ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 481:

  Which one of the following considerations has the LEAST impact when considering transmission security?

  A. Network availability
  B. Node locations
  C. Network bandwidth
  D. Data integrity
  C. Network bandwidth

• Question 482:

  What is the process called when impact values are assigned to the security objectives for information types?

  A. Qualitative analysis
  B. Quantitative analysis
  C. Remediation
  D. System security categorization
  D. System security categorization

• Question 483:

  A recent information security risk assessment identified weak system access controls on mobile devices as a high me In order to address this risk and ensure only authorized staff access company information, which of the following should the organization implement?

  A. Intrusion prevention system (IPS)
  B. Multi-factor authentication (MFA)
  C. Data loss protection (DLP)
  D. Data at rest encryption
  B. Multi-factor authentication (MFA)

• Question 484:

  Which of the following is a major component of the federated identity management (FIM) implementation model and used to establish a network between dozens of organizations?

  A. Identity as a Service (IDaaS)
  B. Attribute-based access control (ABAC)
  C. Cross-certification
  D. Trusted third party (TTP)
  C. Cross-certification

• Question 485:

  What Is a risk of using commercial off-the-shelf (COTS) products?

  A. COTS products may not map directly to an organization's security requirements.
  B. COTS products are typically more expensive than developing software in-house.
  C. Cost to implement COTS products is difficult to predict.
  D. Vendors are often hesitant to share their source code.
  A. COTS products may not map directly to an organization's security requirements.

• Question 486:

  Sensitive customer data is going to be added to a database. What is the MOST effective implementation for ensuring data privacy?

  A. Discretionary Access Control (DAC) procedures
  B. Mandatory Access Control (MAC) procedures
  C. Data link encryption
  D. Segregation of duties
  B. Mandatory Access Control (MAC) procedures

• Question 487:

  Which of the following is an advantage of on-premise Credential Management Systems?

  A. Improved credential interoperability
  B. Control over system configuration
  C. Lower infrastructure capital costs
  D. Reduced administrative overhead
  B. Control over system configuration

• Question 488:

  Which of the following statements pertaining to VPN protocol standards is false?

  A. L2TP is a combination of PPTP and L2F.
  B. L2TP and PPTP were designed for single point-to-point client to server communication.
  C. L2TP operates at the network layer.
  D. PPTP uses native PPP authentication and encryption services.
  C. L2TP operates at the network layer.

• Question 489:

  Who is essential for developing effective test scenarios for disaster recovery (DR) test plans?

  A. Business line management and IT staff members
  B. Chief Information Officer (CIO) and DR manager
  C. DR manager end IT staff members
  D. IT staff members and project managers
  B. Chief Information Officer (CIO) and DR manager

• Question 490:

  Which of the following is critical for establishing an initial baseline for software components in the operation and maintenance of applications?

  A. Application monitoring procedures
  B. Configuration control procedures
  C. Security audit procedures
  D. Software patching procedures
  B. Configuration control procedures