The MAIN purpose of placing a tamper seal on a computer system's case is to:

detect efforts to open the case.

make it difficult to steal internal components.

Which of the following describes the order in which a digital forensic process is usually conducted?

Ascertain legal authority, agree upon examination strategy, conduct examination, and report results

Ascertain legal authority, conduct investigation, report results, and agree upon examination strategy

Agree upon examination strategy, ascertain legal authority, conduct examination, and report results

Agree upon examination strategy, ascertain legal authority, report results, and conduct examination

Compared to a traditional network, which of the following is a security-related benefit that softwaredefined networking (SDN) provides?

Centralized network administrator control

Centralized network provisioning

Centralized network administrator control

Reduced network latency when scaled

Reduced hardware footprint and cost

Which of the following are mandatory canons for the (ISC)* Code of Ethics?

Provide diligent and competent service to principals.

Develop comprehensive security strategies for the organization.

Perform is, honestly, fairly, responsibly, and lawfully for the organization.

Create secure data protection policies to principals.

Provide diligent and competent service to principals.

Which of the following is the MOST significant key management problem due to the number of keys created?

Storage of the keys require increased security

Keys are more difficult to provision and

Storage of the keys require increased security

Exponential growth when using asymmetric keys

Exponential growth when using symmetric keys

When conducting a third-party risk assessment of a new supplier, which of the following reports should be reviewed to confirm the operating effectiveness of the security, availability, confidentiality, and privacy trust principles?

Service Organization Control (SOC) 2, Type 2

Service Organization Control (SOC) 1, Type 2

Service Organization Control (SOC) 2, Type 2

International Organization for Standardization (ISO) 27001

International Organization for Standardization (ISO) 27002

Which of the (ISC)? Code of Ethics canons is MOST reflected when preserving the value of systems, applications, and entrusted information while avoiding conflicts of interest?

Protect society, the commonwealth, and the infrastructure.

Act honorably, honestly, justly, responsibly, and legally.

Protect society, the commonwealth, and the infrastructure.

Provide diligent and competent service to principles.

Advance and protect the profession.

he security organization is loading for a solution that could help them determine with a strong level of confident that attackers have breached their network. Which solution is MOST effective at discovering successful network breach?

Installing an intrusion prevention system (IPS)

Installing an intrusion detection system (IDS)

When designing a business continuity plan (BCP), what is the formula to determine the Maximum Tolerable Downtime (MTD)?

Recovery Time Objective (RTO) + Work Recovery Time (WRT)

Annual Loss Expectancy (ALE) + Work Recovery Time (WRT)

Business impact analysis (BIA) + Recovery Point Objective (RPO)

Recovery Time Objective (RTO) + Work Recovery Time (WRT)

Estimated Maximum Loss (EML) + Recovery Time Objective (RTO)

A company wants to implement two-factor authentication (2FA) to protect their computers from unauthorized users. Which solution provides the MOST secure means of authentication and meets the criteria they have set?

Username and personal identification number (PIN)

Fingerprint and retinal scanners

Short Message Services (SMS) and smartphone authenticator

A recent information security risk assessment identified weak system access controls on mobile devices as a high me In order to address this risk and ensure only authorized staff access company information, which of the following should the organization implement?

Multi-factor authentication (MFA)

Intrusion prevention system (IPS)

Multi-factor authentication (MFA)

Which of the following addresses requirements of security assessment during software acquisition?

Software configuration management (SCM)

Data loss prevention (DLP) policy

Which of the following MUST the administrator of a security information and event management (SIEM) system ensure?

All sources are synchronized with a common time reference.

All sources are reporting in the exact same Extensible Markup Language (XML) format.

Data sources do not contain information infringing upon privacy regulations.

All sources are synchronized with a common time reference.

Each source uses the same Internet Protocol (IP) address for reporting.

Which of the following terms BEST describes a system which allows a user to log in and access multiple related servers and applications?

Federated identity management (FIM)

Multi-factor authentication (MFA)

After the INITIAL input o f a user identification (ID) and password, what is an authentication system that prompts the user for a different response each time the user logs on?

Persons Identification Number (PIN)

What is the P R IM A R Y reason criminal law is difficult to enforce when dealing with cyber-crime?

Jurisdiction is hard to define.

Extradition treaties are rarely enforced.

Numerous language barriers exist.

Law enforcement agencies are understaffed.

Jurisdiction is hard to define.

