ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 51:

  When developing solutions for mobile devices, in which phase of the Software Development Life Cycle (SDLC) should technical limitations related to devices be specified?

  A. Implementation
  B. Initiation
  C. Review
  D. Development
  B. Initiation

• Question 52:

  Which of the following is a secure design principle for a new product?

  A. Build in appropriate levels of fault tolerance.
  B. Utilize obfuscation whenever possible.
  C. Do not rely on previously used code.
  D. Restrict the use of modularization.
  A. Build in appropriate levels of fault tolerance.

• Question 53:

  When developing a business case for updating a security program, the security program owner MUST do which of the following?

  A. Identify relevant metrics
  B. Prepare performance test reports
  C. Obtain resources for the security program
  D. Interview executive management
  A. Identify relevant metrics

• Question 54:

  Which of the BEST internationally recognized standard for evaluating security products and systems?

  A. Payment Card Industry Data Security Standards (PCI-DSS)
  B. Common Criteria (CC)
  C. Health Insurance Portability and Accountability Act (HIPAA)
  D. Sarbanes-Oxley (SOX)
  B. Common Criteria (CC)

• Question 55:

  The security accreditation task of the System Development Life Cycle (SDLC) process is completed at the end of which phase?

  A. System acquisition and development
  B. System operations and maintenance
  C. System initiation
  D. System implementation
  B. System operations and maintenance

• Question 56:

  Which Orange book security rating introduces security labels?

  A. C2
  B. B1
  C. B2
  D. B3
  B. B1

• Question 57:

  A proxy firewall operates at what layer of the Open System Interconnection (OSI) model?

  A. Transport
  B. Data link
  C. Network
  D. Application
  D. Application

• Question 58:

  Why is a system's criticality classification important in large organizations?

  A. It provides for proper prioritization and scheduling of security and maintenance tasks.
  B. It reduces critical system support workload and reduces the time required to apply patches.
  C. It allows for clear systems status communications to executive management.
  D. It provides for easier determination of ownership, reducing confusion as to the status of the asset.
  A. It provides for proper prioritization and scheduling of security and maintenance tasks.

• Question 59:

  Which of the following is the BEST method to identify security controls that should be implemented for a web-based application while in development?

  A. Application threat modeling
  B. Secure software development.
  C. Agile software development
  D. Penetration testing
  A. Application threat modeling

• Question 60:

  Assuming an individual has taken all of the steps to keep their internet connection private, which of the following is the BEST to browse the web privately?

  A. Prevent information about browsing activities from being stored in the cloud.
  B. Store browsing activities in the cloud.
  C. Prevent information about browsing activities farm being stored on the personal device.
  D. Store information about browsing activities on the personal device.
  A. Prevent information about browsing activities from being stored in the cloud.