ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 401:

  An organization implements a remote access server (RAS), Once users connect to the server, digital certificates are used to authenticate their identity. What type of extensible Authentication protocol (EAP) would the organization use during this authentication?

  A. Message Digest 5 (MD5)
  B. Subscriber Identity Module (SIM)
  C. Lightweight Extensible Authentication Protocol (EAP)
  D. Transport layer security (TLS)
  D. Transport layer security (TLS)

• Question 402:

  Which of the following represents the GREATEST risk to data confidentiality?

  A. Network redundancies are not implemented
  B. Security awareness training is not completed
  C. Backup tapes are generated unencrypted
  D. Users have administrative privileges
  C. Backup tapes are generated unencrypted

• Question 403:

  Which of the following needs to be included in order for High Availability (HA) to continue operations during planned system outages?

  A. Redundant hardware, disk spanning, and patching
  B. Load balancing, power reserves, and disk spanning
  C. Backups, clustering, and power reserves
  D. Clustering, load balancing, and fault-tolerant options
  D. Clustering, load balancing, and fault-tolerant options

• Question 404:

  The application owner of a system that handles confidential data leaves an organization. It is anticipated that a replacement will be hired in approximately six months. During that time, which of the following should the organization do?

  A. Gram temporary access to the former application owner's account
  B. Assign a temporary application owner to the system.
  C. Restrict access to the system until a replacement application owner rs hired.
  D. Prevent changes to the confidential data until a replacement application owner is hired.
  B. Assign a temporary application owner to the system.

• Question 405:

  Which of the following BEST describes why software assurance is critical in helping prevent an increase in business and mission risk for an organization?

  A. Software that does not perform as intended may be exploitable which makes it vulnerable to attack.
  B. Request for proposals (RFP) avoid purchasing software that does not meet business needs.
  C. Contracting processes eliminate liability for security vulnerabilities for the purchaser.
  D. Decommissioning of old software reduces long-term costs related to technical debt.
  A. Software that does not perform as intended may be exploitable which makes it vulnerable to attack.

• Question 406:

  Which of the following actions should be undertaken prior to deciding on a physical baseline Protection Profile (PP)?

  A. Check the technical design.
  B. Conduct a site survey.
  C. Categorize assets.
  D. Choose a suitable location.
  A. Check the technical design.

• Question 407:

  During an internal audit of an organizational Information Security Management System (ISMS), nonconformities are identified. In which of the following management stages are nonconformities reviewed, assessed and/or corrected by the organization?

  A. Planning
  B. Operation
  C. Assessment
  D. Improvement
  B. Operation

• Question 408:

  If traveling abroad and a customs official demands to examine a personal computer, which of the following should be assumed?

  A. The hard drive has been stolen.
  B. The Internet Protocol (IP) address has been copied.
  C. The hard drive has been copied.
  D. The Media Access Control (MAC) address was stolen
  C. The hard drive has been copied.

• Question 409:

  Which of the following questions will be addressed through the use of a Privacy Impact Assessment (PIA)?

  A. How the information is to be maintained
  B. Why the information is to be collected
  C. What information is to be destroyed
  D. Where the information is to be stored
  B. Why the information is to be collected

• Question 410:

  What type of database attack would allow a customer service employee to determine quarterly sales results before they are publically announced?

  A. Polyinstantiation
  B. Inference
  C. Aggregation
  D. Data mining
  A. Polyinstantiation