An information technology (IT) employee who travels frequently to various ies remotely to an organization' the following solutions BEST serves as a secure control mechanism to meet the organization's requirements? to troubleshoot pWhich of the following solutions BEST serves as a secure control mechanisn to meet the organization's requirements?

Install a bastion host in the demilitarized zone (DMZ) and allow multi-factor authentication (MFA) access.

Update the firewall rules to include the static Internet Protocol (IP) addresses of the locations where the employee connects from.

Install a third-party screen sharing solution that provides remote connection from a public website.

Implement a Dynamic Domain Name Services (DDNS) account to initiate a virtual private network (VPN) using the DDNS record.

Install a bastion host in the demilitarized zone (DMZ) and allow multi-factor authentication (MFA) access.

Assuming an individual has taken all of the steps to keep their internet connection private, which of the following is the BEST to browse the web privately?

Prevent information about browsing activities from being stored in the cloud.

Store browsing activities in the cloud.

Prevent information about browsing activities farm being stored on the personal device.

Store information about browsing activities on the personal device.

Which of the following types of firewall only examines the "handshaking" between packets before forwarding traffic?

Network Address Translation (NAT) firewalls

The security team plans on using automated account reconciliation in the corporate user access review process. Which of the following must be implemented for the BEST results with fewest errors when running the audit?

Removal of service accounts from review

Which of the following is included in change management?

User Acceptance Testing (UAT) before implementation

Technical review by business owner

Cost-benefit analysis (CBA) after implementation

Which of the following technologies can be used to monitor and dynamically respond to potential threats on web applications?

Runtime application self-protection (RASP)

Security Assertion Markup Language (SAML)

Web application vulnerability scanners

Runtime application self-protection (RASP)

When developing an organization's information security budget, it is important that the

expected risk can be managed appropriately with the funds allocated.

requested funds are at an equal amount to the expected cost of breaches.

requested funds are part of a shared funding pool with other areas.

expected risk to the organization does not exceed the funds allocated.

When determining data and information asset handling, regardless of the specific toolset being used, which of the following is one of the common components of big data?

Centralized processing location

In a DevOps environment, which of the following actions is MOST necessary to have confidence in the quality of the changes being made?

Receive approval from the change review board.

Prepare to take corrective actions quickly.

Receive approval from the change review board.

Automate functionality testing.

Which of the following is TRUE for an organization that is using a third-party federated identity service?

The organization defines internal standard for overall user identification

The organization enforces the rules to other organization's user provisioning

The organization establishes a trust relationship with the other organizations

The organization defines internal standard for overall user identification

The organization specifies alone how to authenticate other organization's users

Computer forensics requires which of the following MAIN steps?

Take action to contain the damage, announce the incident to responsible sections, analyze the data

Announce the incident to responsible sections, analyze the data, assimilate the data for correlation

Take action to contain the damage, announce the incident to responsible sections, analyze the data

Acquire the data without altering, authenticate the recovered data, analyze the data

Access the data before destruction, assimilate the data for correlation, take action to contain the damage

If an employee transfers from one role to another, which of the following actions should this trigger within the identity and access management (IAM) lifecycle?

User access review and adjustment

System account access review and adjustment

What is the PRIMARY objective of business continuity planning?

Restoring computer systems to normal operations as soon as possible

Establishing a cost estimate for business continuity recovery operations

Restoring computer systems to normal operations as soon as possible

Strengthening the perceived importance of business continuity planning among senior management

Ensuring timely recovery of mission-critical business processes

What Is a risk of using commercial off-the-shelf (COTS) products?

COTS products may not map directly to an organization's security requirements.

COTS products are typically more expensive than developing software in-house.

Cost to implement COTS products is difficult to predict.

Vendors are often hesitant to share their source code.

Which of the following is the FIRST step an organization's security professional performs when defining a cyber-security program based upon industry standards?

Map the organization's current security practices to industry standards and frameworks.

Define the organization's objectives regarding security and risk mitigation.

Select from a choice of security best practices.

Review the past security assessments.

What are the PRIMARY responsibilities of security operations for handling and reporting violations and incidents?

