Which of the following BEST describes the purpose of Border Gateway Protocol (BGP)?

Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.

Maintain a list of network paths between internet routers.

Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.

Provide firewall services to cloud-enabled applications.

Maintain a list of efficient network paths between autonomous systems.

Which of the following would an information security professional use to recognize changes to content, particularly unauthorized changes?

Security information and event management (SIEM) system

Intrusion detection system (IDS)

Which of the following has the responsibility of information technology (IT) governance?

Chief Information Officer (CIO)

Chief Information Security Officer (CISO)

Which is MOST important when negotiating an Internet service provider (ISP) service-level agreement (SLA) by an organization that solely provides Voice over Internet Protocol (VoIP) services?

Quality of Service (QoS) between applications

Availability of network services

Financial penalties in case of disruption

A company developed a web application which is sold as a Software as a Service (SaaS) solution to the customer. The application is hosted by a web server running on a 'specific operating system (OS) on a virtual machine (VM). During the transition phase of the service, it is determined that the support team will need access to the application logs. Which of the following privileges would be the MOST suitable?

Administrative privileges on the application folders

Administrative privileges on the OS

Administrative privileges on the web server

Administrative privileges on the hypervisor

Administrative privileges on the application folders

A systems engineer is designing a wide area network (WAN) environment for a new organization. The WAN will connect sites holding information at various levels of sensitivity, from publicly available to highly confidential. The organization requires a high degree of interconnectedness to support existing business processes. What is the BEST design approach to securing this environment?

Layer multiple detective and preventative technologies at the environment perimeter.

Place firewalls around critical devices, isolating them from the rest of the environment.

Layer multiple detective and preventative technologies at the environment perimeter.

Use reverse proxies to create a secondary "shadow" environment for critical systems.

Align risk across all interconnected elements to ensure critical threats are detected and handled.

Which of the following goals represents a modern shift in risk management according to National Institute of Standards and Technology (NIST)?

Enable management to make well-informed risk-based decisions justifying security expenditure.

Focus on operating environments that are changing, evolving, and full of emerging threats.

Secure information technology (IT) systems that store, process, or transmit organizational information.

Enable management to make well-informed risk-based decisions justifying security expenditure.

Provide an improved mission accomplishment approach.

Which of the following is a limitation of the Bell-LaPadula model?

Segregation of duties (SoD) is difficult to implement as the "no read-up" rule limits the ability of an object to access information with a higher classification.

Mandatory access control (MAC) is enforced at all levels making discretionary access control (DAC) impossible to implement.

It contains no provision or policy for changing data access control and works well only with access systems that are static in nature.

It prioritizes integrity over confidentiality which can lead to inadvertent information disclosure.

Which of the following is the BEST option to reduce the network attack surface of a system?

Disabling unnecessary ports and services

Ensuring that there are no group accounts on the system

Removing unnecessary system user accounts

Disabling unnecessary ports and services

Uninstalling default software on the system

Which of the following is the PRIMARY reason for selecting the appropriate level of detail for audit record generation?

Facilitate a root cause analysis (RCA)

Lower costs throughout the System Development Life Cycle (SDLC)

Facilitate a root cause analysis (RCA)

Enable generation of corrective action reports

A financial organization that works according to agile principles has developed a new application for their external customer base to request a line of credit. A security analyst has been asked to assess the security risk of the minimum viable product (MVP). Which is the MOST important activity the analyst should assess?

The software has the correct functionality.

The software has been code reviewed.

The software had been branded according to corporate standards,

The software has been signed off for release by the product owner.

When configuring Extensible Authentication Protocol (EAP) in a Voice over Internet Protocol (VoIP) network, which of the following authentication types is the MOST secure?

EAP-Tunneled Transport Layer Security (TLS)

EAP-Transport Layer Security (TLS)

EAP-Flexible Authentication via Secure Tunneling

EAP-Tunneled Transport Layer Security (TLS)

EAP-Protected Extensible Authentication Protocol (PEAP)

A firm within the defense industry has been directed to comply with contractual requirements for encryption of a government client's Controlled Unclassified Information (CUI). What encryption strategy represents how to protect data at rest in the MOST efficient and cost-effective manner?

