ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 561:

  Refer to the information below to answer the question.

  An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have

  been tightly integrated into normal IT operations and are not separate and distinct roles.

  Which of the following will be the PRIMARY security concern as staff is released from the organization?

  A. Inadequate IT support
  B. Loss of data and separation of duties
  C. Undocumented security controls
  D. Additional responsibilities for remaining staff
  B. Loss of data and separation of duties

• Question 562:

  Which of the following is TRUE about Disaster Recovery Plan (DRP) testing?

  A. Operational networks are usually shut down during testing.
  B. Testing should continue even if components of the test fail.
  C. The company is fully prepared for a disaster if all tests pass.
  D. Testing should not be done until the entire disaster plan can be tested.
  B. Testing should continue even if components of the test fail.

• Question 563:

  By carefully aligning the pins in the lock, which of the following defines the opening of a mechanical lock without the proper key?

  A. Lock pinging
  B. Lock picking
  C. Lock bumping
  D. Lock bricking
  B. Lock picking

• Question 564:

  Which of the following activities is MOST likely to be performed during a vulnerability assessment?

  A. Establish caller authentication procedures to verify the identities of users
  B. Analyze the environment by conducting interview sessions with relevant parties
  C. Document policy exceptions required to access systems in non-compliant areas
  D. Review professional credentials of the vulnerability assessment team or vendor
  C. Document policy exceptions required to access systems in non-compliant areas

• Question 565:

  What is the PRIMARY goal of fault tolerance?

  A. Elimination of single point of failure
  B. Isolation using a sandbox
  C. Single point of repair
  D. Containment to prevent propagation
  A. Elimination of single point of failure

• Question 566:

  Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance stage in a System Development Life Cycle (SDLC)?

  A. Make changes following principle and design guidelines.
  B. Stop the application until the vulnerability is fixed.
  C. Report the vulnerability to product owner.
  D. Monitor the application and review code.
  C. Report the vulnerability to product owner.

• Question 567:

  What level of Redundant Array of Independent Disks (RAID) is configured PRIMARILY for high-performance data reads and writes?

  A. RAID-0
  B. RAID-1
  C. RAID-5
  D. RAID-6
  A. RAID-0

• Question 568:

  Determining outage costs caused by a disaster can BEST be measured by the

  A. cost of redundant systems and backups.
  B. cost to recover from an outage.
  C. overall long-term impact of the outage.
  D. revenue lost during the outage.
  C. overall long-term impact of the outage.

• Question 569:

  The overall goal of a penetration test is to determine a system's

  A. ability to withstand an attack.
  B. capacity management.
  C. error recovery capabilities.
  D. reliability under stress.
  A. ability to withstand an attack.

• Question 570:

  Which of the following is a canon of the (ISC)2 Code of Ethics?

  A. Integrity first, association before serf, and excellence in all we do
  B. Perform all professional activities and duties in accordance with all applicable laws and the highest ethical standards.
  C. Provide diligent and competent service to principals.
  D. Cooperate with others in the interchange of knowledge and ideas for mutual security.
  C. Provide diligent and competent service to principals.