ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 961:

  Which of the following is the PRIMARY concern when using an Internet browser to access a cloud-based service?

  A. Insecure implementation of Application Programming Interfaces (API)
  B. Improper use and storage of management keys
  C. Misconfiguration of infrastructure allowing for unauthorized access
  D. Vulnerabilities within protocols that can expose confidential data
  D. Vulnerabilities within protocols that can expose confidential data

• Question 962:

  When performing an investigation with the potential for legal action, what should be the analyst's FIRST consideration?

  A. Chain-of-custody
  B. Authorization to collect
  C. Court admissibility
  D. Data decryption
  A. Chain-of-custody

• Question 963:

  DRAG DROP

  Place the following information classification steps in sequential order.

  Select and Place:

  

  

• Question 964:

  Refer to the information below to answer the question.

  A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classification. The organization is subject to periodic independent reviews of access controls and violations. The organization uses wired and wireless networks and remote access. The organization also uses secure connections to branch offices and secure backup and recovery strategies for selected information and processes. Following best practice, where should the permitted access for each department and job classification combination be specified?

  A. Security procedures
  B. Security standards
  C. Human resource policy
  D. Human resource standards
  B. Security standards

• Question 965:

  Refer to the information below to answer the question.

  A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

  In addition to web browsers, what PRIMARY areas need to be addressed concerning mobile code used for malicious purposes?

  A. Text editors, database, and Internet phone applications
  B. Email, presentation, and database applications
  C. Image libraries, presentation and spreadsheet applications
  D. Email, media players, and instant messaging applications
  D. Email, media players, and instant messaging applications

• Question 966:

  What is the term used to define where data is geographically stored in the cloud?

  A. Data warehouse
  B. Data privacy rights
  C. Data subject rights
  D. Data sovereignty
  D. Data sovereignty

• Question 967:

  An organization is preparing to achieve General Data Protection Regulation (GDPR) compliance. The Chief Information Security Officer (CISO) is reviewing data protection methods. Which of the following is the BEST data protection method?

  A. Encryption
  B. Backups
  C. Data obfuscation
  D. Strong authentication
  C. Data obfuscation

• Question 968:

  What is the BEST method to detect the most common improper initialization problems in programming languages?

  A. Use and specify a strong character encoding.
  B. Use automated static analysis tools that target this type of weakness.
  C. Perform input validation on any numeric inputs by assuring that they are within the expected range.
  D. Use data flow analysis to minimize the number of false positives.
  B. Use automated static analysis tools that target this type of weakness.

• Question 969:

  What is the second step in the identity and access provisioning lifecycle?

  A. Provisioning
  B. Review
  C. Approval
  D. Revocation
  B. Review

• Question 970:

  Which of the following is a peer entity authentication method for Point-to-Point Protocol (PPP)?

  A. Challenge Handshake Authentication Protocol (CHAP)
  B. Message Authentication Code (MAC)
  C. Transport Layer Security (TLS) handshake protocol
  D. Challenge-response authentication mechanism
  A. Challenge Handshake Authentication Protocol (CHAP)