ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 851:

  What is the benefit of an operating system (OS) feature that is designed to prevent an application from executing code from a non-executable memory region?

  A. Identifies which security patches still need to be installed on the system
  B. Stops memory resident viruses from propagating their payload
  C. Reduces the risk of polymorphic viruses from encrypting their payload
  D. Helps prevent certain exploits that store code in buffers
  C. Reduces the risk of polymorphic viruses from encrypting their payload

• Question 852:

  Which of the following encryption technologies has the ability to function as a stream cipher?

  A. Cipher Feedback (CFB)
  B. Feistel cipher
  C. Cipher Block Chaining (CBC) with error propagation
  D. Electronic Code Book (ECB)
  A. Cipher Feedback (CFB)

• Question 853:

  A criminal organization is planning an attack on a government network. Which of the following scenarios presents the HIGHEST risk to the organization?

  A. Network is flooded with communication traffic by the attacker.
  B. Organization loses control of their network devices.
  C. Network management communications is disrupted.
  D. Attacker accesses sensitive information regarding the network topology.
  B. Organization loses control of their network devices.

• Question 854:

  The key benefits of a signed and encrypted e-mail include

  A. confidentiality, authentication, and authorization.
  B. confidentiality, non-repudiation, and authentication.
  C. non-repudiation, authorization, and authentication.
  D. non-repudiation, confidentiality, and authorization.
  B. confidentiality, non-repudiation, and authentication.

• Question 855:

  Continuity of operations is BEST supported by which of the following?

  A. Confidentiality, availability, and reliability
  B. Connectivity, reliability, and redundancy
  C. Connectivity, reliability, and recovery
  D. Confidentiality, integrity, and availability
  B. Connectivity, reliability, and redundancy

• Question 856:

  What is the FIRST action a security professional needs to take while assessing an organization's asset security in order to properly classify and protect access to data?

  A. Verify the various data classification models implemented for different environments.
  B. Determine the level of access for the data and systems.
  C. Verify if confidential data is protected with cryptography.
  D. Determine how data is accessed in the organization.
  D. Determine how data is accessed in the organization.

• Question 857:

  The implementation of which features of an identity management system reduces costs and administration overhead while improving audit and accountability?

  A. Two-factor authentication
  B. Single Sign-On (SSO)
  C. User self-service
  D. A metadirectory
  C. User self-service

• Question 858:

  An audit of an application reveals that the current configuration does not match the configuration of the originally implemented application. Which of the following is the FIRST action to be taken?

  A. Recommend an update to the change control process
  B. Verify the approval of the configuration change
  C. Roll back the application to the original configuration
  D. Document the changes to the configuration
  D. Document the changes to the configuration

• Question 859:

  The quality assurance (QA) department is short-staffed and is unable to test all modules before the anticipated release date of an application. What security control is MOST likely to be violated?

  A. Separation of environments
  B. Program management
  C. Mobile code controls
  D. Change management
  D. Change management

• Question 860:

  An organization has implemented a new backup process which protects confidential data by encrypting the information stored on backup tapes. Which of the following is a MAJOR data confidentiality concern after the implementation of this new backup process?

  A. Tape backup rotation
  B. Pre-existing backup tapes
  C. Tape backup compression
  D. Backup tape storage location
  B. Pre-existing backup tapes