ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 811:

  At what stage of the Software Development Life Cycle (SDLC) does software vulnerability remediation MOST likely cost the least to implement?

  A. Development
  B. Testing
  C. Deployme
  D. Design
  D. Design

• Question 812:

  Which of the following MOST applies to session initiation protocal (SIP) security?

  A. It leverages Hypertext Transfer Protocol (HTTP) over Transport Layer Security (TLS).
  B. It requires a Public Key Infrastructure (PKI).
  C. It reuses security mechanisms derived from existing protocols.
  D. It supports end-to-end security natively.
  C. It reuses security mechanisms derived from existing protocols.

• Question 813:

  Which of the following statements is TRUE of black box testing?

  A. Only the functional specifications are known to the test planner.
  B. Only the source code and the design documents are known to the test planner.
  C. Only the source code and functional specifications are known to the test planner.
  D. Only the design documents and the functional specifications are known to the test planner.
  A. Only the functional specifications are known to the test planner.

• Question 814:

  What does the result of Cost-Benefit Analysis (CBA) on new security initiatives provide?

  A. Quantifiable justification
  B. Baseline improvement
  C. Risk evaluation
  D. Formalized acceptance
  A. Quantifiable justification

• Question 815:

  What is the MOST effective method to enhance security of a single sign-on (SSO) solution that interfaces with critical systems?

  A. Two-factor authentication
  B. Reusable tokens for application level authentication
  C. High performance encryption algorithms
  D. Secure Sockets Layer (SSL) for all communications
  A. Two-factor authentication

• Question 816:

  Which of the following is the MOST comprehensive Business Continuity (BC) test?

  A. Full functional drill
  B. Full table top
  C. Full simulation
  D. Full interruption
  C. Full simulation

• Question 817:

  In order for application developers to detect potential vulnerabilities earlier during the Software Development Life Cycle (SDLC), which of the following safeguards should be implemented FIRST as part of a comprehensive testing framework?

  A. Source code review
  B. Acceptance testing
  C. Threat modeling
  D. Automated testing
  A. Source code review

• Question 818:

  When conducting a remote access session using Internet Protocol Security (IPSec), which Open Systems Interconnection (OSI) model layer does this connection use?

  A. Transport
  B. Network
  C. Data link
  D. Presentation
  B. Network

• Question 819:

  Company A is evaluating new software to replace an in-house developed application.

  During the acquisition process. Company A specified the security retirement, as well as the functional requirements.

  Company B responded to the acquisition request with their flagship product that runs on an Operating System (OS) that Company A has never used nor evaluated. The flagship product meets all security -and functional requirements as defined by Company A.

  Based upon Company B's response, what step should Company A take?

  A. Move ahead with the acpjisition process, and purchase the flagship software
  B. Conduct a security review of the OS
  C. Perform functionality testing
  D. Enter into contract negotiations ensuring Service Level Agreements (SLA) are established to include security patching
  B. Conduct a security review of the OS

• Question 820:

  Which of the following does Temporal Key Integrity Protocol (TKIP) support?

  A. Multicast and broadcast messages
  B. Coordination of IEEE 802.11 protocols
  C. Wired Equivalent Privacy (WEP) systems
  D. Synchronization of multiple devices
  C. Wired Equivalent Privacy (WEP) systems