A new site's gateway isn't able to form a tunnel to the existing site-to-site Internet Protocol Security (IPsec) virtual private network (VPN) device at headquarters. Devices at the new site have no problem accessing resources on the Internet. When testing connectivity between the remote site's gateway, it was observed that the external Internet Protocol (IP) address of the gateway was set to 192.168.1.1. and was configured to send outbound traffic to the Internet Service Provider (ISP) gateway at4 192.168.1.2. Which of the following would be the BEST way to resolve the issue and get the remote site connected?

Enable IPSec tunnel mode on the VPN devices at the new site and the corporate headquarters.

Enable Layer 2 Tunneling Protocol (L2TP) on the VPN devices at the new site and the corporate headquarters.

Enable Point-to-Point Tunneling Protocol (PPTP) on the VPN devices at the new site and the corporate headquarters.

Enable Network Address Translation (NAT) - Traversal on the VPN devices at the new site and the corporate headquarters.

What are the essential elements of a Risk Assessment Report (RAR)?

Executive summary, body of the report, and appendices

Table of contents, testing criteria, and index

Table of contents, chapters, and executive summary

Executive summary, graph of risks, and process

Executive summary, body of the report, and appendices

What is the PRIMARY benefit of incident reporting and computer crime investigations?

Providing evidence to law enforcement

Repairing the damage and preventing future occurrences

Appointing a computer emergency response team

In a multi-tenant cloud environment, what approach will secure logical access to assets?

Transparency/Auditability of administrative access

Controlled configuration management (CM)

A company hired an external vendor to perform a penetration test ofa new payroll system. The company's internal test team had already performed an in-depth application and security test of the system and determined that it met security requirements. However, the external vendor uncovered significant security weaknesses where sensitive personal data was being sent unencrypted to the tax processing systems. What is the MOST likely cause of the security issues?

Failure to perform interface testing

Failure to perform negative testing

Inadequate application level testing

Which of the following is the MOST effective method of detecting vulnerabilities in web-based applications early in the secure Software Development Life Cycle (SDLC)?

Web application vulnerability scanning

A malicious user gains access to unprotected directories on a web server. Which of the following is MOST likely the cause for this information disclosure?

Cross-site request forgery (CSRF)

Structured Query Language injection (SQLi)

Broken authentication management

Which of the following security objectives for industrial control systems (ICS) can be adapted to securing any Internet of Things (IoT) system?

Protect individual components from exploitation

Prevent unauthorized modification of data.

Restore the system after an incident.

Detect security events and incidents.

Protect individual components from exploitation

Wi-Fi Protected Access 2 (WPA2) provides users with a higher level of assurance that their data will remain protected by using which protocol?

Internet Protocol Security (IPsec)

Extensible Authentication Protocol (EAP)

A software development company has a short timeline in which to deliver a software product. The software development team decides to use open-source software libraries to reduce the development time. What concept should software developers consider when using open-source software libraries?

Open source libraries contain known vulnerabilities, and adversaries regularly exploit those vulnerabilities in the wild.

Open source libraries can be used by everyone, and there is a common understanding that the vulnerabilities in these libraries will not be exploited.

Open source libraries are constantly updated, making it unlikely that a vulnerability exists for an adversary to exploit.

Open source libraries contain unknown vulnerabilities, so they should not be used.

According to the (ISC)? ethics canon "act honorably, honestly, justly, responsibly, and legally," which order should be used when resolving conflicts?

Public safety and duties to principals, individuals, and the profession

Individuals, the profession, and public safety and duties to principals

Individuals, public safety and duties to principals, and the profession

The profession, public safety and duties to principals, and individuals

Which of the following types of web-based attack is happening when an attacker is able to send a well-crafted, malicious request to an authenticated user without the user realizing it?

Cross-Site request forgery (CSRF)

Broken Authentication And Session Management

When reviewing the security logs, the password shown for an administrative login event was ' OR ' '1'='1' --. This is an example of which of the following kinds of attack?

Structured Query Language (SQL) Injection

An organization's internal audit team performed a security audit on the company's system and reported that the manufacturing application is rarely updated along with other issues categorized as minor. Six months later, an external audit team reviewed the same system with the same scope, but identified severe weaknesses in the manufacturing application's security controls. What is MOST likely to be the root cause of the internal audit team's failure in detecting these security issues?

Inadequate test coverage analysis

Inadequate security patch testing

Inadequate change control procedures

The development team has been tasked with collecting data from biometric devices. The application will support a variety of collection data streams. During the testing phase, the team utilizes data from an old production database in a secure testing environment. What principle has the team taken into consideration?

biometric data cannot be changed.

Separate biometric data streams require increased security.

The biometric devices are unknown.

Biometric data must be protected from disclosure.

An attacker has intruded into the source code management system and is able to download but not modify the code. Which of the following aspects of the code theft has the HIGHEST security impact?

The attacker could publicly share confidential comments found in the stolen code.

Competitors might be able to steal the organization's ideas by looking at the stolen code.

A competitor could run their own copy of the organization's website using the stolen code.

