Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 109

Question list

List of questions

Question 1081

(0)

A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MO

Question 1082

(0)

A healthcare insurance organization chose a vendor to develop a software application. Upon review of the draft contract, the information security professional notices that software security is not a

Question 1083

(0)

Which of the following is MOST important to follow when developing information security controls for an organization?

Question 1084

(0)

Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

Question 1085

(0)

Which of the following system components enforces access controls on an object?

Question 1086

(0)

Building blocks for software-defined networks (SDN) require which of the following?

Question 1087

(0)

An organization outgrew its internal data center and is evaluating third-party hosting facilities. In this evaluation, which of the following is a PRIMARY factor for selection?

Question 1088

(0)

A company is planning to implement a private cloud infrastructure. Which of the following recommendations will support the move to a cloud infrastructure?

Question 1089

(0)

While performing a security review for a new product, an information security professional discovers that the organization's product development team is proposing to collect government-issued identi

Question 1090

(0)

Which of the following is performed to determine a measure of success of a security awareness training program designed to prevent social engineering attacks?

Question 1081

A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MOST likely to resolve the issues associated with user access?

Implement a role-based access control (RBAC) system.

Implement identity and access management (IAM) platform.

Implement a Privileged Access Management (PAM) system.

Implement a single sign-on (SSO) platform.

Show Answer Comment (0)

Question 1082

A healthcare insurance organization chose a vendor to develop a software application. Upon review of the draft contract, the information security professional notices that software security is not addressed. What is the BEST approach to address the issue?

Update the service level agreement (SLA) to provide the organization the right to audit the vendor.

Update the service level agreement (SLA) to require the vendor to provide security capabilities.

Update the contract so that the vendor is obligated to provide security capabilities.

Update the contract to require the vendor to perform security code reviews.

Show Answer Comment (0)

Question 1083

Which of the following is MOST important to follow when developing information security controls for an organization?

Exercise due diligence with regard to all risk management information to tailor appropriate controls.

Perform a risk assessment and choose a standard that addresses existing gaps.

Use industry standard best practices for security controls in the organization.

Review all local and international standards and choose the most stringent based on location.

Show Answer Comment (0)

Question 1084

Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

A network-based firewall is stateful, while a host-based firewall is stateless.

A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.

A network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.

A network-based firewall blocks network intrusions, while a host-based firewall blocks malware.

Show Answer Comment (0)

Question 1085

Which of the following system components enforces access controls on an object?

Security perimeter

Access control matrix

Trusted domain

Reference monitor

Show Answer Comment (0)

Question 1086

Building blocks for software-defined networks (SDN) require which of the following?

The SDN is mostly composed of virtual machines (VM).

The SDN is composed entirely of client-server pairs.

Virtual memory is used in preference to random-access memory (RAM).

Random-access memory (RAM) is used in preference to virtual memory.

Show Answer Comment (0)

Question 1087

An organization outgrew its internal data center and is evaluating third-party hosting facilities. In this evaluation, which of the following is a PRIMARY factor for selection?

Facility provides an acceptable level of risk

Facility provides disaster recovery (DR) services

Facility provides the most cost-effective solution

Facility has physical access protection measures

Show Answer Comment (0)

Question 1088

A company is planning to implement a private cloud infrastructure. Which of the following recommendations will support the move to a cloud infrastructure?

Implement a virtual local area network (VLAN) for each department and create a separate subnet for each VLAN.

Implement software-defined networking (SDN) to provide the ability for the network infrastructure to be integrated with the control and data planes.

Implement a virtual local area network (VLAN) to logically separate the local area network (LAN) from the physical switches.

implement software-defined networking (SDN) to provide the ability to apply high-level policies to shape and reorder network traffic based on users, devices and applications.

Show Answer Comment (0)

Question 1089

While performing a security review for a new product, an information security professional discovers that the organization's product development team is proposing to collect government-issued identification (ID) numbers from customers to use as unique customer identifiers. Which of the following recommendations should be made to the product development team?

Customer identifiers should be a variant of the user's government-issued ID number.

Customer identifiers that do not resemble the user's government-issued ID number should be used.

Customer identifiers should be a cryptographic hash of the user's government-issued ID number.

Customer identifiers should be a variant of the user's name, for example, "jdoe" or "john.doe."

Show Answer Comment (0)

Question 1090

Which of the following is performed to determine a measure of success of a security awareness training program designed to prevent social engineering attacks?

Employee evaluation of the training program

Internal assessment of the training program's effectiveness

Multiple choice tests to participants

Management control of reviews

Show Answer Comment (0)

Total 1.482 questions