ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 891:

  Which of the following is the BEST statement for a professional to include as port of businees continuity (BC) procedure?

  A. A full data backup must be done upon management request.
  B. An incremental data backup must be done upon management request.
  C. A full data backup must be done based on the needs of the business.
  D. In incremental data backup must be done after each system change.
  D. In incremental data backup must be done after each system change.

• Question 892:

  When dealing with compliance with the Payment Card Industry-Data Security Standard (PCI-DSS), an organization that shares card holder information with a service provider MUST do which of the following?

  A. Perform a service provider PCI-DSS assessment on a yearly basis.
  B. Validate the service provider's PCI-DSS compliance status on a regular basis.
  C. Validate that the service providers security policies are in alignment with those of the organization.
  D. Ensure that the service provider updates and tests its Disaster Recovery Plan (DRP) on a yearly basis.
  B. Validate the service provider's PCI-DSS compliance status on a regular basis.

• Question 893:

  Which of the following information MUST be provided for user account provisioning?

  A. Full name
  B. Unique identifier
  C. Security question
  D. Date of birth
  B. Unique identifier

• Question 894:

  Which of the following standards/guidelines requires an Information Security Management System (ISMS) to be defined?

  A. International Organization for Standardization (ISO) 27000 family
  B. Information Technology Infrastructure Library (ITIL)
  C. Payment Card Industry Data Security Standard (PCIDSS)
  D. ISO/IEC 20000
  A. International Organization for Standardization (ISO) 27000 family

• Question 895:

  How does a Host Based Intrusion Detection System (HIDS) identify a potential attack?

  A. Examines log messages or other indications on the system.
  B. Monitors alarms sent to the system administrator
  C. Matches traffic patterns to virus signature files
  D. Examines the Access Control List (ACL)
  C. Matches traffic patterns to virus signature files

• Question 896:

  Who is accountable for the information within an Information System (IS)?

  A. Security manager
  B. System owner
  C. Data owner
  D. Data processor
  B. System owner

• Question 897:

  Which step of the Risk Management Framework (RMF) identifies the initial set of baseline security controls?

  A. Selection
  B. Monitoring
  C. Implementation
  D. Assessment
  A. Selection

• Question 898:

  Security categorization of a new system takes place during which phase of the Systems Development Life Cycle (SDLC)?

  A. System implementation
  B. System initiation
  C. System operations and maintenance
  D. System acquisition and development
  D. System acquisition and development

• Question 899:

  Refer to the information below to answer the question.

  An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have

  been tightly integrated into normal IT operations and are not separate and distinct roles. Which of the following will MOST likely allow the organization to keep risk at an acceptable level?

  A. Increasing the amount of audits performed by third parties
  B. Removing privileged accounts from operational staff
  C. Assigning privileged functions to appropriate staff
  D. Separating the security function into distinct roles
  C. Assigning privileged functions to appropriate staff

• Question 900:

  What can happen when an Intrusion Detection System (IDS) is installed inside a firewall-protected internal network?

  A. The IDS can detect failed administrator logon attempts from servers.
  B. The IDS can increase the number of packets to analyze.
  C. The firewall can increase the number of packets to analyze.
  D. The firewall can detect failed administrator login attempts from servers
  A. The IDS can detect failed administrator logon attempts from servers.