ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 351:

  A scan report returned multiple vulnerabilities affecting several production servers that are mission critical. Attempts to apply the patches in the development environment have caused the servers to crash. What is the BEST course of action?

  A. Upgrade the software affected by the vulnerability.
  B. Inform management of possible risks.
  C. Mitigate the risks with compensating controls.
  D. Remove the affected software from the servers.
  C. Mitigate the risks with compensating controls.

• Question 352:

  Wireless users are reporting intermittent Internet connectivity. Connectivity is restored when the users disconnect and reconnect, utilizing the web authentication process each time. The network administrator can see the devices connected to the APs at all times. Which of the following steps will MOST likely determine the cause of the issue?

  A. Verify the session time-out configuration on the captive portal settings
  B. Check for encryption protocol mismatch on the client's wireless settings.
  C. Confirm that a valid passphrase is being used during the web authentication.
  D. Investigate for a client's disassociation caused by an evil twin AP
  A. Verify the session time-out configuration on the captive portal settings

• Question 353:

  Which of the following is the BEST method to gather evidence from a computer's hard drive?

  A. Disk duplication
  B. Disk replacement
  C. Forensic signature
  D. Forensic imaging
  D. Forensic imaging

• Question 354:

  DRAG DROP

  In which order, from MOST to LEAST impacted, does user awareness training reduce the occurrence of the events below?

  Select and Place:

  

  

• Question 355:

  Which type of log collection is focused on detecting and responding to attacks, malware infection, and data theft?

  A. Intrusion detection
  B. Operational
  C. Security
  D. Compliance
  C. Security

• Question 356:

  Which of the following is the BEST reason to apply patches manually instead of automated patch management?

  A. The cost required to install patches will be reduced.
  B. The time during which systems will remain vulnerable to an exploit will be decreased.
  C. The target systems reside within isolated networks.
  D. The ability to cover large geographic areas is increased.
  C. The target systems reside within isolated networks.

• Question 357:

  Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

  A. To standardize on a single vendor
  B. To ensure isolation of management traffic
  C. To maximize data plane efficiency
  D. To reduce the risk of configuration errors
  C. To maximize data plane efficiency

• Question 358:

  If a content management system (CMC) is implemented, which one of the following would occur?

  A. Developers would no longer have access to production systems
  B. The applications placed into production would be secure
  C. Patching the systems would be completed more quickly
  D. The test and production systems would be running the same software
  D. The test and production systems would be running the same software

• Question 359:

  Which of the following should exist in order to perform a security audit?

  A. Industry framework to audit against
  B. External (third-party) auditor
  C. Internal certified auditor
  D. Neutrality of the auditor
  D. Neutrality of the auditor

• Question 360:

  Unused space in a disk cluster is important in media analysis because it may contain which of the following?

  A. Residual data that has not been overwritten
  B. Hidden viruses and Trojan horses
  C. Information about the File Allocation table (FAT)
  D. Information about patches and upgrades to the system
  A. Residual data that has not been overwritten