ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 31:

  What is the FIRST step required in establishing a records retention program?

  A. Identify and inventory all records storage locations.
  B. Classify records based on sensitivity.
  C. Identify and inventory all records.
  D. Draft a records retention policy.
  D. Draft a records retention policy.

• Question 32:

  What is the MOST important consideration from a data security perspective when an organization plans to relocate?

  A. Ensure the fire prevention and detection systems are sufficient to protect personnel
  B. Review the architectural plans to determine how many emergency exits are present
  C. Conduct a gap analysis of a new facilities against existing security requirements
  D. Revise the Disaster Recovery and Business Continuity (DR/BC) plan
  C. Conduct a gap analysis of a new facilities against existing security requirements

• Question 33:

  Which of the following BEST describes the standard used to exchange authorization information between different identity management systems?

  A. Security Assertion Markup Language (SAML)
  B. Service Oriented Architecture (SOA)
  C. Extensible Markup Language (XML)
  D. Wireless Authentication Protocol (WAP)
  A. Security Assertion Markup Language (SAML)

• Question 34:

  Who is responsible for the protection of information when it is shared with or provided to other organizations?

  A. Systems owner
  B. Authorizing Official (AO)
  C. Information owner
  D. Security officer
  C. Information owner

• Question 35:

  What capability would typically be included in a commercially available software package designed for access control?

  A. Password encryption
  B. File encryption
  C. Source library control
  D. File authentication
  A. Password encryption

• Question 36:

  Data remanence refers to which of the following?

  A. The remaining photons left in a fiber optic cable after a secure transmission.
  B. The retention period required by law or regulation.
  C. The magnetic flux created when removing the network connection from a server or personal computer.
  D. The residual information left on magnetic storage media after a deletion or erasure.
  D. The residual information left on magnetic storage media after a deletion or erasure.

• Question 37:

  What type of test assesses a Disaster Recovery (DR) plan using realistic disaster scenarios while maintaining minimal impact to business operations?

  A. Parallel
  B. Walkthrough
  C. Simulation
  D. Tabletop
  C. Simulation

• Question 38:

  Which of the following management process allows ONLY those services required for users to accomplish their tasks, change default user passwords, and set servers to retrieve antivirus updates?

  A. Configuration
  B. Identity
  C. Compliance
  D. Patch
  A. Configuration

• Question 39:

  Which of the following job functions MUST be separated to maintain data and application integrity?

  A. Applications development and systems analysis
  B. Production control and data control functions
  C. Scheduling and computer operations
  D. Systems development and systems maintenance
  D. Systems development and systems maintenance

• Question 40:

  An organization is looking to improve threat detection on their wireless network. The company goal is to automate alerts to improve response efforts. Which of the following best practices should be implemented FIRST?

  A. Deploy a standalone guest Wi-Fi network.
  B. Implement multi-factor authentication (MFA) on all domain accounts.
  C. Deploy a wireless intrusion detection system (IDS).
  D. Implement 802.1x authentication.
  C. Deploy a wireless intrusion detection system (IDS).