ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 771:

  What security management control is MOST often broken by collusion?

  A. Job rotation
  B. Separation of duties
  C. Least privilege model
  D. Increased monitoring
  B. Separation of duties

• Question 772:

  An organization wants to share data securely with their partners via the Internet. Which standard port is typically used to meet this requirement?

  A. Setup a server on User Datagram Protocol (UDP) port 69
  B. Setup a server on Transmission Control Protocol (TCP) port 21
  C. Setup a server on Transmission Control Protocol (TCP) port 22
  D. Setup a server on Transmission Control Protocol (TCP) port 80
  C. Setup a server on Transmission Control Protocol (TCP) port 22

• Question 773:

  A financial company has decided to move its main business application to the Cloud. The legal department objects, arguing that the move of the platform should comply with several regulatory obligations such as the General Data Protection (GDPR) and ensure data confidentiality. The Chief Information Security Officer (CISO) says that the cloud provider has met all regulations requirements and even provides its own encryption solution with internally-managed encryption keys to address data confidentiality. Did the CISO address all the legal requirements in this situation?

  A. No, because the encryption solution is internal to the cloud provider.
  B. Yes, because the cloud provider meets all regulations requirements.
  C. Yes, because the cloud provider is GDPR compliant.
  D. No, because the cloud provider is not certified to host government data.
  B. Yes, because the cloud provider meets all regulations requirements.

• Question 774:

  Which of the following is MOST important when determining appropriate countermeasures for an identified risk?

  A. Interaction with existing controls
  B. Cost
  C. Organizational risk tolerance
  D. Patch availability
  C. Organizational risk tolerance

• Question 775:

  Which Redundant Array c/ Independent Disks (RAID) Level does the following diagram represent?

  

  A. RAID 0
  B. RAID 1
  C. RAID 5
  D. RAID 10
  D. RAID 10

• Question 776:

  When in the Software Development Life Cycle (SDLC) MUST software security functional requirements be defined?

  A. After the system preliminary design has been developed and the data security categorization has been performed
  B. After the vulnerability analysis has been performed and before the system detailed design begins
  C. After the system preliminary design has been developed and before the data security categorization begins
  D. After the business functional analysis and the data security categorization have been performed
  D. After the business functional analysis and the data security categorization have been performed

• Question 777:

  Which of the following does the Encapsulating Security Payload (ESP) provide?

  A. Authorization and integrity
  B. Availability and integrity
  C. Integrity and confidentiality
  D. Authorization and confidentiality
  C. Integrity and confidentiality

• Question 778:

  What would be the PRIMARY concern when designing and coordinating a security assessment for an Automatic Teller Machine (ATM) system?

  A. Physical access to the electronic hardware
  B. Regularly scheduled maintenance process
  C. Availability of the network connection
  D. Processing delays
  A. Physical access to the electronic hardware

• Question 779:

  Which of the following is MOST effective in detecting information hiding in Transmission Control Protocol/internet Protocol (TCP/IP) traffic?

  A. Stateful inspection firewall
  B. Application-level firewall
  C. Content-filtering proxy
  D. Packet-filter firewall
  A. Stateful inspection firewall

• Question 780:

  What is the BEST approach to anonymizing personally identifiable information (PII) in a test environment?

  A. Randomizing data
  B. Swapping data
  C. Encrypting data
  D. Encoding data
  A. Randomizing data