Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 126

Question list

List of questions

Question 1251

(0)

The security architect has been mandated to assess the security of various brands of mobile devices. At what phase of the product lifecycle would this be MOST likely to occur?

Question 1252

(0)

A hacker can use a lockout capability to start which of the following attacks?

Question 1253

(0)

An Internet media company produces and broadcasts highly popular television shows. The company is suffering a huge revenue loss due to piracy. What technique should be used to track the distribution

Question 1254

(0)

Using the cipher text and resultant clear text message to derive the non-alphabetic cipher key is an example of which method of cryptanalytic attack?

Question 1255

(0)

All hosts on the network are sending logs via syslog-ng to the log collector. The log collector is behind its own firewall, The security professional wants to make sure not to put extra load on the

Question 1256

(0)

An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will a

Question 1257

(0)

A security practitioner has been asked to model best practices for disaster recovery (DR) and business continuity. The practitioner has decided that a formal committee is needed to establish a busin

Question 1258

(0)

What is the MOST appropriate hierarchy of documents when implementing a security program?

Question 1259

(0)

Which of the following is the MOST common cause of system or security failures?

Question 1260

(0)

Which access control method is based on users issuing access requests on system resources, features assigned to those resources, the operational or situational context, and a set of policies specifi

Question 1251

The security architect has been mandated to assess the security of various brands of mobile devices.

At what phase of the product lifecycle would this be MOST likely to occur?

Disposal

Implementation

Development

Operations and maintenance

Show Answer Comment (0)

Question 1252

A hacker can use a lockout capability to start which of the following attacks?

Denial of service (DoS)

Dictionary

Ping flood

Man-in-the-middle (MITM)

Show Answer Comment (0)

An Internet media company produces and broadcasts highly popular television shows. The company is suffering a huge revenue loss due to piracy. What technique should be used to track the distribution of content?

Install the latest data loss prevention (DLP) software at every server used to distribute content.

Log user access to servers. Every day those log records are going to be audited by a team of specialized investigators.

Hire several investigators to identify sources of pirated content and report people sharing the content.

Use watermarking to hide a signature into the digital media such that it can be used to find who is using the company's content.

Show Answer Comment (0)

Question 1254

Using the cipher text and resultant clear text message to derive the non-alphabetic cipher key is an example of which method of cryptanalytic attack?

Frequency analysis

Ciphertext-only attack

Probable-plaintext attack

Known-plaintext attack

Show Answer Comment (0)

Question 1255

All hosts on the network are sending logs via syslog-ng to the log collector. The log collector is behind its own firewall, The security professional wants to make sure not to put extra load on the firewall due to the amount of traffic that is passing through it. Which of the following types of filtering would MOST likely be used?

Uniform Resource Locator (URL) Filtering

Web Traffic Filtering

Dynamic Packet Filtering

Static Packet Filtering

Show Answer Comment (0)

Question 1256

An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will address ongoing storage problems.

Which is the BEST technical solution?

Deduplication

Compression

Replication

Caching

Show Answer Comment (0)

Question 1257

A security practitioner has been asked to model best practices for disaster recovery (DR) and business continuity. The practitioner has decided that a formal committee is needed to establish a business continuity policy. Which of the following BEST describes this stage of business continuity development?

Project Initiation and Management

Risk Evaluation and Control

Developing and Implementing business continuity plans (BCP)

Business impact analysis (BIA)

Show Answer Comment (0)

Question 1258

What is the MOST appropriate hierarchy of documents when implementing a security program?

Organization principle, policy, standard, guideline

Policy, organization principle, standard, guideline

Standard, policy, organization principle, guideline

Organization principle, guideline, policy, standard

Show Answer Comment (0)

Question 1259

Which of the following is the MOST common cause of system or security failures?

Lack of system documentation

Lack of physical security controls

Lack of change control

Lack of logging and monitoring

Show Answer Comment (0)

Question 1260

Which access control method is based on users issuing access requests on system resources, features assigned to those resources, the operational or situational context, and a set of policies specified in terms of those features and context?

Mandatory Access Control (MAC)

Role Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute Based Access Control (ABAC)

Show Answer Comment (0)

Total 1.482 questions