ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 731:

  HOTSPOT

  In the network design below, where is the MOST secure Local Area Network (LAN) segment to deploy a Wireless Access Point (WAP) that provides contractors access to the Internet and authorized enterprise services?

  

  

• Question 732:

  Which of the below strategies would MOST comprehensively address the risk of malicious insiders leaking sensitive information?

  A. Data Loss Protection (DIP), firewalls, data classification
  B. Least privilege access, Data Loss Protection (DLP), physical access controls
  C. Staff vetting, least privilege access, Data Loss Protection (DLP)
  D. Background checks, data encryption, web proxies
  B. Least privilege access, Data Loss Protection (DLP), physical access controls

• Question 733:

  Single Sign-On (SSO) is PRIMARILY designed to address which of the following?

  A. Confidentiality and Integrity
  B. Availability and Accountability
  C. Integrity and Availability
  D. Accountability and Assurance
  D. Accountability and Assurance

• Question 734:

  A system administration office desires to implement the following rules:

  1.An administrator that is designated as a skill level 3, with 5 years of experience, is allowed to perform system backups, upgrades, and local administration.

  2.An administrator that is designated as a skill level 5, with 10 years of experience, is permitted to perform all actions related to system administration. Which of the following access control methods MUST be implemented to achieve this goal?

  A. Discretionary Access Control (DAC)
  B. Role Based Access Control (RBAC)
  C. Mandatory Access Control (MAC)
  D. Attribute Based Access Control (ABAC)
  B. Role Based Access Control (RBAC)

• Question 735:

  While reviewing the financial reporting risks of a third-party application, which of the following Service Organization Control (SOC) reports will be the MOST useful?

  A. ISIsOC 1
  B. SOC 2
  C. SOC 3
  D. SOC for cybersecurity
  A. ISIsOC 1

• Question 736:

  Which of the following MUST the administrator of a security information and event management (SIEM) system ensure?

  A. All sources are reporting in the exact same Extensible Markup Language (XML) format.
  B. Data sources do not contain information infringing upon privacy regulations.
  C. All sources are synchronized with a common time reference.
  D. Each source uses the same Internet Protocol (IP) address for reporting.
  C. All sources are synchronized with a common time reference.

• Question 737:

  Which is the BEST control to meet the Statement on Standards for Attestation Engagements 18 (SSAE-18) confidentiality category?

  A. Data processing
  B. Storage encryption
  C. File hashing
  D. Data retention policy
  B. Storage encryption

• Question 738:

  What is maintained by using write blocking devices whan forensic evidence is examined?

  A. Inventory
  B. lntegrity
  C. Confidentiality
  D. Availability
  B. lntegrity

• Question 739:

  Which of the following entities is ultimately accountable for data remanence vulnerabilities with data replicated by a cloud service provider?

  A. Data owner
  B. Data steward
  C. Data custodian
  D. Data processor
  A. Data owner

• Question 740:

  An organization is attempting to strengthen the configuration of its enterprise resource planning (ERP) software in order to enforce sufficient segregation of duties (SoD). Which of the following approaches would BEST improve SoD effectiveness?

  A. Implementation of frequent audits of access and activity in the ERP by a separate team with no operational duties
  B. Implementation of strengthened authentication measures including mandatory second-factor authentication
  C. Review of ERP access profiles to enforce the least-privilege principle based on existing employee responsibilities
  D. Review of employee responsibilities and ERP access profiles to differentiate mission activities from system support activities
  D. Review of employee responsibilities and ERP access profiles to differentiate mission activities from system support activities