Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 123

Question list

List of questions

Question 1221

(0)

Which of the following security tools monitors devices and records the information in a central database for further analysis?

Question 1222

(0)

Secure coding can be developed by applying which one of the following?

Question 1223

(0)

A company is moving from the V model to Agile development. How can the information security department BEST ensure that secure design principles are implemented in the new methodology?

Question 1224

(0)

An organization wants to define its physical perimeter. What primary device should be used to accomplish this objective if the organization's perimeter MUST cost-efficiently deter casual trespassers

Question 1225

(0)

The acquisition of personal data being obtained by a lawful and fair means is an example of what principle?

Question 1226

(0)

What is the BEST control to be implemented at a login page in a web application to mitigate the ability to enumerate users?

Question 1227

(0)

If the wide area network (WAN) is supporting converged applications like Voice over Internet Protocol (VoIP), which of the following becomes even MORE essential to the assurance of network?

Question 1228

(0)

A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to on and security However, an attacker was able to spoof a registered account on the network and query the SA

Question 1229

(0)

A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS). Which of th

Question 1230

(0)

In which of the following system life cycle processes should security requirements be developed?

Question 1221

Which of the following security tools monitors devices and records the information in a central database for further analysis?

Security orchestration automation and response

Host-based intrusion detection system (HIDS)

Antivirus

Endpoint detection and response (EDR)

Show Answer Comment (0)

Question 1222

Secure coding can be developed by applying which one of the following?

Applying the organization's acceptable use guidance

Applying the industry best practice coding guidelines

Applying rapid application development (RAD) coding

Applying the organization's web application firewall (WAF) policy

Show Answer Comment (0)

Question 1223

A company is moving from the V model to Agile development. How can the information security department BEST ensure that secure design principles are implemented in the new methodology?

All developers receive a mandatory targeted information security training.

The non-financial information security requirements remain mandatory for the new model.

The information security department performs an information security assessment after each sprint.

Information security requirements are captured in mandatory user stories.

Show Answer Comment (0)

Question 1224

An organization wants to define its physical perimeter. What primary device should be used to accomplish this objective if the organization's perimeter MUST cost-efficiently deter casual trespassers?

Fences eight or more feet high with three strands of barbed wire

Fences three to four feet high with a turnstile

Fences accompanied by patrolling security guards

Fences six to seven feet high with a painted gate

Show Answer Comment (0)

Question 1225

The acquisition of personal data being obtained by a lawful and fair means is an example of what principle?

Data Quality Principle

Openness Principle

Purpose Specification Principle

Collection Limitation Principle

Show Answer Comment (0)

Question 1226

What is the BEST control to be implemented at a login page in a web application to mitigate the ability to enumerate users?

Implement a generic response for a failed login attempt.

Implement a strong password during account registration.

Implement numbers and special characters in the user name.

Implement two-factor authentication (2FA) to login process.

Show Answer Comment (0)

Question 1227

If the wide area network (WAN) is supporting converged applications like Voice over Internet Protocol (VoIP), which of the following becomes even MORE essential to the assurance of network?

Classless Inter-Domain Routing (CIDR)

Deterministic routing

Internet Protocol (IP) routing lookups

Boundary routing

Show Answer Comment (0)

A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to on and security However, an attacker was able to spoof a registered account on the network and query the SAML provider.

What is the MOST common attack leverage against this flaw?

Attacker forges requests to authenticate as a different user.

Attacker leverages SAML assertion to register an account on the security domain.

Attacker conducts denial-of-service (DoS) against the security domain by authenticating as the same user repeatedly.

Attacker exchanges authentication and authorization data between security domains.

Show Answer Comment (0)

Question 1229

A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS).

Which of the following factors leads the company to choose an IDaaS as their solution?

In-house development provides more control.

In-house team lacks resources to support an on-premise solution.

Third-party solutions are inherently more secure.

Third-party solutions are known for transferring the risk to the vendor.

Show Answer Comment (0)