Documenting incidents for future analysis, notifying end users, and containing events

Monitoring and identifying system failures, documenting incidents for future analysis, and scheduling patches for systems

Scheduling patches for systems, notifying the help desk, and alerting key personnel

Monitoring and identifying system failures, alerting key personnel, and containing events

Documenting incidents for future analysis, notifying end users, and containing events

An internal audit for an organization recently identified malicious actions by a user account. Upon further investigation, it was determined the offending user account was used by multiple people at multiple locations simultaneously for various services and applications. What is the BEST method to prevent this problem in the future?

Ensure the security information and event management (SIEM) is set to alert.

Inform users only one user should be using the account at a time.

Ensure each user has their own unique account,

Allow several users to share a generic account.

Which of the following are all elements of a disaster recovery plan (DRP)?

Maintain proper documentation of all server logs, developing an incident notification procedure, establishing recovery locations

Document the actual location of the ORP, developing an incident notification procedure, evaluating costs of critical components

Document the actual location of the ORP, developing an incident notification procedure, establishing recovery locations

Maintain proper documentation of all server logs, developing an incident notification procedure, establishing recovery locations

Document the actual location of the ORP, recording minutes at all ORP planning sessions, establishing recovery locations

Which of the following BEST ensures the integrity of transactions to intended recipients?

Public key infrastructure (PKI)

Which of the following statements is TRUE about Secure Shell (SSH)?

SSH supports port forwarding, which can be used to protect less secured protocols.

SSH does not protect against man-in-the-middle (MITM) attacks.

SSH supports port forwarding, which can be used to protect less secured protocols.

SSH can be used with almost any application because it is concerned with maintaining a circuit.

SSH is easy to deploy because it requires a Web browser only.

Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?

Common Vulnerability Scoring System (CVSS)

Center for Internet Security (CIS)

Common Vulnerabilities and Exposures (CVE)

Open Web Application Security Project (OWASP)

Common Vulnerability Scoring System (CVSS)

Which of the following would be the BEST mitigation practice for man-in-the-middle (MITM) Voice over Internet Protocol (VoIP) attacks?

Use Transport Layer Security (TLS) protocol

Use Media Gateway Control Protocol (MGCP)

Use Transport Layer Security (TLS) protocol

Use File Transfer Protocol (FTP)

Use Secure Shell (SSH) protocol

Which of the following documents specifies services from the client's viewpoint?

Service Level Requirement (SLR)

Which Open Systems Interconnection (OSI) layer(s) BEST corresponds to the network access layer in the Transmission Control Protocol/Internet Protocol (TCP/IP) model?

Application, Presentation, and Session Layers

An organization is considering partnering with a third-party supplier of cloud services. The organization will only be providing the data and the third-party supplier will be providing the security controls. Which of the following BEST describes this service offering?

Infrastructure as a Service (IaaS)

Which security audit standard provides the BEST way for an organization to understand a vendor's Information Systems (IS) in relation to confidentiality, integrity, and availability?

Service Organization Control (SOC) 2

Statement on Auditing Standards (SAS) 70

Service Organization Control (SOC) 2

Service Organization Control (SOC) 1

Statement on Standards for Attestation Engagements (SSAE) 18

Which of the following is the MOST appropriate technique for destroying magnetic platter style hard disk drives (HDD) containing data with a "HIGH" security categorization?

HP iProcess the HDD through a degaussing device.

Drill through the device and platters.

Mechanically shred the entire HDD.

Remove the control electronics.

HP iProcess the HDD through a degaussing device.

A security practitioner needs to implementation solution to verify endpoint security protections and operating system (0S) versions. Which of the following is the BEST solution to implement?

An intrusion prevention system (IPS)

ISC CISSP Practice Test 36 - Free Online Exam Prep & Questions

The security operations center (SOC) has received credible intelligence that a threat actor is planning to attack with multiple variants of a destructive virus. After obtaining a sample set of this virus' variants and reverse engineering them to understand how they work, a commonality was found. All variants are coded to write to a specific memory location. It is determined this virus is of no threat to the organization because they had the focresight to enable what feature on all endpoints?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP Practice Test 36

Question

ISC CISSP Practice Tests

Practice Tests