ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 681:

  Which of the following BEST describes Recovery Time Objective (RTO)?

  A. Time of application resumption after disaster
  B. Time of application verification after disaster.
  C. Time of data validation after disaster.
  D. Time of data restoration from backup after disaster.
  A. Time of application resumption after disaster

• Question 682:

  What are facets of trustworthy software in supply chain operations?

  A. Functionality, safety, reliability, integrity, and accuracy
  B. Confidentiality, integrity, availability, authenticity, and possession
  C. Safety, reliability, availability, resilience, and security
  D. Reparability, security, upgradability, functionality, and accuracy
  C. Safety, reliability, availability, resilience, and security

• Question 683:

  Which of the following is the MOST effective method of mitigating data theft from an active user workstation?

  A. Implement full-disk encryption
  B. Enable multifactor authentication
  C. Deploy file integrity checkers
  D. Disable use of portable devices
  D. Disable use of portable devices

• Question 684:

  Which of the following is the PRIMARY type of cryptography required to support non-repudiation of a digitally signed document?

  A. Message digest (MD)
  B. Asymmetric
  C. Symmetric
  D. Hashing
  B. Asymmetric

• Question 685:

  From a security perspective, which of the following is a best practice to configure a Domain Name Service (DNS) system?

  A. Configure secondary servers to use the primary server as a zone forwarder.
  B. Block all Transmission Control Protocol (TCP) connections.
  C. Disable all recursive queries on the name servers.
  D. Limit zone transfers to authorized devices.
  D. Limit zone transfers to authorized devices.

• Question 686:

  What does electronic vaulting accomplish?

  A. It protects critical files.
  B. It ensures the fault tolerance of Redundant Array of Independent Disks (RAID) systems
  C. It stripes all database records
  D. It automates the Disaster Recovery Process (DRP)
  A. It protects critical files.

• Question 687:

  An organization seeks to use a cloud Identity and Access Management (IAM) provider whose protocols and data formats are incompatible with existing systems. Which of the following techniques addresses the compatibility issue?

  A. Require the cloud IAM provider to use declarative security instead of programmatic authentication checks
  B. Integrate a Web-Application Firewall (WAF) in reverse-proxy mode in front of the service provider
  C. Apply Transport Layer Security (TLS) to the cloud-based authentication checks
  D. Install an on-premise Authentication Gateway Service (AGS) in front of the service provider
  D. Install an on-premise Authentication Gateway Service (AGS) in front of the service provider

• Question 688:

  It is MOST important to perform which of the following to minimize potential impact when implementing a new vulnerability scanning tool in a production environment?

  A. Negotiate schedule with the Information Technology (IT) operation's team
  B. Log vulnerability summary reports to a secured server
  C. Enable scanning during off-peak hours
  D. Establish access for Information Technology (IT) management
  C. Enable scanning during off-peak hours

• Question 689:

  Which of the following is the FIRST step during digital identity provisioning?

  A. Authorizing the entity for resource access
  B. Synchronizing directories
  C. Issuing an initial random password
  D. Creating the entity record with the correct attributes
  D. Creating the entity record with the correct attributes

• Question 690:

  What is the PRIMARY purpose for an organization to conduct a security audit?

  A. To ensure the organization is adhering to a well-defined standard
  B. To ensure the organization is applying security controls to mitigate identified risks
  C. To ensure the organization is configuring information systems efficiently
  D. To ensure the organization is documenting findings
  B. To ensure the organization is applying security controls to mitigate identified risks