ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 931:

  In designing the architecture of an access control system, it was determined that confidentiality and controlled access to information were the primary focus. Which of the following security models is the BEST choice for the organization?

  A. Biba integrity model
  B. Clark-Wilson model
  C. Bell-LaPadula model
  D. Brewer-Nash model
  C. Bell-LaPadula model

• Question 932:

  The MAIN purpose of placing a tamper seal on a computer system's case is to:

  A. raise security awareness.
  B. detect efforts to open the case.
  C. expedite physical auditing.
  D. make it difficult to steal internal components.
  B. detect efforts to open the case.

• Question 933:

  Which of the following is the BEST solution to provide redundancy for telecommunications links?

  A. Provide multiple links from the same telecommunications vendor.
  B. Ensure that the telecommunications links connect to the network in one location.
  C. Ensure that the telecommunications links connect to the network in multiple locations.
  D. Provide multiple links from multiple telecommunications vendors.
  D. Provide multiple links from multiple telecommunications vendors.

• Question 934:

  Where would an organization typically place an endpoint security solution?

  A. Web server and individual devices
  B. Intrusion Detection System (IDS) and web server
  C. Central server and individual devices
  D. Intrusion Detection System (IDS) and central sever
  A. Web server and individual devices

• Question 935:

  Which of the following is the BEST reason for the use of security metrics?

  A. They ensure that the organization meets its security objectives.
  B. They provide an appropriate framework for Information Technology (IT) governance.
  C. They speed up the process of quantitative risk assessment.
  D. They quantify the effectiveness of security processes.
  D. They quantify the effectiveness of security processes.

• Question 936:

  What is the FIRST step in developing a patch management plan?

  A. Subscribe to a vulnerability subscription service.
  B. Develop a patch testing procedure.
  C. Inventory the hardware and software used.
  D. Identify unnecessary services installed on systems.
  B. Develop a patch testing procedure.

• Question 937:

  An organization is designing a large enterprise-wide document repository system. They plan to have several different classification level areas with increasing levels of controls. The BEST way to ensure document confidentiality in the repository is to

  A. encrypt the contents of the repository and document any exceptions to that requirement.
  B. utilize Intrusion Detection System (IDS) set drop connections if too many requests for documents are detected.
  C. keep individuals with access to high security areas from saving those documents into lower security areas.
  D. require individuals with access to the system to sign Non-Disclosure Agreements (NDA).
  C. keep individuals with access to high security areas from saving those documents into lower security areas.

• Question 938:

  What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

  A. To ensure Information Technology (IT) staff knows and performs roles assigned to each of them
  B. To validate backup sites' effectiveness
  C. To find out what does not work and fix it
  D. To create a high level DRP awareness among Information Technology (IT) staff
  B. To validate backup sites' effectiveness

• Question 939:

  As one component of a physical security system, an Electronic Access Control (EAC) token is BEST known for its ability to

  A. overcome the problems of key assignments.
  B. monitor the opening of windows and doors.
  C. trigger alarms when intruders are detected.
  D. lock down a facility during an emergency.
  A. overcome the problems of key assignments.

• Question 940:

  Which of the following is part of a Trusted Platform Module (TPM)?

  A. A non-volatile tamper-resistant storage for storing both data and signing keys in a secure fashion
  B. A protected Pre-Basic Input/Output System (BIOS) which specifies a method or a metric for "measuring" the state of a computing platform
  C. A secure processor targeted at managing digital keys and accelerating digital signing
  D. A platform-independent software interface for accessing computer functions
  A. A non-volatile tamper-resistant storage for storing both data and signing keys in a secure fashion