ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 491:

  Which of the following is the top barrier for companies to adopt cloud technology?

  A. Migration period
  B. Data integrity
  C. Cost
  D. Security
  D. Security

• Question 492:

  Which of the following is a characteristic of a challenge/respones authentication process?

  A. Presenting distorted graphics of text for authentication
  B. Transmitting a hash based on the user's password
  C. Using a password history blacklist
  D. Requiring the use of non-consecutive numeric characters
  A. Presenting distorted graphics of text for authentication

• Question 493:

  Which of the following is the MOST important action to ensure the security of an IP-based security camera?

  A. Verify the camera's log for recent logins outside of the Internet Technology (IT) department.
  B. Verify the security and encryption protocol the camera uses.
  C. Verify the security camera requires authentication to log into the management console.
  D. Verify the most recent firmware version is installed on the camera.
  D. Verify the most recent firmware version is installed on the camera.

• Question 494:

  In Federated Identity Management (FIM), which of the following represents the concept of federation?

  A. Collection of information logically grouped into a single entity
  B. Collection, maintenance, and deactivation of user objects and attributes in one or more systems, directories or applications
  C. Collection of information for common identities in a system
  D. Collection of domains that have established trust among themselves
  D. Collection of domains that have established trust among themselves

• Question 495:

  The PRIMARY purpose of accreditation is to:

  A. comply with applicable laws and regulations.
  B. allow senior management to make an informed decision regarding whether to accept the risk of operating the system.
  C. protect an organization's sensitive datA.
  D. verify that all security controls have been implemented properly and are operating in the correct manner.
  B. allow senior management to make an informed decision regarding whether to accept the risk of operating the system.

• Question 496:

  Which of the following should be included in a good defense-in-depth strategy provided by object-oriented programming for software deployment?

  A. Polyinstantiation
  B. Polymorphism
  C. Encapsulation
  D. Inheritance
  A. Polyinstantiation

• Question 497:

  A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?

  A. Reduce application development costs.
  B. Potential threats are addressed later in the Software Development Life Cycle (SDLC).
  C. Improve user acceptance of implemented security controls.
  D. Potential threats are addressed earlier in the Software Development Life Cycle (SDLC).
  D. Potential threats are addressed earlier in the Software Development Life Cycle (SDLC).

• Question 498:

  In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

  A. Monitor and review performance against business continuity policy and objectives, report the results to management for review, and determine and authorize actions for remediation and improvement.
  B. Maintain and improve the Business Continuity Management (BCM) system by taking corrective action, based on the results of management review.
  C. Ensure the business continuity policy, controls, processes, and procedures have been implemented.
  D. Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.
  D. Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.

• Question 499:

  How does an organization verify that an information system's current hardware and software match the standard system configuration?

  A. By reviewing the configuration after the system goes into production
  B. By running vulnerability scanning tools on all devices in the environment
  C. By comparing the actual configuration of the system against the baseline
  D. By verifying all the approved security patches are implemented
  C. By comparing the actual configuration of the system against the baseline

• Question 500:

  DRAG DROP

  Match the following generic software testing methods with their major focus and objective.

  Drag each testing method next to its corresponding set of testing objectives.

  Select and Place: