ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 701:

  What is the BEST design for securing physical perimeter protection?

  A. Crime Prevention through Environmental Design (CPTED)
  B. Barriers, fences, gates, and walls
  C. Business continuity planning (BCP)
  D. Closed-circuit television (CCTV)
  B. Barriers, fences, gates, and walls

• Question 702:

  What is the difference between media marking and media labeling?

  A. Media marking refers to the use of human-readable security attributes, while media labeling refers to the use of security attributes in internal data structures.
  B. Media labeling refers to the use of human-readable security attributes, while media marking refers to the use of security attributes in internal data structures.
  C. Media labeling refers to security attributes required by public policy/law, while media marking refers to security required by internal organizational policy.
  D. Media marking refers to security attributes required by public policy/law, while media labeling refers to security attributes required by internal organizational policy.
  D. Media marking refers to security attributes required by public policy/law, while media labeling refers to security attributes required by internal organizational policy.

• Question 703:

  Which of the following methods of suppressing a fire is environmentally friendly and the MOST appropriate for a data center?

  A. Inert gas fire suppression system
  B. Halon gas fire suppression system
  C. Dry-pipe sprinklers
  D. Wet-pipe sprinklers
  A. Inert gas fire suppression system

• Question 704:

  To ensure compliance with the General Data Protection Regulation (GDPR), who in the organization should the help desk manager confer with before selecting a Software as a Service (SaaS) solution?

  A. Data owner
  B. Database administrator (DBA)
  C. Data center manager
  D. Data Protection Officer (DPO)
  D. Data Protection Officer (DPO)

• Question 705:

  What information will BEST assist security and financial analysts in determining if a security control is cost effective to mitigate a vulnerability?

  A. Annualized Loss Expectancy (ALE) and the cost of the control
  B. Single Loss Expectancy (SLE) and the cost of the control
  C. Annual Rate of Occurrence (ARO) and the cost of the control
  D. Exposure Factor (EF) and the cost of the control
  D. Exposure Factor (EF) and the cost of the control

• Question 706:

  A large university needs to enable student access to university resources from their homes. Which of the following provides the BEST option for low maintenance and ease of deployment?

  A. Provide students with Internet Protocol Security (IPSec) Virtual Private Network (VPN) client software.
  B. Use Secure Sockets Layer (SSL) VPN technology.
  C. Use Secure Shell (SSH) with public/private keys.
  D. Require students to purchase home router capable of VPN.
  B. Use Secure Sockets Layer (SSL) VPN technology.

• Question 707:

  Which of the following is a strategy of grouping requirements in developing a security test and Evaluation (STandE)?

  A. Management, operational, and technical
  B. Standards, policies, and procedures
  C. Documentation, observation, and manual
  D. Tactical, strategic, and financial
  A. Management, operational, and technical

• Question 708:

  When constructing an Information Protection Policy (IPP), it is important that the stated rules are necessary, adequate, and

  A. flexible.
  B. confidential.
  C. focused.
  D. achievable.
  D. achievable.

• Question 709:

  Refer to the information below to answer the question.

  An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have

  been tightly integrated into normal IT operations and are not separate and distinct roles.

  Which of the following will indicate where the IT budget is BEST allocated during this time?

  A. Policies
  B. Frameworks
  C. Metrics
  D. Guidelines
  C. Metrics

• Question 710:

  A Virtual Machine (VM) environment has five guest Operating Systems (OS) and provides strong isolation. What MUST an administrator review to audit a user's access to data files?

  A. Host VM monitor audit logs
  B. Guest OS access controls
  C. Host VM access controls
  D. Guest OS audit logs
  D. Guest OS audit logs