ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 661:

  An organization suspects it is receiving spoofed e-mails from a foreign-hosted web e-mail service. Where can the MOST relevant be found to begin the process of identifying the perpetrator?

  A. E-mail logs from foreign-hosted web server
  B. Message header of received e-mails
  C. Traffic logs from the corporate firewall
  D. Log files of the corporate Simple Mail Transfer Protocol (SMTP) server
  B. Message header of received e-mails

• Question 662:

  Once the types of information have been identified, who should an information security practitioner work with to ensure that the information is properly categorized?

  A. Information Owner (IO)
  B. System Administrator
  C. Business Continuity (BC) Manager
  D. Chief Information Officer (CIO)
  A. Information Owner (IO)

• Question 663:

  A client has reviewed a vulnerability assessment report and has stated it is Inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operating System (OS) was not properly detected. Where in the vulnerability assessment process did the erra MOST likely occur?

  A. Detection
  B. Enumeration
  C. Reporting
  D. Discovery
  A. Detection

• Question 664:

  Which of the following would qualify as an exception to the "right to be forgotten" of the General Data Protection Regulation's (GDPR)?

  A. For the establishment, exercise, or defense of legal claims
  B. The personal data has been lawfully processed and collected
  C. The personal data remains necessary to the purpose for which it was collected
  D. For the reasons of private interest
  C. The personal data remains necessary to the purpose for which it was collected

• Question 665:

  A company receives an email threat informing of an Imminent Distributed Denial of Service (DDoS) attack targeting its web application, unless ransom is paid. Which of the following techniques BEST addresses that threat?

  A. Deploying load balancers to distribute inbound traffic across multiple data centers
  B. Set Up Web Application Firewalls (WAFs) to filter out malicious traffic
  C. Implementing reverse web-proxies to validate each new inbound connection
  D. Coordinate with and utilize capabilities within Internet Service Provider (ISP)
  D. Coordinate with and utilize capabilities within Internet Service Provider (ISP)

• Question 666:

  When deploying en Intrusion Detection System (IDS) on a high-volume network, the need to distribute the load across multiple sensors would create which technical problem?

  A. Session continuity
  B. Proxy authentication failure
  C. Sensor overload
  D. Synchronized sensor updates
  A. Session continuity

• Question 667:

  Refer to the information below to answer the question.

  A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

  In the plan, what is the BEST approach to mitigate future internal client-based attacks?

  A. Block all client side web exploits at the perimeter.
  B. Remove all non-essential client-side web services from the network.
  C. Screen for harmful exploits of client-side services before implementation.
  D. Harden the client image before deployment.
  D. Harden the client image before deployment.

• Question 668:

  Which of the following is the MOST important consideration that must be taken into account when deploying an enterprise patching solution that includes mobile devices?

  A. Service provider(s) utilized by the organization
  B. Whether it will impact personal use
  C. Number of mobile users in the organization
  D. Feasibility of downloads due to available bandwidth
  C. Number of mobile users in the organization

• Question 669:

  In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what changes should be made to that resource's access to the production Operating System (OS) directory structure?

  A. From Read Only privileges to No Access privileges
  B. From Author privileges to Administrative privileges
  C. From Administrative privileges to No Access privileges
  D. From No Access privileges to Author privileges
  A. From Read Only privileges to No Access privileges

• Question 670:

  The World Trade Organization's (WTO) agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS) requires authors of computer software to be given the

  A. right to refuse or permit commercial rentals.
  B. right to disguise the software's geographic origin.
  C. ability to tailor security parameters based on location.
  D. ability to confirm license authenticity of their works.
  A. right to refuse or permit commercial rentals.