ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 461:

  For the purpose of classification, which of the following is used to divide trust domain and trust boundaries?

  A. Network architecture
  B. Integrity
  C. Identity Management (IdM)
  D. Confidentiality management
  A. Network architecture

• Question 462:

  Even though a particular digital watermark is difficult to detect, which of the following represents a way it might still be inadvertently removed?

  A. Truncating parts of the data
  B. Applying Access Control Lists (ACL) to the data
  C. Appending non-watermarked data to watermarked data
  D. Storing the data in a database
  A. Truncating parts of the data

• Question 463:

  During a disruptive event, which security continuity objectives will maintain an organization’s information security to a predetermined level?

  A. During a disruptive event, which security continuity objectives will maintain an organization’s information security to a predetermined level?
  B. Impact assessment report
  C. Information security continuity plan
  D. Business continuity plan (BCP)
  C. Information security continuity plan

• Question 464:

  In order for a security policy to be effective within an organization, it MUST include

  A. strong statements that clearly define the problem.
  B. a list of all standards that apply to the policy.
  C. owner information and date of last revision.
  D. disciplinary measures for non compliance.
  D. disciplinary measures for non compliance.

• Question 465:

  Which of the following system components enforces access controls on an object?

  A. Security perimeter
  B. Access control matrix
  C. Trusted domain
  D. Reference monitor
  D. Reference monitor

• Question 466:

  An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?

  A. Revoke access temporarily.
  B. Block user access and delete user account after six months.
  C. Block access to the offices immediately.
  D. Monitor account usage temporarily.
  D. Monitor account usage temporarily.

• Question 467:

  Which of the following is used to ensure that data mining activities will NOT reveal sensitive data?

  A. Implement two-factor authentication on the underlying infrastructure
  B. Encrypt data at the field level and tightly control encryption keys
  C. Preprocess the databases to see if information can be disclosed from the learned patterns
  D. Implement the principle of least privilege on data elements so a reduced number of users can access the database
  B. Encrypt data at the field level and tightly control encryption keys

• Question 468:

  Which of the following is the GREATEST security risk associated with the user of identity as a service (IDaaS) when an organization its own software?

  A. Incompatibility with Federated Identity Management (FIM)
  B. Increased likelihood of confidentiality breach
  C. Denial of access due to reduced availability
  D. Security Assertion Markup Language (SAM) integration
  B. Increased likelihood of confidentiality breach

• Question 469:

  Which one of the following can be used to detect an anomaly in a system by keeping track of the state of files that do not normally change?

  A. System logs
  B. Anti-spyware
  C. Integrity checker
  D. Firewall logs
  C. Integrity checker

• Question 470:

  Which of the following is a responsibility of the information owner?

  A. Ensure that users and personnel complete the required security training to access the Information System (IS)
  B. Defining proper access to the Information System (IS), including privileges or access rights
  C. Managing identification, implementation, and assessment of common security controls
  D. Ensuring the Information System (IS) is operated according to agreed upon security requirements
  B. Defining proper access to the Information System (IS), including privileges or access rights