ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 621:

  Before implementing an internet-facing router, a network administrator ensures that the equipment is baselined/hardened according to approved configurations and settings. This action provides protection against which of the following attacks?

  A. Blind spoofing
  B. Media Access Control (MAC) flooding
  C. SQL injection (SQLI)
  D. Ransomware
  B. Media Access Control (MAC) flooding

• Question 622:

  After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials. Much of the following actions could have BEST avoided the above breach per the investigation described above?

  A. A periodic review of network access loos
  B. A periodic review of active users en the network
  C. A periodic review of all privileged accounts actions
  D. A periodic review of password strength of all users across the organization
  C. A periodic review of all privileged accounts actions

• Question 623:

  What are the steps of a risk assessment?

  A. identification, analysis, evaluation
  B. analysis, evaluation, mitigation
  C. classification, identification, risk management
  D. identification, evaluation, mitigation
  A. identification, analysis, evaluation

• Question 624:

  Which of the following is the FIRST thing to consider when reviewing Information Technology (IT) internal controls?

  A. The risk culture of the organization
  B. The impact of the control
  C. The nature of the risk
  D. The cost of the control
  B. The impact of the control

• Question 625:

  What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?

  A. Risk assessment
  B. Performance testing
  C. Security audit
  D. Risk management
  D. Risk management

• Question 626:

  An organization recently conducted a review of the security of its network applications. One of the vulnerabilities found was that the session key used in encrypting sensitive information to a third party server had been hard-coded in the client and server applications.

  Which of the following would be MOST effective in mitigating this vulnerability?

  A. Diffle-Hellman (DH) algorithm
  B. Elliptic Curve Cryptography (ECC) algorithm
  C. Digital Signature algorithm (DSA)
  D. Rivest-Shamir-Adleman (RSA) algorithm
  A. Diffle-Hellman (DH) algorithm

• Question 627:

  A company wants to store data related to users on an offsite server. What method can be deployed to protect the privacy of the user's information while maintaining the field-level configuration of the database?

  A. {Encryption
  B. Encoding
  C. Tokenization
  D. Hashing
  A. {Encryption

• Question 628:

  The BEST method of demonstrating a company's security level to potential customers is

  A. a report from an external auditor.
  B. responding to a customer's security questionnaire.
  C. a formal report from an internal auditor.
  D. a site visit by a customer's security team.
  A. a report from an external auditor.

• Question 629:

  Which of the following is the MOST effective preventative method to identify security flaws in software?

  A. Monitor performance in production environments
  B. Perform a structured code review
  C. Perform application penetration testing
  D. Use automated security vulnerability testing tools
  C. Perform application penetration testing

• Question 630:

  What is considered the BEST explanation when determining whether to provide remote network access to a third-party security service?

  A. Contract negotiation
  B. Vendor demonstration
  C. Supplier request
  D. Business need
  D. Business need