ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 821:

  What is the PRIMARY purpose of creating and reporting metrics for a security awareness, training, and education program?

  A. Make all stakeholders aware of the program's progress.
  B. Measure the effect of the program on the organization's workforce.
  C. Facilitate supervision of periodic training events.
  D. Comply with legal regulations and document due diligence in security practices.
  B. Measure the effect of the program on the organization's workforce.

• Question 822:

  Which of the following principles is intended to produce information security professionals that are capable of vision and proactive response?

  A. Information security awareness
  B. Information security program
  C. Information security education
  D. Information security certification
  C. Information security education

• Question 823:

  Which of the following is the PRIMARY purpose of installing a mantrap within a facility?

  A. Control traffic
  B. Prevent rapid movement
  C. Prevent plggybacking
  D. Control air flow
  C. Prevent plggybacking

• Question 824:

  An application developer is developing a web application that will store and process personal information of European Union (EU) residents. Which of the following security principles explicitly specified in General Data Protection Regulation (GDPR), should the developer apply to safeguard the personal information in the application?

  A. Authorization
  B. Tokenization
  C. Pseudonymization
  D. Authentication
  C. Pseudonymization

• Question 825:

  A financial organization that works according to agile principles has developed a new application for their external customer base to request a line of credit. A security analyst has been asked to assess the security risk of the minimum viable product (MVP). Which is the MOST important activity the analyst should assess?

  A. The software has the correct functionality.
  B. The software has been code reviewed.
  C. The software had been branded according to corporate standards,
  D. The software has been signed off for release by the product owner.
  B. The software has been code reviewed.

• Question 826:

  When transmitting information over public networks, the decision to encrypt it should be based on

  A. the estimated monetary value of the information.
  B. whether there are transient nodes relaying the transmission.
  C. the level of confidentiality of the information.
  D. the volume of the information.
  C. the level of confidentiality of the information.

• Question 827:

  Which open standard could l large corporation deploy for authorization services for single sign-on (SSO) use across multiple internal and external application?

  A. Terminal Access Controller Access Control System (TACACS)
  B. Security Assertion Markup Language (SAML)
  C. Lightweight Directory Access Protocol (LDAP)
  D. Active Directory Federation Services (ADFS)
  B. Security Assertion Markup Language (SAML)

• Question 828:

  A Security Operations Center (SOC) receives an incident response notification on a server with an active intruder who has planted a backdoor. Initial notifications are sent and communications are established. What MUST be considered or evaluated before performing the next step?

  A. Notifying law enforcement is crucial before hashing the contents of the server hard drive
  B. Identifying who executed the incident is more important than how the incident happened
  C. Removing the server from the network may prevent catching the intruder
  D. Copying the contents of the hard drive to another storage device may damage the evidence
  C. Removing the server from the network may prevent catching the intruder

• Question 829:

  The use of private and public encryption keys is fundamental in the implementation of which of the following?

  A. Diffie-Hellman algorithm
  B. Secure Sockets Layer (SSL)
  C. Advanced Encryption Standard (AES)
  D. Message Digest 5 (MD5)
  B. Secure Sockets Layer (SSL)

• Question 830:

  Which of the following is a security feature of Global Systems for Mobile Communications (GSM)?

  A. It uses a Subscriber Identity Module (SIM) for authentication.
  B. It uses encrypting techniques for all communications.
  C. The radio spectrum is divided with multiple frequency carriers.
  D. The signal is difficult to read as it provides end-to-end encryption.
  A. It uses a Subscriber Identity Module (SIM) for authentication.