ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 271:

  Prohibiting which of the following techniques is MOST helpful in preventing users from obtaining confidential data by using statistical queries?

  A. Sequences of queries that refer repeatedly to the same population
  B. Limiting access to data during non-business hours
  C. Selecting all records from a table and displaying all columns
  D. Running queries that access sensitive data
  A. Sequences of queries that refer repeatedly to the same population

• Question 272:

  DRAG DROP

  Rank the Hypertext Transfer protocol (HTTP) authentication types shows below in order of relative strength.

  Drag the authentication type on the correct positions on the right according to strength from weakest to strongest.

  Select and Place:

  

  

• Question 273:

  Which of the following is MOST effective method of defending against zero-day malware threats?

  A. Client firewalls
  B. Client event logging
  C. Client application whitelisting
  D. Client antivirus
  C. Client application whitelisting

• Question 274:

  Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

  A. Password requirements are simplified.
  B. Risk associated with orphan accounts is reduced.
  C. Segregation of duties is automatically enforced.
  D. Data confidentiality is increased.
  A. Password requirements are simplified.

• Question 275:

  Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

  A. poor governance over security processes and procedures
  B. immature security controls and procedures
  C. variances against regulatory requirements
  D. unanticipated increases in security incidents and threats
  A. poor governance over security processes and procedures

• Question 276:

  Limiting the processor, memory, and Input/output (I/O) capabilities of mobile code is known as

  A. code restriction.
  B. on-demand compile.
  C. sandboxing.
  D. compartmentalization.
  C. sandboxing.

• Question 277:

  An organization wants to migrate to Session Initiation Protocol (SIP) to save on telephony expenses. Which of the following security related statements should be considered in the decision-making process?

  A. Cloud telephony is less secure and more expensive than digital telephony services.
  B. SIP services are more secure when used with multi-layer security proxies.
  C. H.323 media gateways must be used to ensure end-to-end security tunnels.
  D. Given the behavior of SIP traffic, additional security controls would be required.
  C. H.323 media gateways must be used to ensure end-to-end security tunnels.

• Question 278:

  After following the processes defined within the change management plan, a super user has upgraded a device within an Information system. What step would be taken to ensure that the upgrade did NOT affect the network security posture?

  A. Conduct an Assessment and Authorization (AandA)
  B. Conduct a security impact analysis
  C. Review the results of the most recent vulnerability scan
  D. Conduct a gap analysis with the baseline configuration
  B. Conduct a security impact analysis

• Question 279:

  Which of the following is used to support the concept of defense in depth during the development phase of a software product?

  A. Maintenance hooks
  B. Polyinstantiation
  C. Known vulnerability list
  D. Security auditing
  D. Security auditing

• Question 280:

  When developing an external facing web-based system, which of the following would be the MAIN focus of the security assessment prior to implementation and production?

  A. Assessing the Uniform Resource Locator (URL)
  B. Ensuring Secure Sockets Layer (SSL) certificates are signed by a certificate authority
  C. Ensuring that input validation is enforced
  D. Ensuring Secure Sockets Layer (SSL) certificates are internally signed
  B. Ensuring Secure Sockets Layer (SSL) certificates are signed by a certificate authority