Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 113

Question list

List of questions

Question 1121

(0)

A software development company found odd behavior in some recently developed software, creating a need for a more thorough code review. What is the MOST effective argument for a more thorough code r

Question 1122

(0)

A new site's gateway isn't able to form a tunnel to the existing site-to-site Internet Protocol Security (IPsec) virtual private network (VPN) device at headquarters. Devices at the new site have no

Question 1123

(0)

Which of the following examples is BEST to minimize the attack surface for a customer's private information?

Question 1124

(0)

What are the essential elements of a Risk Assessment Report (RAR)?

Question 1125

(0)

What is the PRIMARY benefit of incident reporting and computer crime investigations?

Question 1126

(0)

Which of the following determines how traffic should flow based on the status of the infrastructure layer?

Question 1127

(0)

In a multi-tenant cloud environment, what approach will secure logical access to assets?

Question 1128

(0)

A company hired an external vendor to perform a penetration test ofa new payroll system. The company's internal test team had already performed an in-depth application and security test of the syste

Question 1129

(0)

Which of the following is the MOST effective method of detecting vulnerabilities in web-based applications early in the secure Software Development Life Cycle (SDLC)?

Question 1130

(0)

A malicious user gains access to unprotected directories on a web server. Which of the following is MOST likely the cause for this information disclosure?

Question 1121

A software development company found odd behavior in some recently developed software, creating a need for a more thorough code review. What is the MOST effective argument for a more thorough code review?

It will increase flexibility of the applications developed.

It will increase accountability with the customers.

It will impede the development process.

lt will reduce the potential for vulnerabilities.

Show Answer Comment (0)

Question 1122

A new site's gateway isn't able to form a tunnel to the existing site-to-site Internet Protocol Security (IPsec) virtual private network (VPN) device at headquarters. Devices at the new site have no problem accessing resources on the Internet. When testing connectivity between the remote site's gateway, it was observed that the external Internet Protocol (IP) address of the gateway was set to 192.168.1.1. and was configured to send outbound traffic to the Internet Service Provider (ISP) gateway at4 192.168.1.2. Which of the following would be the BEST way to resolve the issue and get the remote site connected?

Enable IPSec tunnel mode on the VPN devices at the new site and the corporate headquarters.

Enable Layer 2 Tunneling Protocol (L2TP) on the VPN devices at the new site and the corporate headquarters.

Enable Point-to-Point Tunneling Protocol (PPTP) on the VPN devices at the new site and the corporate headquarters.

Enable Network Address Translation (NAT) - Traversal on the VPN devices at the new site and the corporate headquarters.

Show Answer Comment (0)

Question 1123

Which of the following examples is BEST to minimize the attack surface for a customer's private information?

Obfuscation

Collection limitation

Authentication

Data masking

Show Answer Comment (0)

Question 1124

What are the essential elements of a Risk Assessment Report (RAR)?

Table of contents, testing criteria, and index

Table of contents, chapters, and executive summary

Executive summary, graph of risks, and process

Executive summary, body of the report, and appendices

Show Answer Comment (0)

Question 1125

What is the PRIMARY benefit of incident reporting and computer crime investigations?

Providing evidence to law enforcement

Repairing the damage and preventing future occurrences

Appointing a computer emergency response team

Complying with security policy

Show Answer Comment (0)

Question 1126

Which of the following determines how traffic should flow based on the status of the infrastructure layer?

Traffic plane

Application plane

Data plane

Control plane

Show Answer Comment (0)

Question 1127

In a multi-tenant cloud environment, what approach will secure logical access to assets?

Hybrid cloud

Transparency/Auditability of administrative access

Controlled configuration management (CM)

Virtual private cloud (VPC)

Show Answer Comment (0)

Question 1128

A company hired an external vendor to perform a penetration test ofa new payroll system. The company's internal test team had already performed an in-depth application and security test of the system and determined that it met security requirements. However, the external vendor uncovered significant security weaknesses where sensitive personal data was being sent unencrypted to the tax processing systems. What is the MOST likely cause of the security issues?

Failure to perform interface testing

Failure to perform negative testing

Inadequate performance testing

Inadequate application level testing

Show Answer Comment (0)

Question 1129

Which of the following is the MOST effective method of detecting vulnerabilities in web-based applications early in the secure Software Development Life Cycle (SDLC)?

Web application vulnerability scanning

Application fuzzing

Code review

Penetration testing

Show Answer Comment (0)

Question 1130

A malicious user gains access to unprotected directories on a web server. Which of the following is MOST likely the cause for this information disclosure?

Security misconfiguration

Cross-site request forgery (CSRF)

Structured Query Language injection (SQLi)

Broken authentication management

Show Answer Comment (0)

Total 1.482 questions