ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 751:

  Which of the following is a reason to use manual patch installation instead of automated patch management?

  A. The cost required to install patches will be reduced.
  B. The time during which systems will remain vulnerable to an exploit will be decreased.
  C. The likelihood of system or application incompatibilities will be decreased.
  D. The ability to cover large geographic areas is increased.
  C. The likelihood of system or application incompatibilities will be decreased.

• Question 752:

  Which of the following factors should be considered characteristics of Attribute Based Access Control (ABAC) in terms of the attributes used?

  A. Mandatory Access Control (MAC) and Discretionary Access Control (DAC)
  B. Discretionary Access Control (DAC) and Access Control List (ACL)
  C. Role Based Access Control (RBAC) and Mandatory Access Control (MAC)
  D. Role Based Access Control (RBAC) and Access Control List (ACL)
  D. Role Based Access Control (RBAC) and Access Control List (ACL)

• Question 753:

  An internal audit for an organization recently identified malicious actions by a user account. Upon further investigation, it was determined the offending user account was used by multiple people at multiple locations simultaneously for various services and applications. What is the BEST method to prevent this problem in the future?

  A. Ensure the security information and event management (SIEM) is set to alert.
  B. Inform users only one user should be using the account at a time.
  C. Ensure each user has their own unique account,
  D. Allow several users to share a generic account.
  A. Ensure the security information and event management (SIEM) is set to alert.

• Question 754:

  For a federated identity solution, a third-party Identity Provider (IdP) is PRIMARILY responsible for which of the following?

  A. Access Control
  B. Account Management
  C. Authentication
  D. Authorization
  C. Authentication

• Question 755:

  Which of the following command line tools can be used in the reconnaisance phase of a network vulnerability assessment?

  A. dig
  B. ifconfig
  C. ipconfig
  D. nbtstat
  A. dig

• Question 756:

  What is the BEST reason to include supply chain risks in a corporate risk register?

  A. Risk registers help fund corporate supply chain risk management (SCRM) systems.
  B. Risk registers classify and categorize risk and allow risks to be compared to corporate risk appetite.
  C. Risk registers can be used to illustrate residual risk across the company.
  D. Risk registers allow for the transfer of risk to third parties.
  B. Risk registers classify and categorize risk and allow risks to be compared to corporate risk appetite.

• Question 757:

  Which of the following is PRIMARILY adopted for ensuring the integrity of information is preserved?

  A. Data at rest protection
  B. Transport Layer Security (TLS)
  C. Role Based Access Control (RBAC)
  D. One-way encryption
  A. Data at rest protection

• Question 758:

  If a content management system (CSM) is implemented, which one of the following would occur?

  A. The test and production systems would be riming the same software
  B. The applications placed into production would be secure
  C. Developers would no longer have access to production systems
  D. Patching the systems would be completed mere quickly
  A. The test and production systems would be riming the same software

• Question 759:

  What is the MOST effective way to mitigate distributed denial of service (DDoS) attacks?

  A. Deploy a web application firewall (WAF).
  B. Block access to Transmission Control Protocol (TCP) ports under attack.
  C. Detect and block bad Internet Protocol (IP) subnets on the corporate firewall.
  D. Engage an upstream Internet service provider (ISP).
  D. Engage an upstream Internet service provider (ISP).

• Question 760:

  What is the MOST critical factor to achieve the goals of a security program?

  A. Capabilities of security resources
  B. Executive management support
  C. Effectiveness of security management
  D. Budget approved for security resources
  B. Executive management support