ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 801:

  When is security personnel involvement in the Systems Development Life Cycle (SDLC) process MOST beneficial?

  A. Testing phase
  B. Development phase
  C. Requirements definition phase
  D. Operations and maintenance phase
  C. Requirements definition phase

• Question 802:

  Which of the following would be the FIRST step to take when implementing a patch management program?

  A. Perform automatic deployment of patches.
  B. Monitor for vulnerabilities and threats.
  C. Prioritize vulnerability remediation.
  D. Create a system inventory.
  D. Create a system inventory.

• Question 803:

  What best describes a scenario when an employee has been shaving off pennies from multiple accounts and depositing the funds into his own ban account?

  A. Data fiddling
  B. Data diddling
  C. Data hiding
  D. Data masking
  B. Data diddling

• Question 804:

  A company is planning to implement a private cloud infrastructure. Which of the following recommendations will support the move to a cloud infrastructure?

  A. Implement a virtual local area network (VLAN) for each department and create a separate subnet for each VLAN.
  B. Implement software-defined networking (SDN) to provide the ability for the network infrastructure to be integrated with the control and data planes.
  C. Implement a virtual local area network (VLAN) to logically separate the local area network (LAN) from the physical switches.
  D. implement software-defined networking (SDN) to provide the ability to apply high-level policies to shape and reorder network traffic based on users, devices and applications.
  D. implement software-defined networking (SDN) to provide the ability to apply high-level policies to shape and reorder network traffic based on users, devices and applications.

• Question 805:

  HOTSPOT

  Identify the component that MOST likely lacks digital accountability related to information access. Click on the correct device in the image below.

  

  

• Question 806:

  What is the foundation of cryptographic functions?

  A. Encryption
  B. Cipher
  C. Hash
  D. Entropy
  A. Encryption

• Question 807:

  The goal of software assurance in application development is to

  A. enable the development of High Availability (HA) systems.
  B. facilitate the creation of Trusted Computing Base (TCB) systems.
  C. prevent the creation of vulnerable applications.
  D. encourage the development of open source applications.
  C. prevent the creation of vulnerable applications.

• Question 808:

  Which of the following is the MOST effective method to mitigate Cross-Site Scripting (XSS) attacks?

  A. Use Software as a Service (SaaS)
  B. Whitelist input validation
  C. Require client certificates
  D. Validate data output
  B. Whitelist input validation

• Question 809:

  Reciprocal backup site agreements are considered to be

  A. a better alternative than the use of warm sites.
  B. difficult to test for complex systems.
  C. easy to implement for similar types of organizations.
  D. easy to test and implement for complex systems.
  B. difficult to test for complex systems.

• Question 810:

  The application of a security patch to a product previously validate at Common Criteria (CC) Evaluation Assurance Level (EAL) 4 would

  A. require an update of the Protection Profile (PP).
  B. require recertification.
  C. retain its current EAL rating.
  D. reduce the product to EAL 3.
  B. require recertification.