ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 981:

  Which would result in the GREATEST import following a breach to a cloud environmet?

  A. The hypervisor host Is poorly seared
  B. The same Logical Unit Number (LLN) is used for ail VMs
  C. Insufficient network segregation
  D. Insufficient hardening of Virtual Machines (VM)
  C. Insufficient network segregation

• Question 982:

  Which of the following would need to be configured to ensure a device with a specific MAC address is always assigned the same IP address from DHCP?

  A. Scope options
  B. Reservation
  C. Dynamic assignment
  D. Exclusion
  E. Static assignment
  B. Reservation

• Question 983:

  Which of the following is a characteristic of an internal audit?

  A. An internal audit is typically shorter in duration than an external audit.
  B. The internal audit schedule is published to the organization well in advance.
  C. The internal auditor reports to the Information Technology (IT) department
  D. Management is responsible for reading and acting upon the internal audit results
  D. Management is responsible for reading and acting upon the internal audit results

• Question 984:

  While inventorying storage equipment, it is found that there are unlabeled, disconnected, and powered off devices. Which of the following is the correct procedure for handling such equipment?

  A. They should be recycled to save energy.
  B. They should be recycled according to NIST SP 800-88.
  C. They should be inspected and sanitized following the organizational policy.
  D. They should be inspected and categorized properly to sell them for reuse.
  C. They should be inspected and sanitized following the organizational policy.

• Question 985:

  Which of the following is generally indicative of a replay attack when dealing with biometric authentication?

  A. False Acceptance Rate (FAR) is greater than 1 in 100,000
  B. False Rejection Rate (FRR) is greater than 5 in 100
  C. Inadequately specified templates
  D. Exact match
  D. Exact match

• Question 986:

  Which of the following roles is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications?

  A. Data Reviewer
  B. Data User
  C. Data Custodian
  D. Data Owner
  D. Data Owner

• Question 987:

  Which of the following is a safeguard that could be used to validate a service provider and the authenticity of their service?

  A. Information graphing
  B. Code signing
  C. Service signing
  D. Code graphing
  B. Code signing

• Question 988:

  Which application type is considered high risk and provides a common way for malware and viruses to enter a network?

  A. Instant messaging or chat applications
  B. E-mail applications
  C. Peer-to-Peer (P2P) file sharing applications
  D. End-to-end applications
  A. Instant messaging or chat applications

• Question 989:

  An organization is formulating a strategy to provide access to third-party partners. The information technology (IT) department has been tasked with providing access by utilizing cloud services. Which of the following technologies is MOST commonly employed for completing the task?

  A. Identity as a Service (IDaaS)
  B. Firewall as a service
  C. Infrastructure as a Service (IaaS)
  D. Software as a Service (SaaS)
  A. Identity as a Service (IDaaS)

• Question 990:

  After a thorough analysis, it was discovered that a perpetrator compromised a network by gaining access to the network through a Secure Socket Layer (SSL) Virtual Private Network (VPN) gateway. The perpetrator guessed a username and brute forced the password to gain access.

  Which of the following BEST mitigates this issue?

  A. Implement strong passwords authentication for VPN
  B. Integrate the VPN with centralized credential stores
  C. Implement an Internet Protocol Security (IPSec) client
  D. Use two-factor authentication mechanisms
  D. Use two-factor authentication mechanisms