ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 761:

  An organization has determined that its previous waterfall approach to software development is not keeping pace with business demands. To adapt to the rapid changes required for product delivery, the organization has decided to move towards an Agile software development and release cycle. In order to ensure the success of the Agile methodology, who is MOST critical in creating acceptance tests or acceptance criteria for each release?

  A. Project managers
  B. Software developers
  C. Independent testers
  D. Business customers
  D. Business customers

• Question 762:

  Which of the following is the key requirement for test results when implementing forensic procedures?

  A. The test results must be cost-effective.
  B. The test result must be authorized.
  C. The test results must be quantifiable.
  D. The test results must be reproducible.
  B. The test result must be authorized.

• Question 763:

  An organization publishes and periodically updates its employee policies in a file on their intranet. Which of the following is a PRIMARY security concern?

  A. Availability
  B. Confidentiality
  C. Integrity
  D. Ownership
  A. Availability

• Question 764:

  At a MINIMUM, a formal review of any Disaster Recovery Plan (DRP) should be conducted

  A. monthly.
  B. quarterly.
  C. annually.
  D. bi-annually.
  C. annually.

• Question 765:

  Compared to a traditional network, which of the following is a security-related benefit that software-defined networking (SDN) provides?

  A. Centralized network provisioning
  B. Centralized network administrator control
  C. Reduced network latency when scaled
  D. Reduced hardware footprint and cost
  B. Centralized network administrator control

• Question 766:

  A large bank deploys hardware tokens to all customers that use their online banking system. The token generates and displays a six digit numeric password every 60 seconds. The customers must log into their bank accounts using this numeric password. This is an example of

  A. asynchronous token.
  B. Single Sign-On (SSO) token.
  C. single factor authentication token.
  D. synchronous token.
  D. synchronous token.

• Question 767:

  Which of the following explains why record destruction requirements are included in a data retention policy?

  A. To comply with legal and business requirements
  B. To save cost for storage and backup
  C. To meet destruction guidelines
  D. To validate data ownership
  A. To comply with legal and business requirements

• Question 768:

  An Intrusion Detection System (IDS) is generating alarms that a user account has over 100 failed login attempts per minute. A sniffer is placed on the network, and a variety of passwords for that user are noted. Which of the following is MOST likely occurring?

  A. A dictionary attack
  B. A Denial of Service (DoS) attack
  C. A spoofing attack
  D. A backdoor installation
  A. A dictionary attack

• Question 769:

  Which of the following is strategy of grouping requirements in developing a security Test and Evaluation (STandE)?

  A. Standards, policies, and procedures
  B. Documentation, observation, and manual
  C. Tactical, strategic, and financial
  D. Management, operational, and technical
  D. Management, operational, and technical

• Question 770:

  What is the MOST important reason to configure unique user IDs?

  A. Supporting accountability
  B. Reducing authentication errors
  C. Preventing password compromise
  D. Supporting Single Sign On (SSO)
  A. Supporting accountability