ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 581:

  The amount of data that will be collected during an audit is PRIMARILY determined by the

  A. audit scope.
  B. auditor's experience level.
  C. availability of the datA.
  D. integrity of the datA.
  A. audit scope.

• Question 582:

  According to the (ISC)? ethics canon "act honorably, honestly, justly, responsibly, and legally," which order should be used when resolving conflicts?

  A. Public safety and duties to principals, individuals, and the profession
  B. Individuals, the profession, and public safety and duties to principals
  C. Individuals, public safety and duties to principals, and the profession
  D. The profession, public safety and duties to principals, and individuals
  A. Public safety and duties to principals, individuals, and the profession

• Question 583:

  Which of the following would an information security professional use to recognize changes to content, particularly unauthorized changes?

  A. File Integrity Checker
  B. Security information and event management (SIEM) system
  C. Audit Logs
  D. Intrusion detection system (IDS)
  A. File Integrity Checker

• Question 584:

  Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high-risk countries?

  A. Review applicable destination country laws, forensically clean devices prior to travel, and only download sensitive data over a virtual private network (VPN) upon arriving at the destination.
  B. Keep laptops, external storage devices, and smartphones in the hotel room when not in use.
  C. Leverage a Secure Socket Layer (SSL) connection over a virtual private network (VPN) to download sensitive data upon arriving at the destination.
  D. Use multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control isms to unlock smartphones.
  D. Use multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control isms to unlock smartphones.

• Question 585:

  What is the PRIMARY benefit of incident reporting and computer crime investigations?

  A. Providing evidence to law enforcement
  B. Repairing the damage and preventing future occurrences
  C. Appointing a computer emergency response team
  D. Complying with security policy
  D. Complying with security policy

• Question 586:

  Which of the following statements BEST describes least privilege principle in a cloud environment?

  A. Network segments remain private if unneeded to access the internet.
  B. Internet traffic is inspected for all incoming and outgoing packets.
  C. A single cloud administrator is configured to access core functions.
  D. Routing configurations are regularly updated with the latest routes.
  B. Internet traffic is inspected for all incoming and outgoing packets.

• Question 587:

  Which of the following is the BEST way to protect privileged accounts?

  A. Quarterly user access rights audits
  B. Role-based access control (RBAC)
  C. Written supervisory approval
  D. Multi-factor authentication (MFA)
  D. Multi-factor authentication (MFA)

• Question 588:

  Which of the following is the PRIMARY purpose of due diligence when an organization embarks on a merger or acquisition?

  A. Assess the business risks.
  B. Formulate alternative strategies.
  C. Determine that all parties are equally protected.
  D. Provide adequate capability for all parties.
  E. Strategy and program management, project delivery, governance, operations
  A. Assess the business risks.

• Question 589:

  Which of the following MOST influences the design of the organization's electronic monitoring policies?

  A. Workplace privacy laws
  B. Level of organizational trust
  C. Results of background checks
  D. Business ethical considerations
  A. Workplace privacy laws

• Question 590:

  Refer to the information below to answer the question.

  An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have

  been tightly integrated into normal IT operations and are not separate and distinct roles.

  When determining appropriate resource allocation, which of the following is MOST important to monitor?

  A. Number of system compromises
  B. Number of audit findings
  C. Number of staff reductions
  D. Number of additional assets
  B. Number of audit findings