While inventorying storage equipment, it is found that there are unlabeled, disconnected, and powered off devices. Which of the following is the correct procedure for handling such equipment?

They should be inspected and sanitized following the organizational policy.

They should be recycled to save energy.

They should be recycled according to NIST SP 800-88.

They should be inspected and sanitized following the organizational policy.

They should be inspected and categorized properly to sell them for reuse.

The PRIMARY characteristic of a Distributed Denial of Service (DDoS) attack is that it

looks like normal network activity.

exploits weak authentication to penetrate networks.

can be detected with signature analysis.

looks like normal network activity.

is commonly confused with viruses or worms.

Which of the following is generally indicative of a replay attack when dealing with biometric authentication?

False Acceptance Rate (FAR) is greater than 1 in 100,000

False Rejection Rate (FRR) is greater than 5 in 100

Inadequately specified templates

During a fingerprint verification process, which of the following is used to verify identity and authentication?

A template of minutiae is compared with a stored template

A pressure value is compared with a stored template

Sets of digits are matched with stored values

A hash table is matched to a database of stored value

A template of minutiae is compared with a stored template

The BEST example of the concept of "something that a user has" when providing an authorized user access to a computing system is

a credential stored in a token.

A security professional is asked to provide a solution that restricts a bank teller to only perform a savings deposit transaction but allows a supervisor to perform corrections after the transaction.Which of the following is the MOST effective solution?

Access is based on user's role.

Access is determined by the system.

Access is based on user's role.

Access is based on data sensitivity.

Sensitive customer data is going to be added to a database. What is the MOST effective implementation for ensuring data privacy?

Discretionary Access Control (DAC) procedures

Mandatory Access Control (MAC) procedures

Which one of the following is a common risk with network configuration management?

Network diagrams are not up to date.

Patches on the network are difficult to keep current.

It is the responsibility of the systems administrator.

User ID and passwords are never set to expire.

Network diagrams are not up to date.

How can lessons learned from business continuity training and actual recovery incidents BEST be used?

As alternative options for awareness and training

As indicators of a need for policy

As business function gap indicators

An Intrusion Detection System (IDS) has recently been deployed in a Demilitarized Zone (DMZ). The IDS detects a flood of malformed packets. Which of the following BEST describes what has occurred?

Address Resolution Protocol (ARP) spoof

In configuration management, what baseline configuration information MUST be maintained for each computer system?

Operating system and version, patch level, applications running, and versions.

List of system changes, test reports, and change approvals

Last vulnerability assessment report and initial risk assessment report

Date of last update, test report, and accreditation certificate

An organization's information security strategic plan MUST be reviewed

whenever there are major changes to the business.

whenever there are significant changes to a major application.

quarterly, when the organization's strategic plan is updated.

whenever there are major changes to the business.

every three years, when the organization's strategic plan is updated.

What is an advantage of Elliptic Curve Cryptography (ECC)?

Opportunity to use shorter keys for the same level of security

Cryptographic approach that does not require a fixed-length key

Military-strength security that does not depend upon secrecy of the algorithm

Opportunity to use shorter keys for the same level of security

Ability to use much longer keys for greater security

Backup information that is critical to the organization is identified through a

Business Continuity Plan (BCP).

Business Impact Analysis (BIA).

When using Generic Routing Encapsulation (GRE) tunneling over Internet Protocol version 4 (IPv4), where is the GRE header inserted?

Between the delivery header and payload

Between the source and destination addresses

During the Security Assessment and Authorization process, what is the PRIMARY purpose for conducting a hardware and software inventory?

Calculate the value of assets being accredited.

Create a list to include in the Security Assessment and Authorization package.

Identify obsolete hardware and software.

Define the boundaries of the information system.

When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?

Quantify the risk to the business for product selection.

Accept the risk on behalf of the organization.

Report findings to the business to determine security gaps.

Quantify the risk to the business for product selection.

Approve the application that best meets security requirements.

An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team.Which of the following is the BEST action to take?

Monitor account usage temporarily.

Block user access and delete user account after six months.

Block access to the offices immediately.

Monitor account usage temporarily.

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

Resource priorities for recovery and Maximum Tolerable Downtime (MTD)

Cost effectiveness of business recovery

Cost effectiveness of installing software security patches

Resource priorities for recovery and Maximum Tolerable Downtime (MTD)

Which security measures should be implemented

What does the Maximum Tolerable Downtime (MTD) determine?

The estimated period of time a business can remain interrupted beyond which it risks never recovering

The estimated period of time a business critical database can remain down before customers are affected.

The fixed length of time a company can endure a disaster without any Disaster Recovery (DR) planning

The estimated period of time a business can remain interrupted beyond which it risks never recovering

The fixed length of time in a DR process before redundant systems are engaged

What is a characteristic of Secure Socket Layer (SSL) and Transport Layer Security (TLS)?

SSL and TLS provide a generic channel security mechanism on top of Transmission Control Protocol (TCP).

SSL and TLS provide nonrepudiation by default.

SSL and TLS do not provide security for most routed protocols.

SSL and TLS provide header encapsulation over HyperText Transfer Protocol (HTTP).

How does a Host Based Intrusion Detection System (HIDS) identify a potential attack?

Matches traffic patterns to virus signature files

Examines log messages or other indications on the system.

Monitors alarms sent to the system administrator

Matches traffic patterns to virus signature files

Examines the Access Control List (ACL)

From a cryptographic perspective, the service of non-repudiation includes which of the following features?

Proof of authenticity of the message

Validity of digital certificates

Validity of the authorization rules

Proof of authenticity of the message

Proof of integrity of the message

Which of the following BEST represents the concept of least privilege?

Access to an object is denied unless access is specifically allowed.

Access to an object is only available to the owner.

Access to an object is allowed unless it is protected by the information security policy.

Access to an object is only allowed to authenticated users via an Access Control List (ACL).

Which of the following approaches is the MOST effective way to dispose of data on multiple hard drives?

Perform multiple passes on each drive using approved formatting methods.

Delete every file on each drive.

Destroy the partition table for each drive using the command line.

Degauss each drive individually.

Perform multiple passes on each drive using approved formatting methods.

The PRIMARY purpose of accreditation is to:

allow senior management to make an informed decision regarding whether to accept the risk of operating the system.

comply with applicable laws and regulations.

allow senior management to make an informed decision regarding whether to accept the risk of operating the system.

protect an organization's sensitive datA.

verify that all security controls have been implemented properly and are operating in the correct manner.

Which of the following is a weakness of Wired Equivalent Privacy (WEP)?

Length of Initialization Vector (IV)

Protection against message replay

Built-in provision to rotate keys

When writing security assessment procedures, what is the MAIN purpose of the test outputs and reports?

To allow for objective pass or fail decisions

To force the software to fail and document the process

To find areas of compromise in confidentiality and integrity

To allow for objective pass or fail decisions

To identify malware or hidden code within the test results

Which of the following is the MAIN reason for using configuration management?

To provide consistency in security controls

To provide centralized administration

To reduce the number of changes

To reduce errors during upgrades

To provide consistency in security controls

ISC CISSP Practice Test 11 - Free Online Exam Prep & Questions

What is the PRIMARY goal for using Domain Name System Security Extensions (DNSSEC) to sign records?

Integrity

Confidentiality

Accountability

Availability

Comment (0)

ISC CISSP Practice Test 11

Question

ISC CISSP Practice Tests

Practice Tests