ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 971:

  Which of the following poses the GREATEST privacy risk to personally identifiable information (PII) when disposing of an office printer or copier?

  A. The device could contain a document with PII on the platen glass
  B. Organizational network configuration information could still be present within the device
  C. A hard disk drive (HDD) in the device could contain PII
  D. The device transfer roller could contain imprints of PII
  B. Organizational network configuration information could still be present within the device

• Question 972:

  Which of the following is the FIRST step of a penetration test plan?

  A. Analyzing a network diagram of the target network
  B. Notifying the company's customers
  C. Obtaining the approval of the company's management
  D. Scheduling the penetration test during a period of least impact
  C. Obtaining the approval of the company's management

• Question 973:

  Which of the following is a critical factor for implementing a successful data classification program?

  A. Executive sponsorship
  B. Information security sponsorship
  C. End-user acceptance
  D. Internal audit acceptance
  A. Executive sponsorship

• Question 974:

  "Stateful" differs from "Static" packet filtering firewalls by being aware of which of the following?

  A. Difference between a new and an established connection
  B. Originating network location
  C. Difference between a malicious and a benign packet payload
  D. Originating application session
  A. Difference between a new and an established connection

• Question 975:

  Which kind of dependencies should be avoided when implementing secure design principles in software-defined networking (SDN)?

  A. Hybrid
  B. Circular
  C. Dynamic
  D. Static
  B. Circular

• Question 976:

  Physical assets defined in an organization's Business Impact Analysis (BIA) could include which of the following?

  A. Personal belongings of organizational staff members
  B. Supplies kept off-site at a remote facility
  C. Cloud-based applications
  D. Disaster Recovery (DR) line-item revenues
  B. Supplies kept off-site at a remote facility

• Question 977:

  Which of the following is the MOST appropriate technique for destroying magnetic platter style hard disk drives (HDD) containing data with a "HIGH" security categorization?

  A. Drill through the device and platters.
  B. Mechanically shred the entire HDD.
  C. Remove the control electronics.
  D. HP iProcess the HDD through a degaussing device.
  D. HP iProcess the HDD through a degaussing device.

• Question 978:

  Which of the following is the PRIMARY security concern associated with the implementation of smart cards?

  A. The cards have limited memory
  B. Vendor application compatibility
  C. The cards can be misplaced
  D. Mobile code can be embedded in the card
  C. The cards can be misplaced

• Question 979:

  What documentation is produced FIRST when performing an effective physical loss control process?

  A. Deterrent controls list
  B. Security standards list
  C. inventory list
  D. Asset valuation list
  C. inventory list

• Question 980:

  When reviewing vendor certifications for handling and processing of company data, which of the following is the BEST Service Organization Controls (SOC) certification for the vendor to possess?

  A. SOC 1 Type 1
  B. SOC 2 Type 1
  C. SOC 2 Type 2
  D. SOC 3 Type 2
  C. SOC 2 Type 2