262:

  What is the PRIMARY benefit of analyzing the partition layout of a hard disk volume when performing forensic analysis?

  A. Sectors which are not assigned to a perform may contain data that was purposely hidden.
  B. Volume address information for he hard disk may have been modified.
  C. partition tables which are not completely utilized may contain data that was purposely hidden
  D. Physical address information for the hard disk may have been modified.
  A. Sectors which are not assigned to a perform may contain data that was purposely hidden.

• Question 263:

  DRAG DROP

  Drag the following Security Engineering terms on the left to the BEST definition on the right.

  Select and Place:

  

  

• Question 264:

  Refer to the information below to answer the question.

  In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files.

  

  In a Bell-LaPadula system, which user cannot write to File 3?

  A. User A
  B. User B
  C. User C
  D. User D
  D. User D

• Question 265:

  During a Disaster Recovery (DR) simulation, it is discovered that the shared recovery site lacks adequate data restoration capabilities to support the implementation of multiple plans simultaneously. What would be impacted by this fact if left unchanged?

  A. Recovery Point Objective (RPO)
  B. Recovery Time Objective (RTO)
  C. Business Impact Analysis (BIA)
  D. Return on Investment (ROI)
  B. Recovery Time Objective (RTO)

• Question 266:

  What is the MOST common component of a vulnerability management framework?

  A. Risk analysis
  B. Patch management
  C. Threat analysis
  D. Backup management
  B. Patch management

• Question 267:

  The type of authorized interactions a subject can have with an object is

  A. control.
  B. permission.
  C. procedure.
  D. protocol.
  B. permission.

• Question 268:

  Which of the following processes is used to align security controls with business functions?

  A. Data mapping
  B. Standards selection
  C. Scoping
  D. Tailoring
  D. Tailoring

• Question 269:

  Which of the following would be the BEST mitigation practice for man-in-the-middle (MITM) Voice over Internet Protocol (VoIP) attacks?

  A. Use Media Gateway Control Protocol (MGCP)
  B. Use Transport Layer Security (TLS) protocol
  C. Use File Transfer Protocol (FTP)
  D. Use Secure Shell (SSH) protocol
  B. Use Transport Layer Security (TLS) protocol

• Question 270:

  Refer to the information below to answer the question.

  An organization has hired an information security officer to lead their security department. The officer has adequate people resources but is lacking the other necessary components to have an effective security program. There are numerous

  initiatives requiring security involvement.

  Which of the following is considered the MOST important priority for the information security officer?

  A. Formal acceptance of the security strategy
  B. Disciplinary actions taken against unethical behavior
  C. Development of an awareness program for new employees
  D. Audit of all organization system configurations for faults
  A. Formal acceptance of the security strategy