ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 391:

  An organization is found lacking the ability to properly establish performance indicators for its Web hosting solution during an audit. What would be the MOST probable cause?

  A. Improper deployment of the Service-Oriented Architecture (SOA)
  B. Absence of a Business Intelligence (BI) solution
  C. Inadequate cost modeling
  D. Insufficient Service Level Agreement (SLA)
  D. Insufficient Service Level Agreement (SLA)

• Question 392:

  Which of the following is considered a secure coding practice?

  A. Use concurrent access for shared variables and resources
  B. Use checksums to verify the integrity of libraries
  C. Use new code for common tasks
  D. Use dynamic execution functions to pass user supplied data
  B. Use checksums to verify the integrity of libraries

• Question 393:

  Why are packet filtering routers used in low-risk environments?

  A. They are high-resolution source discrimination and identification tools
  B. They are fast and flexible, and protect against Internet Protocol (IP) spoofing
  C. They are fast, flexible, and transparent
  D. They enforce strong user authentication and audit log generation
  B. They are fast and flexible, and protect against Internet Protocol (IP) spoofing

• Question 394:

  DRAG DROP

  Match the name of access control model with its associated restriction.

  Drag each access control model to its appropriate restriction access on the right.

  Select and Place:

  

  

• Question 395:

  Which of the following would be considered an incident if reported by a security information and event management (SIEM) system?

  A. An administrator is logging in on a server through a virtual private network (VPN).
  B. A log source has stopped sending data.
  C. A web resource has reported a 404 error.
  D. A firewall logs a connection between a client on the Internet and a web server using Transmission Control Protocol (TCP) on port 80.
  C. A web resource has reported a 404 error.

• Question 396:

  What is the FIRST step in reducing the exposure of a network to Internet Control Message Protocol (ICMP) based attacks?

  A. Implement egress filtering at the organization's network boundary.
  B. Implement network access control lists (ACL).
  C. Implement a web application firewall (WAF).
  D. Implement an intrusion prevention system (IPS).
  B. Implement network access control lists (ACL).

• Question 397:

  A hospital enforces the Code of Fair Information Practices. What practice applies to a patient requesting their medical records from a web portal?

  A. Use limitation
  B. Individual participation
  C. Purpose specification
  D. Collection limitation
  D. Collection limitation

• Question 398:

  What is one way to mitigate the risk of security flaws in custom software?

  A. Include security language in the Earned Value Management (EVM) contract
  B. Include security assurance clauses in the Service Level Agreement (SLA)
  C. Purchase only Commercial Off-The-Shelf (COTS) products
  D. Purchase only software with no open source Application Programming Interfaces (APIs)
  B. Include security assurance clauses in the Service Level Agreement (SLA)

• Question 399:

  What is the FIRST step prior to executing a test of an organization's disaster recovery (DR) or business continuity plan (BCP)?

  A. Develop clear evaluation criteria.
  B. Identify key stakeholders.
  C. Develop recommendations for disaster scenarios.
  D. Identify potential failure points.
  A. Develop clear evaluation criteria.

• Question 400:

  Which of the following is the MOST important reason for timely installation of software patches?

  A. Attackers may be conducting network analysis.
  B. Patches ere only available for a specific time.
  C. Attackers reverse engineer the exploit from the patch.
  D. Patches may not be compatible with proprietary software
  C. Attackers reverse engineer the exploit from the patch.