An organization operates a legacy Industrial Control System (ICS) to support its core business service, which carrot be replaced. Its management MUST be performed remotely through an administrative console software, which in tum depends on an old version of the Java Runtime Environment (JPE) known to be vulnerable to a number of attacks, How is this risk BEST managed?

Air-gap and harden the host used for management purposes

Isolate the full ICS by moving It onto its own network segment

Air-gap and harden the host used for management purposes

Convince the management to decommission the ICS and mitigate to a modem technology

Deploy a restrictive proxy between all clients and the vulnerable management station

Which of the following presents the PRIMARY concern to an organization when setting up a federated single sign-on (SSO) solution with another

defining the identity mapping scheme

Sending assertions to an identity provider

Requesting Identity assertions from the partners domain

defining the identity mapping scheme

Having the resource provider query the Identity provider

The adoption of an enterprise-wide business continuity program requires Which of the following?

Well-documented information asset classification

Good communication throughout the organization

Formation of Disaster Recovery (DP) project team

A completed Business Impact Analysis (BIA)

Well-documented information asset classification

Which of the following is the MOST important reason for using a chain of custody from?

To document those who were In possession of the evidence at every point In time

To collect records of all digital forensic professionals working on a case

To document collected digital evidence

To ensure that digital evidence is not overlooked during the analysis

When conducting a security assessment of access controls , Which activity is port of the data analysis phase?

Categorize and Identify evidence gathered during the audit

Present solutions to address audit exceptions.

Categorize and Identify evidence gathered during the audit

Conduct statiscal sampling of data transactions.

The core component of Role Based Access control (RBAC) must be constructed of defined data elements. Which elements are required?

Users, rotes, operations, and protected objects

Users, permissions, operators, and protected objects

Users, rotes, operations, and protected objects

Roles, accounts, permissions, and protected objects

Roles, operations, accounts, and protected objects

Which of the following should be included in a hardware retention policy?Which of the following should be included in a hardware retention policy?

The use of encryption technology to encrypt sensitive data prior to retention

Retention of data for only one week and outsourcing the retention to a third-party vendor

Retention of all sensitive data on media and hardware

A plan to retain data required only for business purposes and a retention schedule

Individuals have been identified and determined as having a need-to-know for the information.Which of the following access control methods MUST include a consistent set of rules for controlling and limiting access?

Attribute Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

When can a security program be considered effective?

Risk is lowered to an acceptable level.

Audits are rec/party performed and reviewed.

Vulnerabilities are proactively identified.

Risk is lowered to an acceptable level.

Badges are regulatory performed and validated

Which of the following is the MOST important activity an organization performs to ensure that securiy is part of the overall organization culture?

Manage a program of security audits.

Ensue security policies are issued to all employees

Perform formal reviews of security Incidents.

Manage a program of security audits.

Work with senior management to meet business goals.

What is the PRIMARY benefit of analyzing the partition layout of a hard disk volume when performing forensic analysis?

Sectors which are not assigned to a perform may contain data that was purposely hidden.

Volume address information for he hard disk may have been modified.

partition tables which are not completely utilized may contain data that was purposely hidden

Physical address information for the hard disk may have been modified.

Which of the following is the MOST important action regarding authentication?

Obtaining executive authorization

Which of the following is the BEST statement for a professional to include as port of business continuity (BC) procedure?

In incremental data backup must be done after each system change.

A full data backup must be done upon management request.

An incremental data backup must be done upon management request.

A full data backup must be done based on the needs of the business.

In incremental data backup must be done after each system change.

Additional padding may be added to the Encapsulating security protocol (ESP) trailer to provide which of the following?

protection ao>ainst replay attack

Partial traffic flow confidentiality

protection ao>ainst replay attack

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials.Much of the following actions could have BEST avoided the above breach per the investigation described above?

A periodic review of all privileged accounts actions

A periodic review of network access loos

A periodic review of active users en the network

A periodic review of all privileged accounts actions

A periodic review of password strength of all users across the organization

Which of the following is a characteristic of convert security testing?

Tests staff knowledge and Implementation of the organization's security policy

Induces less risk than over testing

Tests staff knowledge and Implementation of the organization's security policy

Focuses an Identifying vulnerabilities

Tests and validates all security controls in the organization

copyright provides protection for which of the following?

A particular expression of an idea

Discoveries of natural phenomena

A particular expression of an idea

Ideas expressed n literary works

An organization is required to comply with the Payment Card Industry Data Security Standard (PCIDSS), what is the MOST effective approach to safeguard digital and paper media that contains cardholder data?

Mandate encryption of cardholder data.

Use and regularity update antivirus software.

Maintain strict control over storage of media

Mandate encryption of cardholder data.

