ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 941:

  In an environment where there is not full administrative control over all network connected endpoints, such as a university where non-corporate devices are used, what is the BEST way to restrict access to the network?

  A. Use switch port security to limit devices connected to a particular switch port.
  B. Use of virtual local area networks (VLAN) to segregate users.
  C. Use a client-based Network Access Control (NAC) solution.
  D. Use a clientless Network Access Control (NAC) solution
  A. Use switch port security to limit devices connected to a particular switch port.

• Question 942:

  What physical characteristic does a retinal scan biometric device measure?

  A. The amount of light reflected by the retina
  B. The size, curvature, and shape of the retina
  C. The pattern of blood vessels at the back of the eye
  D. The pattern of light receptors at the back of the eye
  C. The pattern of blood vessels at the back of the eye

• Question 943:

  Which of the following BEST describes the use of network architecture in reducing corporate risks associated with mobile devices?

  A. Maintaining a "closed applications model on all mobile devices depends on demilitarized 2one (DM2) servers
  B. Split tunneling enabled for mobile devices improves demilitarized zone (DMZ) security posture
  C. Segmentation and demilitarized zone (DMZ) monitoring are implemented to secure a virtual private network (VPN) access for mobile devices
  D. Applications that manage mobile devices are located in an Internet demilitarized zone (DMZ)
  C. Segmentation and demilitarized zone (DMZ) monitoring are implemented to secure a virtual private network (VPN) access for mobile devices

• Question 944:

  Disaster Recovery Plan (DRP) training material should be

  A. consistent so that all audiences receive the same training.
  B. stored in a fire proof safe to ensure availability when needed.
  C. only delivered in paper format.
  D. presented in a professional looking manner.
  A. consistent so that all audiences receive the same training.

• Question 945:

  When should an application invoke re-authentication in addition to initial user authentication?

  A. At the application sign-off
  B. Periodically during a session
  C. After a period of inactivity
  D. For each business process
  C. After a period of inactivity

• Question 946:

  Internet Protocol (IP) source address spoofing is used to defeat

  A. address-based authentication.
  B. Address Resolution Protocol (ARP).
  C. Reverse Address Resolution Protocol (RARP).
  D. Transmission Control Protocol (TCP) hijacking.
  A. address-based authentication.

• Question 947:

  A recent security audit is reporting several unsuccessful login attempts being repeated at specific times during the day on an Internet facing authentication server. No alerts have been generated by the security information and event management (SIEM) system. What PRIMARY action should be taken to improve SIEM performance?

  A. Implement role-based system monitoring
  B. Audit firewall logs to identify the source of login attempts
  C. Enhance logging detail
  D. Confirm alarm thresholds
  B. Audit firewall logs to identify the source of login attempts

• Question 948:

  A digitally-signed e-mail was delivered over a wireless network protected with Wired Equivalent Privacy (WEP) protocol. Which of the following principles is at risk?

  A. Availability
  B. Non-Repudiation
  C. Confidentiality
  D. Integrity
  B. Non-Repudiation

• Question 949:

  When adopting software as a service (Saas), which security responsibility will remain with remain with the adopting organization?

  A. Physical security
  B. Data classification
  C. Network control
  D. Application layer control
  B. Data classification

• Question 950:

  When conveying the results of a security assessment, which of the following is the PRIMARY audience?

  A. Information System Security Officer (ISSO)
  B. Authorizing Official (AO)
  C. Information System Security Manager (ISSM)
  D. Security Control Assessor (SCA)
  C. Information System Security Manager (ISSM)