During a Disaster Recovery (DR) assessment, additional coverage for assurance is required. What should en assessor do?

Increase the number and type of relevant staff to interview.

Conduct a comprehensive examination of the Disaster Recovery Plan (DRP).

Increase the level of detail of the interview questions.

Conduct a detailed review of the organization's DR policy.

Which of the following is an accurate statement when an assessment results in the discovery of vulnerabilities in a critical network component?

A second assessment should immediately be performed after all vulnerabilities are corrected.

The fact that every other host is sufficiently hardened does not change the fact frat the network is placed at risk of attack.

There is little likelihood that the entire network is being placed at a significant risk of attack.

A second assessment should immediately be performed after all vulnerabilities are corrected.

There is a low possibility that any adjacently connected components have been compromised by an attacker

What is a warn site when conducting Business continuity planning (BCP)

An area partially equipped with equipment and resources to recover business functions

A location, other than the normal facility, used to process data on a daily basis

An area partially equipped with equipment and resources to recover business functions

A place void of any resources or equipment except air conditioning and raised flooring

An alternate facility that allows for Immediate cutover to enable continuation of business functions

Which of the following four iterative steps are conducted on third-party vendors in an on-going basis?

Frame, Assess, Remediate, Monitor

Investigate, Evaluate, Respond, Monitor

Frame, Assess, Respond, Monitor

Frame, Assess, Remediate, Monitor

Investigate, Assess, Remediate, Monitor

Which of the following media is least problematic with data remanence?

Dynamic Random Access Memory (DRAM)

Electrically Erasable Programming read-only Memory (EEPROM)

Dynamic Random Access Memory (DRAM)

During a recent assessment an organization has discovered that the wireless signal can be detected outside the campus are a. What logical control should be implemented in order to BFST protect One confidentiality of information travelingOne wireless transmission media?

Configure the Access Points (AP) to use Wi-Fi Protected Access 2 (WPA2) encryption.

Configure a firewall to logically separate the data at the boundary.

Configure the Access Points (AP) to use Wi-Fi Protected Access 2 (WPA2) encryption.

Disable the Service Set Identifier (SSID) broadcast on the Access Points (AP).

Perform regular technical assessments on the Wireless Local Area Network (WLAN).

Who is essential for developing effective test scenarios for disaster recovery (DR) test plans?

Chief Information Officer (CIO) and DR manager

Business line management and IT staff members

Chief Information Officer (CIO) and DR manager

DR manager end IT staff members

IT staff members and project managers

Which of the following is MOST important when determining appropriate countermeasures for an identified risk?

Interaction with existing controls

When a flaw in Industrial control (ICS) software is discovered, what is the GREATEST impediment to deploying a patch?

vendors are required to validate the operability patches.

Many IG systems have software that is no longer being maintained by the venders.

Compensating controls may impact IG performance.

Testing a patch in an IG may require more resources than the organization can commit.

vendors are required to validate the operability patches.

Which of the following is the BEST approach for a forensic examiner to obtain the greatest amount of relevant information form malicious software?

Analyze the behavior of the program.

Examine the file properties and permissions.

Review the code to identify its origin.

Analyze the logs generated by the software.

In fault-tolerant systems, what do rollback capabilities permit?

Restoring the system to a previous functional state

Identifying the error that caused the problem

Allowing the system to an in a reduced manner

Isolating the error that caused the problem

How does identity as a service (IDaaS) provide an easy mechanism for integrating identity service into individual applications with minimal development effort?

By keeping all user information in easily accessible cloud repositories

By allowing the identification logic and storage of an identity's attributes to be maintained externally

By integrating internal provisioning procedures with external authentication processes

By allowing for internal provisioning of user accounts

By keeping all user information in easily accessible cloud repositories

A security practitioner has been tasked with establishing organizational asset handling procedures.What should be considered that would have the GRFATEST impact to the development of these procedures?

Information classification scheme

User roles and responsibilities

Information classification scheme

From an asset security perspective, what is the BEST countermeasure to prevent data theft due to data remanence when a sensitive data storage media is no longer needed?

Physically destroy the retired media.

Return the media to the system owner.

Delete the sensitive data from the media.

Physically destroy the retired media.

Encrypt data before it Is stored on the media.

A project requires the use of en authentication mechanism where playback must be protected and plaintext secret must be used. Which of the following should be used?

