ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 331:

  Which one of the following data integrity models assumes a lattice of integrity levels?

  A. Take-Grant
  B. Biba
  C. Harrison-Ruzzo
  D. Bell-LaPadula
  B. Biba

• Question 332:

  An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will address ongoing storage problems. Which is the BEST technical solution?

  A. Deduplication
  B. Compression
  C. Replication
  D. Caching
  B. Compression

• Question 333:

  Following the completion of a network security assessment, which of the following can BEST be demonstrated?

  A. The effectiveness of controls can be accurately measured
  B. A penetration test of the network will fail
  C. The network is compliant to industry standards
  D. All unpatched vulnerabilities have been identified
  A. The effectiveness of controls can be accurately measured

• Question 334:

  The use of private and public encryption keys is fondamental in the implementation of which of the following?

  A. Diffie-Hellman algorithm
  B. Message Digest 5 (ND5)
  C. Secure Sockets Layer (SSL)
  D. Advanced Encryption Standard (AES)
  C. Secure Sockets Layer (SSL)

• Question 335:

  Which of the following could illegally capture network user passwords?

  A. Data diddling
  B. Sniffing
  C. Spoofing
  D. Smurfing
  B. Sniffing

• Question 336:

  What should happen when an emergency change to a system must be performed?

  A. The change must be given priority at the next meeting of the change control board.
  B. Testing and approvals must be performed quickly.
  C. The change must be performed immediately and then submitted to the change board.
  D. The change is performed and a notation is made in the system log.
  B. Testing and approvals must be performed quickly.

• Question 337:

  Which of the following operates at the Network Layer of the Open System Interconnection (OSI) model?

  A. Packet filtering
  B. Port services filtering
  C. Content filtering
  D. Application access control
  A. Packet filtering

• Question 338:

  Which of the following types of hosts should be operating in the demilitarized zone (DMZ)?

  A. Hosts intended to provide limited access to public resources
  B. Database servers that can provide useful information to the public
  C. Hosts that store unimportant data such as demographical information
  D. File servers containing organizational data
  A. Hosts intended to provide limited access to public resources

• Question 339:

  Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?

  A. Definitions for each exposure type
  B. Vulnerability attack vectors
  C. Asset values for networks
  D. Exploit code metrics
  C. Asset values for networks

• Question 340:

  Which security access policy contains fixed security attributes that are used by the system to determine a user's access to a file or object?

  A. Mandatory Access Control (MAC)
  B. Access Control List (ACL)
  C. Discretionary Access Control (DAC)
  D. Authorized user control
  A. Mandatory Access Control (MAC)