Perform logical separation of program information, using virtualized storage solutions with encryption management in the back-end disk systems

Perform physical separation of program information and encrypt only information deemed critical by the defense client

Perform logical separation of program information, using virtualized storage solutions with built-in encryption at the virtualization layer

Perform logical separation of program information, using virtualized storage solutions with encryption management in the back-end disk systems

Implement data at rest encryption across the entire storage area network (SAN)

What industry-recognized document could be used as a baseline reference that is related to data security and business operations for conducting a security assessment?

Service Organization Control (SOC) 2 Type 2

Service Organization Control (SOC) 1 Type 2

Service Organization Control (SOC) 2 Type 1

Service Organization Control (SOC) 1 Type 1

Service Organization Control (SOC) 2 Type 2

A scan report returned multiple vulnerabilities affecting several production servers that are mission critical. Attempts to apply the patches in the development environment have caused the servers to crash. What is the BEST course of action?

Mitigate the risks with compensating controls.

Upgrade the software affected by the vulnerability.

Inform management of possible risks.

Mitigate the risks with compensating controls.

Remove the affected software from the servers.

Which of the following would be the BEST guideline to follow when attempting to avoid the exposure of sensitive data?

Store sensitive data only when necessary.

Educate end-users on methods of attacks on sensitive data.

Establish report parameters for sensitive data.

Monitor mail servers for sensitive data being exfilltrated.

Which application type is considered high risk and provides a common way for malware and viruses to enter a network?

Instant messaging or chat applications

Peer-to-Peer (P2P) file sharing applications

The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?

Security information and event management (SIEM)

A software architect has been asked to build a platform to distribute music to thousands of users on a global scale. The architect has been reading about content delivery networks (CDN). Which of the following is a principal task to undertake?

Establish a media caching methodology.

Establish a service-oriented architecture (SOA).

Establish a media caching methodology.

Establish relationships with hundreds of Internet service providers (ISP).

Establish a low-latency wide area network (WAN).

Which of the following BEST describes centralized identity management?

Service providers agree to integrate identity system recognition across organizational boundaries.

Service providers rely on a trusted third party (TTP) to provide requestors with both credentials and identifiers.

Service providers agree to integrate identity system recognition across organizational boundaries.

Service providers identify an entity by behavior analysis versus an identification factor.

Service providers perform as both the credential and identity provider (IdP).

What is the FIRST step that should be considered in a Data Loss Prevention (DLP) program?

Information Rights Management (IRM)

What is the benefit of an operating system (OS) feature that is designed to prevent an application from executing code from a non-executable memory region?

Reduces the risk of polymorphic viruses from encrypting their payload

Identifies which security patches still need to be installed on the system

Stops memory resident viruses from propagating their payload

Reduces the risk of polymorphic viruses from encrypting their payload

Helps prevent certain exploits that store code in buffers

Which section of the assessment report addresses separate vulnerabilities, weaknesses, and gaps?

Executive summary with full details

In a quarterly system access review, an active privileged account was discovered that did not exist in the prior review on the production system. The account was created one hour after the previous access review. Which of the following is the BEST option to reduce overall risk in addition to quarterly access reviews?

Implement and review risk-based alerts.

Create policies for system access.

Implement and review risk-based alerts.

When recovering from an outage, what is the Recovery Point Objective (RPO), in terms of data recovery?

The RPO is the minimum amount of data that needs to be recovered.

The RPO is the maximum amount of time for which loss of data is acceptable.

The RPO is the minimum amount of data that needs to be recovered.

The RPO is a goal to recover a targeted percentage of data lost.

The RPO is the amount of time it takes to recover an acceptable percentage of data lost.

ISC CISSP Practice Test 35 - Free Online Exam Prep & Questions

When auditing the Software Development Life Cycle (SDLC) which of the following is one of the highlevel audit phases?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP Practice Test 35

Question

ISC CISSP Practice Tests

Practice Tests