Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 103

Question list

List of questions

Question 1021

(0)

What is the MOST important factor in establishing an effective Information Security Awareness Program?

Question 1022

(0)

Which of the following events prompts a review of the disaster recovery plan (DRP)?

Question 1023

(0)

An organization plans to acquire @ commercial off-the-shelf (COTS) system to replace their aging home-built reporting system. When should the organization's security team FIRST get involved in this

Question 1024

(0)

A developer begins employment with an information technology (IT) organization. On the first day, the developer works through the list of assigned projects and finds that some files within those pro

Question 1025

(0)

Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high-risk countries?

Question 1026

(0)

Which of the following implementations will achieve high availability in a website?

Question 1027

(0)

Which of the following phases in the software acquisition process does developing evaluation criteria take place?

Question 1028

(0)

Security Software Development Life Cycle (SDLC) expects application code to be written In a consistent manner to allow ease of auditing and which of the following?

Question 1029

(0)

In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?

Question 1030

(0)

Which of the following is considered the FIRST step when designing an internal security control assessment?

Question 1021

What is the MOST important factor in establishing an effective Information Security Awareness Program?

Obtain management buy-in.

Conduct an annual security awareness event.

Mandate security training.

Hang information security posters on the walls,

Show Answer Comment (0)

Question 1022

Which of the following events prompts a review of the disaster recovery plan (DRP)?

New members added to the steering committee

Completion of the security policy review

Change in senior management

Organizational merger

Show Answer Comment (0)

An organization plans to acquire @ commercial off-the-shelf (COTS) system to replace their aging home-built reporting system. When should the organization's security team FIRST get involved in this acquisition's life cycle?

When the system is being designed, purchased, programmed, developed, or otherwise constructed

When the system is verified and validated

When the system is deployed into production

When the need for a system is expressed and the purpose of the system Is documented

Show Answer Comment (0)

Question 1024

A developer begins employment with an information technology (IT) organization. On the first day, the developer works through the list of assigned projects and finds that some files within those projects aren't accessible, Other developers working on the same project have no trouble locating and working on the. What is the MOST likely for the discrepancy in access?

The IT administrator had failed to grant the developer privileged access to the servers.

The project files were inadvertently deleted.

The new developer's computer had not been added to an access control list (ACL).

The new developer's user account was not associated with the right roles needed for the projects.

Show Answer Comment (0)

Question 1025

Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high-risk countries?

Review applicable destination country laws, forensically clean devices prior to travel, and only download sensitive data over a virtual private network (VPN) upon arriving at the destination.

Keep laptops, external storage devices, and smartphones in the hotel room when not in use.

Leverage a Secure Socket Layer (SSL) connection over a virtual private network (VPN) to download sensitive data upon arriving at the destination.

Use multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control isms to unlock smartphones.

Show Answer Comment (0)

Question 1026

Which of the following implementations will achieve high availability in a website?

Multiple Domain Name System (DNS) entries resolving to the same web server and large amounts of bandwidth

Disk mirroring of the web server with redundant disk drives in a hardened data center

Disk striping of the web server hard drives and large amounts of bandwidth

Multiple geographically dispersed web servers that are configured for failover

Show Answer Comment (0)

Question 1027

Which of the following phases in the software acquisition process does developing evaluation criteria take place?

Follow-On

Planning

Contracting

Monitoring and Acceptance

Show Answer Comment (0)

Question 1028

Security Software Development Life Cycle (SDLC) expects application code to be written In a consistent manner to allow ease of auditing and which of the following?

Protecting

Executing

Copying

Enhancing

Show Answer Comment (0)