ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 611:

  During a recent assessment an organization has discovered that the wireless signal can be detected outside the campus area.

  What logical control should be implemented in order to BFST protect One confidentiality of information traveling One wireless transmission media?

  A. Configure a firewall to logically separate the data at the boundary.
  B. Configure the Access Points (AP) to use Wi-Fi Protected Access 2 (WPA2) encryption.
  C. Disable the Service Set Identifier (SSID) broadcast on the Access Points (AP).
  D. Perform regular technical assessments on the Wireless Local Area Network (WLAN).
  B. Configure the Access Points (AP) to use Wi-Fi Protected Access 2 (WPA2) encryption.

• Question 612:

  Which of the following is the BEST technique to facilitate secure software development?

  A. Adhere to secure coding practices for the software application under development
  B. Conduct penetrating testing for the software application under development
  C. Develop a threat modeling review for the software application under development
  D. Perform a code review process for the software application under development
  A. Adhere to secure coding practices for the software application under development

• Question 613:

  Which of the following security tools will ensure authorized data is sent to the application when implementing a cloud based application?

  A. Host-based intrusion prevention system (HIPS)
  B. Access control list (ACL)
  C. File integrity monitoring (FIM)
  D. Data loss prevention (DLP)
  B. Access control list (ACL)

• Question 614:

  Which of the following are core categories of malicious attack against Internet of Things (IOT) devices?

  A. Packet capture and false data injection
  B. Packet capture and brute force attack
  C. Node capture 3nd Structured Query Langue (SQL) injection
  D. Node capture and false data injection
  D. Node capture and false data injection

• Question 615:

  During testing, where are the requirements to inform parent organizations, law enforcement, and a computer incident response team documented?

  A. Unit test results
  B. Security assessment plan
  C. System integration plan
  D. Security Assessment Report (SAR)
  D. Security Assessment Report (SAR)

• Question 616:

  What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

  A. Save security costs for the organization.
  B. Improve vulnerability assessment capabilities.
  C. Standardize specifications between software security products.
  D. Achieve organizational compliance with international standards.
  C. Standardize specifications between software security products.

• Question 617:

  Which of the following alarm systems is recommended to detect intrusions through windows in a high-noise, occupied environment?

  A. Acoustic sensor
  B. Motion sensor
  C. Shock sensor
  D. Photoelectric sensor
  C. Shock sensor

• Question 618:

  An organization implements supply chain risk management (SCRM) into all phases of the Systems Development Life Cycle (SDLC). What methodology is MOST important to ensure that SCRM requirements are met?

  A. Supplier self-assessment
  B. Procurement assessment
  C. Vulnerability assessment
  D. Third-party assessment
  D. Third-party assessment

• Question 619:

  Discretionary Access Control (DAC) restricts access according to

  A. data classification labeling.
  B. page views within an application.
  C. authorizations granted to the user.
  D. management accreditation.
  C. authorizations granted to the user.

• Question 620:

  Utilizing a public wireless Local Area network (WLAN) to connect to a private network should be done only in which of the following situations?

  A. Extensible Authentication Protocol (EAP) is utilized to authenticate the user.
  B. The client machine has a personal firewall and utilizes a Virtual Private Network (VPN) to connect to the network.
  C. The client machine has antivirus software and has been seamed to determine if unauthorized ports are open.
  D. The wireless Access Point (AP) is placed in the internal private network.
  A. Extensible Authentication Protocol (EAP) is utilized to authenticate the user.