ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 551:

  A large law firm would like to enable employees to participate in a bring your own device (BYOD) program. Only devices with up-to-date antivirus and operating system (OS) patches will be allowed on the network. Which solution will BEST enforce the security requirements?

  A. Endpoint Detection and Response
  B. Next-Generation Firewall
  C. Intrusion detection and prevention system (IDPS)
  D. Network Access Control (NAC)
  D. Network Access Control (NAC)

• Question 552:

  Which of the following is the MOST important output from a mobile application threat modeling exercise according to Open Web Application Security Project (OWASP)?

  A. Application interface entry and endpoints
  B. The likelihood and impact of a vulnerability
  C. Countermeasures and mitigations for vulnerabilities
  D. A data flow diagram for the application and attack surface analysis
  D. A data flow diagram for the application and attack surface analysis

• Question 553:

  Which of the following VPN configurations should be used to separate Internet and corporate traffic?

  A. Split-tunnel
  B. Remote desktop gateway
  C. Site-to-site
  D. Out-of-band management
  A. Split-tunnel

• Question 554:

  Which of the following is considered best practice for preventing e-mail spoofing?

  A. Spam filtering
  B. Cryptographic signature
  C. Uniform Resource Locator (URL) filtering
  D. Reverse Domain Name Service (DNS) lookup
  B. Cryptographic signature

• Question 555:

  Which of the following is mobile device remote fingerprinting?

  A. Installing an application to retrieve common characteristics of the device
  B. Storing information about a remote device in a cookie file
  C. Identifying a device based on common characteristics shared by all devices of a certain type
  D. Retrieving the serial number of the mobile device
  C. Identifying a device based on common characteristics shared by all devices of a certain type

• Question 556:

  An organization allows ping traffic into and out of their network. An attacker has installed a program on the network that uses the payload portion of the ping packet to move data into and out of the network. What type of attack has the organization experienced?

  A. Data leakage
  B. Unfiltered channel
  C. Data emanation
  D. Covert channel
  D. Covert channel

• Question 557:

  Physical Access Control Systems (PACS) allow authorized security personnel to manage and monitor access control for subjects through which function?

  A. Remote access administration
  B. Personal Identity Verification (PIV)
  C. Access Control List (ACL)
  D. Privileged Identity Management (PIM)
  B. Personal Identity Verification (PIV)

• Question 558:

  What is called the number of columns in a table?

  A. Schema
  B. Relation
  C. Degree
  D. Cardinality
  C. Degree

• Question 559:

  Which type of fire alarm system sensor is intended to detect fire at its earliest stage?

  A. Ionization
  B. Infrared
  C. Thermal
  D. Photoelectric
  A. Ionization

• Question 560:

  What is the MAIN reason for having a developer sign a Non-Disclosure Agreement (NDA)?

  A. Signing the NDA always gives consent to the developer to access tools and privileged company information to do their work.
  B. Signing the NDA allows the developer to use their developed coding methods.
  C. Signing the NDA protects confidential, technical, or Intellectual Property (IP) from disclosure to others.
  D. Signing the NDA is legally binding for up to one year of employment.
  C. Signing the NDA protects confidential, technical, or Intellectual Property (IP) from disclosure to others.