Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 127

Question list

List of questions

Question 1261

(0)

Information security practitioners are in the midst of implementing a new firewall. Which of the following failure methods would BEST prioritize security in the event of failure?

Question 1262

(0)

Which of the following is a PRIMARY security weakness in the design of Domain Name System (DNS)?

Question 1263

(0)

Which of the following BEST describes the purpose of the reference monitor when defining access control to enforce the security model?

Question 1264

(0)

A project manager for a large software firm has acquired a government contract that generates large amounts of Controlled Unclassified Information (CUI). The organization's information security mana

Question 1265

(0)

Which of the following protects personally identifiable information (PII) used by financial services organizations?

Question 1266

(0)

Which of the following is a common term for log reviews, synthetic transactions, and code reviews?

Question 1267

(0)

At what stage of the Software Development Life Cycle (SDLC) does software vulnerability remediation MOST likely cost the least to implement?

Question 1268

(0)

Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocol

Question 1269

(0)

Using Address Space Layout Randomization (ASLR) reduces the potential for which of the following attacks?

Question 1270

(0)

Which of the following ensures old log data is not overwritten?

Question 1261

Information security practitioners are in the midst of implementing a new firewall. Which of the following failure methods would BEST prioritize security in the event of failure?

Fail-Closed

Fail-Open

Fail-Safe

Failover

Show Answer Comment (0)

Question 1262

Which of the following is a PRIMARY security weakness in the design of Domain Name System (DNS)?

A DNS server can be disabled in a denial-of-service (DoS) attack.

A DNS server does not authenticate source of information.

Each DNS server must hold the address of the root servers.

A DNS server database can be injected with falsified checksums.

Show Answer Comment (0)

Question 1263

Which of the following BEST describes the purpose of the reference monitor when defining access control to enforce the security model?

Quality design principles to ensure quality by design

Policies to validate organization rules

Cyber hygiene to ensure organizations can keep systems healthy

Strong operational security to keep unit members safe

Show Answer Comment (0)

A project manager for a large software firm has acquired a government contract that generates large amounts of Controlled Unclassified Information (CUI). The organization's information security manager has received a request to transfer project-related CUI between systems of differing security classifications. What role provides the authoritative guidance for this transfer?

Information owner

Data Custodian

Mission/Business Owner

Show Answer Comment (0)

Question 1265

Which of the following protects personally identifiable information (PII) used by financial services organizations?

National Institute of Standards and Technology (NIST) SP 800-53

Gramm-Leach-Bliley Act (GLBA)

Payment Card Industry Data Security Standard (PCI-DSS)

Health Insurance Portability and Accountability Act (HIPAA)

Show Answer Comment (0)

Question 1266

Which of the following is a common term for log reviews, synthetic transactions, and code reviews?

Security control testing

Application development

Spiral development functional testing

DevOps Integrated Product Team (IPT) development

Show Answer Comment (0)

Question 1267

At what stage of the Software Development Life Cycle (SDLC) does software vulnerability remediation MOST likely cost the least to implement?

Development

Testing

Deployme

Design

Show Answer Comment (0)

Question 1268

Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocols and differing technologies. Under the Extended Identity principle, what is the process flow between partner businesses to allow this TAM action?

Clothing retailer acts as identity provider (IdP), confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.

Clothing retailer acts as User Self Service, confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.

Clothing retailer acts as Service Provider, confirms identity of user using industry standards, then sends credentials to partner businesses that act as an identity provider (IdP) and allows access to resources.

Clothing retailer acts as Access Control Provider, confirms access of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to resources.

Show Answer Comment (0)