ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 601:

  Detection capabilities of Host-based ID systems are limited by the incompleteness of which of the following?

  A. Audit log capabilities
  B. Event capture capabilities
  C. Event triage capabilities
  D. Audit notification capabilities
  A. Audit log capabilities

• Question 602:

  The Hardware Abstraction Layer (HAL) is implemented in the

  A. system software.
  B. system hardware.
  C. application software.
  D. network hardware.
  A. system software.

• Question 603:

  An establish information technology (IT) consulting firm is considering acquiring a successful local startup. To gain a comprehensive understanding of the startup's security posture, which type of assessment provides the BEST information?

  A. A security audit
  B. A penetration test
  C. A tabletop exercise
  D. A security threat model
  A. A security audit

• Question 604:

  An organization would like to ensure that all new users have a predefined departmental access template applied upon creation. The organization would also like additional access for users to be granted on a per-project basis. What type of user access administration is BEST suited to meet the organization's needs?

  A. Hybrid
  B. Federated
  C. Decentralized
  D. Centralized
  A. Hybrid

• Question 605:

  A network administrator is configuring a database server and would like to ensure the database engine is listening on a certain port. Which of the following commands should the administrator use to accomplish this goal?

  A. nslookup
  B. netstat -a
  C. ipeonfig /a
  D. arp -a
  B. netstat -a

• Question 606:

  Which of the following are the FIRST two steps to securing employees from threats involving workplace violence and acts of terrorism?

  A. Physical barriers impeding unauthorized access and security guards at each entrance
  B. Physical barriers and the ability to identify people as they enter the workplace
  C. Security guards and metal detectors posted at each entrance
  D. Metal detectors and the ability to identify people as they enter the workplace
  B. Physical barriers and the ability to identify people as they enter the workplace

• Question 607:

  A company is enrolled in a hard drive reuse program where decommissioned equipment is sold back to the vendor when it is no longer needed. The vendor pays more money for functioning drives than equipment that is no longer operational. Which method of data sanitization would provide the most secure means of preventing unauthorized data loss, while also receiving the most money from the vendor?

  A. Pinning
  B. Single-pass wipe
  C. Degaussing
  D. Multi-pass wipes
  D. Multi-pass wipes

• Question 608:

  What is the PRIMARY purpose of auditing, as it relates to the security review cycle?

  A. To ensure the organization's controls and pokies are working as intended
  B. To ensure the organization can still be publicly traded
  C. To ensure the organization's executive team won't be sued
  D. To ensure the organization meets contractual requirements
  A. To ensure the organization's controls and pokies are working as intended

• Question 609:

  Individuls have been identified and determined as having a need-to-know for the information. Which of the following access control methods MUST include a consistent set of rules for controlling and limiting access?

  A. Attribute Based Access Control (ABAC)
  B. Role-Based Access Control (RBAC)
  C. Discretionary Access Control (DAC)
  D. Mandatory Access Control (MAC)
  D. Mandatory Access Control (MAC)

• Question 610:

  What is the BEST way to encrypt web application communications?

  A. Secure Hash Algorithm 1 (SHA-1)
  B. Secure Sockets Layer (SSL)
  C. Cipher Block Chaining Message Authentication Code (CBC-MAC)
  D. Transport Layer Security (TLS)
  D. Transport Layer Security (TLS)