ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 631:

  Which of the following provides the minimum set of privileges required to perform a job function and restricts the user to a domain with the required privileges?

  A. Access based on rules
  B. Access based on user's role
  C. Access determined by the system
  D. Access based on data sensitivity
  B. Access based on user's role

• Question 632:

  An Internet media company produces and broadcasts highly popular television shows. The company is suffering a huge revenue loss due to piracy. What technique should be used to track the distribution of content?

  A. Install the latest data loss prevention (DLP) software at every server used to distribute content.
  B. Log user access to servers. Every day those log records are going to be audited by a team of specialized investigators.
  C. Hire several investigators to identify sources of pirated content and report people sharing the content.
  D. Use watermarking to hide a signature into the digital media such that it can be used to find who is using the company's content.
  D. Use watermarking to hide a signature into the digital media such that it can be used to find who is using the company's content.

• Question 633:

  Which of the following is an essential step before performing Structured Query Language (SQL) penetration tests on a production system?

  A. Verify countermeasures have been deactivated.
  B. Ensure firewall logging has been activated.
  C. Validate target systems have been backed up.
  D. Confirm warm site is ready to accept connections.
  C. Validate target systems have been backed up.

• Question 634:

  What is the MOST effective method for gaining unauthorized access to a file protected with a long complex password?

  A. Brute force attack
  B. Frequency analysis
  C. Social engineering
  D. Dictionary attack
  C. Social engineering

• Question 635:

  Which of the following is the PRIMARY consideration when determining the frequency an automated control should be assessed or monitored?

  A. The complexity of the automated control
  B. The level of automation of the control
  C. The range of values of the automated control
  D. The volatility of the automated control
  B. The level of automation of the control

• Question 636:

  Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

  A. Layer 3 switch
  B. VPN headend
  C. Next-generation firewall
  D. Proxy server
  E. Intrusion prevention
  C. Next-generation firewall

• Question 637:

  In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

  A. Reduced risk to internal systems.
  B. Prepare the server for potential attacks.
  C. Mitigate the risk associated with the exposed server.
  D. Bypass the need for a firewall.
  A. Reduced risk to internal systems.

• Question 638:

  A security professional is asked to provide a solution that restricts a bank teller to only perform a savings deposit transaction but allows a supervisor to perform corrections after the transaction. Which of the following is the MOST effective solution?

  A. Access is based on rules.
  B. Access is determined by the system.
  C. Access is based on user's role.
  D. Access is based on data sensitivity.
  C. Access is based on user's role.

• Question 639:

  Which of the following media sanitization techniques is MOST likely to be effective for an organization using public cloud services?

  A. Low-level formatting
  B. Secure-grade overwrite erasure
  C. Cryptographic erasure
  D. Drive degaussing
  B. Secure-grade overwrite erasure

• Question 640:

  Which of the following in the BEST way to reduce the impect of an externlly sourced flood attack?

  A. Stock the source address at the firewall.
  B. Have this service provide block the source address.
  C. Block all inbound traffic until the flood ends.
  D. Have the source service provider block the address
  D. Have the source service provider block the address