Configure firewall rules to protect the data.

A vehicle of a private courier company that transports backup data for offsite storage was robbed while in transport backup data for offsite was robbed while in transit. The incident management team is now responsible to estimate the robbery, which of the following would help the incident management team to MOST effectively analyze the business impact of the robbery?

Log of the transported media and its classification marking

Log of backup administrative actions

Log of the transported media and its classification marking

Log of the transported media and Its detailed contents

Log of backed up data and their respective data custodians

Which of the following is the MOST important reason for timely installation of software patches?

Attackers reverse engineer the exploit from the patch.

Attackers may be conducting network analysis.

Patches ere only available for a specific time.

Attackers reverse engineer the exploit from the patch.

Patches may not be compatible with proprietary software

Which of the following is a method of attacking internet (IP) v6 Layer 3 and Layer 4 ?

Synchronize sequence numbers (SVN) flooding

Internet Control Message Protocol (IOP) flooring

Domain Name Server [DNS) cache poisoning

Media Access Control (MAC) flooding

An organization wants to enable uses to authenticate across multiple security domains. To accomplish this they have decided to use Federated Identity Management (F1M). Which of the following is used behind the scenes in a FIM deployment?

Security Assertion Markup Language (SAML)

Standard Generalized Markup Language (SGML)

Extensible Markup Language (XML)

Security Assertion Markup Language (SAML)

Transaction Authority Markup Language (XAML)

Which of the following is the GREATEST security risk associated with the user of identity as a service (IDaaS) when an organization its own software?

Increased likelihood of confidentiality breach

Incompatibility with Federated Identity Management (FIM)

Increased likelihood of confidentiality breach

Denial of access due to reduced availability

Security Assertion Markup Language (SAM) integration

In the common criteria (CC) for information technology (IT) security evaluation, increasing Evaluation Assurance Levels (EAL) results in which of the following?

Increase in resource requirement

Which of the following initiates the system recovery phase of a disaster recovery plan?

Issuing a formal disaster declaration

Assessing the extent of damage following the disaster

Issuing a formal disaster declaration

Activating the organization's hot site

Which of the following will help prevent improper session handling?

Ensure that tokens are sufficiently long, complex, and pseudo-random.

Ensure that all UlWebView calls do not execute without proper input validation.

Ensure that tokens are sufficiently long, complex, and pseudo-random.

Ensure JavaScript and plugin support is disabled.

Ensure that certificates are valid and fail closed.

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the thirdparty information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?

The audit assessment has been conducted by an independent assessor.

The audit reports have been signed by the third-party senior management.

The audit reports have been issued in the last six months.

The audit assessment has been conducted by an international audit firm.

Utilizing a public wireless Local Area network (WLAN) to connect to a private network should be done only in which of the following situations?

Extensible Authentication Protocol (EAP) is utilized to authenticate the user.

The client machine has a personal firewall and utilizes a Virtual Private Network (VPN) to connect to the network.

The client machine has antivirus software and has been seamed to determine if unauthorized ports are open.

The wireless Access Point (AP) is placed in the internal private network.

Which of the following technologies would provide the BEST alternative to anti-malware software?

Host-based Intrusion Detection Systems (HIDS)

Which of the following attributes could be used to describe a protection mechanism of an open design methodology?

lt must be tamperproof to protect it from malicious attacks.

It can facilitate independent confirmation of the design security.

It can facilitate blackbox penetration testing.

It exposes the design to vulnerabilities and malicious attacks.

What is a common mistake in records retention?

Having the Human Resource (HR) department create a retention policy

Having the organization legal department create a retention policy

Adopting a retention policy based on applicable organization requirements

Having the Human Resource (HR) department create a retention policy

Adopting a retention policy with the longest requirement period

Which inherent password weakness does a One Time Password (OTP) generator overcome?

Static passwords are easily disclosed.

Static passwords must be changed frequently.

Static passwords are too predictable.

Static passwords are difficult to generate.

Static passwords are easily disclosed.

What is the BEST way to establish identity over the internet?

Remote user authentication via Simple Object Access Protocol (SOAP)

Challenge Handshake Authentication Protocol (CHAP) and strong passwords

Internet Mail Access Protocol (IMAP) with Triple Data Encryption Standard (3DES)

Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens

Remote user authentication via Simple Object Access Protocol (SOAP)

ISC CISSP Practice Test 19 - Free Online Exam Prep & Questions

Which of the following controls is the most for a system identified as critical in terms of data and function to the organization?

Preventive controls

Monitoring control

Cost controls

Compensating controls

Comment (0)

ISC CISSP Practice Test 19

Question

ISC CISSP Practice Tests

Practice Tests