ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 871:

  Which of the following is a responsibility of a data steward?

  A. Ensure alignment of the data governance effort to the organization.
  B. Conduct data governance interviews with the organization.
  C. Document data governance requirements.
  D. Ensure that data decisions and impacts are communicated to the organization.
  A. Ensure alignment of the data governance effort to the organization.

• Question 872:

  Dumpster diving is a technique used in which stage of penetration testing methodology?

  A. Attack
  B. Discovery
  C. Reporting
  D. Planning
  B. Discovery

• Question 873:

  A company has decided that they need to begin maintaining assets deployed in the enterprise. What approach should be followed to determine and maintain ownership information to bring the company into compliance?

  A. Enterprise asset management framework
  B. Asset baseline using commercial off the shelf software
  C. Asset ownership database using domain login records
  D. A script to report active user logins on assets
  A. Enterprise asset management framework

• Question 874:

  Which of the following determines how traffic should flow based on the status of the infrastructure layer?

  A. Traffic plane
  B. Application plane
  C. Data plane
  D. Control plane
  A. Traffic plane

• Question 875:

  Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?

  A. Center for Internet Security (CIS)
  B. Common Vulnerabilities and Exposures (CVE)
  C. Open Web Application Security Project (OWASP)
  D. Common Vulnerability Scoring System (CVSS)
  D. Common Vulnerability Scoring System (CVSS)

• Question 876:

  Refer to the information below to answer the question.

  In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files.

  

  In a Bell-LaPadula system, which user has the MOST restrictions when writing data to any of the four files?

  A. User A
  B. User B
  C. User C
  D. User D
  D. User D

• Question 877:

  Which concept might require users to use a second access token or to re-enter passwords to gain elevated access rights in the identity and access provisioning life cycle?

  A. Time-based
  B. Enrollment
  C. Least privilege
  D. Access review
  B. Enrollment

• Question 878:

  An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?

  A. Cross-Site Scripting (XSS)
  B. Extensible Markup Language (XML) external entities
  C. SQL injection (SQLI)
  D. Cross-Site Request Forgery (CSRF)
  A. Cross-Site Scripting (XSS)

• Question 879:

  The design review for an application has been completed and is ready for release. What technique should an organization use to assure application integrity?

  A. Application authentication
  B. Input validation
  C. Digital signing
  D. Device encryption
  C. Digital signing

• Question 880:

  Which of the following entails identification of data and links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

  A. Security governance
  B. Risk management
  C. Security portfolio management
  D. Risk assessment
  A. Security governance