Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 120

Question list

List of questions

Question 1191

(0)

Which of the following roles is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications?

Question 1192

(0)

What is the MOST important criterion that needs to be adhered to during the data collection process of an active investigation?

Question 1193

(0)

What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

Question 1194

(0)

A user's credential for an application is stored in a relational database. Which control protects the confidentiality of the credential while it is stored?

Question 1195

(0)

What is the PRIMARY consideration when testing industrial control systems (ICS) for security weaknesses?

Question 1196

(0)

An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which o

Question 1197

(0)

What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?

Question 1198

(0)

Which of the following BEST describes why software assurance is critical in helping prevent an increase in business and mission risk for an organization?

Question 1199

(0)

In software development, which of the following entities normally signs the code to protect the code integrity?

Question 1200

(0)

Which security evaluation model assesses a product's Security Assurance Level (SAL) in comparison to similar solutions?

Question 1191

Which of the following roles is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications?

Data Reviewer

Data User

Data Custodian

Data Owner

Show Answer Comment (0)

Question 1192

What is the MOST important criterion that needs to be adhered to during the data collection process of an active investigation?

Capturing an image of the system

Maintaining the chain of custody

Complying with the organization's security policy

Outlining all actions taken during the investigation

Show Answer Comment (0)

Question 1193

What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

Save security costs for the organization.

Improve vulnerability assessment capabilities.

Standardize specifications between software security products.

Achieve organizational compliance with international standards.

Show Answer Comment (0)

Question 1194

A user's credential for an application is stored in a relational database. Which control protects the confidentiality of the credential while it is stored?

Validate passwords using a stored procedure.

Allow only the application to have access to the password field in order to verify user authentication.

Use a salted cryptographic hash of the password.

Encrypt the entire database and embed an encryption key in the application.

Show Answer Comment (0)

Question 1195

What is the PRIMARY consideration when testing industrial control systems (ICS) for security weaknesses?

ICS often do not have availability requirements.

ICS are often isolated and difficult to access.

ICS often run on UNIX operating systems.

ICS are often sensitive to unexpected traffic.

Show Answer Comment (0)

An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which of the following is the BEST resolution?

Implement port security on the switch ports for the printers.

Implement a virtual local area network (VLAN) for the printers.

Do nothing; IEEE 802.1x is irrelevant to printers.

Install an IEEE 802. 1x bridge for the printers.

Show Answer Comment (0)

Question 1197

What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?

Risk assessment

Performance testing

Security audit

Risk management

Show Answer Comment (0)

Question 1198

Which of the following BEST describes why software assurance is critical in helping prevent an increase in business and mission risk for an organization?

Software that does not perform as intended may be exploitable which makes it vulnerable to attack.

Request for proposals (RFP) avoid purchasing software that does not meet business needs.

Contracting processes eliminate liability for security vulnerabilities for the purchaser.

Decommissioning of old software reduces long-term costs related to technical debt.

Show Answer Comment (0)