ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 471:

  A security professional has reviewed a recent site assessment and has noted that a server room on the second floor of a building has Heating, Ventilation, and Air Conditioning (HVAC) intakes on the ground level that have ultraviolet light filters installed, Aero-K Fire suppression in the server room, and pre-action fire suppression on floors above the server room. Which of the following changes can the security professional recommend to reduce risk associated with these conditions?

  A. Remove the ultraviolet light filters on the HVAC intake and replace the fire suppression system on the upper floors with a dry system
  B. Add additional ultraviolet light filters to the HVAC intake supply and return ducts and change server room fire suppression to FM-200
  C. Apply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200.
  D. Elevate the HVAC intake by constructing a plenum or external shaft over it and convert the server room fire suppression to a pre-action system
  C. Apply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200.

• Question 472:

  Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device?

  A. Trusted Platform Module (TPM)
  B. Preboot eXecution Environment (PXE)
  C. Key Distribution Center (KDC)
  D. Simple Key-Management for Internet Protocol (SKIP)
  A. Trusted Platform Module (TPM)

• Question 473:

  What is the MAIN purpose for writing planned procedures in the design of Business Continuity Plans (BCP)?

  A. Establish lines of responsibility.
  B. Minimize the risk of failure.
  C. Accelerate the recovery process.
  D. Eliminate unnecessary decision making.
  B. Minimize the risk of failure.

• Question 474:

  A vulnerability in which of the following components would be MOST difficult to detect?

  A. Kernel
  B. Shared libraries
  C. Hardware
  D. System application
  C. Hardware

• Question 475:

  Which is the PRIMARY mechanism for providing the workforce with the information needed to protect an agency's vital information resources?

  A. Incorporating security awareness and training as part of the overall information security program
  B. An information technology (IT) security policy to preserve the confidentiality, integrity, and availability of systems
  C. Implementation of access provisioning process for coordinating the creation of user accounts
  D. Execution of periodic security and privacy assessments to the organization
  A. Incorporating security awareness and training as part of the overall information security program

• Question 476:

  When assessing web vulnerabilities, how can navigating the dark web add value to a penetration test?

  A. The actual origin and tools used for the test can be hidden.
  B. Information may be found on related breaches and hacking.
  C. Vulnerabilities can be tested without impact on the tested environment.
  D. Information may be found on hidden vendor patches.
  D. Information may be found on hidden vendor patches.

• Question 477:

  The organization would like to deploy an authorization mechanism for an Information Technology (IT) infrastructure project with high employee turnover. Which access control mechanism would be preferred?

  A. Attribute Based Access Control (ABAC)
  B. Discretionary Access Control (DAC)
  C. Mandatory Access Control (MAC)
  D. Role-Based Access Control (RBAC)
  D. Role-Based Access Control (RBAC)

• Question 478:

  Which of the following BEST describes an example of evading intrusion detection system (IDS) signature detection?

  A. Packet fragmentation
  B. SQL injection (SQLi)
  C. Cross-Site Scripting (XSS)
  D. Encoding
  A. Packet fragmentation

• Question 479:

  Transport Layer Security (TLS) provides which of the following capabilities for a remote access server?

  A. Transport layer handshake compression
  B. Application layer negotiation
  C. Peer identity authentication
  D. Digital certificate revocation
  C. Peer identity authentication

• Question 480:

  During the procurement of a new information system, it was determined that some of the security requirements were not addressed in the system specification. Which of the following is the MOST likely reason for this?

  A. The procurement officer lacks technical knowledge.
  B. The security requirements have changed during the procurement process.
  C. There were no security professionals in the vendor's bidding team.
  D. The description of the security requirements was insufficient.
  D. The description of the security requirements was insufficient.