ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 531:

  Which of the following is a weakness of the Data Encryption Standard (DES)?

  A. Block encryption scheme
  B. Use of same key for encryption and decryption
  C. Publicly disclosed algorithm
  D. Inadequate key length
  D. Inadequate key length

• Question 532:

  A security professional has been assigned to assess a web application. The assessment report recommends switching to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit in switching to SAML?

  A. It uses Transport Layer Security (TLS) to address confidentiality.
  B. It enables single sign-on (SSO) for web applications.
  C. The users' password Is not passed during authentication.
  D. It limits unnecessary data entry on web forms.
  B. It enables single sign-on (SSO) for web applications.

• Question 533:

  Which of the following contributes MOST to the effectiveness of a security officer?

  A. Understanding the regulatory environment
  B. Developing precise and practical security plans
  C. Integrating security into the business strategies
  D. Analyzing the strengths and weakness of the organization
  A. Understanding the regulatory environment

• Question 534:

  Which of the following is the MAIN reason for using configuration management?

  A. To provide centralized administration
  B. To reduce the number of changes
  C. To reduce errors during upgrades
  D. To provide consistency in security controls
  D. To provide consistency in security controls

• Question 535:

  Which of the following would BEST support effective testing of patch compatibility when patches are applied to an organization's systems?

  A. Standardized configurations for devices
  B. Standardized patch testing equipment
  C. Automated system patching
  D. Management support for patching
  A. Standardized configurations for devices

• Question 536:

  Which of the following is the BEST method to assess the effectiveness of an organization's vulnerability management program?

  A. Review automated patch deployment reports
  B. Periodic third party vulnerability assessment
  C. Automated vulnerability scanning
  D. Perform vulnerability scan by security team
  B. Periodic third party vulnerability assessment

• Question 537:

  At the destination host, which of the following OSI model layers will discard a segment with a bad checksum in the UDP header?

  A. Network
  B. Data link
  C. Transport
  D. Session
  C. Transport

• Question 538:

  Which of the following is the PRIMARY goal of logical access controls?

  A. Restrict access to an information asset.
  B. Ensure integrity of an information asset.
  C. Restrict physical access to an information asset.
  D. Ensure availability of an information asset.
  C. Restrict physical access to an information asset.

• Question 539:

  Which one of the following network attacks takes advantages of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

  A. Teardrop
  B. Smurf
  C. Ping of Death
  D. SYN flood
  E. SNMP Attack
  A. Teardrop

• Question 540:

  In order to provide dual assurance in a digital signature system, the design MUST include which of the following?

  A. The public key must be unique for the signed document.
  B. signature process must generate adequate authentication credentials.
  C. The hash of the signed document must be present.
  D. The encrypted private key must be provided in the signing certificate.
  B. signature process must generate adequate authentication credentials.