Password Authentication Protocol (PAP)

Extensible Authentication Protocol (EAP)

Challenge Handshake Authentication Protocol (CHAP)

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

Emergency procedures describing the necessary actions to be taken following an incident jeopardizes business operations

Resumption procedures describing the actions to be taken to return to normal business operations

Emergency procedures describing the necessary actions to be taken following an incident jeopardizes business operations

Fallback procedures describing what action are to be taken to more essential business activities to alternative temporary locations

Maintain schedule how and the plan will be tested and the process for maintaining the plan

How can a security engineer maintain network separation from a secure environment while allowing remote users to work in the secure environment?

Use a Virtual Local Area Network (VLAN) to segment the network

Install anti-virus on all enceinte

Enforce port security on access switches

Which of the following is the MOST important consideration that must be taken into account when deploying an enterprise patching solution that includes mobile devices?

Number of mobile users in the organization

Service provider(s) utilized by the organization

Whether it will impact personal use

Number of mobile users in the organization

Feasibility of downloads due to available bandwidth

Which of the following is the weakest form of protection for an application that handles Personally Identifiable Information (PII)?

Ron Rivest Cipher 4 (RC4) encryption

Security Assertion Markup Language (SAML)

Which is the MOST effective countermeasure to prevent electromagnetic emanations on unshielded data cable?

Encase exposed cable runs in metal conduit

Move cable are away from exterior facing windows

Encase exposed cable runs in metal conduit

Enable Power over Ethernet (PoE) to increase voltage

Bundle exposed cables together to disguise their signals

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

Reduction in operational costs to the agency

Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery

Data decrease related to storing personal information

Reduction in operational costs to the agency

Enable business objectives so departments can focus on mission rather than the business of identity management

A criminal organization is planning an attack on a government network. Which of the following is the MOST severe attack to the network availability?

Operator loses control of network devices to attacker

Network management communications is disrupted by attacker

Operator loses control of network devices to attacker

Sensitive information is gathered on the network topology by attacker

Network is flooded with communication traffic by attacker

Which of the following are core categories of malicious attack against Internet of Things (IOT) devices?

Node capture and false data injection

Packet capture and false data injection

Packet capture and brute force attack

Node capture 3nd Structured Query Langue (SQL) injection

Node capture and false data injection

Which of the following is the PRIMARY security consideration for how an organization should handle Information Technology (IT) assets?

The classification of the data on the asset

The monetary value of the asset

The controls implemented on the asset

The physical form factor of the asset

The classification of the data on the asset

In a dispersed network that lacks central control, which of the following is die PRIMARY course of action to mitigate exposure?

Implement security policies and standards, data backups, and audit controls

Implement management policies, audit control, and data backups

Implement security policies and standards, access controls, and access limitations

Implement security policies and standards, data backups, and audit controls

Implement remote access policies, shared workstations, and log management

What are the roles within a scrum methodology?

Product owner, scrum master, and scrum team

Scrum master, retirements manager, and development team

System owner, scrum master, and development team

Scrum master, quality assurance team, and scrum team

Product owner, scrum master, and scrum team

When conducting a forensic criminal investigation on a computer had drive, what should be dene PRIOR to analysis?

Create a forensic image of the hard drive.

Create a backup copy of all the important files on the drive.

Power off the computer and wait for assistance.

Create a forensic image of the hard drive.

Install forensic analysis software.

Which of the following initiates the systems recovery phase of a disaster recovery plan?

Issuing a formal disaster declaration

Activating the organization's hot site

Assessing the extent of damage following the disaster

An organization implements a Remote Access Server (RAS). Once users correct to the server, digital certificates are used to authenticate their identity. What type of Extensible Authentication Protocol (EAP) would the organization use dring this authentication?

Lightweight Extensible Authentication Protocol (EAP)

Subscriber Identity Module (SIM)

Which of the following MUST a security professional do in order to quantify the value of a security program to organization management?

Rank priorities as high, medium, or low.

Communicate compliance obstacles.

ISC CISSP Practice Test 17 - Free Online Exam Prep & Questions

If a content management system (CSM) is implemented, which one of the following would occur?

The test and production systems would be riming the same software

The applications placed into production would be secure

Developers would no longer have access to production systems

Patching the systems would be completed mere quickly

Comment (0)

ISC CISSP Practice Test 17

Question

ISC CISSP Practice Tests

Practice Tests