ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 81:

  Which of the following is an effective control in preventing electronic cloning of Radio Frequency Identification (RFID) based access cards?

  A. Personal Identity Verification (PIV)
  B. Cardholder Unique Identifier (CHUID) authentication
  C. Physical Access Control System (PACS) repeated attempt detection
  D. Asymmetric Card Authentication Key (CAK) challenge-response
  D. Asymmetric Card Authentication Key (CAK) challenge-response

• Question 82:

  What is the MAIN purpose of conducting a business impact analysis (BIA)?

  A. To determine the critical resources required to recover from an incident within a specified time period
  B. To determine the effect of mission-critical information system failures on core business processes
  C. To determine the cost for restoration of damaged information system
  D. To determine the controls required to return to business critical operations
  B. To determine the effect of mission-critical information system failures on core business processes

• Question 83:

  Which of the following measures is the MOST critical in order to safeguard from a malware attack on a smartphone?

  A. Enable strong password.
  B. Install anti-virus for mobile.
  C. Enable biometric authentication.
  D. Prevent jailbreaking or rooting.
  D. Prevent jailbreaking or rooting.

• Question 84:

  Which of the following are the B EST characteristics of security metrics?

  A. They are generalized and provide a broad overview
  B. They use acronyms and abbreviations to be concise
  C. They use bar charts and Venn diagrams
  D. They are consistently measured and quantitatively expressed
  D. They are consistently measured and quantitatively expressed

• Question 85:

  An organization publishes and periodically updates its employee policies in a file on their intranet. Which of the following is a PRIMARY security concern?

  A. Ownership
  B. Confidentiality
  C. Availability
  D. Integrity
  C. Availability

• Question 86:

  During a penetration test, what are the three PRIMARY objectives of the planning phase?

  A. Determine testing goals, identify rules of engagement, and conduct an initial discovery scan.
  B. Finalize management approval, determine testing goals, and gather port and service information.
  C. Identify rules of engagement, finalize management approval, and determine testing goals.
  D. Identify rules of engagement, document management approval, and collect system and application information.
  D. Identify rules of engagement, document management approval, and collect system and application information.

• Question 87:

  A large manufacturing organization arranges to buy an industrial machine system to produce a new line of products. The system includes software provided to the vendor by a thirdparty organization. The financial risk to the manufacturing organization starting production is high. What step should the manufacturing organization take to minimize its financial risk in the new venture prior to the purchase?

  A. Hire a performance tester to execute offline tests on a system.
  B. Calculate the possible loss in revenue to the organization due to software bugs and vulnerabilities, and compare that to the system's overall price.
  C. Place the machine behind a Layer 3 firewall.
  D. Require that the software be thoroughly tested by an accredited independent software testing company.
  B. Calculate the possible loss in revenue to the organization due to software bugs and vulnerabilities, and compare that to the system's overall price.

• Question 88:

  Digital certificates used in Transport Layer Security (TLS) support which of the following?

  A. Information input validation
  B. Non-repudiation controls and data encryption
  C. Multi-Factor Authentication (MFA)
  D. Server identity and data confidentially
  D. Server identity and data confidentially

• Question 89:

  Of the following, which BEST provides non-repudiation with regards to access to a server room?

  A. Fob and Personal Identification Number (PIN)
  B. Locked and secured cages
  C. Biometric readers
  D. Proximity readers
  C. Biometric readers

• Question 90:

  Which of the following is MOST important when assigning ownership of an asset to a department?

  A. The department should report to the business owner
  B. Ownership of the asset should be periodically reviewed
  C. Individual accountability should be ensured
  D. All members should be trained on their responsibilities
  B. Ownership of the asset should be periodically reviewed