ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 911:

  Which of the following are mandatory canons for the (ISC)* Code of Ethics?

  A. Develop comprehensive security strategies for the organization.
  B. Perform is, honestly, fairly, responsibly, and lawfully for the organization.
  C. Create secure data protection policies to principals.
  D. Provide diligent and competent service to principals.
  D. Provide diligent and competent service to principals.

• Question 912:

  Which of the following mechanisms will BEST prevent a Cross-Site Request Forgery (CSRF) attack?

  A. parameterized database queries
  B. whitelist input values
  C. synchronized session tokens
  D. use strong ciphers
  C. synchronized session tokens

• Question 913:

  Which of the following is the GREATEST benefit of implementing a Role Based Access Control (RBAC) system?

  A. Integration using Lightweight Directory Access Protocol (LDAP)
  B. Form-based user registration process
  C. Integration with the organizations Human Resources (HR) system
  D. A considerably simpler provisioning process
  D. A considerably simpler provisioning process

• Question 914:

  When securing Hypertext Markup Language (HTML) text data, which is the purpose of the escape function?

  A. Ending the current process to protect the code
  B. Providing an exit path for user input
  C. Replacing potentially harmful characters
  D. Preventing unauthorized users from writing data
  C. Replacing potentially harmful characters

• Question 915:

  Which of the following is a risk matrix?

  A. A database of risks associated with a specific information system.
  B. A table of risk management factors for management to consider.
  C. A two-dimensional picture of risk for organizations, products, projects, or other items of interest.
  D. A tool for determining risk management decisions for an activity or system.
  C. A two-dimensional picture of risk for organizations, products, projects, or other items of interest.

• Question 916:

  Lack of which of the following options could cause a negative effect on an organization's reputation, revenue, and result in legal action, if the organization fails to perform due diligence?

  A. Threat modeling methodologies
  B. Service Level Requirement (SLR)
  C. Service Level Agreement (SLA)
  D. Third-party risk management
  C. Service Level Agreement (SLA)

• Question 917:

  What is an effective practice when returning electronic storage media to third parties for repair?

  A. Ensuring the media is not labeled in any way that indicates the organization's name.
  B. Disassembling the media and removing parts that may contain sensitive datA.
  C. Physically breaking parts of the media that may contain sensitive datA.
  D. Establishing a contract with the third party regarding the secure handling of the mediA.
  D. Establishing a contract with the third party regarding the secure handling of the mediA.

• Question 918:

  A Java program is being developed to read a file from computer A and write it to computer B, using a third computer

  C. The program is not working as expected. What is the MOST probable security feature of Java preventing the program from operating as intended?

  A. Least privilege
  B. Privilege escalation
  C. Defense in depth
  D. Privilege bracketing
  A. Least privilege

• Question 919:

  Which of the following is one of the key objectives regarding data management roles and responsibilities?

  A. Determine data quality metrics.
  B. Define important data ownership regardless of functions.
  C. Establish data ownership during the final phase of a project.
  D. Install data accountability.
  D. Install data accountability.

• Question 920:

  Data remanence is the biggest threat in which of the following scenarios?

  A. A physical disk drive has been overwritten and reused within a datacenter
  B. A physical disk drive has been degaussed, verified, and released to a third party for destruction
  C. A flash drive has been overwritten, verified, and reused within a datacenter
  D. A flash drive has been overwritten and released to a third party for destruction
  A. A physical disk drive has been overwritten and reused within a datacenter