Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 106

Question list

List of questions

Question 1051

(0)

Where can the Open Web Application Security Project (OWASP) list of associated vulnerabilities be found?

Question 1052

(0)

What is the BEST approach to anonymizing personally identifiable information (PII) in a test environment?

Question 1053

(0)

A customer continues to experience attacks on their email, web, and File Transfer Protocol (FTP) servers. These attacks are impacting their business operations. Which of the following is the BEST re

Question 1054

(0)

Which security feature fully encrypts code and data as it passes to the servers and only decrypts below the hypervisor layer?

Question 1055

(0)

Which of the following techniques evaluates the secure Bet principles of network or software architectures?

Question 1056

(0)

Which of the following is security control volatility?

Question 1057

(0)

When performing an investigation with the potential for legal action, what should be the analyst's FIRST consideration?

Question 1058

(0)

Which of the following does the security design process ensure within the System Development Life Cycle (SDLC)?

Question 1059

(0)

An organization needs a general purpose document to prove that its internal controls properly address security, availability, processing integrity, confidentiality or privacy risks. Which of the fol

Question 1060

(0)

What is the BEST design for securing physical perimeter protection?

Question 1051

Where can the Open Web Application Security Project (OWASP) list of associated vulnerabilities be found?

OWASP Top 10 Project

OWASP Software Assurance Maturity Model (SAMM) Project

OWASP Guide Project

OWASP Mobile Project

Show Answer Comment (0)

Question 1052

What is the BEST approach to anonymizing personally identifiable information (PII) in a test environment?

Randomizing data

Swapping data

Encrypting data

Encoding data

Show Answer Comment (0)

A customer continues to experience attacks on their email, web, and File Transfer Protocol (FTP) servers. These attacks are impacting their business operations. Which of the following is the BEST recommendation to make?

Configure an intrusion detection system (IDS).

Create a demilitarized zone (DMZ).

Deploy a bastion host.

Setup a network firewall.

Show Answer Comment (0)

Question 1054

Which security feature fully encrypts code and data as it passes to the servers and only decrypts below the hypervisor layer?

File-system level encryption

Transport Layer Security (TLS)

Key management service

Trusted execution environments

Show Answer Comment (0)

Question 1055

Which of the following techniques evaluates the secure Bet principles of network or software architectures?

Threat modeling

Risk modeling

Waterfall method

Fuzzing

Show Answer Comment (0)

Question 1056

Which of the following is security control volatility?

A reference to the stability of the security control.

A reference to how unpredictable the security control is.

A reference to the impact of the security control.

A reference to the likelihood of change in the security control.

Show Answer Comment (0)

Question 1057

When performing an investigation with the potential for legal action, what should be the analyst's FIRST consideration?

Chain-of-custody

Authorization to collect

Court admissibility

Data decryption

Show Answer Comment (0)

Question 1058

Which of the following does the security design process ensure within the System Development Life Cycle (SDLC)?

Proper security controls, security goals, and fault mitigation are properly conducted.

Proper security controls, security objectives, and security goals are properly initiated.

Security goals, proper security controls, and validation are properly initiated.

Security objectives, security goals, and system test are properly conducted.

Show Answer Comment (0)

Question 1059

An organization needs a general purpose document to prove that its internal controls properly address security, availability, processing integrity, confidentiality or privacy risks. Which of the following reports is required?

A Service Organization Control (SOC) 3 report

The Statement on Standards for Attestation Engagements No. 18 (SSAE 18)

A Service Organization Control (SOC) 2 report

The International Organization for Standardization (ISO) 27001

Show Answer Comment (0)