Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 118

Question list

List of questions

Question 1171

(0)

In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

Question 1172

(0)

Commercial off-the-shelf (COTS) software presents which of the following additional security concerns?

Question 1173

(0)

What is the correct order of execution for security architecture?

Question 1174

(0)

Which of the following is the PRIMARY purpose of due diligence when an organization embarks on a merger or acquisition?

Question 1175

(0)

What should be used to determine the risks associated with using Software as a Service (SaaS) for collaboration and email?

Question 1176

(0)

A federal agency has hired an auditor to perform penetration testing on a critical system as part of the mandatory, annual Federal Information Security Management Act (FISMA) security assessments.

Question 1177

(0)

A software developer wishes to write code that will execute safely and only as intended. Which of the following programming language types is MOST likely to achieve this goal?

Question 1178

(0)

A security professional has been assigned to assess a web application. The assessment report recommends switching to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit i

Question 1179

(0)

What is the MOST common security risk of a mobile device?

Question 1180

(0)

Which of the following protection is provided when using a Virtual Private Network (VPN) with Authentication Header (AH)?

Question 1171

In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

Monitor and review performance against business continuity policy and objectives, report the results to management for review, and determine and authorize actions for remediation and improvement.

Maintain and improve the Business Continuity Management (BCM) system by taking corrective action, based on the results of management review.

Ensure the business continuity policy, controls, processes, and procedures have been implemented.

Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.

Show Answer Comment (0)

Question 1172

Commercial off-the-shelf (COTS) software presents which of the following additional security concerns?

Vendors take on the liability for COTS software vulnerabilities.

In-house developed software is inherently less secure.

Exploits for COTS software are well documented and publicly available.

COTS software is inherently less secure.

Show Answer Comment (0)

Question 1173

What is the correct order of execution for security architecture?

Governance, strategy and program management, project delivery, operations

Strategy and program management, governance, project delivery, operations

Governance, strategy and program management, operations, project delivery

Strategy and program management, project delivery, governance, operations

Show Answer Comment (0)

Question 1174

Which of the following is the PRIMARY purpose of due diligence when an organization embarks on a merger or acquisition?

Assess the business risks.

Formulate alternative strategies.

Determine that all parties are equally protected.

Provide adequate capability for all parties.

Strategy and program management, project delivery, governance, operations

Show Answer Comment (0)

Question 1175

What should be used to determine the risks associated with using Software as a Service (SaaS) for collaboration and email?

Cloud access security broker (CASB)

Open Web Application Security Project (OWASP)

Process for Attack Simulation and Threat Analysis (PASTA)

Common Security Framework (CSF)

Show Answer Comment (0)

Question 1176

A federal agency has hired an auditor to perform penetration testing on a critical system as part of the mandatory, annual Federal Information Security Management Act (FISMA) security assessments.

The auditor is new to this system but has extensive experience with all types of penetration testing.

The auditor has decided to begin with sniffing network traffic. What type of penetration testing is the auditor conducting?

White box testing

Black box testing

Gray box testing

Red box testing

Show Answer Comment (0)

Question 1177

A software developer wishes to write code that will execute safely and only as intended. Which of the following programming language types is MOST likely to achieve this goal?

Statically typed

Weakly typed

Strongly typed

Dynamically typed

Show Answer Comment (0)

A security professional has been assigned to assess a web application. The assessment report recommends switching to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit in switching to SAML?

It uses Transport Layer Security (TLS) to address confidentiality.

it enables single sign-on (SSO) for web applications.

The users' password Is not passed during authentication.

It limits unnecessary data entry on web forms.

Show Answer Comment (0)