ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 951:

  Which of the following is an example of a vulnerability of full-disk encryption (FDE)?

  A. Data at rest has been compromised when the user has authenticated to the device.
  B. Data on the device cannot be restored from backup.
  C. Data in transit has been compromised when the user has authenticated to the device.
  D. Data on the device cannot be backed up.
  A. Data at rest has been compromised when the user has authenticated to the device.

• Question 952:

  A corporation does not have a formal data destruction policy. During which phase of a criminal legal proceeding will this have the MOST impact?

  A. Arraignment
  B. Trial
  C. Sentencing
  D. Discovery
  D. Discovery

• Question 953:

  What method could be used to prevent passive attacks against secure voice communications between an organization and its vendor?

  A. Encryption in transit
  B. Configure a virtual private network (VPN)
  C. Configure a dedicated connection
  D. Encryption at rest
  A. Encryption in transit

• Question 954:

  In an IDEAL encryption system, who has sole access to the decryption key?

  A. System owner
  B. Data owner
  C. Data custodian
  D. System administrator
  B. Data owner

• Question 955:

  During an audit of system management, auditors find that the system administrator has not been trained. What actions need to be taken at once to ensure the integrity of systems?

  A. A review of hiring policies and methods of verification of new employees
  B. A review of all departmental procedures
  C. A review of all training procedures to be undertaken
  D. A review of all systems by an experienced administrator
  D. A review of all systems by an experienced administrator

• Question 956:

  Application of which of the following Institute of Electrical and Electronics Engineers (IEEE) standards will prevent an unauthorized wireless device from being attached to a network?

  A. IEEE 802.1F
  B. IEEE 802.1H
  C. IEEE 802.1Q
  D. IEEE 802.1X
  D. IEEE 802.1X

• Question 957:

  What Service Organization Controls (SOC) report can be freely distributed and used by customers to gain confidence in a service organization's systems?

  A. SOC 1 Type 1
  B. SOC 1 Type 2
  C. SOC 2
  D. SOC 3
  D. SOC 3

• Question 958:

  Which of the following is a remote access protocol that uses a static authentication?

  A. Point-to-Point Tunneling Protocol (PPTP)
  B. Routing Information Protocol (RIP)
  C. Password Authentication Protocol (PAP)
  D. Challenge Handshake Authentication Protocol (CHAP)
  C. Password Authentication Protocol (PAP)

• Question 959:

  An organization's data policy MUST include a data retention period which is based on

  A. application dismissal.
  B. business procedures.
  C. digital certificates expiration.
  D. regulatory compliance.
  D. regulatory compliance.

• Question 960:

  Which of the following is the BEST mitigation from phishing attacks?

  A. Network activity monitoring
  B. Security awareness training
  C. Corporate policy and procedures
  D. Strong file and directory permissions
  B. Security awareness training