ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 691:

  What does the term "100-year floodplain" mean to emergency preparedness officials?

  A. The area is expected to be safe from flooding for at least 100 years.
  B. The odds of a flood at this level are 1 in 100 in any given year.
  C. The odds are that the next significant flood will hit within the next 100 years.
  D. The last flood of any kind to hit the area was more than 100 years ago.
  B. The odds of a flood at this level are 1 in 100 in any given year.

• Question 692:

  A security practitioner needs to implementation solution to verify endpoint security protections and operating system (0S) versions. Which of the following is the BEST solution to implement?

  A. An intrusion prevention system (IPS)
  B. An intrusion prevention system (IPS)
  C. Network Access Control (NAC)
  D. A firewall
  B. An intrusion prevention system (IPS)

• Question 693:

  Which of the following BEST represents a defense in depth concept?

  A. Network-based data loss prevention (DLP), Network Access Control (NAC), network-based Intrusion prevention system (NIPS), Port security on core switches
  B. Host-based data loss prevention (DLP), Endpoint anti-malware solution, Host-based integrity checker, Laptop locks, hard disk drive (HDD) encryption
  C. Endpoint security management, network intrusion detection system (NIDS), Network Access Control (NAC), Privileged Access Management (PAM), security information and event management (SIEM)
  D. Web application firewall (WAF), Gateway network device tuning, Database firewall, Next-Generation Firewall (NGFW), Tier-2 demilitarized zone (DMZ) tuning
  C. Endpoint security management, network intrusion detection system (NIDS), Network Access Control (NAC), Privileged Access Management (PAM), security information and event management (SIEM)

• Question 694:

  When designing a vulnerability test, which one of the following is likely to give the BEST indication of what components currently operate on the network?

  A. Topology diagrams
  B. Mapping tools
  C. Asset register
  D. Ping testing
  D. Ping testing

• Question 695:

  Which of the following are key activities when conducting a security assessment?

  A. Schedule, collect, examine
  B. Interview, examine, simulate
  C. Collect, interview, test
  D. Examine, interview, test
  D. Examine, interview, test

• Question 696:

  Which of the following questions can be answered using user and group entitlement reporting?

  A. When a particular file was last accessed by a user
  B. Change control activities for a particular group of users
  C. The number of failed login attempts for a particular user
  D. Where does a particular user have access within the network
  D. Where does a particular user have access within the network

• Question 697:

  he security organization is loading for a solution that could help them determine with a strong level of confident that attackers have breached their network. Which solution is MOST effective at discovering successful network breach?

  A. Installing an intrusion prevention system (IPS)
  B. Deploying a honeypot
  C. Installing an intrusion detection system (IDS)
  D. Developing a sandbox
  B. Deploying a honeypot

• Question 698:

  An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?

  A. Development, testing, and deployment
  B. Prevention, detection, and remediation
  C. People, technology, and operations
  D. Certification, accreditation, and monitoring
  C. People, technology, and operations

• Question 699:

  Which of the following mandates the amount and complexity of security controls applied to a security risk?

  A. Security vulnerabilities
  B. Risk tolerance
  C. Risk mitigation
  D. Security staff
  B. Risk tolerance

• Question 700:

  Which security modes is MOST commonly used in a commercial environment because it protects the integrity of financial and accounting data?

  A. Biba
  B. Graham-Denning
  C. Clark-Wilson
  D. Beil-LaPadula
  C. Clark-Wilson