ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 741:

  From an asset security perspective, what is the BEST countermeasure to prevent data theft due to data remanence when a sensitive data storage media is no longer needed?

  A. Return the media to the system owner.
  B. Delete the sensitive data from the media.
  C. Physically destroy the retired media.
  D. Encrypt data before it Is stored on the media.
  C. Physically destroy the retired media.

• Question 742:

  Who is ultimately responsible to ensure that information assets are categorized and adequate measures are taken to protect them?

  A. Data Custodian
  B. Executive Management
  C. Chief Information Security Officer
  D. Data/Information/Business Owners
  B. Executive Management

• Question 743:

  Which of the following phases involves researching a target's configuration from public sources when performing a penetration test?

  A. Information gathering
  B. Social engineering
  C. Target selection
  D. Traffic enumeration
  A. Information gathering

• Question 744:

  Which of the following was developed to support multiple protocols as well as provide as well as provide login, password, and error correction capabilities?

  A. Challenge Handshake Authentication Protocol (CHAP)
  B. Point-to-Point Protocol (PPP)
  C. Password Authentication Protocol (PAP)
  D. Post Office Protocol (POP)
  A. Challenge Handshake Authentication Protocol (CHAP)

• Question 745:

  The goal of a Business Impact Analysis (BIA) is to determine which of the following?

  A. Cost effectiveness of business recovery
  B. Cost effectiveness of installing software security patches
  C. Resource priorities for recovery and Maximum Tolerable Downtime (MTD)
  D. Which security measures should be implemented
  C. Resource priorities for recovery and Maximum Tolerable Downtime (MTD)

• Question 746:

  Recently, an unknown event has disrupted a single Layer-2 network that spans between two geographically diverse data centers. The network engineers have asked for assistance in identifying the root cause of the event. Which of the following is the MOST likely cause?

  A. Misconfigured routing protocol
  B. Smurf attack
  C. Broadcast domain too large
  D. Address spoofing
  D. Address spoofing

• Question 747:

  As a design principle, which one of the following actors is responsible for identifying and approving data security requirements in a cloud ecosystem?

  A. Cloud broker
  B. Cloud provider
  C. Cloud consumer
  D. Cloud auditor
  C. Cloud consumer

• Question 748:

  An organization is found lacking the ability to properly establish performance indicators for its Web hosting solution during an audit. What would be the MOST probable cause?

  A. Absence of a Business Intelligence (BI) solution
  B. Inadequate cost modeling
  C. Improper deployment of the Service-Oriented Architecture (SOA)
  D. Insufficient Service Level Agreement (SLA)
  D. Insufficient Service Level Agreement (SLA)

• Question 749:

  A thorough review of an organization's audit logs finds that a disgruntled network administrator has intercepted emails meant for the Chief Executive Officer (CEO) and changed them before forwarding them to their intended recipient. What type of attack has MOST likely occurred?

  A. Spoofing
  B. Eavesdropping
  C. Man-in-the-middle
  D. Denial of service
  C. Man-in-the-middle

• Question 750:

  Which of the following is MOST effective in detecting information hiding in Transmission Control Protocol/Internet Protocol (TCP/IP) traffic?

  A. Packet-filter firewall
  B. Content-filtering web proxy
  C. Stateful inspection firewall
  D. Application-level firewall
  C. Stateful inspection firewall