ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 341:

  Which type of test would an organization perform in order to locate and target exploitable defects?

  A. Penetration
  B. System
  C. Performance
  D. Vulnerability
  A. Penetration

• Question 342:

  What is considered a compensating control for not having electrical surge protectors installed?

  A. Having dual lines to network service providers built to the site
  B. Having backup diesel generators installed to the site
  C. Having a hot disaster recovery (DR) environment for the site
  D. Having network equipment in active-active clusters at the site
  C. Having a hot disaster recovery (DR) environment for the site

• Question 343:

  Which one of the following is a common risk with network configuration management?

  A. Patches on the network are difficult to keep current.
  B. It is the responsibility of the systems administrator.
  C. User ID and passwords are never set to expire.
  D. Network diagrams are not up to date.
  D. Network diagrams are not up to date.

• Question 344:

  DRAG DROP

  Place in order, from BEST (1) to WORST (4), the following methods to reduce the risk of data remanence on magnetic media.

  Select and Place:

  

  

• Question 345:

  Which of the following is critical if an empolyee is dismissed due to violation of an organization's acceptable use policy (Aup) ?

  A. Appropriate documentation
  B. privilege suspension
  C. proxy records
  D. Internet access logs
  A. Appropriate documentation

• Question 346:

  By allowing storage communications to run on top of Transmission Control Protocol/Internet Protocol (TCP/IP) with a Storage Area Network (SAN), the

  A. confidentiality of the traffic is protected.
  B. opportunity to sniff network traffic exists.
  C. opportunity for device identity spoofing is eliminated.
  D. storage devices are protected against availability attacks.
  B. opportunity to sniff network traffic exists.

• Question 347:

  

  Which Redundant Array of Independent Disks (RAID) Level does the following diagram represent?

  A. RAID 0
  B. RAID 1
  C. RAID 5
  D. RAID 10
  D. RAID 10

• Question 348:

  Which of the following provides protection against unauthorized inbound and outbound traffic on individual devices?

  A. Wireless Access Points (AP)
  B. Token-based authentication
  C. Host-based firewalls
  D. Trusted platforms
  C. Host-based firewalls

• Question 349:

  Which of the following is a process within a Systems Engineering Life Cycle (SELC) stage?

  A. Requirements Analysis
  B. Development and Deployment
  C. Production Operations
  D. Utilization Support
  A. Requirements Analysis

• Question 350:

  Which of the following is the PRIMARY benefit of implementing data-in-use controls?

  A. If the data is lost, it must be decrypted to be opened.
  B. If the data is lost, it will not be accessible to unauthorized users.
  C. When the data is being viewed, it can only be printed by authorized users.
  D. When the data is being viewed, it must be accessed using secure protocols.
  C. When the data is being viewed, it can only be printed by authorized users.