Which of the following are the B EST characteristics of security metrics?

They are consistently measured and quantitatively expressed

They are generalized and provide a broad overview

They use acronyms and abbreviations to be concise

They use bar charts and Venn diagrams

They are consistently measured and quantitatively expressed

At which phase of the software assurance life cycle should risks associated with software acquisition strategies be identified?

Monitoring and acceptance phase

Which of the following would be considered an incident if reported by a security information and event management (SIEM) system?

A web resource has reported a 404 error.

An administrator is logging in on a server through a virtual private network (VPN).

A log source has stopped sending data.

A web resource has reported a 404 error.

A firewall logs a connection between a client on the Internet and a web server using Transmission Control Protocol (TCP) on port 80.

Spyware is BEST described as

an information gathering technique,

If traveling abroad and a customs official demands to examine a personal computer, which of the following should be assumed?

The hard drive has been copied.

The hard drive has been stolen.

The Internet Protocol (IP) address has been copied.

The hard drive has been copied.

The Media Access Control (MAC) address was stolen

What are the first two components of logical access control?

Authentication and identification

Confidentiality and authentication

Authentication and identification

Identification and confidentiality

Authentication and availability

What is the MAIN purpose of a security assessment plan?

Provide the objectives for the security and privacy control assessments and a detailed roadmap of how to conduct such assessments.

Provide guidance on security requirements, to ensure the identified security risks are properly addressed based on the recommendation

Provide the objectives for the security and privacy control assessments and a detailed roadmap of how to conduct such assessments.

Provide technical information to executives to help them understand information security postures and secure funding.

Provide education to employees on security and privacy, to ensure their awareness on policies and procedures

What is the MAIN purpose of conducting a business impact analysis (BIA)?

To determine the effect of mission-critical information system failures on core business processes

To determine the critical resources required to recover from an incident within a specified time period

To determine the effect of mission-critical information system failures on core business processes

To determine the cost for restoration of damaged information system

To determine the controls required to return to business critical operations

Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Which of the following is the FIRST step in developing an ISCM strategy and implementing an ISCM program?

Define a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.

Conduct a vulnerability assessment to discover current threats against the environment and incorporate them into the program.

Respond to findings with technical management, and operational mitigating activities or acceptance, transference/sharing, or avoidance/rejection.

Analyze the data collected and report findings, determining the appropriate response. It may be necessary to collect additional information to clarify or supplement existing monitoring data.

When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

Detection of sophisticated attackers

Topology of the network used for the system

Which of the following BEST describes the use of network architecture in reducing corporate risks associated with mobile devices?

Segmentation and demilitarized zone (DMZ) monitoring are implemented to secure a virtual private network (VPN) access for mobile devices

Maintaining a "closed applications model on all mobile devices depends on demilitarized 2one (DM2) servers

Split tunneling enabled for mobile devices improves demilitarized zone (DMZ) security posture

Segmentation and demilitarized zone (DMZ) monitoring are implemented to secure a virtual private network (VPN) access for mobile devices

Applications that manage mobile devices are located in an Internet demilitarized zone (DMZ)

Which of the following is an important design feature for the outer door o f a mantrap?

Allow it be opened when the inner door of the mantrap is also open

Allow it to be opened by an alarmed emergency button.

Do not allow anyone to enter it alone.

Do not allow it to be observed by dosed-circuit television (CCTV) cameras.

Allow it be opened when the inner door of the mantrap is also open

In setting expectations when reviewing the results of a security test, which of the following statements is MOST important to convey to reviewers?

The accuracy of testing results can be greatly improved if the target(s) are properly hardened.

The target's security posture cannot be further compromised.

The results of the tests represent a point-in-time assessment of the target(s).

The accuracy of testing results can be greatly improved if the target(s) are properly hardened.

The deficiencies identified can be corrected immediately

What is the overall goal of software security testing?

Ensuring all software functions perform as specified

Identifying the key security features of the software

Ensuring all software functions perform as specified

Reducing vulnerabilities within a software system

Making software development more agile

ISC CISSP Practice Test 37 - Free Online Exam Prep & Questions

A new employee formally reported suspicious behavior to the organization security team. The report claims that someone not affiliated with the organization was inquiring about the member's work location, length of employment, and building access controls. The employee's reporting is MOST likely the result of which of the following?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP Practice Test 37

Question

ISC CISSP Practice Tests

Practice Tests