ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 361:

  Which of the following is the GREATEST security risk associated with the use of identity as a service (IDaaS) when an organization is developing its own software?

  A. Increased likelihood of confidentiality breach
  B. Denial of access due to reduced availability
  C. Security Assertion Markup Language (SAML) integration
  D. Incompatibility with Federated Identity Management (FIM)
  A. Increased likelihood of confidentiality breach

• Question 362:

  What is the PRIMARY reason for ethics awareness and related policy implementation?

  A. It affects the workflow of an organization.
  B. It affects the reputation of an organization.
  C. It affects the retention rate of employees.
  D. It affects the morale of the employees.
  B. It affects the reputation of an organization.

• Question 363:

  An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

  A. Implement packet filtering on the network firewalls
  B. Require strong authentication for administrators
  C. Install Host Based Intrusion Detection Systems (HIDS)
  D. Implement logical network segmentation at the switches
  D. Implement logical network segmentation at the switches

• Question 364:

  Which of the following implementations will achieve high availability in a website?

  A. Multiple Domain Name System (DNS) entries resolving to the same web server and large amounts of bandwidth
  B. Disk mirroring of the web server with redundant disk drives in a hardened data center
  C. Disk striping of the web server hard drives and large amounts of bandwidth
  D. Multiple geographically dispersed web servers that are configured for failover
  D. Multiple geographically dispersed web servers that are configured for failover

• Question 365:

  Which of the following is the MOST common cause of system or security failures?

  A. Lack of system documentation
  B. Lack of physical security controls
  C. Lack of change control
  D. Lack of logging and monitoring
  C. Lack of change control

• Question 366:

  Which of the following is a security limitation of File Transfer Protocol (FTP)?

  A. Passive FTP is not compatible with web browsers.
  B. Anonymous access is allowed.
  C. FTP uses Transmission Control Protocol (TCP) ports 20 and 21.
  D. Authentication is not encrypted.
  D. Authentication is not encrypted.

• Question 367:

  An access control list (ACL) on a router is a feature MOST similar to which type of firewall?

  A. Packet filtering firewall
  B. Application gateway firewall
  C. Heuristic firewall
  D. Stateful firewall
  B. Application gateway firewall

• Question 368:

  Which of the following describes the order in which a digital forensic process is usually conducted?

  A. Ascertain legal authority, agree upon examination strategy, conduct examination, and report results
  B. Ascertain legal authority, conduct investigation, report results, and agree upon examination strategy
  C. Agree upon examination strategy, ascertain legal authority, conduct examination, and report results
  D. Agree upon examination strategy, ascertain legal authority, report results, and conduct examination
  A. Ascertain legal authority, agree upon examination strategy, conduct examination, and report results

• Question 369:

  Which of the following is the PRIMARY benefit of a formalized information classification program?

  A. It minimized system logging requirements.
  B. It supports risk assessment.
  C. It reduces asset vulnerabilities.
  D. It drives audit processes.
  B. It supports risk assessment.

• Question 370:

  An organization operates a legacy Industrial Control System (ICS) to support its core business service, which carrot be replaced. Its management MUST be performed remotely through an administrative console software, which in tum depends on an old version of the Java Runtime Environment (JPE) known to be vulnerable to a number of attacks, How is this risk BEST managed?

  A. Isolate the full ICS by moving It onto its own network segment
  B. Air-gap and harden the host used for management purposes
  C. Convince the management to decommission the ICS and mlg-ate to a modem technology
  D. Deploy a restrictive proxy between all clients and the vulnerable management station
  B. Air-gap and harden the host used for management purposes