Administrative credentials or keys hard-coded within the stolen code could be used to access sensitive data.

Which of the following statements BEST describes least privilege principle in a cloud environment?

Internet traffic is inspected for all incoming and outgoing packets.

Network segments remain private if unneeded to access the internet.

Internet traffic is inspected for all incoming and outgoing packets.

A single cloud administrator is configured to access core functions.

Routing configurations are regularly updated with the latest routes.

The initial security categorization should be done early in the system life cycle and should be reviewed periodically. Why is it important for this to be done correctly?

It affects other steps in the certification and accreditation process.

It determines the security requirements.

It affects other steps in the certification and accreditation process.

It determines the functional and operational requirements.

The system engineering process works with selected security controls.

Which of the following vulnerabilities can be BEST detected using automated analysis?

Typical source code vulnerabilities

Valid cross-site request forgery (CSRF) vulnerabilities

Multi-step process attack vulnerabilities

Business logic flaw vulnerabilities

Typical source code vulnerabilities

An organization wants to migrate to Session Initiation Protocol (SIP) to save on telephony expenses.Which of the following security related statements should be considered in the decision-making process?

H.323 media gateways must be used to ensure end-to-end security tunnels.

Cloud telephony is less secure and more expensive than digital telephony services.

SIP services are more secure when used with multi-layer security proxies.

H.323 media gateways must be used to ensure end-to-end security tunnels.

Given the behavior of SIP traffic, additional security controls would be required.

An organization's retail website provides its only source of revenue, so the disaster recovery plan (DRP) must document an estimated time for each step in the plan.Which of the following steps in the DRP will list the GREATEST duration of time for the service to be fully operational?

Update Domain Name System (DNS) server addresses with domain registrar.

Update the Network Address Translation (NAT) table.

Update Domain Name System (DNS) server addresses with domain registrar.

Update the Border Gateway Protocol (BGP) autonomous system number.

Update the web server network adapter configuration.

Why is it important that senior management clearly communicates the formal Maximum Tolerable Downtime (MTD) decision?

To provide a formal declaration from senior management as required by internal audit to demonstrate sound business practices

To provide each manager with precise direction on selecting an appropriate recovery alternative

To demonstrate to the regulatory bodies that the company takes business continuity seriously

To demonstrate to the board of directors that senior management is committed to continuity recovery efforts

To provide a formal declaration from senior management as required by internal audit to demonstrate sound business practices

Which of the following activities should a forensic examiner perform FIRST when determining the priority of digital evidence collection at a crime scene?

Assign responsibilities to personnel on the scene.

Establish a list of files to examine.

When assessing web vulnerabilities, how can navigating the dark web add value to a penetration test?

Information may be found on hidden vendor patches.

The actual origin and tools used for the test can be hidden.

Information may be found on related breaches and hacking.

Vulnerabilities can be tested without impact on the tested environment.

Information may be found on hidden vendor patches.

In which of the following scenarios is locking server cabinets and limiting access to keys preferable to locking the server room to prevent unauthorized access?

Server cabinets share workspace with multiple projects.

Server cabinets are located in an unshared workspace.

Server cabinets are located in an isolated server farm.

Server hardware is located in a remote area.

Server cabinets share workspace with multiple projects.

Which of the following criteria ensures information is protected relative to its importance to the organization?

Organizational stakeholders, with classification approved by the management board

The value of the data to the organization's senior management

Legal requirements, value, criticality, and sensitivity to unauthorized disclosure or modification

Legal requirements determined by the organization headquarters' location

Organizational stakeholders, with classification approved by the management board

What is the FIRST step for an organization to take before allowing personnel to access social media from a corporate device or user account?

Publish a social media guidelines document.

Publish an acceptable usage policy.

Document a procedure for accessing social media sites.

Deliver security awareness training.

Which of the following is an indicator that a company's new user security awareness training module has been effective?

More incidents of phishing attempts are being reported.

There are more secure connections to the internal database servers.

More incidents of phishing attempts are being reported.

There are more secure connections to internal e-mail servers.

Fewer incidents of phishing attempts are being reported.

Which of the following is the BEST way to protect privileged accounts?

Multi-factor authentication (MFA)

Quarterly user access rights audits

Role-based access control (RBAC)

Multi-factor authentication (MFA)

Which of the following is the FIRST step for defining Service Level Requirements (SLR)?

Capturing and documenting the requirements of the customer

Creating a prototype to confirm or refine the customer requirements

Drafting requirements for the service level agreement (SLA)

Discussing technology and solution requirements with the customer

Capturing and documenting the requirements of the customer

When MUST an organization's information security strategic plan be reviewed?

Whenever there are major changes to the business

Quarterly, when the organization's strategic plan is updated

Whenever there are significant changes to a major application

Every three years, when the organization's strategic plan is updated

Whenever there are major changes to the business

ISC CISSP Practice Test 29 - Free Online Exam Prep & Questions

A software development company found odd behavior in some recently developed software, creating a need for a more thorough code review. What is the MOST effective argument for a more thorough code review?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP Practice Test 29

Question

ISC CISSP Practice Tests

Practice Tests