ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 371:

  Which of the following are required components for implementing software configuration management systems?

  A. Audit control and signoff
  B. User training and acceptance
  C. Rollback and recovery processes
  D. Regression testing and evaluation
  C. Rollback and recovery processes

• Question 372:

  A security architect is implementing an authentication system for a distributed network of servers. This network will be accessed by users on workstations that cannot trust the identity of the user. Which solution should the security architect use to have the users trust one another?

  A. One-way authentication
  B. Kerberos
  C. Mutual authentication
  D. Single session software tokens
  C. Mutual authentication

• Question 373:

  Organization A is adding a large collection of confidential data records that it received when it acquired Organization B to its data store. Many of the users and staff from Organization B are no longer available. Which of the following MUST Organization A do to properly classify and secure the acquired data?

  A. Assign data owners from Organization A to the acquired data
  B. Create placeholder accounts that represent former users from Organization B
  C. Archive audit records that refer to users from Organization A
  D. Change the data classification for data acquired from Organization B
  A. Assign data owners from Organization A to the acquired data

• Question 374:

  Which of the following provides effective management assurance for a Wireless Local Area Network (WLAN)?

  A. Maintaining an inventory of authorized Access Points (AP) and connecting devices
  B. Setting the radio frequency to the minimum range required
  C. Establishing a Virtual Private Network (VPN) tunnel between the WLAN client device and a VPN concentrator
  D. Verifying that all default passwords have been changed
  A. Maintaining an inventory of authorized Access Points (AP) and connecting devices

• Question 375:

  What testing technique enables the designer to develop mitigation strategies for potential vulnerabilities?

  A. Manual inspections and reviews
  B. Penetration testing
  C. Threat modeling
  D. Source code review
  C. Threat modeling

• Question 376:

  A cloud hosting provider would like to provide a Service Organization Control (SOC) report relevant to its security program. This report should an abbreviated report that can be freely distributed. Which type of report BEST meets this requirement?

  A. SOC 1
  B. SOC 2 Type I
  C. SOC 2 Type II
  D. SOC 3
  D. SOC 3

• Question 377:

  Which one of the following operates at the session, transport, or network layer of the Open System Interconnection (OSI) model?

  A. Data at rest encryption
  B. Configuration Management
  C. Integrity checking software
  D. Cyclic redundancy check (CRC)
  D. Cyclic redundancy check (CRC)

• Question 378:

  The PRIMARY outcome of a certification process is that it provides documented

  A. system weaknesses for remediation.
  B. standards for security assessment, testing, and process evaluation.
  C. interconnected systems and their implemented security controls.
  D. security analyses needed to make a risk-based decision.
  D. security analyses needed to make a risk-based decision.

• Question 379:

  Which of the following techniques evaluates the secure Bet principles of network or software architectures?

  A. Threat modeling
  B. Risk modeling
  C. Waterfall method
  D. Fuzzing
  A. Threat modeling

• Question 380:

  A network administrator is designing a new datacenter in a different region that will need to communicate to the old datacenter with a secure connection. Which of the following access methods would provide the BEST security for this new datacenter?

  A. Virtual network computing
  B. Secure Socket Shell
  C. in-band connection
  D. Site-to-site VPN
  D. Site-to-site VPN