ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 411:

  A cybersecurity engineer has been tasked to research and implement an ultra-secure communications channel to protect the organization's most valuable intellectual property (IP). The primary directive in this initiative is to ensure there Is no possible way the communications can be intercepted without detection. Which of the following Is the only way to ensure this outcome?

  A. Diffie-Hellman key exchange
  B. Symmetric key cryptography
  C. [Public key infrastructure (PKI)
  D. Quantum Key Distribution
  C. [Public key infrastructure (PKI)

• Question 412:

  The security operations center (SOC) has received credible intelligence that a threat actor is planning to attack with multiple variants of a destructive virus. After obtaining a sample set of this virus' variants and reverse engineering them to understand how they work, a commonality was found. All variants are coded to write to a specific memory location. It is determined this virus is of no threat to the organization because they had the focresight to enable what feature on all endpoints?

  A. Process isolation
  B. Trusted Platform Module (TPM)
  C. Address Space Layout Randomization (ASLR)
  D. Virtualization
  C. Address Space Layout Randomization (ASLR)

• Question 413:

  Which of the following is the BEST option to reduce the network attack surface of a system?

  A. Ensuring that there are no group accounts on the system
  B. Removing unnecessary system user accounts
  C. Disabling unnecessary ports and services
  D. Uninstalling default software on the system
  C. Disabling unnecessary ports and services

• Question 414:

  Which of the following is BEST achieved through the use of eXtensible Access Markup Language (XACML)?

  A. Minimize malicious attacks from third parties
  B. Manage resource privileges
  C. Share digital identities in hybrid cloud
  D. Defined a standard protocol
  D. Defined a standard protocol

• Question 415:

  Which of the following is the MOST effective method of detecting vulnerabilities in web-based applications early in the secure Software Development Life Cycle (SDLC)?

  A. Web application vulnerability scanning
  B. Application fuzzing
  C. Code review
  D. Penetration testing
  C. Code review

• Question 416:

  Why is lexical obfuscation in software development discouraged by many organizations?

  A. Problems writing test cases
  B. Problems recovering systems after disaster
  C. Problems compiling the code
  D. Problems maintaining data connections
  C. Problems compiling the code

• Question 417:

  Which of the following MUST an organization do to effectively communicate is security strategy to all affected parties?

  A. Involve representatives from each key organizational area.
  B. Provide regular updates to the board of directors.
  C. Notify staff of changes to the strategy.
  D. Remove potential communication barriers.
  C. Notify staff of changes to the strategy.

• Question 418:

  When testing password strength, which of the following is the BEST method for brute forcing passwords?

  A. Conduct an offline attack on the hashed password information.
  B. Conduct an online password attack until the account being used is locked.
  C. Use a comprehensive list of words to attempt to guess the password.
  D. Use social engineering methods to attempt to obtain the password.
  C. Use a comprehensive list of words to attempt to guess the password.

• Question 419:

  Which combination of cryptographic algorithms are compliant with Federal Information Processing Standard (FIPS) Publication 140-2 for non-legacy systems?

  A. Diffie-hellman (DH) key exchange: DH (>=2048 bits) Symmetric Key: Advanced Encryption Standard (AES) > 128 bits Digital Signature: Rivest-Shamir-Adleman (RSA) (1024 bits)
  B. Diffie-hellman (DH) key exchange: DH (>=2048 bits) Symmetric Key: Advanced Encryption Standard (AES) > 128 bits Digital Signature: Digital Signature Algorithm (DSA) (>=2048 bits)
  C. Diffie-hellman (DH) key exchange: DH (=2048 bits)
  D. Diffie-hellman (DH) key exchange: DH (>=2048 bits) Symmetric Key: Advanced Encryption Standard (AES) < 128 bits Digital Signature: Elliptic Curve Digital Signature Algorithm (ECDSA) (>=256 bits)
  C. Diffie-hellman (DH) key exchange: DH (=2048 bits)

• Question 420:

  Which of the following encryption types is used in Hash Message Authentication Code (HMAC) for key distribution?

  A. Symmetric
  B. Asymmetric
  C. Ephemeral
  D. Permanent
  A. Symmetric